Crypto Exchange Froze Your Funds: AML Review, Source of Funds, Documents, and Recovery Steps

“My crypto exchange froze my funds” is one of the most stressful messages a user can see. The balance may still appear in the account, but the withdrawal button is disabled. A deposit may be confirmed on-chain but not credited. A trading account may be under review. A P2P order may be locked. A withdrawal may be marked as pending, suspended, under compliance review, rejected, or restricted. The user sees money, but cannot use it.

The key point: a frozen crypto balance is not one single problem

The first mistake is to treat every freeze as the same situation. It is not.

There are at least three different scenarios:

A real exchange or custodial platform is running an AML, KYC, sanctions, source-of-funds, Travel Rule, security, or risk-control review.
A legitimate platform has temporarily restricted activity because of incomplete verification, a technical issue, a new device, a changed password, a suspicious login, a risky withdrawal address, or a P2P dispute.
A fake exchange is using compliance language as a script to steal more money through “tax,” “unlock fee,” “insurance deposit,” “AML certificate,” “withdrawal activation,” or “regulator commission” demands.

These scenarios require different actions. A legitimate review calls for clear documents and patient communication. A technical or security hold calls for account protection and support verification. A fake exchange scam calls for immediate evidence collection, no further payments, and reporting.

Before doing anything, define what is actually frozen:

the whole account;
only withdrawals;
only fiat withdrawals;
only a specific crypto asset;
a specific deposit;
a specific withdrawal address;
P2P trading;
margin or derivatives;
an API key;
a newly added wallet address;
a transaction linked to another platform.

Then identify what the exchange is asking for. Is it asking for documents, or is it asking for a new payment? Is the request inside the official account, or in a messenger chat? Is there a ticket ID? Is the email domain correct? Is the support channel listed on the official website? Are you being asked for a seed phrase or remote access software? These details matter more than emotions.

If the issue is connected to crypto address history, it is useful to understand how wallet risk is assessed. InvestLB has separate guides on checking cryptocurrency before exchange and risk indicators of crypto addresses. This article focuses on the next stage: what to do when a platform has already stopped the funds and is asking questions.

Why crypto exchanges freeze funds

Crypto exchanges do not operate in a vacuum. They sit between retail users, institutional traders, banks, payment processors, blockchain networks, regulators, law enforcement requests, sanctions lists, cybersecurity risks, and fraud complaints. A platform that ignores suspicious activity can become a channel for stolen funds, ransomware proceeds, darknet payments, sanctions evasion, phishing, money laundering, account takeover, or P2P fraud.

That is why exchanges use risk controls. They may review customers, wallets, deposits, withdrawals, counterparties, jurisdictions, IP addresses, device patterns, trade behavior, P2P orders, fiat payment rails, and blockchain histories.

Common reasons for a freeze include:

incomplete or outdated KYC;
mismatched identity data;
unclear source of funds;
unusually large or unusual transaction volume;
use of new devices, locations, VPNs, or IP addresses;
deposit from a high-risk address;
withdrawal to a high-risk address;
exposure to scams, hacks, mixers, darknet markets, ransomware, or sanctioned wallets;
P2P payment from a third party;
a dispute with a P2P counterparty;
a chargeback, bank complaint, or fraud report;
activity that does not match the account profile;
suspected account takeover;
violation of the exchange terms of service;
a request from another platform, bank, payment partner, or authority.

The Financial Action Task Force treats virtual asset service providers as part of the global anti-money-laundering framework. FATF’s virtual asset guidance discusses customer due diligence, recordkeeping, suspicious transaction reporting, and information about originators and beneficiaries in transfers. FinCEN guidance in the United States explains that certain business models involving convertible virtual currencies may fall under money services business rules. OFAC guidance explains that sanctions compliance obligations apply to virtual currency transactions as well as traditional fiat transactions.

For the user, the practical conclusion is simple: a real exchange may ask questions, and the questions may be legitimate. The goal is not to “bypass AML.” The goal is to provide a coherent, documented explanation that proves the transaction has a lawful source and a clear economic purpose.

AML, KYC, CDD, Travel Rule, and sanctions screening in plain language

AML means anti-money laundering. In crypto, AML is not one single form. It is a framework of checks used to reduce the risk that funds come from crime, sanctions evasion, fraud, terrorism financing, ransomware, corruption, stolen assets, or other prohibited activity.

