How to start a crypto exchange business

Thinking about starting a crypto exchange business? CryptoExchanger is a turnkey way to launch an automated crypto exchanger: the customer-facing site, the admin panel, exchange orders, API integrations, rates, reserves, AML/KYT screening and a Telegram app.

There are two routes into this business: build the platform from scratch, or launch on a ready-made script. CryptoExchanger gives you a finished platform that goes live far faster and far cheaper than in-house development.

But the software is the second step. First you choose the jurisdiction and the business model: an exchanger cannot operate without a status in its country. In Russia, since 1 September 2026 exchange has been governed by Federal Law No. 282-FZ “On Digital Currencies and Digital Rights”: only an organisation in the Bank of Russia register may carry it out, and until 30 June 2027 residents may systematically buy and sell digital currencies in their own name and for their own account before being included in the register (Part 28 of Article 55). Belarus, the European Union, Kazakhstan and Georgia also require a status. The software does not replace it.

What a crypto exchanger is

A crypto exchanger is an online service where customers place orders to swap digital assets. For the owner it is not a website but a working system: the client interface, an admin panel, rate management, reserves, exchange directions, API integrations, security, notifications and control over every operation.

Ready to start: launch a turnkey crypto exchanger.

A currency exchange office is not a crypto exchanger

If you are looking into opening a currency exchange office — a desk that swaps cash dollars and euros — that is a different business, and in Russia only banks run it. The currency regulation law (No. 173-FZ, Article 11(1)) is explicit: foreign currency is bought and sold in the Russian Federation only through authorised banks and VEB.RF. Such an office cannot be opened as a standalone company without a bank.

The rules for a crypto exchanger depend on the jurisdiction and the operating model — more on that below, in the section on Russia.

Two models: P2P exchanger and exchanger with its own reserves

In a P2P exchanger (from peer-to-peer), users trade cryptocurrency directly with each other. The platform holds the seller’s cryptocurrency in escrow (locks it until the deal is complete) and releases it once both parties have met the terms; this is how Binanceopens in a new tab describes it. In an exchanger with its own reserves, the service itself sets the rate and the timing, and it is the service that sends the client money or cryptocurrency.

The models are described in the Exnode blog on Habropens in a new tab (1 September 2026, in Russian); PremiumExchangeropens in a new tab (in Russian), a developer of exchanger scripts, calls starting reserves a prerequisite for launch. CryptoExchanger is a platform for the second model: the exchanger itself runs the rates, the reserves and the orders.

The laws describe an exchanger under the second model too: in Russia these are transactions “in its own name and for its own account” (Article 18 of 282-FZ); in the EU, transactions with clients against the provider’s own capital under the MiCA regulation (the EU’s single rules for the crypto-asset market).

For a P2P platform in Russia, the law expressly names who may perform its functions. Only a trade organiser may ensure the execution of transactions on organised trading (Part 1 of Article 14 of 282-FZ). Recording and transfer of digital currencies and access to addresses, that is, holding cryptocurrency in escrow, may be done only by a digital depository in the register (Parts 1–2 of Article 17). From 1 July 2027, only the persons listed in Articles 14–18 and clearing organisations may organise circulation (Part 3 of Article 1), and residents transact only through them or with them, save for the exceptions in the same provision (Part 1 of Article 30). Whether the P2P model works for Russian residents, and under what status, should be settled with a lawyer before launch; the transitional rule of Part 28 of Article 55 covers exchange only.

What you need to open a crypto exchanger

Launching an exchanger takes the following pieces:

• a domain;
• hosting or a server;
• the exchanger site;
• a client account;
• an admin panel;
• exchange directions;
• rate management;
• reserve management;
• an order status system;
• notifications for customers and the administrator;
• exchange and blockchain APIs;
• AML/KYT screening of transactions;
• a Telegram app (if you want one);
• customer support;
• preparation for exchanger monitorings.

How an exchange order works

Understanding the order flow matters for the owner. Here is the standard process:

CryptoExchanger automates steps 5–7 and cuts manual work down to a minimum.

Types of crypto exchangers

Before you launch, decide which format fits you:

More on this: automated crypto exchanger.

