Guide — the withdrawal that matters

Moving crypto from an exchange to your own wallet

This is the single most consequential thing you will do with crypto, and it is where the expensive mistakes live. Six steps, in order, with the specific traps — wrong network, altered address, missing memo — and how each one is avoided.

  • 2 Mistakes that cause almost all losses
  • NZ$10 Cost of a test transaction that prevents them
  • Not taxed Transfers between your own wallets
  • 30 Mar 2026 Date Easy Crypto stopped trading in NZ

Why this step matters more than which wallet you bought

People spend weeks choosing between a Ledger and a Trezor and then perform the withdrawal in ninety seconds while distracted. That is exactly backwards. The device choice barely matters — both are good. The withdrawal is where irreversible mistakes happen, because a blockchain transaction is final: there is no bank to call, no chargeback, no regulator with the power to unwind it.

There is also a specifically New Zealand reason to get comfortable with this process. Easy Crypto, the country's largest homegrown platform with more than 350,000 users, was acquired by the Australian exchange Swyftx and stopped trading here on 30 March 2026. Kiwi-Coin closed in the same period. Cryptopia was hacked for roughly NZ$30 million in 2019, and Dasset's liquidation in 2023 found about NZ$6.3 million of customer cryptoassets unaccounted for. The lesson is not that any particular platform is untrustworthy — it is that in this market, moving crypto out of an exchange is a skill you will need repeatedly.

So learn it properly once. The whole process, done carefully, takes about twenty minutes including a test transaction, and after the first time it takes five.

The six steps

  1. Get the receiving address from your wallet, not from anywhere else

    Open your wallet, choose the asset, tap receive. Copy the address it gives you. Never use an address from a transaction history, an email, a message, or a screenshot.

  2. Confirm the address on your hardware wallet screen

    If you have a device, check that the address shown on the device matches what your computer displays. This single comparison defeats clipboard-hijacking malware.

  3. Match the network exactly

    The asset and the network are separate choices. USDT exists on Ethereum, Tron, Solana and others, and sending it on the wrong one usually means it is unrecoverable without technical help.

  4. Add the memo or destination tag if one is required

    Some chains — XRP, Cosmos, and several exchange deposit addresses — need a memo. Omitting it can permanently orphan the funds. Wallets receiving to a personal address usually do not need one.

  5. Send a small test amount

    Ten or twenty dollars. Pay the network fee twice; it is the cheapest insurance available. Wait for confirmation and verify the funds appear in your wallet.

  6. Send the rest, and record it

    Once the test lands, move the balance. Note the date, amounts, both addresses and the network fee — a transfer between your own wallets is not a disposal, but you may need to prove that later.

Do not skip the test transaction

The objection is always that it costs an extra network fee. On Bitcoin that is typically a few dollars; on Solana it is a fraction of a cent. Against the possibility of sending your entire balance to an address that was altered in your clipboard, or onto a chain your wallet is not watching, it is the best value insurance available anywhere in finance.

The network problem, explained properly

This is the single most common expensive error, and it happens because the asset and the network are two separate things that people reasonably assume are one thing.

Take USDT. It exists as a token on Ethereum, on Tron, on Solana, on Polygon and on several other chains. They are all "USDT" and they are not interchangeable — each is a distinct token on a distinct ledger. If you withdraw USDT from an exchange choosing the Tron network, and paste an address your wallet generated for Ethereum, the funds arrive at that address string on the Tron chain. Your Ethereum wallet shows nothing, because there is nothing there.

Whether that is recoverable depends. Sometimes the same private key controls the address on both chains and a technically confident person can import it into a wallet for the other network and retrieve the funds. Sometimes the address formats differ enough that no key controls the destination and the funds are permanently unreachable. Either way it is a bad afternoon.

The rule is mechanical: whatever network your wallet's receive screen says, that is the network you select on the exchange. Not a similar-sounding one. If the exchange offers "ERC-20" and your wallet says "Ethereum", those match. If the exchange offers "BEP-20" and your wallet says "Ethereum", they do not.

Address swapping and how to defeat it

Clipboard-hijacking malware is cheap, widely distributed and effective. It sits on a machine watching for something that looks like a cryptocurrency address to be copied, and replaces it with the attacker's — usually one chosen to share the first and last few characters, because that is all anyone checks.

There are two reliable defences and they are both trivial.

Verify on the device's own screen. If you have a hardware wallet, its receive flow displays the address on a screen driven by the device's own firmware, which malware on your computer cannot alter. Compare that against what is in the exchange's withdrawal field, character by character, at least at the start, the middle and the end. This is the specific reason a Trezor Safe 5's larger touchscreen scores better than a two-line display in our grading.

Send a test amount. If the address was swapped, you lose ten dollars instead of everything. That is the whole argument.

A related attack worth knowing: address poisoning. An attacker sends you a tiny transaction from an address resembling one you use often, so that when you later copy a recipient from your transaction history you copy theirs. Never take an address from history. Always get it fresh from the wallet.

Payment card and phone, representing verifying a destination before sending funds
Compare the address on your device's screen with the one in the withdrawal field. Start, middle and end. It takes fifteen seconds.

Networks that commonly catch people

USDT and USDC, which exist on many chains. ETH on mainnet versus a Layer 2 like Base or Arbitrum. BNB on BEP-2 versus BEP-20. And anything where an exchange offers a cheaper withdrawal on an alternative network — the saving is real and so is the risk if your wallet is not watching that chain.

Memos and destination tags

Some blockchains use a single shared address for many users, with a memo or destination tag identifying which account a payment belongs to. XRP and several Cosmos-based chains work this way, and exchange deposit addresses very often do.

The consequence: if a destination requires a memo and you omit it, the funds arrive at the right address with no indication of who they belong to. Recovering them means persuading the receiving platform's support team to identify and credit your transaction, which they may or may not be able to do.