KYC means know your customer. This is the identity layer: passport, ID card, selfie, proof of address, phone, email, sometimes tax residency, and sometimes beneficial ownership if the user is a company.

CDD means customer due diligence. This goes beyond collecting an ID. The platform tries to understand the customer profile. A user who buys a small amount of BTC once a month and withdraws to the same personal cold wallet has a different profile from a user who receives USDT from dozens of unknown people, swaps assets repeatedly, and sends funds to multiple external wallets.

Source of funds is the origin of the specific money or crypto used in a transaction. Source of wealth is the broader explanation of how the user’s total capital was built.

Travel Rule is a requirement in many jurisdictions for virtual asset service providers to collect and transmit certain information about the originator and beneficiary of a transfer. In a user interface, this may appear as questions like: is this your wallet, who is the recipient, what is the purpose of the transfer, what platform is on the other side?

Sanctions screening means checking whether a person, entity, wallet, jurisdiction, service, or transaction may be connected to sanctions restrictions. OFAC’s virtual currency guidance explains that sanctions compliance obligations apply to virtual currency transactions and that industry participants should use risk-based controls. This is why a crypto platform may care about wallet addresses, IP geolocation, counterparties, blocked persons, and prohibited regions.

Suspicious activity reporting is another layer. A platform may be required to file reports or keep records without giving the customer a full explanation. In many AML regimes, tipping off a customer about the exact nature of a suspicious report can be restricted. This is why support may say “your account is under review” without disclosing every detail.

That silence is frustrating, but it does not automatically prove fraud. The question is whether the platform is asking for reasonable documents through official channels or whether it is demanding more money through unofficial channels.

Types of freezes and what they usually mean

Withdrawal freeze

This is the most common case. The balance is visible, but withdrawals are disabled. Trading may or may not remain available.

Possible reasons:

new account or insufficient KYC;
recent password reset or 2FA reset;
login from a new device or country;
a newly added withdrawal address;
large withdrawal after a period of inactivity;
risky destination address;
Travel Rule information missing;
sanctions or AML review;
suspected account compromise.

Do not immediately start swapping assets, splitting funds, or creating multiple withdrawal attempts. That can make the case look worse. Capture the status, read the exact message, and contact support once with a clear, documented request.

Deposit freeze

In this case, the blockchain transaction is confirmed, but the exchange has not credited the balance or has credited it in a pending state.

Possible reasons:

wrong network;
missing memo, tag, or destination ID;
deposit below minimum amount;
wallet maintenance;
internal delay;
risk flag on the sending address;
sanctions exposure;
manual compliance review.

Prepare the transaction hash, network, asset, amount, sending address, receiving address, time, and a screenshot from a block explorer. If the deposit came from another exchange, add a screenshot of the withdrawal from that source exchange.

Account freeze

The user cannot trade, withdraw, use P2P, or sometimes even access history. This is more serious.

Possible reasons:

identity mismatch;
suspected account takeover;
document fraud suspicion;
sanctions issue;
law enforcement request;
violation of terms;
multiple related accounts;
use of the account for third-party funds.

Do not open new accounts to get around the restriction. Do not ask friends or relatives to receive funds on your behalf. Use the official support channel and keep one consistent explanation.

P2P freeze

P2P freezes can be triggered by a dispute, a third-party payer, a payment reversal, a bank complaint, a mismatch between the buyer’s name and the payer’s name, or a fraud report.

InvestLB has a separate guide on P2P deals and direct crypto trading risks. The key point is that P2P is not just a crypto transaction. It also creates a banking and counterparty trail. If you receive bank transfers from unknown people and release crypto, both the exchange and the bank may later ask why those payments arrived and who sent them.

Product or jurisdiction restriction

Sometimes the freeze is not about money laundering. The platform may restrict margin trading, derivatives, staking, fiat channels, specific assets, or regional services because of local rules. In that case, the question is not “prove the source of funds” but “are you eligible for this product in this jurisdiction?”

What to do in the first hours

The first hours matter because users often damage their own case by acting emotionally. They write contradictory messages, delete evidence, pay fake unlock fees, move related funds, create new accounts, or follow unofficial support chats.