How much it costs to start a crypto exchange

The licence starts at 2,890 USD — a one-time payment, no subscription fee. Plan details are on the How much it costs to start a crypto exchange page.

Which plan to choose

Launching your first exchanger and testing the business model — the Start plan covers it.

Want the exchanger to work inside Telegram — take Medium.

Planning several sites, several brands or separate language versions under one owner — that is Professional.

How to open a crypto exchanger in Russia

Launching a crypto exchanger in Russia is not only a technical question: it also covers how you work with customers, how orders are processed, security, AML/KYT screening and the legal model of the project. CryptoExchanger supplies the technical platform and can help you prepare the project, but the legal terms have to be confirmed separately for the jurisdiction and the operating model you choose.

Legal provisions in this article are as of the texts on 2 October 2026: 282-FZ and 283-FZ of 4 August 2026; 115-FZ (on countering money laundering) and 38-FZ (on advertising) as amended on 4 August 2026; foreign acts in the versions indicated. Prices of client check services were taken on the same day, each with its source. The legal part is for reference only: check your launch structure with a lawyer in the chosen jurisdiction.

Article 14 of Federal Law No. 259-FZ “On Digital Financial Assets, Digital Currency…” on the circulation of digital currency, which older guides refer to, lost force on 1 September 2026 (Part 1 of Article 22 of Law No. 283-FZopens in a new tab, in Russian). The 259-FZ articles on operators exchanging digital financial assets remain in force until 1 March 2027 (Part 2 of the same article), but they cover a different kind of asset, not digital currency. Exchange of digital currency is now governed by Law No. 282-FZopens in a new tab (in Russian; published in Rossiyskaya Gazetaopens in a new tab on 11 August 2026, in Russian). What it means for an exchanger:

• What counts as exchange. Systematic purchase and sale of digital currencies in one’s own name and for one’s own account outside organised trading. Systematic means two or more transactions a month totalling over 3.5 million roubles (Parts 1–2 of Article 18). Only an organisation in the Bank of Russia register may do this (Part 3 of Article 18).
• Requirements for the organisation. A business company with own funds of at least 15 million roubles; the main and backup hardware and software systems must be in Russia (Article 44). Exchangers join the SRO (self-regulatory organisation) of exchangers within 90 days after it is established, or after inclusion in the register if it already exists (Part 9 of Article 18).
• Data. Information on clients, transactions and addresses must be kept for at least ten years from the date of each transaction (Part 2 of Article 39). Information from the exchanger’s own systems must be stored in Russia for five years after the relationship with the client ends and, in cases established by law, provided to the FSB (Article 40).
• Sales to non-qualified investors. Testing, a risk notice, an annual limit, and only currencies admitted to public circulation (Part 1 of Article 31; Part 3 of Article 31 extends these rules to exchangers). The limit of 300,000 roubles a year per intermediary was a draft directive as of 11 August 2026; the Bank of Russia included Bitcoin, Ethereum and Tether USDT in the list of currencies available for public circulation (announcementopens in a new tab of 11 August 2026, in Russian).
• Payments and advertising. Accepting digital currencies as payment for goods and services in Russia is prohibited, except in the cases listed in Part 7 of Article 1, for example foreign trade contracts with non-residents (Parts 6–7 of Article 1). Advertising of digital currencies is not allowed (Clause 13 of Article 7 of Federal Law No. 38-FZ “On Advertising”opens in a new tab as amended by 283-FZ, in Russian), and advertising of services for organising their circulation must not name specific currencies, promise returns or forecast the rate (Article 29.2opens in a new tab of the same law, introduced by 283-FZ).
• Software. Part 2 of Article 30 (in force since 1 September 2026: Article 56 postpones only Part 1) prohibits assisting residents’ transactions in breach of the law, “including the provision of software”. How this applies to software suppliers is a question for a lawyer.

Bank of Russia acts on inclusion in the registers take effect on 5 October 2026 (Bank of Russia informationopens in a new tab of 25 September 2026, in Russian); as of 2 October, there is no register of exchangers yet on the registers pageopens in a new tab (in Russian).

