Why Did My Crypto Exchange Freeze My Account? A Plain-English Guide

You open your crypto app to move some money, and instead of the usual screen you see a banner: account restricted, withdrawals on hold, verification required. Your stomach drops. The coins are right there on the screen, but you cannot touch them. Is the money gone? Did you get hacked? Did the company just take it?

Take a breath, then take stock. A frozen account can mean very different things. Sometimes it is a short, routine pause while the exchange checks something, and the coins are still sitting where they were. Other times it is more serious. In its November 2022 review of consumer complaints, the Consumer Financial Protection Bureau described people who were locked out of funds for weeks, and situations in platform bankruptcies where assets were frozen with no clear end in sight. The first job is to figure out which situation you are actually in. This guide walks through what a freeze really means, the ordinary reasons it happens, why the law pushes U.S. exchanges to do it, the calm steps to take, and the signs that tell you to move faster.

First, what "frozen" actually means

There is a big difference between two situations that both feel identical from the outside.

The first is an account-level hold. This is aimed only at you. The exchange's automated risk system or its compliance team flagged your specific account, paused some or all activity, and usually wants you to do something, confirm your identity, answer a question, finish a document upload, before it lifts the restriction. Many of these clear once you complete what is asked. But the time it takes varies a lot, and the app rarely tells you plainly which something it is checking.

The second is a platform-wide freeze. This is when an exchange stops withdrawals for many or all customers at once. That is a different animal. It can point to a technical outage, a security incident, a regulator stepping in, or in the worst cases a company running short on cash or heading toward bankruptcy. If everyone is locked out, not just you, that is the scenario to take seriously and act on quickly.

Telling these two apart is the single most useful thing you can do in the first ten minutes. A quick check of the exchange's status page, its official social media account, or a reputable news search will usually tell you whether the whole platform is down or whether it is just your login. The rest of this guide focuses mostly on the personal hold, because that is what most readers are facing, while flagging clearly when a situation crosses into the second.

The everyday reasons a personal account gets held

When a single account gets restricted, it usually traces back to one of a few buckets. None of them automatically means you did anything wrong, but a couple of them do deserve a faster reaction than the rest.

1. Routine security holds

These are the mildest and most common. You changed your password, logged in from a new phone or a new country, tried to withdraw to an address you have never used, or moved an unusually large amount for your history. The system puts a short timer on withdrawals as a cooling-off period, so that if a thief is the one doing this, you have time to notice and stop it. Annoying when it is really you, but it exists to protect you. The CFPB has warned for years that if a criminal gets your keys or your login, your funds can vanish with no way to claw them back, so these speed bumps are the industry's attempt to add a little friction.

Here is the important caveat. A security hold is only reassuring if you know you caused it. If you just reset your password or added a new withdrawal address and the app tells you a specific timer now applies, that is expected behavior. But if you see a restriction you cannot explain, or you notice a password change, a new device, or a two-factor setting that you did not touch, do not treat that as a routine timer to wait out. That pattern can be the first sign of an account takeover, and it calls for immediate security action, which we cover below.

2. Identity verification and KYC catch-ups

KYC stands for "know your customer." U.S. exchanges run a customer identification program as part of their anti-money-laundering obligations, and they sometimes re-check the information they hold. Maybe the ID you uploaded when you signed up has since expired, maybe your address changed, maybe a photo was blurry, or maybe you crossed an account tier that triggers a higher level of verification. Until you complete the fresh request, the account can sit restricted. The CFPB's review of crypto complaints found that transaction problems and the inability to access funds when promised ranked among the most common issues people reported, and identity-verification snags were part of that picture.

3. Compliance and source-of-funds reviews

If a deposit or a trading pattern looks unusual to the exchange's monitoring system, it may open a review. A classic trigger is a large amount of crypto landing in your account that the exchange cannot connect to your known history. The exchange may ask where the money came from, sometimes called a source-of-funds or source-of-wealth check. This is not an accusation. It is a box the exchange has to tick under anti-money-laundering rules, and there is no fixed clock on how long such a review runs.

4. Payment and funding disputes

If you bought crypto with a card or a bank transfer and that payment is later disputed, reversed, or bounces, the exchange will often freeze the account or the related funds until it is sorted out. Chargebacks on crypto purchases are a frequent cause, because once the coins have been sent, the exchange is exposed if the payment then gets pulled back.

5. A legal order or sanctions match

Least common for ordinary users, but worth knowing: an exchange can be compelled to freeze funds by a court order or a request from an authority, and it is legally required to block assets tied to U.S. government sanctions programs, such as those run by the Treasury's Office of Foreign Assets Control. Coinbase, for example, states in its help materials that it freezes funds when a court or other authority with jurisdiction compels it, or when sanctions law requires it. In these cases the exchange often cannot explain much, because it is following an outside instruction.

Why exchanges are allowed to do this at all

It feels wrong that a company can lock up money you consider yours. Here is the honest answer about where the power comes from, and it is worth being precise, because the usual shorthand overstates things.