Do this instead:

Take screenshots of the freeze notice, including date, account, asset, and wording.
Save the ticket ID or case number.
Download account history if available.
Copy all transaction hashes.
Save sending and receiving addresses.
Record the network used: Bitcoin, Ethereum, Tron, BNB Chain, Solana, Polygon, Arbitrum, or another network.
Save P2P order details and chat history if relevant.
Save bank statements, payment receipts, invoices, contracts, and emails.
Check the official domain of the exchange.
Do not pay any “unlock fee.”
Do not share seed phrases, private keys, passwords, SMS codes, or 2FA codes.
Do not install remote access software at the request of a “support agent.”

Your first support message should be calm and factual. The goal is not to win an argument. The goal is to give the compliance team enough context to tell you what is missing.

A good first message includes:

account email or user ID;
what exactly is restricted;
asset, amount, network, transaction hash, and date;
whether the funds came from another exchange, a wallet, P2P, salary, business income, sale of property, trading profit, or another source;
what documents you can provide;
a request for the exact list of required documents.

Avoid changing your story. If the funds came from several sources, say that. If a third party was involved, explain it with documents. If you do not know something, do not invent it. A clean timeline is better than a confident but false answer.

Which documents a crypto exchange may request

A platform may request different documents depending on the reason for the review. A simple KYC issue may require identity documents. A source-of-funds case may require financial evidence. A wallet risk case may require transaction history. A P2P dispute may require payment records.

Commonly requested documents include:

passport, ID card, or driver’s license;
selfie or video verification;
proof of address;
bank statement;
salary slip or employment letter;
tax return;
business invoice;
freelance contract;
company documents;
sale agreement for property or assets;
inheritance or gift documentation;
proof of crypto purchase;
withdrawal history from another exchange;
screenshots of relevant orders;
blockchain transaction hashes;
proof of ownership of an external wallet;
P2P order screenshots;
payment receipts;
correspondence with a counterparty;
explanation of the purpose of the transaction.

The best way to prepare documents is to organize them by question:

identity;
address;
fiat source;
crypto purchase;
crypto movement;
P2P evidence;
purpose of transaction;
wallet ownership.

Do not send a random folder of screenshots without context. Name the files clearly. If the exchange is English-speaking and the documents are in another language, add a short explanation or translation where needed. A formal notarized translation is not always required, but the platform must be able to understand what the document proves.

Source of funds vs source of wealth

These two phrases are often confused.

Source of funds means the origin of the specific funds involved in the transaction. For example:

salary paid into a bank account;
proceeds from selling a car;
business income;
freelance payment;
previous crypto purchase on another exchange;
sale of investments;
loan repayment;
P2P trade proceeds.

Source of wealth means the broader origin of the user’s overall wealth. For example:

years of employment income;
ownership of a business;
investment portfolio growth;
sale of real estate;
inheritance;
long-term savings;
professional trading activity.

If an exchange asks for source of funds for a 20,000 USDT deposit, it usually wants the origin of that exact 20,000 USDT. If it asks for source of wealth, it may want to understand whether your overall transaction volume is consistent with your profile.

Weak answer:

“It is my money. I do not have to explain anything.”

Better answer:

“The funds came from salary savings and a prior crypto purchase. I attach a bank statement, employment income document, the exchange order used to buy USDT, the withdrawal screenshot from the source platform, and the transaction hash showing transfer to this account.”

Weak answer:

“It is my friend’s money, but I used my account.”

Better answer, if third-party involvement is real:

“The transaction relates to a documented agreement with this counterparty. I attach the agreement, payment record, and correspondence.” However, understand that using an exchange account for someone else’s funds is often a major risk and may violate platform terms.

Why P2P creates so many freeze cases

P2P looks simple: one person sends fiat, the other releases crypto. But from a compliance perspective, the situation is messy.

The exchange sees a crypto order. The bank sees a fiat transfer. The user sees a completed deal. The counterparty may be honest, or may be part of a fraud chain. The name on the bank transfer may match the buyer, or may belong to a third party. The payment may be later disputed. The buyer may claim they were scammed. The account sending money may be a mule account. The seller may have released crypto correctly but still receive a banking or exchange review later.

P2P red flags include:

payment from a name different from the buyer’s exchange profile;
repeated incoming payments from many unrelated individuals;
commercial-looking turnover on a personal bank account;
payment references that do not match the transaction;
requests to communicate outside the platform;
pressure to release crypto before funds settle;
edited or fake bank receipts;
split payments from several accounts;
chargebacks or fraud complaints after the trade;
high-volume P2P trading without business documentation.

