Introduction
This checklist suggests key steps to be taken to mitigate the risks associated with cryptocurrency, whether used as an investment or as a means of exchange (eg, as currency for purchasing goods or services). It is aimed at in-house counsel, private practice lawyers, and compliance personnel.
This checklist addresses the following steps:
- Assess approach to risk assessment and management
- Undertake due diligence on cryptocurrency assets
- Conduct due diligence on vendors and partners
The checklist is presented as a list of requirements that you can tick off as they are addressed. At the end of the document there are explanatory notes, and specific notes corresponding to the relevant step in the checklist.
This checklist can be used in conjunction with the following How-to guides: Understanding the use of cryptocurrency for payments in business, How to address tax and accounting considerations when using cryptocurrency, Implementing a policy to avoid cryptocurrency-related scams in business; Checklist: Responding to a data breach; Quick views: Introduction to cryptocurrency and how it works, Cryptocurrency regulation and enforcement, Cryptocurrency and US tax laws, and Understanding data privacy compliance challenges in blockchain and cryptocurrency.
Step 1 – Assess approach to risk assessment and management
| No. | Considerations |
| 1.1 | Consider blockchain technology and security risks |
| 1.2 | Assess legal, financial and tax risks |
| 1.3 | Clarify investment risks vs means-of-exchange risks |
Step 2 – Undertake due diligence and research on cryptocurrency assets
| No. | Considerations |
| 2.1 | Use volume data to analyze cryptocurrency performance |
| 2.2 | Maintain data integrity |
| 2.3 | Track investment prices |
Step 3 – Conduct due diligence on vendors and partners
| No. | Considerations |
| 3.1 | Assess expertise of vendors and partners |
| 3.2 | Consider the technology and tools used by vendors and partners |
| 3.3 | Assess cooperation of blockchain vendors and partners |
| 3.4 | Evaluate the suitability of blockchain providers |
| 3.5 | Research choice of cryptocurrency exchange |
Explanatory notes
Overview of cryptocurrency
Cryptocurrency is a digital currency that uses cryptography for security and operates independently of a central government or banking authority. In comparison, government-issued fiat money is a type of currency that holds value because a government designates it as legal tender, rather than being backed by a physical commodity such as gold or silver. Most modern economies use fiat money, with examples including the US dollar and the euro.
Cryptocurrency uses blockchain technology, a decentralized ledger that records transactions across multiple computers, to ensure security and transparency. This technology creates a secure, immutable chain of transaction blocks. Anonymity in cryptocurrency transactions makes it difficult to obtain and verify customer information in Know Your Customer (KYC) compliance, and without KYC, it is challenging to assess the risk profile of users to conduct fraud or financial crime checks.
New cryptocurrency coins are created through mining, a process where computers solve mathematical problems to earn coins and transaction fees. Mining involves validating and recording transactions on the blockchain. This process helps to maintain the security and integrity of the blockchain by ensuring that all transactions are verified and recorded.
Cryptocurrency wallets provide secure storage and facilitate transfers, while exchanges enable the buying, selling, and trading of digital or traditional currencies without intermediaries. Together these components form the backbone of the cryptocurrency ecosystem. For further information, see Quick view: Introduction to cryptocurrency and how it works.
Legal framework
It is necessary to understand the regulatory landscape to be able to manage risks in cryptocurrency investments, as transactions intersect with various legal frameworks that vary by jurisdiction, including securities and banking laws.
Stay updated on federal and state laws, particularly those enforced by the US Securities and Exchange Commission (SEC), which are designed to protect investors from fraud. Monitor SEC actions, as the agency has taken over 100 actions against against illegal cryptocurrency activities since 2014.
Given the cross-border nature of cryptocurrency transactions, users need to understand the interplay of various regulations, including international laws and licensing requirements in all cryptocurrency activities. Additionally, businesses should educate and train their staff on blockchain technology and regulatory requirements to enhance compliance and risk management. For an overview, see Quick view: Cryptocurrency regulation and enforcement.
