Basics
Published 2026-10-15 · 8 min read
Arbitrage lives between venues, so a single exchange account is not an arbitrage setup. You need verified, funded, and tested accounts on at least two exchanges, and serious traders keep several more ready, because spreads appear on unpredictable pairs of venues. The critical point is timing: verification cannot be rushed. Document review, proof-of-address checks, and enhanced due diligence can take days, and the spread you want to trade will not wait. Traders who open accounts only when they spot an opportunity usually discover that the opportunity is gone before verification completes.
Readiness also means tested, not just verified. An account that has never sent or received a withdrawal is an untested route, and untested routes fail at the worst moments: a first-withdrawal hold, an unwhitelisted address, a fiat off-ramp that needs a separate check. On 15 October 2026, Bitcoin traded near $80,980 to $81,835 in a volatile session after a hot US inflation print. Traders whose accounts were verified, whitelisted, and tested could act on the gaps that session created. Traders still waiting on a verification email could only watch.
Start with reputation and licensing, not fees. Choose venues with a verifiable licence in your jurisdiction, a public track record, proof of reserves or audits where available, and deep liquidity in the pairs you plan to trade. Then add venues for coverage: one or two large global exchanges for depth, one venue strong in the pairs or regions you care about, and optionally a decentralised venue for routes that centralised exchanges do not cover. Avoid choosing venues on fee advertising alone: a cheap exchange with thin books, slow withdrawals, or weak security will cost you more than it saves.
Check the entity question carefully: the same brand can operate different subsidiaries with different licensing and product availability by region. Confirm that the entity serving you is licensed where you live and offers the products you need. For the licensing side, see Exchange Licensing: Why It Matters, and for venue comparison, see Choosing Arbitrage Exchanges and Best Exchange Pairs for Arbitrage.
Set up one exchange at a time, and finish each before starting the next. Create the account with a unique, strong password and a dedicated email address if possible. Complete identity verification with accurate documents, and keep copies of what you submitted. Then secure the account before depositing anything: enable two-factor authentication with an authenticator app rather than SMS where available, set a withdrawal allowlist, set an anti-phishing code, and disable any withdrawal or API permissions you do not need. Security set up after the deposit is security set up too late.
Only then test with real money at small size. Deposit a small amount, make a small trade, withdraw a small amount back, and confirm the full loop works, including the fiat off-ramp if you plan to use it. Record the deposit and withdrawal times, the fees, and any holds or checks you encountered. That test tells you the true speed of the route, which is the number that matters when a spread appears. Repeat the process for each venue, and re-test each route periodically, because exchanges change limits, networks, and verification requirements without much warning. For the compliance side of verification, see KYC/AML for Active Arbitrageurs.
| Area | Good practice | Mistake to avoid |
|---|---|---|
| Passwords | Unique password per exchange, in a password manager | Reusing one password everywhere |
| Two-factor auth | Authenticator app on every account | SMS-only 2FA on every account |
| Withdrawal addresses | Whitelisted and labelled per venue | Typing addresses by hand mid-trade |
| API keys | Scoped, IP-restricted, no withdrawal rights unless needed | Full-permission keys stored in plain text |
| Records | One log of accounts, limits, and test results | Scattered notes, expired documents |
| Capital | Spread across venues, profits swept to cold storage | Entire balance on one exchange |
A password manager is close to mandatory once you pass two or three exchanges. So is a simple account register: for each venue, note the entity, the verification level, the withdrawal limits, the whitelisted addresses, the fee tier, and the date you last tested the route. Review it quarterly, and re-verify documents before they expire rather than after an exchange locks your account for an expired ID. This register is also the document that makes a compliance conversation fast, because it shows a coherent, organised operation instead of a tangle of accounts.
Never share verification documents with 'support'
Legitimate exchanges never ask for your password, two-factor codes, or verification selfies over chat or email. Anyone who does is running a phishing scam, no matter how official they look.
Most exchanges offer API keys that let software read balances and place orders on your behalf. APIs are powerful and dangerous in equal measure. A key with withdrawal permissions that leaks can drain an account in minutes, and a buggy script can place orders you never intended. For beginners, the right answer is to trade manually until the process is proven, and to create API keys only when there is a specific job for them. When you do, scope every key to the minimum permissions the job needs, restrict it by IP address where possible, never enable withdrawals unless the job truly requires it, and store keys like passwords: encrypted, never in plain text or shared screenshots. For bot-specific risks, see Arbitrage Bot Risks.
Muse AI is Meta's personal AI assistant. It can turn this guide into a setup checklist, explain verification tiers in plain language, and help you draft an account register for your exchanges.
Join Muse with invite code LTGSWD — in the Muse app, go to Settings > Redeem token and enter the code.
Disclosure: LTGSWD is the author's Muse invite code.
Muse AI is not a trading tool and does not give financial advice.
At least two verified, tested accounts to run a cross-exchange route, and most active traders keep several more ready, since spreads appear on unpredictable pairs of venues.
Basic checks can take minutes, but enhanced reviews or corporate accounts can take days. Verify every venue well before you plan to trade on it.
No. Trade manually until your process is proven. When you do use APIs, scope keys to minimum permissions, restrict by IP, and never enable withdrawals unless truly required.
Because untested routes fail at the worst moments: first-withdrawal holds, unwhitelisted addresses, or fiat off-ramp checks. A small test reveals the route's true speed and cost before real capital depends on it.
Crypto Arbitrage Scanner monitors 16 exchanges in real time — try it free for 3 days.
Start Free Trial