If your freeze is P2P-related, prepare both crypto and fiat evidence:

P2P order number;
counterparty profile;
chat history;
payment receipt;
bank statement showing receipt;
time of payment;
time of crypto release;
transaction hash if applicable;
proof that the payer name matched the platform counterparty;
explanation of why the trade was legitimate.

Do not edit screenshots. Do not crop away relevant details. Do not create fake receipts. A forged document can turn a solvable review into a severe compliance problem.

“Dirty” crypto and wallet risk indicators

Crypto has transaction history. A coin or token does not carry a physical label, but blockchain analytics can trace flows between addresses, services, wallets, bridges, mixers, exchanges, scam clusters, darknet markets, ransomware wallets, phishing addresses, and sanctioned entities.

An exchange may flag a deposit if it has exposure to:

stolen funds;
phishing proceeds;
hacked exchange wallets;
ransomware payments;
darknet services;
sanctioned addresses;
mixers or obfuscation tools;
high-risk P2P services;
unlicensed exchangers;
scam project wallets;
rapid layering across many addresses.

This does not always mean the user is guilty. Blockchain risk scoring is context-based and can involve probabilities. But if the risk is high, the exchange will want an explanation.

The problem is that a user may receive risky funds without knowing it. For example, a P2P buyer sends USDT that previously passed through a high-risk address. The seller receives the USDT and later deposits it to a major exchange. The exchange sees the history and asks questions. The seller says, “I did nothing wrong.” That may be true, but the platform still needs documents.

Before receiving large amounts from a new counterparty, read InvestLB’s guide on crypto address risk indicators. It explains why a wallet’s past can affect a user’s future ability to use legal platforms.

Sanctions, geography, VPNs, and IP address inconsistencies

Sanctions screening is one of the strongest reasons for a platform to stop a transaction. OFAC guidance for the virtual currency industry states that sanctions compliance obligations apply to virtual currency transactions as well as traditional fiat transactions. The guidance also discusses risk-based sanctions compliance programs, screening, blocked property, reporting, and recordkeeping.

A user may think, “I only used a VPN.” The exchange may see something more complex: KYC document from one country, phone number from another, IP address from a third, bank card from a fourth, withdrawal to a wallet linked with a restricted region, and login behavior inconsistent with the account history.

VPN use is not always suspicious by itself. Many users use VPNs for privacy or security. But if the rest of the account data is inconsistent, VPN patterns can raise risk.

Sanctions and geography issues may arise when:

the user lives in a restricted jurisdiction;
the platform does not serve the user’s country;
the user uses IP addresses from prohibited regions;
funds come from a counterparty in a sanctioned area;
a wallet has exposure to a sanctioned address;
the user tries to bypass regional restrictions through another person’s account;
the account information conflicts with documents and behavior.

The best approach is not concealment. It is clarity. If you travel, work internationally, live abroad, or use VPNs for security, explain the context if asked and provide documents. If your story changes, risk increases.

Real compliance review or fake exchange scam?

This is the most important distinction.

A real exchange may request documents. It may restrict withdrawals. It may take time. It may refuse to disclose every internal reason. It may close an account and allow a final withdrawal. It may reject a transaction. Those outcomes can be frustrating but still legitimate.

A fake exchange usually asks for more money.

Red flags of a fake exchange include:

“pay tax before withdrawal”;
“deposit 10% to verify your wallet”;
“buy an AML certificate”;
“pay insurance to unlock balance”;
“send a regulator commission”;
“activate withdrawal with a security payment”;
“pay a fine to avoid account deletion”;
“send crypto to this address and we will release your funds”;
support only communicates in Telegram, WhatsApp, or a private chat;
a “manager” gives a personal wallet address;
the platform asks for your seed phrase or private key;
the balance grows unrealistically without real market trades;
every payment creates another payment demand.

The FTC warns that crypto payments are typically not reversible and usually cannot be recovered unless the recipient sends the funds back. This is why fake exchange “unlock” demands are so dangerous. Each new payment may be another loss.

If the case looks like a scam, stop sending money. Save the website, domain, screenshots, wallet addresses, transaction hashes, emails, phone numbers, usernames, and payment receipts. Contact your bank if fiat payments were involved. Report the wallet address to the exchange or wallet provider used to send funds. Consider filing a report with the relevant law enforcement or consumer protection authority.

If the scam was presented as an investment platform, analyst, Telegram signal group, managed trading scheme, or crypto swap service, also read InvestLB’s guide on checking cryptocurrency before exchange. Many fake exchanges are not exchanges at all. They are investment scams with a trading dashboard.

