Coinbase users are increasingly logging in to find withdrawals, trading, or full account access restricted under a label like "Under Review," "Restricted," or "Compliance Hold." These notices tend to appear without warning, often during exactly the moment access matters most, a period of market volatility. Some are triggered by genuine security protections. Most are the output of automated compliance systems reacting to a specific, identifiable pattern.
Why Accounts Enter Review
Exchanges now operate under considerably stricter anti-money-laundering, KYC, and cross-border compliance obligations than a few years ago, and they meet those requirements with AI-driven monitoring across login behavior, device fingerprints, transaction history, wallet exposure, and peer-to-peer activity. A legitimate, careful user can still trip these systems.
What Commonly Triggers a Flag
- Unusual transaction activity, large deposits or rapid movement of funds, especially from new wallets, DEXs, OTC trades, or privacy-focused services.
- Exposure to a wallet previously linked to a scam, a drainer, a phishing campaign, or a mixer, often without the account holder's knowledge.
- Login irregularities such as VPN use, a new device, an unfamiliar country, or repeated failed attempts.
- Identity verification gaps, an expired ID, a name mismatch, or a failed facial verification check.
What Happens During the Review
Expect some combination of frozen withdrawals, trading restrictions, delayed transfers, added identity checks, and a source-of-funds request. Resolution timelines vary widely, some reviews clear in hours, others take weeks depending on jurisdiction, transaction complexity, and whether an external investigation is involved.
The Safe Way to Respond
- Confirm the notice is genuine before acting on it. Access Coinbase only through the official app or site, phishing messages impersonating compliance teams are common during freeze periods.
- Secure the account regardless: change the password, reset 2FA, review authorized devices and login history, and scan for malware. A compromise and a compliance flag can coincide.
- Prepare documentation in advance, transaction history, source-of-funds records, tax documents, and proof of wallet ownership, since a well-organized submission is consistently faster to clear.
- Check whether the funding wallet had any prior exposure to a mixer, a blacklisted address, or a scam contract; this is frequently the actual trigger.
Never send funds to an 'unlock' service, pay a recovery fee, or share a seed phrase to resolve a review. No legitimate Coinbase process requires any of these, and every one of them is a documented pattern used by scammers targeting frozen accounts.
The Fake Recovery Agent Problem
Publicly discussing a frozen Coinbase account reliably draws people posing as recovery agents, blockchain investigators, or compliance specialists, usually contacted through Telegram, WhatsApp, or Discord. Their pitch is a guaranteed, fast restoration in exchange for an upfront crypto payment. Genuine exchange staff never request a private payment to lift a hold, a request like that is the clearest sign of a second, unrelated scam layered on top of the first problem.
How Long Reviews Actually Take
There's no fixed timeline. Simple security checks tend to clear quickly. Reviews that involve blockchain tracing or an escalated compliance case take longer, and the deciding factor is usually documentation quality rather than how forcefully a user follows up.
Reducing Future Restrictions
- Keep KYC information current rather than letting it lapse.
- Avoid interacting with unverified wallets or unaudited protocols.
- Maintain clean, organized transaction records as a habit.
- Keep DeFi activity and exchange accounts operationally separate.
- Use verified counterparties for any OTC transaction.
Lightly monitored crypto trading is largely a thing of the past. Reviews like this are now a routine part of operating on a regulated exchange, and the fastest way through one is the same combination that works for most compliance processes: patience, accurate documentation, and skepticism toward anyone who offers to skip the line.
Frequently asked questions
Not necessarily. It usually reflects an automated compliance flag related to transaction patterns, wallet exposure, or identity verification, though it is worth confirming your account was not also compromised at the same time.
Submit clear, well-organized documentation, transaction history, source-of-funds records, and proof of wallet ownership, through official channels only. Incomplete or rushed submissions are the most common reason reviews take longer than necessary.