Top Reasons Crypto Exchange Accounts Are Frozen in 2026

Why exchanges often pause withdrawals

Large centralized exchanges operate under AML requirements and enforcement pressure. Temporarily restricting withdrawals and requesting documents may present less compliance risk than allowing a high-risk transaction chain to proceed. As a result, legitimate users may first encounter a restriction after an ordinary deposit, P2P trade, or large withdrawal without any criminal context.

It is important to distinguish between types of restrictions: a security hold after a password or 2FA change, a KYC or SoF document request, an AML review of incoming assets, sanctions screening, and, less commonly, a law-enforcement request. The category determines both the package and the timeline. Examples of outcomes and evidence requirements are available in our cases.

Do not confuse a withdrawal blocked by a KYC limit with an account under manual review. In the first situation, raising the verification level may resolve the issue. In the second, the exchange needs a package tailored to the request. The exchange's email and account status are primary sources, not advice from online chats.

Main triggers: AML, Source of Funds, and P2P

AML assessment of a deposit. Exchanges screen incoming transfers using blockchain analytics. If the assets recently passed near a mixer, exploit, scam, or sanctioned address, even through several intermediary addresses, the system may place the account on hold. A common scenario is receiving USDT through OTC or P2P from a counterparty whose earlier source was flagged. Preserve the TxID, sender address, and transaction context before replying to support.

Source of Funds / Source of Wealth. After a large deposit or unusual turnover, an exchange may request evidence showing where the assets came from, including statements, income records, trading history, or asset-sale documents. Applications fail when the files do not support the specific chain into the account: amounts do not reconcile, dates are inconsistent, or polished but unrelated files replace primary evidence. See what exchanges actually request for Source of Funds.

P2P and fiat disputes. A bank chargeback, fake payment screenshot, or transfer later named in a fraud report can lead to a freeze pending investigation even if you acted in good faith. Before releasing the assets, preserve the correspondence, payment details, timeline, and bank confirmations as one package.

Sanctions, KYC, and security holds

Screening compares names, addresses, and counterparties against lists. Common names can produce false matches, and exchanges separately review exposure to restricted addresses and services. Inconsistencies such as a KYC country that does not match the IP address or device, sudden location changes through a VPN, and access from high-risk regions can worsen the assessment. A VPN used to bypass controls usually does not help.

A large deposit followed by an immediate withdrawal, a series of small transfers intended to split an amount, frequent device changes, or a new withdrawal address with no history can trigger risk controls before a deeper AML review. A security hold after an email or 2FA compromise typically starts with a pause and then identity confirmation. Do not try to force a withdrawal through parallel requests from multiple accounts; this may appear to be an attempt to bypass the restriction.

What to do in the first 48 hours

1. Save the email or notification, account status, case number, TxID, and screenshots.
2. Identify the category: KYC, Source of Funds, AML review of a deposit, P2P dispute, or account security.
3. Prepare the complete package and submit it once through the official channel.
4. Do not send a seed phrase, private keys, or unnecessary identity documents just in case.
5. Do not use urgency or threats; respond with facts.
6. If a complete package receives no response for longer than the usual timeframe or only a generic rejection, request a review of the route through a success-fee assessment.

• Do not create parallel tickets from different accounts.
• Do not enable a VPN to bypass a location restriction.
• Do not assume your review will take the same time as someone else's.

Lifting a restriction is not guaranteed. The outcome depends on exchange policy and the quality of the evidence. For platform-specific first steps, see what to do when Bybit freezes withdrawals. If the counterparty's transaction chain also needs review, see blockchain analytics.