How to write to exchange support

A good support message is factual, concise, and complete. It does not insult the exchange, threaten the first-line agent, or flood the ticket with repeated messages. It gives the compliance team what they need.

A useful structure:

Identify the account.
State the restriction.
Identify the transaction.
Explain the source of funds.
List attached documents.
Ask what else is required.
Ask whether the case has a ticket ID.

Example:

“Hello. My account withdrawal is currently restricted. The relevant transaction is a deposit of 12,000 USDT on the Tron network, TXID …, received on …. The funds came from a previous purchase on another exchange and personal savings. I can provide the source exchange withdrawal record, bank statement, purchase order, transaction hash, and proof of wallet ownership. Please let me know which documents are required for the review and attach this message to my ticket.”

This message does not guarantee a quick result. But it is much better than:

“You stole my money. Unlock it now.”

Compliance teams work with evidence. They need a timeline, documents, addresses, transaction hashes, names, and explanations. If you provide those in a structured way, you reduce friction.

What not to do

Do not:

pay an “unlock fee”;
pay “tax” to the exchange before withdrawal;
pay a “regulator” through a wallet address;
share your seed phrase;
share private keys;
share 2FA codes;
install remote access software for support;
use a friend’s account to bypass the freeze;
create a second account to move funds;
forge bank statements or receipts;
edit screenshots;
delete P2P chat history;
change your explanation repeatedly;
threaten support in the first message;
hire anonymous “recovery agents” who require upfront payment;
continue high-risk P2P trading while under review.

FCA warns that crypto investment scams may be followed by additional fraud attempts, including people claiming they can recover your money for a fee. This is a common second-stage scam. Victims are targeted because they are already stressed and searching for a solution.

If someone says they have a “contact inside the exchange,” “compliance bypass,” “AML flag removal,” or “secret regulator certificate,” treat it as a red flag.

When documents help most

Documents help when they answer the exact compliance question.

If the question is identity, send identity documents. If the question is source of fiat funds, send bank and income evidence. If the question is crypto origin, send transaction history. If the question is P2P, send the order and payment trail. If the question is wallet ownership, prove wallet control in the method requested by the platform.

A strong evidence package answers four questions:

Who owned the funds?
Where did the funds come from?
Why did the transaction happen?
Why does the user have the right to control the asset?

Examples:

Salary to USDT purchase

Useful documents:

salary statement;
bank statement showing salary deposits;
exchange order showing USDT purchase;
transaction hash of withdrawal;
address used for deposit.

Crypto moved from another exchange

Useful documents:

screenshot of the source exchange account;
withdrawal history;
transaction hash;
proof both exchange accounts belong to the same user;
explanation of why funds were moved.

Freelance payment in crypto

Useful documents:

contract or invoice;
client correspondence;
proof of completed work;
payment transaction hash;
tax record if available;
wallet ownership evidence.

P2P sale

Useful documents:

P2P order number;
buyer profile;
platform chat;
bank receipt;
bank statement;
crypto release timestamp;
transaction hash where relevant;
explanation of why payment came from the account shown.

Sale of property or investment assets

Useful documents:

sale agreement;
bank receipt;
broker statement if relevant;
bank transfer into user’s account;
crypto purchase record.

The goal is to close gaps in the chain. If there is a gap, explain it. Do not hide it.

When the chance of fast release is lower

Some freezes are more difficult. A user may still be honest, but the platform’s risk is higher.

Risk increases when:

documents contradict each other;
the user cannot explain the source of funds;
funds came from a third party without a contract;
wallet history includes high-risk exposure;
the transaction touched a sanctioned address;
a mixer or obfuscation tool was used;
the account was used for someone else’s funds;
P2P payments came from unrelated names;
forged documents were submitted;
the user tried to bypass the freeze with another account;
there is an official request from authorities;
the platform itself is fraudulent.

In a real exchange, a difficult case can take time. In a fake exchange, time is often used to pressure the user into paying. Watch the pattern. A real review asks for evidence. A fake review asks for money.

What if the exchange stays silent?

If the exchange is real but support is slow, do not create chaos.

First:

check spam and all email folders;
check the in-app support center;
check whether a reply is waiting in the ticket;
confirm that you used the official domain;
avoid opening multiple duplicate tickets unless instructed.

