Open an account on an exchange that lists ZEC, verify your identity, fund it, and place the order. Then make the decision nobody tells you about: leave the coins where they landed, move them to your own wallet, or take the step that makes them private. Only about 1 ZEC in 4 sits on the private side today.
Those are three different outcomes, and the last one is the only one that uses the feature Zcash is known for. Buying gets you the coin. Privacy is a separate act you have to perform on purpose, which is why the public side of the ledger holds most of the supply.
So the useful version of this guide covers the purchase quickly and spends its time on what happens next.
The three ways to get ZEC, and who each suits
Most people use a centralized exchange, the fastest route and the one that asks most about you. The alternatives are a peer to peer trade or a cross-chain swap. They differ less in price than in who holds the coins, what you must prove, who can fail on you, and what the receiving side publishes.
| Route | Who holds it | What you prove | Who can fail you | What arrives |
|---|---|---|---|---|
| Centralized exchange | The venue, until you withdraw | Identity, usually before withdrawal | The venue | A public balance you must move yourself |
| Peer to peer | You, on settlement | Varies, sometimes nothing | The counterparty | Whatever address you supplied |
| Cross-chain swap | You throughout | Usually nothing | The service or the route | Whatever address you supplied |
The table is the whole comparison, and the last column is the one people skip. On the first route you receive nothing at all until you act, because the coins sit in the venue's system rather than on the chain under your control. On the other two you receive to an address you nominated, which means you decided the privacy outcome before the trade settled, whether you realized it or not. That matters because a public Zcash transaction carries its transparent inputs and outputs in the clear, on a chain anyone can read, exactly as Bitcoin does (source: Zcash Improvement Proposals).
The exchange route wins on liquidity and on being able to fix things when they go wrong. It costs you the identity check and a period where somebody else holds your coins. The swap route wins on not asking who you are and loses on recourse: if the route fails halfway, there is often no support desk to appeal to. Our guide to buying Bitcoin safely walks the same trade-off on an asset where the stakes are better documented, and other ways to acquire it covers the non-exchange routes in more depth than belongs here.
Mining is not a fourth route. It is a business with hardware and electricity inputs, and treating it as a way to acquire a few coins is how people spend more than they would have paid to buy them.
Most readers take the first route, which means clearing a few things first.
What you need before you buy
Three things, and the third is the one people leave until it is inconvenient. You need a venue that lists the asset, identity documents in a state you can photograph, and a decision already made about where the coins are going afterwards. The first two are obvious. The third is what separates a clean purchase from a scramble.
Identity verification is standard at regulated venues and it usually gates withdrawal rather than deposit, which catches people out. You can often fund an account and buy before anyone asks for a document, then discover the check sitting between you and moving your own coins. Our guide to identity checks at exchanges explains what the process is actually for and why it exists at some venues and not others.
The destination decision matters more here than for most assets. If you intend to end up with private coins, the wallet you send to has to be able to issue an address that receives them, and not every wallet can: the community wallet directory lists which sides each one handles, and they differ (source: ZecHub). Modern wallets often hand out a single address that the sending side resolves to whichever type both ends support, which hides the question rather than answering it (source: Zcash Improvement Proposals). Deciding the destination after you have bought means either leaving the coins where they are or making an extra move you did not budget for. Deciding it first costs nothing.
If you do not yet have a wallet, that is its own project rather than a step in this one. A wallet is software that holds keys, and holding your own keys is what separates owning a coin from having a claim on somebody who owns it. The difference between custodial and self-custody arrangements is the difference between those two positions.
What kind of wallet is a separate question. Our guide to hot and cold wallets covers the storage split, and what a seed phrase is covers the recovery words everything else depends on.
Choosing where to buy is a question this guide deliberately does not answer, because any list of venues that support a given asset is stale within months and a wrong one costs a reader real money. Our guide to choosing an exchange gives the criteria rather than the names, which is the durable half.
With those settled, the purchase itself is the least interesting part of the process.
How to buy Zcash: step by step
Seven steps. The mechanics are the same as any listed asset and take longer to describe than to do, so the parts specific to Zcash are called out where they arrive rather than saved for the end.