As part of ongoing risk management, it is crucial to consider recent developments, including potential changes under President elect Trump’s incoming administration and new SEC appointments. Regulatory changes can significantly impact the market, so staying up to date on policy changes will help ensure compliance with the regulations and avoid potential sanctions and penalties.
Step 1 – Assess approach to risk assessment and management
1.1 Consider blockchain technology and security risks
Without adequate controls, security risks are significant, as cryptocurrencies are stored in digital wallets that can be vulnerable to hacking, theft, or loss. Examples of potential control measures that organizations can use are listed below.
- To ensure the security of blockchain networks, organizations should implement a robust identity and access management (IAM) system to restrict access to authorized users.
- Regular risk assessments and audits are essential for maintaining blockchain integrity. It is important to manage cryptographic keys securely, as they are critical in controlling access to sensitive data and transactions.
- Ensuring data privacy through encryption and secure key management is vital to protecting user information.
- Compliance with regulatory requirements and a comprehensive disaster recovery plan are also crucial.
- Strong security controls and policies help protect the blockchain infrastructure from cyber criminals aiming to steal valuable data.
See How-to guides: Mitigating the risk of criminal activity, How to manage your organization’s data privacy and security risks, Incident response plan readiness and identification of a reportable data breach, How to draft a business continuity plan; and Checklists: Conducting an internal investigation into suspected criminal activity, Completing a data incident response plan assessment, and Completing a data privacy risk assessment.
1.2 Assess legal, financial, and tax risks
Legal risk refers to the potential legal consequences of engaging in cryptocurrency transactions, including the risk of regulatory non-compliance, fines, and even criminal charges. Legal risk can arise from various sources, such as unclear or changing regulations, disputes over which jurisdiction’s laws apply, lack of clarity and complexity of tax treatment, and the potential for cryptocurrency to be used for illicit activities such as money laundering or terrorist financing concerns. For example, the lack of clear regulations on initial coin offerings (ICOs) has led to legal uncertainty and risk for investors and it is often unclear whether ICOs fall under existing securities laws or other financial regulations and this ambiguity can result in disputes or risks enforcement action.
For further information, see How-to guides: How to assess your organization for money laundering and terrorist financing risk, How to comply with due diligence requirements for financial institutions determined to be of primary money laundering concern, How to identify suspicious activity and make a Suspicious Activity Report (SAR); and Checklists: Currency transaction reporting requirements, and Initial response to a report of suspicious activity.
Financial risk refers to the potential loss of value or volatility of cryptocurrency investments. This can be due to various factors, such as market fluctuations, hacking, or the risk of the cryptocurrency itself becoming worthless.
Financial risk can also arise from the risk of counterparty default, where the other party in a transaction fails to fulfill their obligations. For instance, if a cryptocurrency exchange goes bankrupt, investors may lose their funds.
Tax risk refers to the way that the IRS treats cryptocurrency as property for federal tax purposes. This classification means that the same tax principles that apply to transactions involving property, such as stocks or real estate, also apply to transactions involving virtual currency. Thus, if a taxpayer receives virtual currency as payment for goods or services, the fair market value of the virtual currency measured in US dollars as of the date of receipt is included in the taxpayer’s gross income. Similarly, if a taxpayer sells or exchanges virtual currency for other currency (as opposed to using it as a means of exchange), they must recognize any capital gain or loss. This gain or loss is calculated by comparing the fair market value of the virtual currency at the time of receipt (ie, its original cost) and the time of sale or exchange.
For further information, see How-to guide: How to address tax and accounting considerations when using cryptocurrency and Quick View: Cryptocurrency and US tax law.
1.2.1 Risk mitigation
To mitigate legal and tax risk for cryptocurrency, it is essential to ensure compliance with relevant regulations and laws. This involves registering with the appropriate authorities, obtaining necessary licenses, and maintaining accurate transaction records.