Back in 2013, the Financial Crimes Enforcement Network, FinCEN, issued interpretive guidance clarifying how the Bank Secrecy Act applies to virtual currency. It said that businesses which act as administrators or exchangers of convertible virtual currency are "money transmitters" under those U.S. regulations, unless a specific limitation or exemption applies. Ordinary users who simply buy and hold are not covered. That classification put many crypto exchanges in the same regulatory family as money-transfer services and banks, which is why they ask for your ID and monitor transactions.

But it helps to separate three different things that often get blurred together. The first is the anti-money-laundering obligations that flow from being a money transmitter: running an AML program, verifying customer identity, monitoring activity, and reporting certain transactions. The 2013 guidance is the root of why exchanges do these checks. It does not, by itself, hand an exchange a blanket power to freeze your money, and it does not set a universal checklist of exactly which identity fields every exchange must collect or how often it must re-verify you. The second is sanctions and court orders, which are what actually compel an exchange to block specific assets in the cases described above. The third is the exchange's own security policies and user agreement, the contract you accepted when you signed up, which is where most routine holds and cooling-off timers actually live. Knowing which of these three is in play changes what you can do about a hold.

So when your account gets held for a verification or compliance reason, the exchange is usually not being difficult for sport. It is answering to obligations it took on, or to terms you agreed to. That does not make a wrongful freeze acceptable, and it does not mean every exchange handles it fairly. But it explains why "just give me my money, it is mine" does not always work the way it would with cash in your wallet.

This is also a good moment to remember what these accounts are and are not. The CFPB has repeatedly pointed out that crypto held on an exchange does not come with government deposit insurance the way a bank account does. If you want the full picture of what protection you do and do not have when an exchange runs into trouble, our guide on whether your crypto is insured lays it out.

How long does a hold last?

This depends entirely on which bucket you are in, and that is exactly why figuring out the trigger matters so much. Some exchanges publish their own timers, which is the closest thing to a reliable number you will find. Kraken, for example, says in its help materials that if you change your password without certain protections enabled, withdrawals to any new address are held for up to 24 hours. It says that card and other instant purchases may be held for 72 hours. And it says cash deposits made through its ACH option can be held from withdrawal for seven days. Trading still works during those windows, and Kraken notes that its support cannot override a time-based hold. Those are Kraken's published policies, not an industry standard. Every exchange sets its own rules in its user agreement, so your platform's numbers may be different.

Compliance and identity reviews are harder to pin down, and this is where people get caught out. There is no standard duration for them. A document re-check might clear in a day, or it might take weeks while a person works through a queue, and major exchanges do not publish a fixed figure for how long a review takes. The CFPB's complaint data is the honest counterweight here: it documents people locked out for weeks, and in platform bankruptcies, assets frozen with no clear end date at all. So treat any number you see, including the examples in the chart below, as a rough mental model rather than a countdown you can rely on.

The practical takeaway cuts two ways. If your exchange has told you a specific timer applies, for example a published 24-hour or 72-hour hold after a change you made yourself, that is expected, and support generally cannot speed it up. Waiting it out is the right move. But if the restriction is unexplained, or it followed a password, device, or two-factor change you do not recognize, do not wait. That pattern can signal an account takeover, and it calls for immediate action through the exchange's official security channel. And if a hold tied to a review drags well past anything the exchange described to you, that is the point at which polite, persistent follow-up is worth your time.

What to do when your account is held

Panic leads to two mistakes: doing nothing and hoping it fixes itself, or doing something rash like opening a dozen support tickets that just push you to the back of the line. Here is a calmer order of operations.

A few notes on those steps. Before anything else, scan for signs that someone else got in. If you see a login, a password change, a new linked device, or an altered withdrawal address that you did not create, stop treating this as a routine hold. Lock the account down through official channels, change your password, and revoke unknown devices right away. When you do contact support, use only the links and contact methods inside the official app or on the exchange's real website, because the moment you are locked out is the exact moment scammers try to pounce. When you respond to a verification request, send exactly what is asked for, clearly photographed, with no edits or filters. A re-upload of a blurry ID is one of the most common reasons a review drags on longer than it needs to.

Keep a simple record as you go: the date the hold started, the reason the notice gave, every ticket number, and the name or ID of any agent you dealt with. If the matter ever escalates, that timeline is worth its weight in gold. And resist the urge to argue your way out. Compliance teams respond to completed requirements, not to frustration.

KYC verification without the headache

Since verification is behind so many holds, it helps to get it right the first time. In the U.S., exchanges that run a customer identification program generally collect a fairly standard set of details: your legal name, date of birth, residential address, and an identification number, checked against documents or other data. The exact requirements come from an exchange's own AML program and the rules that apply to it, not from the 2013 FinCEN guidance by itself, so the fine points differ from platform to platform. When they ask you to re-verify, they usually want a current, unexpired government ID and sometimes a selfie or a recent proof of address like a utility bill or bank statement.

The table below shows what is commonly requested and the small things that quietly speed the process up. Think of it as giving the reviewer no reason to bounce your submission back.

