Most people who ask how to start a crypto exchange are asking a technical question. The technology is the smallest part of it. Matching engines are a solved problem and can be licensed in weeks, while licensing, banking, liquidity and the first thousand users routinely take a year and consume the majority of the budget. This guide sets out what the stages actually cost, where projects stall, and what has to be true before launch is worth attempting.
Centralised or decentralised: which model fits?
The choice determines your cost structure and your regulatory exposure more than any other decision.
To see what the competition looks like on day one, the 200 centralised exchanges ranked by trust score shows how few venues clear a score of 8 and how the newest entrants are placed.
- Centralised exchange. You custody user funds, you need licences, banking relationships, KYC and AML processes, and a security posture that survives being a target. Highest cost, highest barrier, and the model that supports fiat on-ramps.
- Decentralised exchange. No custody, far lower operational burden, and a much shorter route to launch. The hard problems move to smart contract security and to liquidity, which nobody supplies for free.
- Hybrid and brokerage models. Routing orders to a third party, or operating as a white label of an existing venue, removes most infrastructure work while keeping a branded product. Margins are thinner and you inherit your provider’s outages.
What does it cost to start a crypto exchange?
Figures vary by jurisdiction and model, but the shape of the budget is consistent. Treat these as orders of magnitude rather than quotes:
- Licensing: from tens of thousands in a light-touch jurisdiction to well over a million for a regulated EU or US operation, including legal counsel and capital requirements.
- Technology: a white label licence runs in the low six figures per year. Building in house rarely comes in under seven figures once security auditing is included.
- Liquidity: the item most often left out of the plan. Market maker retainers plus the inventory you have to post are typically the largest single line in year one.
- Compliance operations: a permanent staffed cost, not a project. KYC vendors, transaction monitoring, and a compliance officer your regulator will accept.
- Marketing and acquisition: in a market with established incumbents this is a multi-year commitment, not a launch campaign.
The common failure is funding the build fully and the liquidity and acquisition partially. An exchange with thin order books loses users on their first trade and does not get a second chance with them.
Which licence do you need, and where?
There is no global crypto exchange licence. You are regulated wherever your users are, not only where you are incorporated, and enforcement in this sector increasingly follows the user base. The practical questions to answer before choosing a jurisdiction:
- Will you custody client assets, offer fiat pairs, or list derivatives? Each of these raises the regulatory tier significantly.
- Which markets do you intend to serve on day one, and which will you geo-block? Blocking is cheaper than licensing and should be decided early.
- Can you actually open and keep a banking relationship in that jurisdiction? Many projects obtain a licence and then fail at this step, which leaves them licensed and unable to operate.
- What capital, local directors and physical presence does the regime require on an ongoing basis?
Get jurisdiction-specific legal advice before writing code. This is the one stage where getting the order wrong is expensive to unwind, because the licence shapes your product surface rather than the other way round.
Build, white label, or fork?
- White label. Fastest route to a working venue, typically a few months. You get a proven matching engine and wallet infrastructure, and you accept the provider’s roadmap, fee floor and incident history as your own.
- Build in house. Justified when the exchange is the product and differentiation lives in the engine, in novel order types, or in a specific asset class. Expect a longer timeline than planned and budget for repeated security audits.
- Fork an existing DEX. Cheap and fast for a decentralised venue, but forking audited code does not inherit the audit. Any modification you make is unaudited code holding user funds.
Whichever route you take, the security requirements are the same: cold storage for the majority of assets, multi-signature withdrawal approval, rate limiting, independent penetration testing, and a documented incident plan. Exchanges are attacked continuously from the day they appear in a listing directory.
Where does initial liquidity come from?
No exchange launches with organic liquidity. A new venue with empty order books shows wide spreads, which drives away exactly the traders who would have tightened them. Breaking that loop is a funded exercise:
- Contract a market maker. The standard answer. You pay a retainer, provide inventory or a loan facility, and agree spread and uptime targets in writing. Our market making service covers how these arrangements are structured.
- Route to external liquidity. Aggregating order books from larger venues gives depth from day one at the cost of margin and of dependency.
- Incentivise makers. Negative maker fees and volume rebates attract genuine flow, but only after the venue is credible enough to be worth the effort.
- Launch narrow. Five pairs with real depth beats fifty pairs with none. Breadth is what most new exchanges get wrong first.
How do new exchanges get their first users?
Incumbents own the generic queries and the brand searches. New venues win on a specific angle: a region that major exchanges have exited, an asset class nobody lists, a fee structure aimed at one trader profile, or a fiat corridor that is genuinely underserved. Without one of those, acquisition is a bidding war against businesses with more money.
