An Exchange Says Your Account Is Frozen and Demands More Crypto

Do not send the requested fee while you investigate. Fake exchanges often wait until the displayed balance feels valuable, then freeze withdrawals and demand a tax, AML deposit, verification payment, liquidity charge or account upgrade. The dashboard and support chat are controlled by the same operator, so neither can prove that the profits exist. A real exchange can restrict withdrawals for security or compliance, but the resolution should happen through the independently verified account and support process—not by sending fresh crypto to an address supplied in a private conversation.

The safest first action is to break the payment sequence

Stop sending crypto, bank transfers or identity documents. Do not pay a smaller test fee. Do not accept an offer from the contact to cover part of the charge. Preserve the current screen before the site changes or disappears, then investigate from a separate browser session without following links supplied by the platform.

Why the frozen balance feels harder to abandon

The platform may show profits far larger than the requested fee. That comparison is designed to make another payment feel rational. The visible balance has no independent value if the operator can edit it and refuses every withdrawal. Money already sent is a reason to limit the next loss, not evidence that the final charge will work.

Use the Frozen-Account Reality Split

Compare the account against two different patterns rather than asking whether frozen always means scam.

• Real restriction: account created through a known official service, status visible after independent login, documented reason or review path, and support reached through the official domain or app.
• Advance-fee platform: introduced by a stranger or private group, unusual domain or app, profits visible only inside its dashboard, and fresh money demanded before any withdrawal.
• Real fees: disclosed trading or network costs charged through the platform's normal transaction flow, often deducted from the withdrawal or account balance.
• Fake unlock: crypto sent to a new address for tax, AML, verification, liquidity, insurance, VIP status or reactivation.

Legitimate exchanges can place genuine holds

Security events, identity review, recent funding, name mismatches, risk checks or legal orders can temporarily restrict an established account. Current support pages from major exchanges describe timers, in-app verification and formal appeals. A hold by itself is therefore not proof of fraud. The decisive question is whether the user can reach the real company independently and whether the remedy is documented inside the authenticated account.

A private crypto payment is not normal account verification

A real service may request identity evidence through its secure portal. It may charge a published withdrawal fee. It should not require the customer to send USDT, BTC or another asset to a wallet delivered by a support agent to prove liquidity, clean the funds or release an internal balance. That is a new transfer, not verification of the old one.

Tax language is used because it sounds final

A fake platform may claim that tax must be prepaid to the exchange before the user's own balance can move. Tax obligations depend on jurisdiction and are handled under real tax procedures. A private wallet address, urgent countdown and promise that the payment will be refunded do not establish a lawful tax demand. Verify any claimed authority through its public contact details, not through the exchange chat.

Trace the original deposits, not the dashboard trades

Collect the transaction hash for every crypto deposit and look it up on the correct public blockchain explorer. The transaction proves that funds left the sending wallet and reached an address. It does not prove that the receiving address belongs to a real exchange or that the dashboard trades occurred. Internal profits, charts and account statements can be fabricated without matching assets on-chain.

A small early withdrawal can be deliberate bait

The FBI notes that scammers sometimes allow an initial withdrawal to build confidence before freezing the larger balance. Treat that event as proof of only the amount received. It does not validate the later profits, exchange identity or tax story. Escalating deposits after a small successful test is a known confidence-building tactic.

Verify the company without using its own links

Type the known official domain yourself or obtain it from a regulator, app-store publisher record or prior trusted account documentation. Compare the company name, domain, support channel, legal entity and app publisher. A registration number or copied licence image is not enough; check it in the issuing authority's own database where available. Do not call the phone number printed only on the suspicious site.

Contact the service that sent the funds immediately

If deposits came from a legitimate exchange, bank or wallet provider, use its official fraud or support channel and supply the receiving address, amount, asset, network, timestamp and transaction hash. Crypto transfers are not automatically reversible, but rapid reporting may help the service identify a destination account, preserve records or respond to a lawful request. Do not delay while negotiating with the fake platform.

Build an incident packet before accounts disappear

Create a chronological record that another person can understand without logging into the suspicious site.

• Every website and app URL, including referral and login links.
• Names, usernames, phone numbers, email addresses and messaging-app handles.
• Deposit addresses, asset, network, amount, date and transaction hash.
• Screenshots of the balance, withdrawal attempt, frozen notice and each fee demand.
• Bank, card or exchange records showing how the crypto was purchased or sent.
• The first contact, promised returns and any instruction to hide the activity from family or financial institutions.

Protect accounts that shared credentials or devices

If the platform received a reused password, change the real email and financial accounts from a clean device. End unknown sessions and enable strong multi-factor authentication. Remove remote-control software. If a seed phrase or private key was disclosed, treat that wallet as compromised and obtain network-specific assistance without sharing a new recovery phrase.

Report through the channel that fits your country

Use local police or cybercrime reporting, the financial regulator where relevant and the fraud channel of the sending institution. United States victims can report to the FBI Internet Crime Complaint Center and the FTC. Include transaction details rather than only the platform name. Reporting does not guarantee recovery, but it can connect addresses, domains and other victims.

Expect a second scam offering recovery

After a public complaint or support request, supposed investigators, hackers, lawyers or blockchain recovery agents may promise guaranteed release for an upfront fee. The FBI specifically warns against paying services that claim they can recover lost funds. A real investigation may require evidence and time; it does not need the victim's seed phrase or another crypto payment to a private address.

When the platform might actually be real

Independent verification may show that the account belongs to a known exchange and the restriction matches its official policy. Continue only inside the authenticated app or website, follow the documented review and keep records. Do not let an unsolicited caller take over the case. Even a real exchange name can be impersonated by a fake domain, support number or text-message thread.

Worked triage: the fee demand changes the classification

A user joined a trading site through a private messaging contact, deposited USDT and saw the balance triple. The first withdrawal is frozen. Support demands ten percent in USDT to an address that is not shown in any public fee schedule and says the money will be refunded. The site cannot be reached through an independently verified company account. Those facts match an advance-fee platform, not an ordinary network charge. The user should stop, preserve hashes and contact the sending exchange and reporting authorities.

Fraud and restriction evidence — July 30, 2026

Government warnings and official exchange support pages were used to separate counterfeit investment platforms from genuine security or compliance holds. The article does not identify a specific unnamed platform as criminal and cannot promise recovery.

• FBI warning on frozen fake investment accounts and fee demands: https://www.fbi.gov/how-we-can-help-you/victim-services/seeking-victim-information/seeking-victim-information-in-cryptocurrency-investment-fraud-scheme
• FBI Operation Level Up victim guidance: https://www.fbi.gov/how-we-can-help-you/victim-services/national-crimes-and-victim-resources/operation-level-up
• FBI cryptocurrency investment fraud resources: https://www.fbi.gov/how-we-can-help-you/victim-services/national-crimes-and-victim-resources/cryptocurrency-investment-fraud
• CFTC fraudulent crypto trading website alert: https://www.cftc.gov/LearnAndProtect/AdvisoriesAndArticles/watch_out_for_digital_fraud.html
• FTC cryptocurrency scam guidance: https://consumer.ftc.gov/articles/what-know-about-cryptocurrency-scams
• Coinbase account restriction process: https://help.coinbase.com/en/coinbase/privacy-and-security/other/account-restriction
• Kraken deposit and withdrawal holds: https://support.kraken.com/articles/360000380966-why-is-my-deposit-or-withdrawal-on-hold-

FAQ