MSTR Cat

Crypto Law/Level IV · Holders' traps/4.3 When the state comes/Lesson 1

Account freezes and KYC demands

Why an exchange asks who you are and where your money came from, why it may freeze an account without explaining, and what the law lets it say.

Education, not legal, tax or investment advice. Crypto law differs between countries and states and changes often. Check the current rules where you live with a qualified lawyer or tax adviser before you act.

The lean path

The cheapest, lowest-tax, simplest and most private route the law allows, best first. Each step names the rule it rests on and the condition that keeps it lawful.

  1. Cheapest prevention: keep source-of-funds records (bank statements, prior exchange exports) ready and answer KYC requests only through the official app; KYC is a legal duty under 31 C.F.R. §1022.210, and false statements can make a closure permanent.
  2. Coins in self-custody cannot be frozen by an exchange, and keeping only working balances on platforms limits exposure; transfers between your own wallets are not US-taxable but still need basis records.
  3. If a freeze drags on, use free complaint channels: the platform’s internal process, then the CFPB (consumerfinance.gov/complaint, companies generally respond in 15 days) and the state regulator, such as NYDFS for BitLicense holders.
  4. EU and UK customers can make a free data access request (GDPR Article 15, one month to respond); the firm may still withhold anything revealing a suspicious activity report, since tipping-off is barred (UK: Proceeds of Crime Act 2002 s.333A).

Materials31 CFR §1022.320, the suspicious activity reporting rule for money services businessesFinCEN guidance FIN-2019-G001 (May 9, 2019) on convertible virtual currency businessesThe account restriction and closure section of your own exchange’s user agreementYour records showing where deposited money or coins came from (bank statements, past exchange histories)

Wonder

  1. Why did my exchange freeze my account, and why will support not tell me the reason?
  2. Do I have to answer questions about my identity and the source of my funds?
  3. Can I sue an exchange for freezing my account or reporting me to the government?

Explore

  1. KYC means ‘know your customer’: checking who a customer is before and while serving them. In the United States, a business that exchanges or transmits crypto for customers is usually a money services business under the Bank Secrecy Act. FinCEN’s guidance FIN-2019-G001, issued May 9, 2019, confirmed that its rules apply to businesses dealing in convertible virtual currency. The rule at 31 CFR §1022.210 requires such businesses to run an anti-money-laundering program that includes verifying customer identification. So a request for an ID, an address, a selfie or proof of where funds came from is usually a legal duty, not a whim.
  2. Freezes have common triggers: incoming coins traced to a hack or scam, a match on a sanctions list (lesson 1.3.5), a law-enforcement request or court order, activity that looks unusual, or verification left unfinished. Most user agreements reserve the right to restrict, suspend or close accounts, so the contract matters as much as the statute. Transfers also carry information duties: under the ‘Funds Travel Rule’, 31 CFR §1010.410(f), transmittals of $3,000 or more must carry details about the parties, and FinCEN’s 2019 guidance says crypto transfers can fall within it. That is why exchanges may ask who owns a destination wallet.
  3. Silence from support often has a legal cause. A money services business must file a suspicious activity report (SAR) on suspicious transactions involving at least $2,000, within 30 calendar days of first detecting the facts (31 CFR §1022.320). The same rule, and 31 U.S.C. §5318(g)(2), forbid it to disclose a SAR or any information that would reveal one exists. Section 5318(g)(3) also protects the institution from liability to the customer for making such a report. In practice, a lawsuit over the report itself is very unlikely to succeed; disputes over the contract, such as returning your balance, are a separate matter.
  4. Exchanges have strong reasons to be cautious. On November 21, 2023, Binance pleaded guilty in the United States to violating the Bank Secrecy Act, operating an unlicensed money transmitting business and breaking sanctions law, and agreed to pay about $4.3 billion; its founder was later sentenced to four months in prison. After cases like that, a platform that is unsure tends to freeze first. Other places are tightening too: the EU’s Anti-Money Laundering Regulation, (EU) 2024/1624, Article 79, bars crypto-asset service providers from keeping anonymous accounts or accounts allowing anonymisation, including through privacy coins, from 10 July 2027.
  5. Responding well is mostly about records. Answer only through the exchange’s official app or website, because fake ‘support’ agents target people with frozen accounts (lesson 4.2.4). Send exactly what is asked, keep copies, and explain the source of funds with documents: bank statements, earlier exchange histories, payslips, or tax records (lesson 2.3.7). Statements that turn out to be false can make a closure permanent and create far larger problems than the freeze. If the freeze is linked to stolen or scam coins you received unknowingly, say how you received them and when; the exchange may still be bound by a court order it cannot discuss.
  6. If a freeze drags on, the user agreement usually sets the path: an internal complaint process, then often arbitration rather than court. A licensed exchange also answers to the regulator that licensed it, such as a state financial regulator or New York’s Department of Financial Services for BitLicense holders (lesson 1.3.6), and those regulators accept consumer complaints. If the government has taken the funds, the rules change completely (lesson 4.3.2). A practical check before depositing: read the restriction and closure section of the agreement and note what it says about how and when your balance is returned if the account is closed.

Key facts

  • FinCEN guidance FIN-2019-G001, issued May 9, 2019, applies Bank Secrecy Act rules to businesses dealing in convertible virtual currency.
  • A US money services business must file a suspicious activity report on suspicious transactions involving at least $2,000, within 30 calendar days of initial detection (31 CFR §1022.320).
  • 31 U.S.C. §5318(g)(2) bars a financial institution from telling a person involved in a transaction that it has been reported as suspicious.
  • Under 31 CFR §1010.410(f), transmittals of $3,000 or more must carry information about the parties, and FinCEN says crypto transfers can fall within this rule.
  • Binance pleaded guilty on November 21, 2023 to US Bank Secrecy Act, unlicensed money transmitting and sanctions violations and agreed to pay about $4.3 billion.
  • EU Regulation 2024/1624, Article 79, prohibits crypto-asset service providers from keeping anonymous crypto-asset accounts, applying from 10 July 2027.

Exercise nine, six, three, one

9CollectList up to 9 things an exchange could ask you to prove or explain, such as your identity, address, the source of a deposit, or the owner of a withdrawal address.
6ClusterSort them into 6 categories: identity, address and residence, source of money, source of coins, destination of withdrawals, and purpose of activity.
3DistillReduce the 6 categories to 3 groups: things you can prove today with documents, things you could reconstruct with effort, and things you could not currently prove.
1CrystallizeWrite 1 sentence describing the single record you would most want to have ready if your exchange account were frozen tomorrow, and why.

Fact check

Dates, figures and claims checked against the published sources listed below.

Open in the interactive academy →

PT ES ZH JA KO RU DE FR MS