What works in practice: getting listed in the aggregators and data sites traders check before depositing, sustained content aimed at the specific angle you chose, referral and affiliate programs that reward volume rather than signups, and community presence in the places your target traders already talk. Our guide to crypto exchange traffic covers the acquisition side in detail, and the crypto affiliate marketing guide covers referral economics for exchanges specifically.
Trust is the constraint on all of it. Users are handing over money to a brand with no history, so proof of reserves, named leadership, published security practices and responsive support do more for conversion than any campaign. Coverage in outlets traders read helps here too, which is where crypto PR earns its place in a launch budget.
If the plan is a decentralised venue rather than a custodial one, study the incumbents first: our list of the strongest DEXs and cross-chain exchanges covers how the established players are structured and where the gaps still are.
Where the direction is still open, it is worth reading how to pick a crypto marketing agency before committing budget to a channel.
Choosing the first assets to list
A new exchange cannot list everything, and it should not try. Every asset needs wallet infrastructure, monitoring, liquidity and a legal view on whether it can be offered to users in your jurisdictions. Start with the pairs your target traders already use elsewhere, add the assets that match your chosen angle, such as a region or an asset class the incumbents ignore, and keep a written listing policy that explains what you will and will not list.
Projects will approach you for listings as soon as the venue is live, often offering fees. Listing fees can fund early operations, but a venue full of thin, low-quality tokens loses the traders who care about the core pairs. Apply the same due diligence to paid listings as to free ones, and publish the criteria so that the policy protects the exchange’s reputation rather than depending on case-by-case judgement.
Security work before the first deposit
Security is the part of launch that users never see until it fails. Before accepting deposits, have the platform and wallet setup reviewed by an independent security firm, keep most customer funds in cold storage with multi-signature controls, and set clear limits on what hot wallets can hold. Decide in advance who can move funds, how many people must approve a withdrawal from cold storage and what happens if a key holder becomes unavailable.
Plan for an incident as seriously as for the launch. Write down how you will pause withdrawals, who talks to users and regulators, and how you will communicate while the facts are still unclear. Exchanges that recover from an incident are usually the ones that had a plan and followed it in public.
Custody and proof of reserves
Users now expect evidence that an exchange holds the assets it shows in their balances. Proof of reserves, usually an attestation that combines on-chain wallet balances with a verifiable snapshot of customer liabilities, has become a standard trust signal. Publish it on a regular schedule, explain what it does and does not cover, and treat it as part of marketing as well as compliance, because it answers the first question a cautious trader asks about a new venue.
Customer support as a launch requirement
The first week decides whether early users stay. Deposits that do not arrive, verification that stalls and withdrawals held for review all produce support requests, and unanswered requests turn into public complaints on social media. Staff support for the launch period in the languages of your target market, publish realistic response times and keep a status page for deposits and withdrawals by network, so that users can check before they write in.
Banking and fiat access
For a centralised exchange, fiat access is often harder to secure than the licence. Banks and payment providers apply their own risk policies to crypto businesses, and a relationship can be closed with little notice. Work with more than one provider where possible, understand the provider’s requirements before launch rather than after an account review, and design the product so that a lost fiat route degrades service rather than stopping it.
Retention after the first trade
Acquiring a user who deposits once and leaves is expensive. Retention comes from reliability first: fast deposits, predictable withdrawals and an order book deep enough that trades fill at the price the user expects. Fee discounts and trading competitions can bring users back, but they attract people who move to whichever venue pays most. Measure how many users trade again in the second and fourth week, and fix the reasons they do not before spending more on acquisition.
Channels that work for a new venue
Paid search and social ads for crypto are restricted on the major platforms and require certification in many markets, so most new exchanges rely on channels they can control or earn. Content that targets the specific angle of the venue, partnerships with projects whose communities want a listing, influencer campaigns with tracked links and referral programmes with verified users all fit. Whatever the channel, track deposits and repeat trading, not sign-ups, because sign-ups are the easiest number to inflate.
Onboarding and verification friction
Identity checks are required in most regulated markets, and they are where many new users give up. Make the steps clear before the user starts, explain which documents are needed and why, and show progress while a check is running. Keep a human review route for cases the automated check cannot decide, because a user stuck in verification for days rarely comes back, and complaints about blocked accounts spread quickly.
Fee structure
Fees are one of the few things a new venue can change quickly, which makes them a tempting tool and an easy trap. Very low fees attract traders who leave when a competitor goes lower, and fee holidays set expectations that are hard to reverse. Design a schedule that rewards the traders you want to keep, such as tiered discounts by volume or maker rebates that support liquidity, and publish it clearly, including withdrawal fees by network.