Staying informed about evolving regulations and laws is crucial. Assigning horizon-scanning tasks to designated team members can help the business stay proactive and prepared for future regulatory changes. Changes in laws and regulations can significantly impact the legality and tax implications of cryptocurrency transactions. Consulting with a tax professional is recommended to ensure compliance with tax reporting obligations and to receive advice on any available regional tax incentives.
To manage financial risk effectively, it is essential to understand different cryptocurrencies, diversify investments, set clear financial goals, and regularly review and adjust investment portfolios. It is also important to monitor market trends and economic conditions, and to be prepared for potential market fluctuations. Define investment objectives and risk tolerances before investing and monitor the investment strategy to stay aligned with your goals.
1.3 Clarify investment risks vs means-of-exchange risks
1.3.1 Investment risks
Cryptocurrency investments, such as Bitcoin, Ethereum, or others, come with inherent risks that can impact their value and profitability.
- Volatility risk – consider the risks of volatility such as that prices can fluctuate rapidly and are unpredictable. These extreme variations can make it challenging to determine the value of cryptocurrency investments. Consider spreading investments across different cryptocurrencies and asset classes to minimize exposure to risk. Use stop-loss orders to automatically sell holdings if prices drop below a certain amount, or place limit orders to have more control over prices to mitigate risks of potential losses. Regularly review and adjust these orders as part of the risk management review process.
- Market risk – overall market sentiment and demand can affect cryptocurrency prices, potentially leading to significant losses. Continually monitor the market to review trends and industry changes.
- Regulatory risk – governments and regulatory bodies may impose restrictions or bans on cryptocurrency trading, impacting value and accessibility. Ensure investments comply with regulations and track regulatory changes to stay informed. Seek specific legal advice where necessary.
- Liquidity risk – illiquid markets can make it difficult to sell or exchange cryptocurrencies for fiat currency. This can lead to financial losses and operational disruptions and in severe scenarios even insolvency or bankruptcy. Consider risk tolerances when making investments. Caution is required particularly for inexperienced investors being promised investment opportunities with high returns and no risk. Taking specialized legal or financial advice is recommended.
1.3.2 Means-of-exchange risks
When using cryptocurrencies as a means of exchange for buying, selling, and trading, additional risks arise including those listed below.
- Price risk – the value of the cryptocurrency can fluctuate significantly, making it challenging to determine the actual value of goods or services being exchanged. Consider risk mitigation strategies – for example, using stablecoins that maintain a stable value or using fiat currency as a payment method when negotiating the price in agreements.
- Acceptance risk – some merchants may not accept cryptocurrencies, limiting their usability. Conduct market research on suitable merchants and how cryptocurrency transactions are accepted and processed.
- Transaction risk – transactions may be slow, expensive, or unreliable, affecting the overall user experience. Conduct market research on different types of cryptocurrencies and consider transaction speeds and lower fee costs.
- Scalability risk – this refers to potential limitations as the network may not be able to handle a large volume of transactions, leading to slow processing times, congestion and delays. Implement strategies to improve transaction processing to handle transactions (eg, using advanced technologies to enhance capacity and efficiency).
To mitigate these means-of-exchange risks, it is essential to implement price-stabilizing mechanisms, such as over-the-counter (OTC) desks or decentralized exchanges (DEXs), to reduce price volatility. Both OTC desks and DEXs play crucial roles in maintaining price stability within the cryptocurrency ecosystem.
OTC desks help by facilitating large trades directly between parties, bypassing public exchanges to minimize market impact and provide more stable pricing. OTC desks offer a personalized service and can often execute large transactions more discreetly, helping to stabilize prices.
DEXs operate without a central authority, allowing peer-to-peer trading directly on the blockchain. This decentralization can lead to greater market efficiency and liquidity, as users trade directly with one another, reducing the influence of large market swings.