Then:

send one follow-up with the ticket ID;
summarize what you already provided;
ask whether any specific document is missing;
request escalation to the compliance or risk team if appropriate;
keep a copy of all messages.

If the amount is significant and the platform is regulated or registered in a specific jurisdiction, review its complaint process and the relevant regulator. For the United Kingdom, FCA advises consumers to check the Financial Services Register and warns that crypto-related activity often may not be covered by the Financial Ombudsman Service or the Financial Services Compensation Scheme. In the United States, the relevant authority depends on the product and facts: SEC, CFTC, FinCEN, state regulators, law enforcement, or consumer protection bodies may be relevant in different cases.

Do not assume that a regulator will automatically recover funds. Regulators can warn, investigate, enforce rules, and publish lists, but recovery depends on the facts, jurisdiction, platform, payment method, and whether funds can be traced or restrained.

If the platform is a scam

When the platform is fake, the plan changes. You are no longer trying to “pass AML.” You are documenting fraud.

Do this:

Stop sending money.
Save the website URL and domain.
Screenshot the account balance, withdrawal refusal, and payment demands.
Save all wallet addresses.
Save all transaction hashes.
Save emails, phone numbers, Telegram usernames, and chat logs.
Save bank receipts or card payment details.
Contact your bank if fiat payments were involved.
Notify the sending exchange or wallet provider if crypto was sent from a custodial platform.
Report to the relevant authority in your jurisdiction.

Do not trust “recovery specialists” who ask for upfront payment. Recovery scams often use the same emotional pressure as the original scam. They claim to work with regulators, blockchain investigators, or exchange insiders, then demand a fee.

The more specific your evidence, the better:

exact dates;
amounts;
assets;
networks;
wallet addresses;
transaction hashes;
names and usernames;
payment methods;
screenshots;
documents;
sequence of events.

If the fraud involved crypto transfers, remember the FTC’s practical warning: crypto payments are typically not reversible. That does not mean reporting is useless. It means there is no simple “cancel transaction” button. The realistic path is tracing, notifying platforms, preserving evidence, and using legal channels.

Account security: sometimes a freeze protects you

Not every freeze is bad. Sometimes the exchange freezes withdrawals because it suspects account compromise.

Triggers may include:

login from a new device;
login from a new country;
password change;
2FA reset;
withdrawal address change;
API key creation;
unusual trading behavior;
phishing link session;
compromised email;
suspicious browser fingerprint.

In this case:

change your exchange password;
change your email password;
review active sessions;
remove unknown devices;
disable unknown API keys;
review withdrawal address whitelist;
enable or restore 2FA;
scan your device for malware;
stop using links from emails unless verified;
access the exchange only through the official domain or app.

InvestLB has a separate guide on 2FA authentication. For crypto accounts, two-factor authentication is not decoration. It is a basic defense layer. If an attacker controls your email and exchange account, they may try to change security settings, add withdrawal addresses, or impersonate you to support.

Proof of reserves does not solve an account freeze

Some users think that if an exchange publishes proof of reserves, it must release every user withdrawal immediately. That is not correct.

Proof of reserves may show that a platform holds certain assets at a certain point in time. It does not automatically prove:

full liabilities;
future liquidity;
absence of legal restrictions;
quality of governance;
clean user funds;
that your specific account passed AML;
that a specific withdrawal destination is acceptable;
that no sanctions or law enforcement issue applies.

SEC Investor.gov has warned that proof-of-reserves style information may only be a snapshot and is not the same as a full financial statement audit. For a user, the lesson is practical: platform solvency and account-level compliance are different questions.

A real exchange may have reserves and still freeze one account for review. A fake exchange may show impressive “reserve” claims and still be a scam. Do not rely on one signal.

How to reduce freeze risk before sending crypto

The best way to pass a review is to avoid creating unnecessary ambiguity before the transaction.

Before a large deposit:

complete KYC in advance;
use a reputable platform;
avoid receiving funds from unknown wallets;
avoid unnecessary mixers or obfuscation;
keep records of purchases and transfers;
check the source of crypto;
avoid using an account for other people’s funds;
keep bank statements and invoices;
avoid sudden volume that does not match your profile;
do not split transactions without a real reason;
do not move funds through many platforms without purpose.

Before P2P:

check the counterparty rating;
reject third-party payments;
keep all communication on the platform;
do not release crypto before fiat payment is actually received;
save the order, chat, and receipt;
avoid suspicious payment references;
do not run commercial volume through a personal bank account without proper structure;
stop if the counterparty pressures you to break platform rules.