Market surveillance and abuse controls
Wash trading, spoofing and pump schemes appear on new venues quickly, especially on thin pairs. Regulators increasingly expect exchanges to monitor for them, and traders avoid venues where prices look manipulated. Put surveillance tooling and a clear process in place before launch, set rules for market makers and listed projects, and be prepared to suspend trading in a pair when the pattern is obvious rather than waiting for public complaints.
Delisting and communicating changes
Every exchange eventually delists assets, for legal reasons, falling liquidity or problems with the project. Users forgive delistings more easily than surprises. Publish the criteria in the listing policy, give notice before trading stops, explain how long withdrawals will remain open and send the notice through every channel users rely on. A calm, predictable delisting process is part of the trust a new venue is trying to build.
Web or mobile first
Many retail traders use exchanges mainly on their phones, while active traders and market makers work through the web interface and the API. Decide which audience the launch is for and build that experience properly first. App store review for crypto products can take time and varies by region, so plan for it, and keep the web experience complete enough that users are not blocked while an app update waits for approval.
Measuring the first year
Volume is the number everyone reports and the easiest to distort. Track the numbers that show whether the venue is becoming a business: funded accounts, active traders by week, repeat trading, spread and depth on the core pairs, support response times and the share of revenue that does not depend on a single market maker or a single large client. Review them monthly, and let them decide where the next budget goes.
Choosing launch markets
Launching everywhere at once multiplies legal work, support languages and payment integrations. Most new venues that last start with one or two markets where they hold the licence, speak the language and have a reason users should switch, then expand once operations are stable. Choose launch markets by where your angle is strongest and where you can serve users legally, not by where the largest trading volume sits.
Hiring the first team
A new exchange needs compliance, security and support people before it needs a large marketing team. A compliance officer who knows the chosen jurisdictions, engineers responsible for wallets and security, and support staff trained on deposits and verification are the roles whose absence users notice first. Marketing can start small and grow with the venue, while a gap in compliance or security can close it.
User protection funds and insurance
Some exchanges keep a reserve fund to compensate users after a security incident, and some buy insurance for part of the assets held in custody. Coverage for digital assets is usually limited and has exclusions, so read what a policy actually covers before mentioning it in marketing. Explain any protection clearly, including its limits, because overstated protection damages trust more than a modest fund described honestly.
Working with regulators after launch
Licensing is not a one-time event. Regulators expect ongoing reporting, suspicious activity monitoring, audits and notice of material changes such as new products or markets. Assign clear ownership for these obligations, keep records that would stand up to an inspection and treat the regulator as a counterpart you will deal with for years, since the relationship affects how quickly future products and markets can be approved.
A realistic launch sequence
The order matters more than the speed. Legal structure and licensing come first, because they decide which users you may serve. Banking, custody and security follow, then the trading platform and the market maker agreement. A closed beta with a small group of traders tests deposits, withdrawals and support before any public marketing, and the public launch comes only when those work reliably. Teams that reverse this order often spend their marketing budget bringing users to a venue that is not ready for them.
Frequently Asked Questions
How much does it cost to start a crypto exchange?
Budgets range from roughly a hundred thousand for a white label venue in a light-touch jurisdiction to several million for a licensed operation in a major market. The technology is rarely the largest line. Licensing, liquidity provision and compliance staffing usually cost more than the platform itself.
Do you need a licence to run a crypto exchange?
In almost every serious market, yes, if you custody user funds or offer fiat pairs. You are regulated where your users are, not only where you are registered, so geo-blocking markets you are not licensed for is part of the design rather than an afterthought.
How long does it take to launch a crypto exchange?
A white label decentralised or non-custodial venue can be live in two to four months. A licensed centralised exchange with fiat rails typically takes twelve to eighteen months, and the licence and banking relationship, not the software, set that timeline.
Is it cheaper to build or to white label an exchange?
White labelling is cheaper and faster in almost every case, and it makes sense unless the exchange engine itself is your differentiator. Building in house rarely comes in under seven figures once security auditing and ongoing maintenance are counted.
How do new exchanges get liquidity?
By paying for it. New venues contract market makers on a retainer with agreed spread and uptime targets, route to external order books, or offer maker rebates. Launching with five deeply liquid pairs works far better than launching with fifty thin ones.
What is the hardest part of starting a crypto exchange?
Banking and users, in that order. Many projects obtain a licence and then cannot open or keep a bank account, which leaves them licensed and unable to operate. Those that clear banking then face incumbents who own every generic search term and every default recommendation.
Can one person start a crypto exchange?
Not a custodial one. Regulators require named compliance staff, security demands continuous coverage, and support has to answer around the clock because markets do not close. A small non-custodial venue is feasible for a tiny team, but a centralised exchange is not a solo project.
Launching an Exchange?
Getting the venue built is the part with a clear finish line. Getting the first thousand people to trade on it is not. If you are approaching that second problem, tell us what you are launching.