Step 2 – Undertake due diligence and research on cryptocurrency assets
When investing in cryptocurrency, it is essential to conduct thorough research, commonly referred to as ‘do your own research’ (DYOR), to assess the integrity of the business selling the investments and the risks involved. To ensure the integrity of transactions and smart contracts, it is crucial to implement fail-safe internal audits before finalizing any deals. The audit should be comprehensive and cover all relevant areas including financial operations, compliance, risk management and internal systems and controls.
Thorough asset research helps investors make informed decisions reducing the risk of poor investments. It is important to stay vigilant and monitor the evolving market for new risks and opportunities. By staying informed, investors can confidently navigate the cryptocurrency landscape and make wise investment decisions that align with their financial goals and risk tolerance.
When researching cryptocurrency exchanges, when conducting a risk assessment look at the business fundamentals such as financial health, software agreements, security measures, regulatory compliance and business model. This will help to understand the nature of the cryptocurrency exchange. Strong revenue streams and good risk management processes are indicators of a reliable exchange.
Some suggested methods include those listed in the following paragraphs.
2.1 Use volume data to analyze cryptocurrency performance
Cryptocurrency investors should monitor their investments’ performance. Tracking volume data is important as it provides valuable insights into market sentiment and liquidity.
2.1.1 Understand volume metrics
Volume metrics show the total number of cryptocurrency units traded over a specific period, usually 24-hour intervals. This volume data is a useful indication of how well the cryptocurrency is performing. High trading volume means high liquidity, making it easier to buy or sell the cryptocurrency without significantly affecting its price.
2.1.2 Interpret volume data
Analyzing volume data helps investors to:
- spot trends and anomalies by comparing current and historical data; and
- combine volume data with other indicators, such as price movements to understand market sentiment better.
High trading volume can signify strong market interest and momentum, while low volume can indicate low market interest and potential volatility or price manipulation.
2.1.3 Use volume to gauge market sentiment
Investors should do the following to gauge market sentiment:
- verify the accuracy of volume data to avoid manipulation or inflation;
- use volume data along with other market indicators, such as price movements and trading patterns; and
- monitor volume data to identify market trends and anomalies.
Volume data is just one part of market analysis. Use it with other indicators and be aware of manipulated or inflated data, to avoid incorrect market assessments.
2.2 Maintain data integrity
Cryptocurrency investors must be able to rely on accurate and verifiable data to make informed decisions. Lawyers should advise clients to take the measures set out in the paragraphs below.
2.2.1 Proof of work (PoW) and verification
Ensure that each transaction requires a computational effort such as a proof of work (PoW) method to validate transactions and secure the network. The PoW requires miners to solve complex mathematical problems to add new blocks to the blockchain. Verification is crucial to ensure that the data sources used are reliable and accurate. Decentralized consensus mechanisms such as PoW enable secure, peer-to-peer transaction processing, which can help to prevent fraud and maintain data integrity.
2.2.2 Data source verification
Start by identifying the sources of your data and ensuring that the information used for investment decisions is reliable. Use reputable and established data providers with clear methods for data collection and reporting. In the context of cryptocurrency investment, these providers supply crucial market information and analytics. Cross-reference data from multiple sources such as regulatory websites or expert opinions, to identify any discrepancies. This process helps ensure data consistency and reliability and can be used to detect potential scams.
2.2.3 Clean data practices
To maintain data integrity, avoid unverified or anonymous sources, as they might provide manipulated or false information. Use blockchain explorers and analytics platforms that offer transparent and reliable data. Blockchain explorers are online tools that allow users to view real-time and historical data on blockchain transactions, such as transactions, wallet addresses, and more. Users can verify the status of a transaction, see the amount transacted, and track the movement of assets across the blockchain. In comparison, analytics platforms offer deeper insights by analyzing blockchain data to identify trends, patterns, and potential anomalies. They aggregate data from multiple sources to provide comprehensive reports on market activity, network health, and user behavior. These tools help to ensure investors make informed and accurate investment decisions.
