Ilia Zavialov

Blocked withdrawals

Ilia Zavialov: why the fee to unlock a withdrawal never unlocks anything

English version for the United Kingdom.

A balance sits on the screen, the withdrawal button responds, and a message says the money is ready and one payment stands between you and it. The sum asked for is modest against the balance, which is why it is chosen. The question worth holding on to is narrow: on a working exchange, does money ever go in before money can come out? Everything else follows from the answer.

·10 min read·Ilia Zavialov

Ilia Zavialov studying a withdrawal screen where a fee is demanded before the money is released
Ilia Zavialov studying a withdrawal screen where a fee is demanded before the money is released

01The demand is the entire product

Everything before the demand exists to make the demand believable. The rising figure on the dashboard, the chat that replies inside a minute, the small early payout that arrived, the manager who remembers your daughter's name. All of it is scenery around one moment, when the fee to unlock a withdrawal is named and a deadline attached to it. Read backwards, it is a funnel with one item on sale.

The size of the sum is chosen with care. It has to look like an administrative detail beside a balance of tens of thousands, and still be worth collecting. The payment method gives the game away faster than the wording: a wallet address, a voucher code, cash fed into a crypto ATM. Anyone insisting on a route with no chargeback has decided what happens after the money moves.

Nothing opens when it lands. A status turns green for a day, then a second obstacle appears, because a person who has paid once is worth more than a stranger. The FBI's Internet Crime Complaint Center logged 8.648 billion dollars of reported investment fraud losses for 2025, over forty per cent of everything reported that year, and the frozen trading balance is one shape that figure takes.

02How a genuine charge behaves

On a real venue the network cost and any service charge come out of the sum you are sending. You enter a thousand, the confirmation screen shows what will be deducted, and the recipient sees a thousand minus that amount. The arithmetic happens inside the transaction. There is no separate invoice, no second wallet to fund first, no reference number for an unrelated payment.

This is why the pattern breaks cleanly under inspection. A charge taken from the amount cannot be dodged by refusing it, since refusing simply means the withdrawal is never made. A charge sent in from outside can be dodged, which tells you it was never a charge on the transfer. A demand for the fee to unlock a withdrawal only makes sense where nothing was going to leave.

A genuine charge is visible before you commit. It appears on the confirmation step with the exact figure, it matches the published fees page, and it does not move because you asked a question. When the number changes each time you push back, or is quoted only in a chat window by a person, you are looking at pricing invented for one customer.

The same six questions asked of a real venue and of an invented block
QuestionWorking exchangeInvented block
Where does the charge come fromDeducted from the sum being sentPaid in separately before anything moves
When is it disclosedOn the confirmation screen and the public fees pageIn a chat message, after you request a payout
Can the figure changeFixed by a published scheduleMoves when you argue or delay
What ends a holdDocuments, time and a completed reviewA payment made within a stated deadline
Where is the conversationInside the account on the platform's own domainMessenger apps and a personal account manager
How is payment requestedNo payment is requested at allWallet transfer, voucher code or cash at a crypto ATM
What proof exists of your fundsAn on chain transaction you can look up yourselfA figure rendered in a browser and nothing else

03What an exchange actually checks

The verification work a real platform does is documented and dull. Identity papers against a live selfie, an address confirmed by a recent utility bill, a source of funds explanation for larger sums, screening of the destination address against sanctions and known theft. Each of those asks for a document or an answer. None of them asks for money.

Security holds are equally mundane. A new withdrawal address, a changed password or a reset of two factor authentication freezes payouts for a day or two, and the clock runs down on its own. Large sums can sit in manual review while a compliance officer reads the file. In each case the delay appears in the activity log and ends without anyone naming a price.

One habit separates the two worlds more sharply than any list of warning signs. Real checks are communicated inside the product, on the platform's own domain, and staff cannot accelerate them. Invented checks arrive by chat message, carry a countdown, and are always solvable by a payment in the next few hours.

04The ladder of pretexts

The first request rarely calls itself a fee. It is a withholding tax on profits, a liquidity top up so the desk can clear a large order, an anti money laundering deposit returnable with the balance, an insurance premium, a miner's charge. The vocabulary borrows from departments that exist in real finance, which makes each sentence plausible to anyone who has never met them.

The order is deliberate. The first sum is small and framed as the last step. The second is larger and framed as a consequence of the first, often a penalty for a payment sent from the wrong account. By the third, the argument has quietly moved from unlocking your profit to protecting the money you have already put in, which is far harder to walk away from.

