When a crypto platform asks you to pay to withdraw

The screen says the investment has grown. Support says a withdrawal is ready, but first there is a tax, a security deposit or an account-release payment. The request changes the problem: before discussing the displayed profit, establish whether the platform’s claim can be independently verified.

The FTC describes investment scams in which websites or apps display fictional growth to encourage further deposits. A professional interface can show numbers without holding the assets those numbers appear to represent.

This guide describes general warning patterns. It does not assess or accuse a particular company.

Separate three amounts

When reviewing an account, distinguish:

• Money or cryptocurrency actually sent.
• Money or cryptocurrency actually received back.
• The balance and profits displayed by the platform.

These are different evidence categories. A dashboard screenshot establishes what the screen displayed at that moment. It does not independently establish trades, custody or an enforceable right to withdraw the amount.

Consider a hypothetical person who sends $2,000 worth of cryptocurrency, receives a $100 transfer and later sees a $9,000 dashboard balance. The completed $100 payment demonstrates that payment. It does not verify the later $9,000 displayed balance.

For a clear factual record, preserve the actual asset quantities and transaction dates. Dollar equivalents can move with prices. Label the valuation time rather than mixing an original purchase value with a later market quote.

A dated measure of the problem

The FBI’s 2025 IC3 Annual Report lists the following complaint counts:

Source: report pages 52–54, checked September 22, 2026. These are complaints recorded by a reporting system, not a worldwide census, a count of proven convictions or a probability that a randomly selected platform is fraudulent. The investment category belongs within the broader cryptocurrency context; the rows should not be added together.

The scale supports taking warning signs seriously. It does not establish the facts of an individual case.

What makes a withdrawal demand concerning?

The FTC’s cryptocurrency guidance describes fake investment sites that prevent withdrawals or demand substantial fees. The warning becomes especially strong when an unexpected payment is required to unlock supposedly available funds.

Ask what the charge is, where it was disclosed, who receives it and how its basis can be verified independently. Be cautious if the explanation changes after each payment, deadlines suddenly tighten or the requested destination belongs to an unrelated person.

Legitimate services can have disclosed fees, identity checks and withdrawal restrictions. Tax and reporting rules also vary by jurisdiction. The presence of a fee alone is not a finding of fraud. A stranger’s message or a document displaying an official-looking logo is likewise not evidence that a government requires payment to the wallet supplied in chat.

Verify through contact details obtained independently from the relevant institution or authority. Do not let the person demanding money control every verification channel.

Treat pressure as a reason to pause

A hypothetical support message might offer to release a large balance after a small “verification deposit.” After that payment, a second message introduces a larger charge. The imagined sequence illustrates an escalating demand; it is not a documented incident.

The important decision is whether another payment has an independently established basis. Money already sent does not make the next payment more justified.

The FTC’s investment-scam guidance identifies pressure to act quickly and discouragement of independent research as warning signs. Someone helping honestly should be able to explain the process without isolating the account holder from other advice.

A trusted person can help separate what is known from what has merely been asserted. This is especially valuable when the relationship began as friendship, romance or an invitation to an exclusive investing group.

Preserve evidence without adding another transaction

FBI guidance for cryptocurrency scam victims prioritizes transaction details: addresses, asset types, amounts, dates, times and transaction identifiers. It also asks for communications, domains, applications and the sequence of events.

Create a simple timeline with one entry per material event. Distinguish a completed transaction from an instruction to pay, an attempted withdrawal and a displayed balance.

Keep original message exports, payment receipts and screenshots showing the relevant URL and time when available. Record any account or support identifier exactly. Add your explanation separately so that copied evidence and your interpretation are easy to distinguish.

You do not need to send another deposit to create evidence. Nor should you enter a recovery phrase into a site or disclose current passwords to someone claiming they need access to investigate.

Report promptly through independent channels

Contact the bank, payment provider or exchange used to send the funds through its established support channel. Explain that the transfer may relate to suspected fraud and provide the transaction details you have.

The IC3 reporting guidance encourages reports even where no financial loss occurred. In the United States, IC3 is an official reporting route; readers elsewhere should also contact their relevant national cybercrime service or local law enforcement.

A report does not guarantee recovery or an investigation. Lack of complete transaction information is not a reason to wait for a perfect dossier.

Watch for a second offer of rescue

The FTC warns about refund and recovery scams targeting people who have already lost money. An unsolicited promise to retrieve everything in return for another advance payment can repeat the original pattern.

The strongest immediate improvement is a clean separation between evidence and promises. Record what moved, preserve what was said, verify through independent channels and stop treating a number on an unverified dashboard as proof that another payment will unlock it.