There are several companies that offer blockchain explorer and analytic platform services. When deciding which provider to use, look for explorers and platforms that provide transparency and accessibility to various blockchains. They support several blockchains instead of just one, from the big ones like Bitcoin, Ethereum, and Litecoin to newer, smaller ones. A reliable explorer or platform will allow users to view and analyze transaction data, network status, and real-time happenings. Users will also be able to search for specific transactions or addresses.
Lawyers can assist clients by incorporating the following steps in any due diligence or risk assessment:
- verifying the accuracy and reliability of data sources;
- reviewing data collection and reporting methodologies to ensure they are sound and unbiased;
- providing guidance on how to identify and mitigate potential risks of data manipulation or fraud; and
- helping investors navigate complex data-related issues and disputes.
2.3 Track investment prices
Cryptocurrency investors should accurately track the price and value of their investments to stay updated on price movements and market trends. Various methods exist to enable effective monitoring of investments.
Example
Intraday data: this is price data within a single trading day, showing high, low, and closing prices at various intervals (eg, minute-by-minute, hourly). This data is essential for identifying short-term trends and trading opportunities.
Close price: the final price at which a cryptocurrency is traded at the end of a trading period (eg, 24 hours). This data is useful for identifying longer-term trends and analyzing daily performance. Comparing closing prices over multiple days helps to identify patterns and potential support or resistance levels.
Lawyers can assist clients by:
- reviewing and analyzing contracts and agreements related to cryptocurrency transactions;
- providing guidance on regulatory compliance and tax implications of cryptocurrency investments; and
- assisting in resolving disputes related to price discrepancies or trading errors.
Step 3 – Conduct due diligence on vendors and partners
Many risks in cryptocurrency investments and transactions arise from unreliable third-party vendors and partners, such as brokers or exchanges. These entities can pose security risks if they lack proper safeguards, potentially leading to fraud or loss of funds. Conducting thorough research and due diligence is essential to verify the legitimacy of these vendors and partners. This process helps ensure security by confirming that the firm follows industry best practices and has robust security measures in place. Compliance is also crucial, as reputable firms adhere to legal and regulatory standards, reducing the risk of legal issues. Operational efficiency is enhanced when partnering with reliable firms, as they typically offer better services and customer support.
Firms that facilitate investments can have a positive impact by offering expertise, market access, and efficient transaction processing. However, partnering with unreliable firms can introduce substantial risks such as security breaches, mismanagement, or fraud.
3.1 Assess expertise of vendors and partners
Although cryptocurrency is still a relatively young investment option, it has been in the marketplace long enough for bankers and brokers to develop expertise based on their experience in the market. Evaluating a vendor or partner’s expertise can be done with research using the questions and considerations set out below.
3.1.1 How long have the vendors and partners been in business?
To evaluate a company’s credibility in the market, research the company’s history by investigating the founding date, the background of the founders, and the company’s growth trajectory over the years. Ensure the vendor has maintained a consistent presence in the cryptocurrency industry without significant gaps or pivots that may indicate instability. In addition, research the company’s business growth by examining market penetration, product line development, and customer acquisition to gauge its stability and reliability. Conduct background checks on the company’s directors and senior management to ensure they have the requisite skills, experience and competencies, and a clean track record.
3.1.2 Whether the vendors and partners have been involved in any lawsuits
Conduct legal checks by performing comprehensive searches in legal databases and public records to identify any ongoing or past lawsuits involving the vendor or the partner. Evaluate the severity and outcome by assessing the nature of these lawsuits (eg, fraud, breach of contract) and their outcomes to understand the potential liabilities and risks.
If acting for a financial institution be particularly vigilant about any history of litigation, as it may signal a pattern of activity that could potentially conceal illegal activities, such as money laundering.
3.1.3 Verifying licenses held by the vendors and partners
Ensure that vendors and partners hold all necessary licenses or permissions to operate in their jurisdiction and to operate in the client’s jurisdiction. A vendor or partner authorized to operate in an overseas jurisdiction, especially a jurisdiction with lax regulation of financial transactions, may not have the authority to operate in a US jurisdiction. Verification includes checking licenses from financial authorities and regulatory bodies specific to cryptocurrency operations.
