Exchange Account Locked Due to Suspicious Activity: How Long to Wait?

26 October 2026

If your exchange account has been locked due to suspicious activity, you should expect a minimum of 24 to 72 hours before any resolution, though many cases stretch into one to two weeks. Complicated situations - especially those involving large balances, multiple flagged transactions, or incomplete identity verification - can take a month or longer. There is no universal timeline; each exchange enforces its own security review process, and you cannot speed it up by repeatedly contacting support.

Why exchanges lock accounts for suspicious activity

Exchanges monitor login patterns, withdrawal requests, and trading behavior using automated risk scoring systems. Common triggers include:

• Logging in from a new device, IP address, or country
• Multiple failed login attempts
• A sudden large withdrawal or transfer
• Unusual trading volume compared to your history
• Detection of malware, VPN usage, or Tor exit nodes
• Simultaneous login attempts from different locations

When the system flags an activity as suspicious, it locks the account to prevent unauthorized access or asset loss. This is a standard security measure, not a penalty.

The initial lockout period

The first 24 hours are almost entirely automated. You will likely receive an email or in-app notification that your account is locked. During this time, the system may run additional checks, such as verifying that your recent login IP matches your typical location. Do not expect a human review within this window.

After 24 hours, the case typically enters a queue for manual review by a security or compliance team. The speed of this review depends on the exchange's staffing, your account tier, and the complexity of the trigger.

Factors that affect wait time

These are estimates. No exchange publishes guaranteed handling times for security locks.

What you should do during the wait

1. Check your email and spam folder. The exchange may have sent a verification link or a request for documents. Missing this resets the clock.

2. Do not submit multiple support tickets. Duplicate tickets can merge your requests, delay review, or trigger additional flags. Use the original ticket number for all follow-ups.

3. Prepare documentation in advance. Common requests include:

4. A selfie holding your government ID and a handwritten note with today's date and the exchange name
5. Proof of address (utility bill, bank statement)
6. Explanation of the transaction that triggered the lock (e.g., a withdrawal to a new wallet address)

7. Screenshots of the login attempt IP addresses if you have them

8. Verify your contact methods. Ensure your registered email and phone number are accessible. If they are not, recovery becomes significantly harder and longer.

9. Do not attempt to log in repeatedly. Each failed or blocked login attempt resets the lock timer or adds a new flag to your case.

When to Escalate

If you have waited more than the expected range for your situation, escalate through the exchange's official channels:

• Reply to your existing support ticket with a polite request for a status update. Include your original ticket number and a brief summary.
• Use the exchange's official social media support accounts (Twitter/X, Telegram) only if they publicly advertise that channel. Do not DM support accounts unless instructed.
• For regulated exchanges, file a complaint with the relevant financial regulator in the exchange's jurisdiction. This is a last resort and can take weeks to process.

What not to do

• Do not threaten legal action. This often freezes communication entirely.
• Do not share your account details, 2FA codes, or passwords with anyone claiming to be support. Exchanges never ask for these.
• Do not pay third-party recovery services. They cannot bypass exchange security processes and may steal your information.
• Do not transfer funds to a "verification wallet" or pay "release fees." These are scams.

When the lock is lifted

Once the review is complete, you will receive an email confirming the account is unlocked. You may need to reset your password or re-enable 2FA. Immediately after access is restored:

1. Change your password to a strong, unique one.
2. Review recent login history and withdraw or transfer any assets you do not plan to trade soon.
3. Enable withdrawal whitelisting if the exchange offers it.
4. Consider moving assets to a hardware wallet or self-custody wallet for long-term storage.

Can the lock be permanent?

Yes. If the exchange determines that the account was compromised or that you violated its terms of service, it may close the account and require you to withdraw funds within a set period - or refuse service entirely. In such cases, you retain ownership of your crypto, but you must follow the exchange's closure process to access it. If you cannot complete the process, you may lose access permanently. This is rare but possible, especially for accounts flagged for money laundering or sanctions violations.

Summary

The wait time for an exchange account locked due to suspicious activity is typically 24 hours to two weeks, with larger balances and complex cases taking longer. Your only effective actions are to prepare documents, avoid spamming support, and wait. No exchange guarantees a specific timeline, and no external service can force a faster review. Plan accordingly and consider moving assets to self-custody once access is restored.

Back to account recovery