There are no specific articles yet on liability for illegally organising the circulation of digital currency; they are in bills (these are drafts, not provisions in force). Bill No. 1209607-8 adds Article 171.7 to the Criminal Code, and Bill No. 1194944-8 adds Article 15.29.1 to the Code of Administrative Offences: for exchangers, transactions with non-qualified investors in breach of the requirements carry a fine for legal entities of 700,000 to 1 million roubles. According to Pravo.ruopens in a new tab (9 July 2026, in Russian), both passed the first reading, with planned entry into force on 1 July 2027; check the current stage on the State Duma website. General provisions already apply: for example, Article 15.27 of the Code of Administrative Offencesopens in a new tab (in Russian) covers breaches of 115-FZ, to which exchangers became subject on 1 September 2026. Check with a lawyer how they apply to your case.

Belarus, the EU, Kazakhstan and Georgia: what an exchanger needs

In Belarus, since 2024 individuals pay for tokens and receive money from selling them only through operators that are HTP residents; settling these payments any other way is illegal (Edict No. 367opens in a new tab of 17 September 2024, in Russian). So a P2P model with direct money transfers between users does not work for individuals there.

AML and KYC: what is required

AML (anti-money laundering) and KYC (know your customer) requirements are based on FATF Recommendation 15opens in a new tab and its interpretive note (FATF is the international body for combating money laundering): VASPs are licensed or registered where they are created, the client is checked for occasional transactions over 1,000 US dollars or euros (interpretive note, paragraph 7), and originator and beneficiary data are passed between providers; this is the travel rule.

In Russia, exchangers became subject to 115-FZ (Article 5opens in a new tab, in Russian): purchase and sale of digital currencies from 1 million roubles is subject to mandatory control (Article 6opens in a new tab), and client identification can be delegated under a contract, for example to a bank, a broker or a digital depository (Article 7opens in a new tab). In the EU, for a transfer over EUR 1,000 to an address not serviced by any provider (a self-hosted wallet), the originator’s provider takes measures to assess whether that address is owned or controlled by the originator (Article 14(5) of Regulation (EU) 2023/1113opens in a new tab).

What the platform must support:

• identity verification through an external service; Sumsubopens in a new tab has two plans: Basic at 1.35 USD per check with a minimum payment of 149 USD a month, and Compliance for regulated businesses, with AML list screening and proof of address, at 1.85 USD and 299 USD;
• KYT, screening of addresses and transactions (know your transaction: where funds came from and where they go); at BitOKopens in a new tab, a package of 2,000 checks costs 1,000 USD, and the package validity period is not stated on the page;
• collection and transfer of data for the travel rule;
• per-client limits;
• recording of transactions above thresholds and export for reports;
• storage of transaction history for the period the regulator requires: in Russia, at least ten years from the date of the transaction (Part 2 of Article 39 of 282-FZ).

CryptoExchanger has built-in AML/KYT screening of transactions. Which of the other items the platform covers and which need external services — ask during the demo of the admin panel.

How CryptoExchanger helps you open an exchanger

CryptoExchanger is not a place to exchange crypto — it is how you launch your own crypto exchanger as an online business. The platform includes:

How to build a crypto exchanger

Building a crypto exchanger means assembling a working platform: a site with an order form, an exchange processing engine, rate and reserve management, API integrations with exchanges and security tooling. There are two ways to get there.

The first is development from scratch: 6–18 months of a development team's time and a budget from 50,000 USD. The second is a ready-made script. CryptoExchanger hands you a fully assembled platform that you deploy on your own domain. Every module is already built: orders, rates, reserves, APIs, AML/KYT and the Telegram app.

How to launch an exchanger on a ready-made script

Launching on the CryptoExchanger crypto exchanger script takes days instead of months. Once you buy the licence you get access to the build and the documentation. Installation goes on your own server or hosting.

The steps below are the technical side of the launch. The status in your jurisdiction, AML and KYC rules and reserves are prepared in parallel: the software does not replace them. For Russia, agree on where the server will be hosted in advance — the hardware and software systems must be in Russia (Article 44 of 282-FZ).

Further reading on launching a crypto exchanger