Check regulatory compliance by confirming that the licenses are up to date and comply with both local and international regulations. This includes confirming that the company meets anti-money laundering and KYC requirements.
Review past compliance records by investigating the vendor’s history of regulatory compliance to identify any previous breaches or penalties. Regularly review the compliance monitoring processes on an ongoing basis and ensure that records are kept.
3.2 Consider the technology and tools used by vendors and partners
Considering security technology and the tools involved is crucial to assessing the potential risks associated with a partner or vendor. While a detailed technical knowledge of every security measure may not be necessary, having a basic understanding of the terminology and methods used can help in evaluating potential partners or investments. Key areas to consider include encryption, storage, backups, and hardware.
3.2.1 Encryption
Encryption is the tool that makes data secure and anonymous. For cryptocurrencies, check that the encryption methods and protocols meet industry standards and regulatory requirements, such as those set by the National Institute of Standards and Technology.
3.2.2 Storage
Cryptocurrency storage refers to the methods used to keep the cryptocurrency secure. Cryptocurrency is usually stored in a ‘wallet,’ which has the same purpose as a physical wallet used to carry paper bills or coins: the owner has possession and has access to the cryptocurrency as needed. Assess storage solutions by determining whether the vendor uses hot (online), cold (offline), or hybrid storage solutions.
- Hot storage – an internet-connected cryptocurrency wallet, such as mobile, desktop, or web-based wallets, allowing for easy access and transactions. To ensure security, use reputable wallets, enable two-factor authentication (2FA), regularly update software, and use strong, unique passwords. While hot wallets are often free or low cost and are convenient, compromising on security can lead to significant financial losses, highlighting the need for robust security measures.
- Cold storage – used to securely store large amounts of cryptocurrency offline, making it less vulnerable to hacking and online threats. To enhance security, generate wallet keys offline and protect the storage device with physical security measures such as safes or vaults. Although setting up cold storage can be costly due to hardware wallets or secure storage solutions, the enhanced security can reduce the risk of financial loss, potentially saving money in the long term. Cold storage is generally considered more secure for long-term holdings.
- Hybrid storage – refers to a combination of both hot and cold storage methods. This approach allows users to manage their cryptocurrency while benefitting from both storage types. Funds being used for daily transactions can be held in hot wallets while those meant for long-term holdings can be kept in cold storage.
3.2.3 Backups
Ensure redundancy and backups by implementing storage solutions that include redundant backups stored in geographically diverse locations. This strategy will help to prevent data loss due to physical or cyber incidents.
3.2.4 Hardware
Evaluate hardware security by asking about the type of hardware used, such as hardware security modules (HSMs), which are physical computing devices that safeguard and manage data and perform encryption and decryption functions, and secure servers and dedicated hardware wallets. Hardware should meet industry security certifications and standards, such as FIPS 140-2 for cryptographic modules.
For more detailed information, see Quick view: Introduction to cryptocurrency and how it works.
3.3 Assess cooperation of blockchain vendors and partners
Cryptocurrency depends on the cooperation of all the participants in transactions. The need for cooperation extends to the areas listed in the following paragraphs.
3.3.1 Assurances regarding security when exchanging information
Secure methods, such as cryptographic protocols such as Secure Sockets Layer (SSL)/Transport Layer Security (TLS), virtual private networks (VPNs), and end-to-end encryption, should be used for data exchange. Regular testing and security audits will help to make sure that the partner can, if necessary, identify and mitigate vulnerabilities.
3.3.2 Assess reputation of existing blockchain partnerships
Review potential partnerships by checking the vendor’s existing blockchain partnerships and their reputation within the industry. Established partnerships with reputable organizations are positive indicators of reliability. Similarly, a history of stable and long-standing partnerships will provide an indication that the partner will provide ongoing support and collaboration.