One more thing about KYC that trips people up: the name on your exchange account, your ID, and your bank account should all match. If you opened the account under a nickname, or your bank shows a maiden name while your ID shows a married name, that mismatch can stall a withdrawal. Fixing the names so they agree removes a surprising number of snags before they start.

When a freeze is actually a warning sign

Not every hold is boring and temporary. A few situations deserve faster, firmer action.

If the whole platform has halted withdrawals, not just your account, do not wait quietly. Read the exchange's official announcements, check reputable news, and if the explanations are vague or keep changing, take that seriously. The CFPB's bulletin noted that several large crypto platforms froze customer withdrawals, filed for bankruptcy, or both, and that in some of those failures consumers' assets were frozen indefinitely. You cannot force a struggling company to pay, but you can stop sending it more money and you can document everything.

If you believe the freeze is the result of a scam or account takeover, meaning someone else got into your account or tricked you into a transfer, report it through the exchange and to the authorities promptly. The CFPB received more than 8,300 crypto complaints between October 2018 and September 2022, with fraud and loss of access ranking near the top, and it accepts complaints directly from consumers. Reporting will not guarantee you get money back, but it creates a record and occasionally helps.

And if a withdrawal fails because the underlying payment was reversed, understand that you may actually owe the exchange. The CFPB has noted cases where a consumer, after a reversed transaction, was told they had to repay the company. Crypto moves in one direction once it is sent, so a clawed-back deposit can leave a real hole.

The scam that targets frozen accounts

This part is important enough to stand on its own. The hours after you discover a locked account are prime hunting season for a particular con. You post "my account is frozen, help" in a forum or a comment thread, and within minutes a friendly stranger replies claiming to be support, or a "recovery specialist," or a "blockchain analyst" who can unfreeze your funds for a fee, or if you share your login or seed phrase.

It is always a trap. Real exchange support will never ask for your password, your two-factor codes, or your recovery phrase, and no legitimate service can magically unfreeze a compliance hold from the outside for a fee. As one of the Kraken policy pages notes, even the exchange's own support cannot bypass a time-based hold, so an anonymous outsider certainly cannot. Paying a "recovery" fee is how people turn one loss into two. Only ever use the official in-app support and the exchange's verified website, and assume anyone who slides into your messages offering a fast fix is a thief. If strengthening your account against takeover in the first place is on your mind, our walkthrough on securing your crypto exchange account is a good next read.

How to lower your odds of a freeze

You cannot prevent every hold, and you would not want to, since some of them exist to catch thieves. But you can avoid many of the self-inflicted ones.

• - Keep your identity documents current on the exchange, and update your address when you move, so a re-verification does not catch you off guard.
• - Make sure the name on your exchange, your ID, and your linked bank account all match.
• - Add new withdrawal addresses before you are in a hurry, so a cooling-off timer on a brand-new address is not blocking an urgent transfer.
• - Avoid funding methods that can be reversed if you plan to withdraw quickly, and let bank deposits fully settle before you move coins.
• - If you are about to receive or send an unusually large amount, keep records of where it came from, so a source-of-funds question is a five-minute answer instead of a multi-week scramble.
• - Do not run patterns that look like you are moving money for other people, which is a classic trigger for compliance review.

None of this is a guarantee. An exchange can still place a hold for reasons it will not or cannot explain. But tidy records, matching names, current documents, and patience through any confirmed waiting window head off a good share of the avoidable holds before they start.

Keep a buffer you can actually reach

There is one more habit that has nothing to do with paperwork and everything to do with peace of mind. Because a hold can lock up the funds you keep on an exchange for days or, as the CFPB has documented, weeks or longer, it is a mistake to treat an exchange balance as your rainy-day money. If rent is due and your account picks that week to ask for a fresh ID photo, the timing alone can turn a minor review into a real crisis. The fix is to keep a separate cash cushion in an ordinary, insured bank account, money you can reach in minutes no matter what any exchange is doing.

The planner below sketches how a modest monthly habit builds that cushion toward a target of a few months of expenses. Read it as progress toward the target: it tracks your savings up to the point where you have set aside your chosen number of months, and it stops there, because once you hit the target the fund is complete. So if you have already saved more than the target, do not read the capped figure as a loss. It simply means the fund is fully covered, and anything above the line is a surplus you keep. It is a planning aid, not a forecast, so treat the result as a rough goal rather than a promise.

The bottom line

A frozen crypto account is sometimes a short, routine pause and sometimes a sign of something bigger, and the whole game is telling those apart. Figure out whether it is just you or the whole platform. Read the actual reason in the notice instead of guessing. If you see a password, device, or withdrawal change you did not make, secure the account immediately rather than waiting out a timer. Otherwise, complete exactly what is asked, through official channels only, and give any confirmed review window time to run. Keep a paper trail, and never pay a stranger who promises to unlock your funds. The CFPB's complaint record is a useful reality check: outcomes range from holds that clear in a day or two to funds locked for weeks or months at a troubled platform. That range is precisely why it pays to keep money you truly need within reach in an insured bank account.