When it comes to new projects that are not yet listed on exchanges, you can usually buy during pre-sale direcly from developers (ICO, IEO etc.), or you can use decetralized exchanges and simply buy from other people. When it comes to P2P trade be very careful and never send money first, always use a trusted escrow.