3.4 Evaluate the suitability of blockchain providers
Ensure that the blockchain provider adheres to any applicable and recognized industry standards like ISO/IEC 27001 for information security management, GDPR for data protection, and SOC 2 for service organization controls.
To evaluate interoperability, verify if the blockchain solution can seamlessly exchange and integrate data with other industry-standard solutions. This involves checking compatibility with widely used protocols and standards to ensure the blockchain can communicate with other systems. This will enable seamless data exchange and integration.
3.5 Research choice of cryptocurrency exchange
A cryptocurrency exchange is a business that allows customers to trade cryptocurrencies for other assets. These other assets may be fiat money or other digital currencies. Choosing a reliable cryptocurrency exchange is essential for securing investments. Consider the following when conducting due diligence:
- User feedback and expert opinions – reputable exchanges typically receive positive community and industry assessments. Reading reviews and assessing how long an exchange has been operating in the market can generally assist in making an informed choice. Reputable exchanges will have a good security track record.
- Fee structure – understand the fee structure and the transaction and withdrawal fees to understand the cost implications and itemize all costs and charges. Research and compare fees across different exchanges too.
- Supported cryptocurrencies – ensure the exchange supports the cryptocurrency you want to trade.
- Deposit and withdrawal options – review the different methods available and whether the exchange offers protections for funds deposited.
3.5.1 Regulation and compliance
Check regulatory status by ensuring the exchange is registered with relevant financial authorities and complies with any local or international regulations. This provides a degree of confidence given that there is some oversight that will in turn provide investor protection measures.
3.5.2 Security measures
To evaluate security protocols, ensure the exchange employs advanced security measures and consider internal processes for managing operational and technology risks.
Review the exchange’s security practices such as:
- two-factor authentication (2FA) – this requires an additional layer of verification in addition to a password;
- multi-signature wallets – this approach reduces unauthorized access by requiring multiple private keys to authorize transactions; and
- frequency of security audits – regulatory audits and testing to review processes and identify and address vulnerabilities suggests a more robust governance and control framework.
In addition, review the exchange’s history of security compliance. Request details of any past breaches and how they were handled.
3.5.3 Reputation and reviews
Research user reviews by looking for reviews and testimonials from other users and industry experts. Assess industry reputation by checking the exchange’s standing in the cryptocurrency community and any industry awards or recognitions.
Additional resources
Atticus Grey and Muhammad Habib Firdaus Chatib – Cryptocurrency Security Challenges: Innovations in Blockchain Protocols to Mitigate Risks
Xihan Xiong and Junliang Luo – Global Trends in Cryptocurrency Regulation: An Overview
Ziyu Wu – Exploring Financial Risks and Risk Mitigation Strategies in Digital Currencies
US Securities and Exchange Commission – Crypto Assets
US Securities and Exchange Commission – Digital Asset and ‘Crypto’ Investment Scams – Investor Alert
Federal Trade Commission – Spotting the FTC’s most reported crypto scams
Related Lexology Pro content
How-to guides:
Understanding the use of cryptocurrency for payments in business
How to address tax and accounting considerations when using cryptocurrency
Implementing a policy to avoid cryptocurrency-related scams in business
Checklists:
Quick views:
Introduction to cryptocurrency and how it works
Cryptocurrency regulation and enforcement
Understanding data privacy compliance challenges in blockchain and cryptocurrency
Reliance on information posted:
While we use reasonable endeavors to provide up to date and relevant materials, the materials posted on our site are not intended to amount to advice on which reliance should be placed. They may not reflect recent changes in the law and are not intended to constitute a definitive or complete statement of the law. You may use them to stay up to date with legal developments, but you should not use them for transactions or legal advice, and you should carry out your own research. We therefore disclaim all liability and responsibility arising from any reliance placed on such materials by any visitor to our site, or by anyone who may be informed of any of its contents.