Step 1: Open and verify the account
Most venues that list ZEC require identity verification before you can trade, and several require it before you can deposit at all. Do this first, because verification can take anywhere from minutes to a few days and it is the step most likely to stall a purchase you wanted to make today.
Step 2: Turn on two-factor authentication
Enable it before you fund anything rather than after. An account holding a balance is worth attacking; an empty one is not, which makes the gap between funding and securing the window that matters. Our guide to two-factor authentication covers which second factors actually help.
Step 3: Fund the account
Three routes, with a predictable trade between cost and speed:
- Bank transfer is usually the cheapest and the slowest
- Card is usually the fastest and the most expensive
- A stablecoin transfer from another venue sits between the two, if you already hold one
The relative costs differ by venue and change, so read the current fee schedule rather than trusting any article, this one included.
Step 4: Find the ZEC market
ZEC trades against major fiat currencies and against stablecoins on most venues that list it. The pair you pick barely matters unless you are moving a large amount, in which case pick the one with the deeper book rather than the one that matches your bank balance.
Step 5: Choose the order type
This is the one decision in the sequence that can cost you money on its own.
A market order fills immediately at whatever price the book offers. That is fine for a small order in a liquid market and expensive in a thin one, because the order walks the book and fills at progressively worse levels.
A limit order fills only at a price you name, or does not fill at all. For an asset that trades in far less volume than the majors, this is usually the safer default. Our guide to market, limit and stop orders covers the full comparison.
Step 6: Decide the amount, including whether it is a fraction
One ZEC divides into a hundred million of its smallest unit, so no venue needs you to take a whole coin (source: Zcash Protocol Specification). Buying a fraction is normal and costs nothing extra.
Decide the figure before you open the order form. Choosing an amount while watching a moving quote is how people end up holding a position they would have declined an hour earlier.
Step 7: Place the order and check the fill
Submit it, then confirm three things on the confirmation: the quantity matches what you entered, the average fill price is close to what you expected, and the fee charged matches the schedule you read in step 3. A market order that filled well away from the quote is the signal that the book was thinner than it looked.
It fills, and you now hold ZEC. What you do in the next ten minutes decides whether the asset's defining feature is available to you at all.
Seven mistakes that cost buyers money
These are ordered by how often they happen rather than by how much they cost, and the first four are all avoidable in under a minute.
- Sending a market order into a thin book. The fill can land well outside the quoted price, and the loss is permanent from the moment it executes.
- Skipping verification until after funding. The deposit clears and the trade does not, and the funds sit unusable while support works through a queue.
- Assuming coins bought on a venue are private. They are not, and the next section explains why that is inherited rather than chosen.
- Withdrawing to an address type the venue will not send to. Most venues send only to transparent addresses, so a shielded withdrawal address is often rejected outright.
- Withdrawing to an address from the wrong network entirely. A ZEC withdrawal sent to a Bitcoin address is not recoverable by anyone.
- Testing with the full balance. The first withdrawal to a new address should be small enough that being wrong costs nothing.
- Treating shielding as retroactive. It protects what you do next, and it does not erase the record that already exists.
What you actually hold now
Your coins sit in the venue's custody, recorded in its internal system rather than on the Zcash chain under an address you control. Nothing about them is private in the sense the asset is known for. The venue knows the balance and knows who you are, and it would know where you sent it. That is what custody means.
This is the point where Zcash differs from almost everything else you might have bought. A coin here can sit in one of two states, and our guide to the shielded and transparent sides works through exactly what each one publishes. The part that matters for a buyer is narrower: which state your coins are in was decided for you, and the answer is essentially always the public one.
That is why the supply is so lopsided. The project's own network page publishes both figures, and dividing one by the other puts roughly a quarter of all ZEC on the private side and the rest in public (source: Electric Coin Co.). That split is not because holders prefer publicity. Venues sit on large balances and move them constantly, and doing that in the open is the only practical way to reconcile a customer ledger against a chain, and certain deposit addresses accept incoming funds from the public side alone (source: Zcash Improvement Proposals).