The good news is that this mostly affects sending to exchanges rather than to your own wallet. A personal wallet address is yours alone, so there is nothing to disambiguate and no memo is needed. The rule: only include a memo when the receiving side explicitly gives you one, and always include it when they do. When in doubt, the receive screen of the destination wallet or platform will tell you.

What to do when something goes wrong

Work through this in order rather than panicking, because most "lost" transfers are not lost.

Get the transaction hash from the exchange. Every withdrawal produces one. It is a long string of characters and it is the definitive record of what happened.

Look it up on a block explorer for the network you used. If the explorer shows the transaction confirmed to the address you intended, then the funds exist at your address and this is a display or configuration problem, not a loss. The most likely causes are that your wallet is watching a different network, or a different account or derivation path. Adding the correct network to your wallet, or checking other accounts within it, usually resolves it.

If the explorer shows a different destination address, the address was altered before you sent — clipboard malware or address poisoning. That transaction cannot be reversed. Treat the machine as compromised, move any remaining funds from wallets accessed on it to a wallet created on a clean device, and read our scams guide.

If it is still pending, wait. Network congestion is real and Bitcoin transactions can sit unconfirmed for hours during busy periods. The explorer will show it in the mempool. It will confirm.

If you sent to the wrong network, do not send anything else while you work out whether it is recoverable. Sometimes the same key controls the address on the destination chain and importing your recovery phrase into a wallet for that network retrieves the funds. Sometimes it does not. This is worth asking a knowledgeable person about before you attempt anything, and it is worth being extremely wary of anyone who volunteers to help you "recover" it — recovery scams targeting people who have just lost funds are an industry of their own.

New Zealand specifics

Three things that apply particularly here.

The on-ramp has changed. Easy Crypto stopped trading in New Zealand on 30 March 2026 after being acquired by Swyftx, and Kiwi-Coin closed. Swyftx charges no fee for NZD bank transfer deposits or NZD withdrawals, with card deposits considerably more expensive, and it supports withdrawal to external self-custody addresses. Whatever platform you use, check it on the Financial Service Providers Register first — the FMA's advice is that FSPR registration generally brings access to an independent dispute resolution scheme. Our NZD funding guide covers the current landscape.

Proof of wallet ownership. Platforms may ask you to verify that you control an external address before releasing funds, usually via a signed message or a small verification transaction. This is legitimate AML compliance — but note that a request to verify your wallet arriving by email or direct message, rather than inside the platform's own interface, is a standard phishing pattern. Only ever complete verification steps you initiated yourself, inside the platform.

Tax records. A transfer between wallets you control is not a disposal and generates no taxable income. But Inland Revenue treats cryptoassets as property and expects you to be able to calculate the New Zealand dollar value of your transactions, so record the date, the amounts, both addresses and the network fee. From 1 April 2026 New Zealand applies the OECD Crypto-Asset Reporting Framework: reporting platforms collect identity and transaction data and report it to IRD, with first reports due by 30 June 2027. Your self-custody wallet reports nothing, so your records are what reconcile the two ends. Our tax and CARF guide has the detail. General information, not tax advice.

From our testing notes

The single behaviour that separated confident users from nervous ones was not technical knowledge. It was whether they sent a test transaction. The people who tested first moved large amounts calmly, because they had already proved the path worked. The people who did not test spent the entire confirmation window refreshing a block explorer. Same transaction, completely different experience, and the difference cost about four dollars.

Frequently asked

Questions on this topic

How do I transfer crypto from an exchange to my wallet?

Get a receiving address from your wallet, confirm it on your hardware device's screen if you have one, select the matching network on the exchange withdrawal page, add a memo only if the destination requires one, send a small test amount first, confirm it arrives, then send the rest. The two mistakes that cost people money are the wrong network and an address that was altered between copying and pasting — both are prevented by the steps above.

Why did my crypto not arrive after I sent it?

Usually one of four things. The network is congested and it is still pending — check the transaction hash on a block explorer. You sent on a different network from the one your wallet is watching, so the funds are at your address on the wrong chain. Your wallet is watching a different derivation path or account than the one you sent to. Or a required memo was omitted. Get the transaction hash from the exchange first: if the explorer shows it confirmed to your address, the funds exist and it is a display or network problem, not a loss.

Is transferring crypto between wallets taxable in New Zealand?

No. Moving cryptoassets between wallets you control is not a disposal, so it does not generate taxable income. Inland Revenue treats cryptoassets as property and tax arises on income — a sale, a swap, spending, or receiving rewards — not on relocating your own holdings. You must still keep records: the date, amounts, both addresses and the network fee, because you may need to demonstrate that a transfer was internal rather than a sale. See our tax guide. General information, not tax advice.

How much does it cost to send crypto to my own wallet?

Two possible charges. The exchange may impose a withdrawal fee, which varies by platform and asset and is sometimes a flat amount regardless of size — check before you split a withdrawal into several parts. And you pay the blockchain's network fee, which depends on congestion: cents on Solana, more on Bitcoin during busy periods, and potentially significant on Ethereum mainnet. Neither goes to your wallet. Our fees guide covers all the layers.

Why does an exchange ask me to verify my external wallet?

Anti-fraud and anti-money-laundering compliance. Platforms serving New Zealanders are captured by the AML/CFT Act 2009, and from 1 July 2026 the Department of Internal Affairs becomes the single AML/CFT supervisor. Some platforms — Swyftx among them — may request proof that you control an external address before releasing funds to it, which usually means a signed message or a small verification transaction. It is a legitimate request from the platform, but be alert: a request to "verify your wallet" arriving by email or DM rather than inside the platform's own interface is a common phishing pattern.

Next in this cluster

Keep reading