Before a withdrawal:

verify the network and address;
confirm the recipient;
avoid sending to an address from a random chat;
consider a small test transfer when appropriate;
do not change password or 2FA immediately before a large withdrawal unless necessary;
avoid suspicious VPN or device patterns;
keep proof that the destination wallet belongs to you.

For users who work with stablecoins frequently, InvestLB’s article on why the world pays in USDT gives useful context on why USDT is so common in global crypto payments. But popularity does not remove compliance risk. USDT transactions can still be screened, frozen, or questioned depending on wallet history and platform policy.

AML review checklist

If your exchange has already requested information, use this checklist.

Identity

ID document;
selfie or video verification;
proof of address;
explanation if citizenship, residence, phone number, and IP location differ.

Fiat source

bank statement;
salary document;
tax return;
business invoice;
freelance contract;
sale agreement;
investment or brokerage statement;
loan agreement where relevant.

Crypto origin

source exchange order;
withdrawal screenshot;
transaction hash;
sending address;
receiving address;
wallet ownership proof;
history between personal wallets.

P2P evidence

order number;
counterparty profile;
chat history;
payment receipt;
bank statement;
name of payer;
timing of fiat receipt;
timing of crypto release.

Explanation

timeline;
source of funds;
source of wealth if requested;
purpose of transaction;
reason for using this platform;
relationship with any third party;
reason for using a specific wallet.

Keep the explanation short but complete. A compliance analyst should be able to understand the transaction without guessing.

FAQ

How long does a crypto AML review take?

There is no universal timeline. A simple identity or security review may take hours or days. A complex source-of-funds, P2P, sanctions, law enforcement, or high-risk wallet case may take weeks. If the platform is real, answer requests clearly and keep one ticket. If the platform keeps asking for new payments, treat that as a scam warning.

Can an exchange permanently freeze funds?

Possible outcomes include release, partial release, account closure with final withdrawal, rejection of a transaction, continued hold pending investigation, or reporting to authorities. The result depends on the platform, law, documents, risk level, and facts. No honest guide can promise a guaranteed release.

Should I pay a tax or fee to unlock crypto?

Normal trading fees and network fees exist. A separate payment demanded before withdrawal, especially to a wallet address or private manager, is a serious red flag. Real AML reviews usually require documents, not a new crypto transfer.

What if I received risky crypto without knowing?

Collect the full transaction context: who sent it, why, when, under what agreement, through which wallet, and with which transaction hash. If the counterparty is unknown and there are no documents, the case is harder. For future transactions, avoid large inflows from unknown sources.

Can I use another account to withdraw?

Do not try to bypass a freeze through another account. It may violate exchange rules and worsen the case. Resolve the restriction through the official support channel.

Can support ask for my seed phrase?

No legitimate exchange needs your seed phrase or private key to verify a wallet. Wallet ownership can be proven through safer methods such as a signed message, screenshot, microtransaction, or another procedure defined by the platform.

Is a withdrawal freeze proof that the exchange is insolvent?

Not necessarily. An account-level freeze can happen even on a solvent platform. Insolvency risk and account compliance risk are different issues. Look at the broader evidence, not one signal.

Is crypto recovery guaranteed if I report quickly?

No. Crypto transactions are typically irreversible. Fast reporting may help preserve evidence, alert platforms, or flag addresses, but it does not guarantee recovery.

Bottom line

A frozen crypto exchange account is not automatically a loss, and it is not automatically proof of wrongdoing. It is a risk event that needs to be handled with documents, patience, and precision.

First, identify the type of freeze. Second, verify that the platform is real. Third, collect the transaction evidence. Fourth, prepare source-of-funds documents. Fifth, communicate through official support. Sixth, refuse any demand for “unlock payments,” seed phrases, private keys, or remote access.

If the exchange is legitimate, a clear timeline and strong documentation can materially improve the chance of release. If the exchange is fake, further payments usually increase the loss. In both cases, the strongest user position is the same: facts, records, verified channels, and no myths.

Crypto gives users speed and control, but legal platforms increasingly require explainable funds. The more you can show where assets came from, why they moved, and why you control them, the lower the chance that a normal transaction turns into a long freeze.

Sources and further reading

Publication author

offline 4 months

Мax Kuznetsov

Comments: 0Publics: 175Registration: 10-12-2019