A public address is also not an anonymous one. Identities get attached to addresses through ordinary online behavior rather than through any weakness in the chain, which is why treating a string of characters as a disguise fails.
So the position you are in after buying is inherited rather than chosen. You have a public claim on a public coin, and the privacy feature is sitting there unused. Our guide to crypto privacy basics covers why that distinction matters across chains generally, and the general case is worth understanding before the specific one.
None of that is a problem yet. It becomes one only if you assume you have privacy you have not taken.
Leave it, withdraw it, or shield it
Three options, genuinely different rather than points on a scale. Leave the coins on the venue and you keep the convenience and the counterparty. Withdraw them and you take the keys and the responsibility. Withdraw then shield them and you use the feature the asset exists for. Most people stop at the second and believe they did the third.
The middle branch is where most people stop, believing they took the right-hand one.
Leaving it is the default and it is not automatically wrong. If you bought a small amount and intend to sell it before long, the venue is a reasonable place for it. What you are accepting is that somebody else holds the asset under policies that can change, with your balance fully known to them. Our guide to custody choices for investors covers when that trade is sensible and when it stops being.
Withdrawing it moves the coins onto the chain under an address you control. This is the step people describe as "taking it private", and it is not that. A withdrawal to a public address produces a public transaction: the amount is readable by anyone, permanently, along with both ends of the transfer. What you gained is custody. What you did not gain is privacy. The two are separate and they are routinely conflated, which is the single most expensive misunderstanding available to a new holder of this asset.
Shielding it is the additional step. Moving coins from the public side to the private side is an ordinary transaction that your wallet may perform in one action or two, and afterwards the balance is no longer readable. Moving across the boundary carries a slightly higher fee than sitting still, because the fee is set by how much work the transaction asks the network to do, not by which side it ends up on (source: Zcash Improvement Proposals). It is a small premium on a move you make rarely.
Two constraints apply to that third option and neither is obvious. The receiving wallet has to support issuing an address that can accept private funds, and not every wallet does. And the move itself is visible: the chain shows an amount entering the private side even though it stops showing what happens to it afterwards. Shielding protects what you do next; it does not retract what is already published. If that distinction matters to you, our guide to reusing an address explains why information on a ledger is never really withdrawn.
Whichever of the three you pick, one habit prevents the expensive version of getting it wrong.
Before you move anything, do this
Send a small amount first. It is generic advice on every chain and it is load-bearing here, because the failure modes on this asset are worse than a bounced transaction. Move a fraction, confirm it arrived and confirm it arrived in the state you expected, then move the rest.
Work through what a mistake looks like. You decide to shield your holding, you paste in an address from a wallet you have not used for this before, and you send the full amount. If that wallet can only receive on the public side, the transaction does not fail. It succeeds, publicly, for the whole amount. You have paid a fee to publish exactly the number you were trying to conceal, and there is no undo. A test transaction of a tiny amount would have shown you the same outcome for a cost you would not notice.
The check itself takes a minute, and it is the only step here that gives you evidence rather than reassurance. Send the small amount, then look the destination up on a block explorer (source: Zcash Block Explorer). A public one shows you a running total and every movement behind it. A private one shows a page saying the figure is withheld on purpose. That is the confirmation you want before the real transfer.
One trap while you are there: a blank screen is not a result. Confirm your test amount shows up where you expected it to show up, or is withheld where you expected it withheld, because our guide to reusing an address covers why a missing figure proves nothing on its own.
Beyond the test amount, the ordinary rules apply and they apply harder to an asset with a private mode. Write the recovery words down offline, on paper, before you send anything of consequence. Our guide to basic crypto security covers the habits, and hardware wallets covers the device that makes most of them automatic. If you lose access to a private balance, there is no support desk that can see it on your behalf.
Most of what goes wrong for new holders is on that short list.
What buying ZEC leaves out
Buying the asset gives you the option of privacy rather than privacy itself, because the private mode is something a holder switches on rather than something the network applies for them. Four beliefs cluster around that gap, repeated confidently, and each costs somebody something real.
