When an "exchange" demands a withdrawal fee

The pattern is familiar: you deposited crypto on a website or app with charts and "support," the displayed balance grew, and a small withdrawal may even have worked. A larger withdrawal then fails. A new obstacle appears: a withdrawal fee, "tax," "insurance," "AML deposit," or "liquidity payment." You are told to send money to a new address or card, separately from the balance shown in the account. Each payment increases the loss; no withdrawal follows.

The operators control the interface; they do not hold your assets in a genuine custodial account. The numbers on screen are database entries. The real deposits have already moved through addresses controlled by the scheme. The route from chat to a sham investment platform is covered in crypto exchange scams; this article focuses on the point when a withdrawal is blocked by a demand for another payment.

In the narrow sense, an exit scam is a platform that appeared to operate for a time and then disappeared or abruptly disabled withdrawals for everyone. The practical result for a victim is the same: funds are inaccessible, while "support" either stops replying or demands one more transfer. Do not confuse this with a major centralized exchange suspending withdrawals; the logic and checklist are different.

Extra-payment trap vs an AML hold at a real exchange

Warning signs of a fake platform:

• The domain does not match a known exchange and often closely imitates a brand.
• Registration is available only through a link sent in a messenger.
• The platform promises returns and shows a steadily rising balance.
• "Support" writes in the same chat as the "mentor."
• A large withdrawal requires a new payment to an external address.
• The claimed license cannot be found in the cited regulator's register.

At a legitimate exchange, a withdrawal fee is deducted from the account when the withdrawal is processed; the platform does not ask for a separate transfer to "unlock" it. AML, KYC, or Source of Funds reviews take place through the official account and ticket system, with requests for documents rather than crypto for a "tax." Access the exchange through a known domain you typed or saved yourself, not a chat link. Common reasons for genuine restrictions are covered in the top reasons exchange accounts are frozen.

A quick test: if a withdrawal is categorically impossible without another payment, rather than pending identity or SoF documents in an official ticket, this is a scheme rather than a manual risk review. If you are signed in to an official account at a major exchange and see a review status without an external payment demand, do not send money to "specialists" found through search results; that situation requires a different process.

First steps after discovering the scheme

1. Stop every additional payment described as a withdrawal fee, tax, penalty, or verification payment.
2. Preserve the URL, screenshots of the displayed balance and withdrawal error, and correspondence with support and the person who introduced the platform.
3. Record every outgoing TxID, network, amount, and destination address in the relevant explorer.
4. Change passwords for your email and genuine exchange accounts if you shared codes or signed in through third-party links.
5. Do not install an APK or "trading bot" from a chat, and never enter a seed phrase for an "audit."
6. Build a timeline: first contact, deposits, fee demand, and support responses.

At the same time, submit the TxID package for an initial tracing assessment. If the assets are still moving toward a deposit address at a real exchange, the window for a freeze request may be shorter than it appears. This falls under blockchain analytics and, when assets reach an exchange, platform engagement. Stop further losses first; trace second.

What not to do and what to expect

• Do not pay a larger "withdrawal fee" after the first payment fails; IC3 and law-enforcement guidance treat this as a continuation of the theft.
• Never provide a seed phrase, remote access, or 2FA codes.
• Do not open another account through a new link from the same support team.
• Avoid recovery scams: a promise to recover 100% for an up-front payment after a fake-exchange loss is a separate scheme.

A realistic objective is to stop further payments, preserve a complete evidence package, and assess whether the blockchain trail reaches a custodian. Recovery is not guaranteed and depends on timing, the transaction route, and whether platforms respond. If you are considering a contract where payment depends on a defined result rather than an up-front payment for a miracle, see the success-fee model. For an urgent review of the facts, use emergency response.

Related resources

Need an assessment of your situation?

Briefly describe what happened ? without seed phrases or private keys. We will outline possible routes and assess their feasibility.

Describe what happened

Answer a few questions so we can assess the situation and suggest the next steps.

Crypto investigations, support with exchange restrictions, and asset access recovery.