First, separate two things that feel identical from the inside. A security restriction is the platform protecting the account from someone it thinks might not be you. A compliance review is the platform satisfying an obligation about who you are and where funds came from. They produce the same banner and the same frustration, and they need completely different replies.
You can usually tell which one you have from what is being asked. Requests about devices, logins and recent activity are security. Requests about identity documents, source of funds and the purpose of a transfer are compliance. If the message asks for both, treat it as compliance, because that is the slower half.
What triggers an account restriction
Not an exhaustive list, and no platform publishes its actual thresholds — anyone who tells you they know the exact trigger is guessing. These are the patterns that come up repeatedly in accounts of it happening:
- A change in pattern. A dormant account that suddenly moves a large sum. A login from a new country. A first withdrawal to a brand new destination.
- Security settings changing — a new device, a reset second factor, a modified withdrawal allowlist. Some of these carry an automatic hold by design rather than by suspicion: Binance, for example, disables withdrawals for 48 hours after a 2FA reset. A hold like that ends by itself and needs no appeal.
- Details that do not line up. A name on a bank transfer that differs from the account name. A document that expired last month.
- Funds arriving from somewhere flagged, which is the frustrating case because you may have had no way to know.
- Routine re-verification, which is genuinely random and genuinely routine.
What the reviewer is trying to establish
Everything in a good reply follows from this. The reviewer is trying to answer three questions, and nothing else on your mind is relevant to them.
Are you the person who opened this account?
Answered by documents matching the registered details, and by knowing the account's own history — when it was opened, what it normally does.
Do you have a plausible account of where the money came from?
Answered by ordinary documentation: a payslip, a sale contract, a bank statement, the record of an earlier purchase. Plausible and documented beats detailed and unevidenced.
Is this transaction consistent with that account?
Answered by a short, unembellished explanation of what you were doing and why. Consistency is what they are testing, so the explanation should match what the history shows.
How to write the reply to an account review
Nothing else you write is being read against anything but those three questions.
The version that works is boring, specific and short. The version that extends the wait is long, emotional and vague about the exact thing being asked.
Practical points, in rough order of how much difference they make:
- Answer the question that was asked. If they asked for proof of source of funds, send that. Sending four other documents instead reads as avoidance, whatever the intention.
- Use the channel in the message. A case opened in the support system, from inside the account. Not a reply to a notification email, not a social platform, not a second case.
- Send documents that are complete and current. The whole page, in one file, unedited, with the name and date visible. Cropping out a section that felt private is read as alteration.
- Keep the narrative to a paragraph. What the funds were, where they came from, what you intended to do. Dates and amounts, no adjectives.
- Do not threaten and do not escalate publicly. Neither moves a queue. Both stay on the record of your case.
- Then leave it alone. A daily "any update?" adds nothing the reviewer can use. Reply when they ask for something, and add to the case only when you have a new document or a correction.
Because "boring, specific and short" is easier to agree with than to write, here is the shape. Adjust the facts; do not add adjectives.
Attaching the proof of source of funds you asked for. The 4,200 that arrived on 3 August came from the sale of a motorcycle, sold privately on 29 July. The attached bank statement shows the buyer's transfer on 1 August and my transfer to the exchange on 3 August. The signed bill of sale is the second attachment. I bought crypto with it on the same day and have not withdrawn since. Happy to provide anything else you need.
Six sentences, every one of them a date, an amount or a document. No explanation of why the review is unfair, no account of how long you have been a customer, no mention of what you intend to do with the funds. Those are the parts that lengthen a file without answering the question.
A restricted account attracts exactly one kind of message: an offer to unlock it. There is no third party with that ability, no fee that shortens the review, and no agent who can be reached outside the official channel. It is the same approach described in the piece on unsolicited support contact, aimed at someone who has a reason to want it to be true.
What to do while your account is under review
The hardest part of a restriction is not the paperwork. It is the days afterwards, where there is nothing to do and the temptation to do something is constant. Three things are genuinely worth doing in that window, and one thing is worth actively not doing.
Write down what happened, while it is fresh. Dates, amounts, what you were doing when the restriction appeared, and the exact wording of the notice. If the case drags on and passes between people, having a consistent account of it in front of you is worth more than you would expect.
Get the documents in order rather than sending them. If the request was for a source of funds, assemble the full chain — the sale, the transfer, the statement showing it arriving — even if only one piece was asked for. Having the rest ready means a follow-up question costs you an hour rather than another week.
Use the time on the parts you control. The account's security configuration, the email account behind it, and where your balances sit relative to each other are all things you can improve while nothing else is moving.
And the thing not to do: do not describe the situation in public. A restricted account with a visible balance and a frustrated owner is precisely the profile that unsolicited offers of help are selecting for. Every one of those offers is built on somebody having read a post exactly like the one you are thinking of writing.
If the answer is no
Sometimes the review ends with the restriction staying, or with the account being closed. That is a decision you can still respond to, in this order.
- Get the decision in writing, inside the case. Ask whether the restriction is permanent, what exactly it covers, and how and by when any remaining balance can be withdrawn. Those are the facts everything else depends on, and they should come from the platform rather than from your reading of a banner.
- If you think it rests on a mistake, reply once with the correction. Name the specific fact that was misread and attach the document that shows it. A new argument without new evidence rarely changes a decision.
- Find the platform's own complaints route. The terms of use you agreed to name the legal entity that serves you; search them for "complaint" to find the formal procedure, if the platform has one. That is a different channel from a support case, and it is worth using if the case has gone nowhere.
- Check who regulates that entity where you live. If it is licensed or registered in your country, the regulator or a financial complaints service there may accept a complaint once the platform's own process is finished. The regulator's public register, searched for the entity's name, tells you whether that route exists.
What stays true at every step: nobody outside the platform can reverse its decision for a fee, and a stranger offering to is the same approach as every other unlock offer on this page.
After the restriction is lifted
When it lifts, two things are worth doing. Check what changed while the account was restricted — the activity log will show whether anything was attempted during the hold. And if the restriction followed a security change you made, note which one, because you will want to plan the next one for a week you are not moving funds.
The broader point is less comfortable. A restriction is a reminder that a balance held by an exchange is a claim on a company, subject to that company's processes, and those processes can pause your access for reasons that have nothing to do with anything you did wrong. That is not an argument against using exchanges, which are genuinely convenient and genuinely the right tool for most activity. It is an argument against keeping the whole of a long-term holding in one, which is a different decision from a security setting and deserves to be made deliberately.
No review times are given for compliance reviews, because none of the platform pages we read commits to one; the 48-hour hold after a 2FA reset comes from Binance's guide to resetting 2FA, read on 3 October 2026. The procedural advice reflects how these processes are described in the platforms' own published policies and in the structure of their support systems, rather than any inside knowledge. Nothing above comes from a real case file, and no outcome described here should be read as a forecast of yours.