Each row below states the belief as people usually put it, against what actually happens.
| What people believe | What actually happens |
|---|---|
| Buying ZEC makes my holding private | It gives you a public coin with a private mode you have not switched on |
| Withdrawing to my own wallet is the private step | It transfers custody. The transaction is fully public |
| The exchange loses track of me once I withdraw | Your identity is on file there, along with a record of the payout destination |
| Nobody can tell I used the private side | Every crossing of the boundary is itself a public event (source: CoolWallet) |
The second row is the one that does the most damage, because withdrawing feels like the decisive act. It is decisive about custody and silent about privacy, and a reader who conflates them will believe a problem is solved that has not been touched.
The third catches people because moving out feels like closing an account. It does not close anything. The identity check already happened and the payout destination is already recorded, and coins leaving changes neither.
The fourth only sounds contradictory until the two halves are pulled apart. Concealed: what a payment contains. Not concealed: that such a payment occurred at all, nor the sums moving across the boundary in either direction: the protocol tracks a running balance for each side precisely so those crossings stay checkable (source: Zcash Improvement Proposals).
There is also a plainer point that has nothing to do with the chain. Buying this asset does not change your reporting or tax obligations, and it does not change how any given venue treats it: policies on privacy assets differ and can change with little notice. Treatment also differs by where you are, which is a jurisdictional question rather than a technical one and is covered separately in our guide to Zcash and regulation.
From BloFin's own vantage, the withdrawal is the moment the decision becomes irreversible, because after it the coins have already published where they landed. A perpetual position never touches that asset's chain, so this decision does not arise for a ZECUSDT trader. It arises the moment somebody holds the coin itself, including a ZEC/USDT spot balance.
Frequently asked questions
Do I have to verify my identity to buy ZEC?
At a regulated centralized exchange, almost certainly yes. The check usually sits before withdrawal rather than before purchase. That timing catches people out. You can fund an account and buy, then find verification standing between you and your own coins. Peer to peer and swap routes ask for less or nothing, and they trade that for recourse. If verification is a problem for you, decide the route before you fund anything rather than after.
Can I buy a fraction of a coin?
Yes, and almost everybody does. ZEC divides into very small units, the same way Bitcoin does, so the amount you buy is set by what you want to spend rather than by the coin price. Venues set their own minimum order sizes, which are usually small enough not to matter. There is no advantage in owning a whole coin and no penalty for owning a fraction; the ledger treats both identically.
How long does a withdrawal take to arrive?
Two separate delays add up, and only one of them is the chain. The venue's own processing queue is usually the longer part, and it varies by venue, by amount and by how recently you changed a security setting. Once broadcast, a Zcash transaction confirms in the ordinary way. If you are shielding rather than simply withdrawing, expect a short extra pause on your own device, since the proof has to be built locally before anything leaves.
Is it cheaper to buy and shield, or to receive shielded directly?
Receiving directly into the private side is cheaper when it is possible, because you pay for one crossing instead of two. Buying on a venue and then shielding means the coins move to you publicly and then cross the boundary, which is two transactions and two fees. The catch is that the direct route needs a counterparty who can send that way, and most venues cannot. In practice most people pay the extra crossing, and it is small.
What happens if I send ZEC to the wrong kind of address?
Sending private funds to an address that can only receive publicly does not bounce. The wallet completes it in the public state, so the amount becomes readable and you have paid to publish the number you meant to hide. Sending to a valid address belonging to somebody else is worse and is not recoverable at all. Neither failure is reversible, which is the whole argument for moving a small test amount before the real one.
Researched and written by the BloFin Academy editorial team with AI-assisted drafting. Primary sources include the Zcash Improvement Proposals repository, the Zcash Protocol Specification, and Electric Coin Co. All facts independently verified against cited documentation current as of August 2026. Venue policies, fees and verification requirements are article-time facts that change without notice, so confirm the current position with your own exchange before acting on anything here.
This article is for educational purposes only and is not financial advice. Cryptocurrency is volatile and you can lose money. Regulatory treatment of privacy assets differs by jurisdiction and changes over time. Do your own research before making any decision.