Theft

Fake Crypto Exchange Will Not Let You Withdraw: Fees and Extra Payments

Laptop with a blurred trading screen and a payment request on a dark desk, representing a fake exchange withdrawal-fee scam
In brief

If a fake crypto exchange will not let you withdraw and asks for a separate fee, tax, or "verification deposit," this is an exit scheme, not an AML hold at Binance, Bybit, or OKX. The account balance is often fabricated; another payment will not unlock it. Stop sending funds and preserve the URL, TxIDs, and correspondence. For urgent next steps, see emergency response. If the hold is at a major legitimate exchange, that is a different case: see exchange unfreezing.

When an "exchange" demands a withdrawal fee

The pattern is familiar: you deposited crypto on a website or app with charts and "support," the displayed balance grew, and a small withdrawal may even have worked. A larger withdrawal then fails. A new obstacle appears: a withdrawal fee, "tax," "insurance," "AML deposit," or "liquidity payment." You are told to send money to a new address or card, separately from the balance shown in the account. Each payment increases the loss; no withdrawal follows.

The operators control the interface; they do not hold your assets in a genuine custodial account. The numbers on screen are database entries. The real deposits have already moved through addresses controlled by the scheme. The route from chat to a sham investment platform is covered in crypto exchange scams; this article focuses on the point when a withdrawal is blocked by a demand for another payment.

In the narrow sense, an exit scam is a platform that appeared to operate for a time and then disappeared or abruptly disabled withdrawals for everyone. The practical result for a victim is the same: funds are inaccessible, while "support" either stops replying or demands one more transfer. Do not confuse this with a major centralized exchange suspending withdrawals; the logic and checklist are different.

Extra-payment trap vs an AML hold at a real exchange

Warning signs of a fake platform:

  • The domain does not match a known exchange and often closely imitates a brand.
  • Registration is available only through a link sent in a messenger.
  • The platform promises returns and shows a steadily rising balance.
  • "Support" writes in the same chat as the "mentor."
  • A large withdrawal requires a new payment to an external address.
  • The claimed license cannot be found in the cited regulator's register.

At a legitimate exchange, a withdrawal fee is deducted from the account when the withdrawal is processed; the platform does not ask for a separate transfer to "unlock" it. AML, KYC, or Source of Funds reviews take place through the official account and ticket system, with requests for documents rather than crypto for a "tax." Access the exchange through a known domain you typed or saved yourself, not a chat link. Common reasons for genuine restrictions are covered in the top reasons exchange accounts are frozen.

SignFake platformReal exchange
Withdrawal blockExtra payment to an external addressDocuments requested in a ticket (KYC / SoF)
FeeSeparate transfer to "unlock" fundsDeducted from the account during withdrawal
AccessChat link or "mentor"Known domain entered directly
BalanceOften only a database entryHeld in an exchange account

A quick test: if a withdrawal is categorically impossible without another payment, rather than pending identity or SoF documents in an official ticket, this is a scheme rather than a manual risk review. If you are signed in to an official account at a major exchange and see a review status without an external payment demand, do not send money to "specialists" found through search results; that situation requires a different process.

First steps after discovering the scheme

  1. Stop every additional payment described as a withdrawal fee, tax, penalty, or verification payment.
  2. Preserve the URL, screenshots of the displayed balance and withdrawal error, and correspondence with support and the person who introduced the platform.
  3. Record every outgoing TxID, network, amount, and destination address in the relevant explorer.
  4. Change passwords for your email and genuine exchange accounts if you shared codes or signed in through third-party links.
  5. Do not install an APK or "trading bot" from a chat, and never enter a seed phrase for an "audit."
  6. Build a timeline: first contact, deposits, fee demand, and support responses.

At the same time, submit the TxID package for an initial tracing assessment. If the assets are still moving toward a deposit address at a real exchange, the window for a freeze request may be shorter than it appears. This falls under blockchain analytics and, when assets reach an exchange, platform engagement. Stop further losses first; trace second.

What not to do and what to expect

  • Do not pay a larger "withdrawal fee" after the first payment fails; IC3 and law-enforcement guidance treat this as a continuation of the theft.
  • Never provide a seed phrase, remote access, or 2FA codes.
  • Do not open another account through a new link from the same support team.
  • Avoid recovery scams: a promise to recover 100% for an up-front payment after a fake-exchange loss is a separate scheme.

A realistic objective is to stop further payments, preserve a complete evidence package, and assess whether the blockchain trail reaches a custodian. Recovery is not guaranteed and depends on timing, the transaction route, and whether platforms respond. If you are considering a contract where payment depends on a defined result rather than an up-front payment for a miracle, see the success-fee model. For an urgent review of the facts, use emergency response.

Limitations

Risks and limitations

  • Assets already sent to a fake platform may be moved by its operators; recovery is not guaranteed.
  • Sending another "fee," "tax," or "withdrawal deposit" almost always increases the loss without unlocking anything.
  • The account interface and website may disappear along with accessible evidence, so preserve it immediately.
  • A secondary recovery scam often targets victims soon after the fake platform disappears.
  • Confusing the scheme with a real exchange's AML hold wastes time: a fake platform calls for stopping payments and tracing, not sending SoF documents into a sham process.
Sources

Sources used

Next

Related resources

ServiceEmergency responseBack to the blog
Next step

Need an assessment of your situation?

Briefly describe what happened — without seed phrases or private keys. We will outline possible routes and assess their feasibility.

Request a free assessment
Free initial assessment

Describe what happened

Answer a few questions so we can assess the situation and suggest the next steps.

Do not send seed phrases, private keys, passwords, or 2FA codes. They are not needed for an initial assessment.

Do not send seed phrases, private keys, passwords, or 2FA codes.