UK Finance recorded 221.5 million pounds lost to investment scams through authorised payments in 2025, a rise of forty per cent in one year, and each of those payments was made by someone who believed the step at the time. In practice the fee to unlock a withdrawal works because it is never presented as the scheme. It is a small remaining obstacle in front of a sum that already feels like yours.

05The number on the screen

A balance shown in a browser is a row in someone's database rendered as text. It proves nothing about where money sits, and whoever runs the server can set it to any value, which is why the figure grows so obligingly through the weeks when nothing is asked of you. The rising profit curve is the cheapest part of the operation.

Anything genuinely held in crypto has an address and a history you can read without asking permission. Paste the deposit address into a public block explorer and follow where the coins went. Funds swept within minutes into unrelated addresses were never held for you. Around half of all fraud losses reported in the United States involve cryptocurrency, and the chain's traceability is the one advantage left to you.

The early successful payout does more persuasive work than everything else combined. A withdrawal of a few hundred, requested and received in a day, retires the only doubt most people have. It costs a fraction of what it collects later, and it is why so many accounts of these cases open with the line that the first withdrawal went through perfectly.

06The same sentence in other channels

The structure is not unique to trading platforms. Through 2025 the parcel message added a customs charge to its script, telling the recipient that an order is held at the border and stays there until a small sum is settled. Many who paid that redelivery charge reported afterwards that its real purpose was to capture their card details. The object withheld changes, the grammar stays fixed.

The voice version is larger still. Call centre fraud, meaning fake technical support together with people posing as government officials, produced more than 80 thousand complaints and over 2.9 billion dollars in reported losses in one year. A refund held until a fee is paid, a case held until a bond is posted, a delivery held until customs clear: one shape aimed at different anxieties.

Reading these as one family changes what you have to remember. In this family the fee to unlock a withdrawal is the crypto dialect of a sentence that also appears as a customs charge on a parcel and a processing payment on a refund. Once the shape is familiar the story stops mattering, and one question remains: who is holding what, and why does releasing it need money to travel the wrong way.

07When the demand has already arrived

The first decision is the only one fully in your hands, and it is to stop paying. Money already sent is gone, and it exerts pressure to send more, which is the mechanism the later requests rely on. Ending the conversation while a demand is outstanding feels like abandoning the balance, though the balance was never a thing that could be abandoned.

Then collect the record before it disappears. Screenshots showing the balance and the demand, the chat history exported rather than photographed, every wallet address and transaction hash you were given, the domain and any app you installed, the date and amount of each payment. Send that to your bank the same day, since a recent transfer sometimes still has a route back, and file a report with the fraud reporting body.

Expect a second approach within weeks. Someone will appear who has seen your case, works with a recovery service or a regulator, and needs an advance to open proceedings, which is the fee to unlock a withdrawal wearing a rescuer's coat. Real recovery runs through banks, police reports and the courts, none of which ask a victim to send cryptocurrency to a private wallet first.

08Questions and answers

Is the fee to unlock a withdrawal ever legitimate?

No working exchange asks a customer to send money in before it will send money out, because its charges are taken from the amount being transferred. If a payment has to arrive from outside before your balance moves, the balance is not being held anywhere. The request itself is the finding.

Why does the platform show my money if it does not exist?

The figure on the screen is text produced by a server that the operator controls, and it can be set to any value. Funds that genuinely exist on a public chain have an address and a transaction history that anyone can read in a block explorer. Checking the chain settles the question in a few minutes.

My first withdrawal worked, so why is this one blocked?

A small early payout is a standard part of the sequence and is paid out of money that other people have deposited. It removes the doubt that would otherwise stop the larger deposits. The blocked withdrawal arrives only once the balance is large enough to be worth keeping.

How long can a real exchange delay a withdrawal?

Security holds after a password change or a new withdrawal address usually last a day or two and clear on their own. Compliance reviews of large sums can take longer and are resolved by documents you supply. In every case the delay is visible in your account and ends without a payment.

Can I get the money back if I already paid?

Bank transfers reported quickly are sometimes recalled, and card payments can occasionally be disputed, so the same day matters more than the wording of your complaint. Cryptocurrency sent to a private wallet is rarely recovered, though the addresses and transaction hashes are worth reporting because they build the case against the network.

Someone offered to recover my funds for an upfront payment. Is that real?

That approach is a second run of the same scheme, aimed at people who have already lost money once and are easier to reach. Recovery through legitimate routes runs through your bank, a police report and the courts, and none of them require cryptocurrency sent in advance to a private address.

Monogram of Ilia Zavialov

Written by Ilia Zavialov, digital security consultant. Profile of Ilia Zavialov

09Read next

Back to the blog