Why Crypto Exchanges Freeze Deposits After AML Checks

A crypto deposit can be fully confirmed on the blockchain and still not appear in your exchange balance. Instead of a credited amount, you see a status message: Under Review, Pending Review, or a notification that the deposit is temporarily unavailable. For most users, this is unexpected and stressful—the transaction went through, the blockchain confirmed it, so where is the money?

The answer usually has nothing to do with a technical error or a problem with the blockchain itself. It has to do with AML Screening: the compliance review that centralized crypto exchanges perform on incoming deposits before making funds available for trading or withdrawal. A blockchain confirmation tells the exchange that the transaction happened. AML screening tells the exchange something about where the funds came from and whether they warrant a closer look before crediting.

A deposit under AML review does not automatically mean that anything illegal happened, that the funds are lost, or that the account has been permanently restricted. It means the exchange has identified something in the transaction history or risk profile that it wants to review before proceeding. This article explains how that process works, what typically triggers it, and what usually happens next.

How Crypto Exchanges Screen Incoming Deposits

When a crypto deposit arrives at an exchange, the process involves more than waiting for blockchain confirmations. Most centralized exchanges run AML screening on incoming transactions as part of their compliance obligations—checking not only that the transfer happened, but also where the funds originated and whether the transaction history raises any risk signals.

The typical flow looks like this: a deposit is sent to the exchange wallet address; the blockchain transaction receives network confirmations; the exchange performs AML screening of the incoming transaction; the transaction receives an internal risk assessment; and the deposit is either credited automatically or routed for additional compliance review. The threshold that determines whether a deposit goes straight through or into review varies between exchanges, but the general principle is consistent: the exchange evaluates risk before making funds fully available.

This screening process typically uses blockchain analytics to examine the transaction path—not only the immediate sending address, but the broader history of where funds moved before reaching the exchange.

What Triggers an AML Review of a Crypto Deposit?

An AML review is rarely triggered by a single factor. Exchanges typically evaluate a combination of risk signals: the origin of the funds, the transaction path, associations with high-risk categories, the deposit amount, account behavior, and internal compliance thresholds. A high AML risk score does not automatically mean the funds are illegal, but it can be enough to trigger an AML alert and route the deposit for compliance review.

Links to Stolen Funds, Scams, or Sanctioned Entities

One of the most common triggers for a deposit freeze is the presence of exposure to stolen funds, scam-related activity, hacked funds, sanctioned wallets, sanctioned entities, or services restricted under international sanctions programs. This exposure can be direct—the sending wallet itself is linked to a high-risk source—or indirect, where the funds passed through one or more intermediary addresses before reaching the exchange and those intermediaries have a connection to a suspicious source further back in the chain.

The closer the deposit is to the suspicious source in the transaction path, the higher the risk signal. But indirect exposure at several steps of distance can still trigger a review, depending on the exchange’s risk thresholds and the specific category involved. Sanctions exposure in particular tends to receive heightened scrutiny, because exchanges operating in most jurisdictions have specific legal obligations around sanctions compliance that go beyond general AML risk management.

Mixers, Darknet Exposure, and Obscured Transaction Paths

Funds that passed through coin mixing services, tumbling protocols, darknet-related services, or other tools used to obscure transaction history present a different kind of risk signal. Even if the current owner of the funds has no connection to the original source, the use of obfuscation tools in the transaction path makes it harder for the exchange to establish where the funds originally came from.

An unclear or obscured transaction path is itself a risk signal for compliance purposes, separate from any specific category of illicit activity. If the exchange cannot establish a clear picture of the fund’s origin, it may place the deposit on hold to gather more information before proceeding.

Unclear Source of Funds or Unusual Transaction History

A review may also begin when the exchange cannot quickly establish a plausible explanation for the deposit—even in the absence of direct links to high-risk sources. Situations that commonly raise this question include: a large deposit after a long period of account inactivity; funds arriving from an unknown or unverified counterparty; a complex chain of transfers involving multiple intermediate wallets with no clear commercial purpose; a deposit amount that is inconsistent with the account's established activity profile, or a transaction history that looks risky relative to what the exchange expects from that user — a mismatch with the user profile that may prompt a closer look even without links to specific high-risk categories; or funds originating from OTC trades, P2P transactions, or business payments without supporting documentation.

In these cases, the exchange is not necessarily alleging that the funds are illegal. It is applying a risk-based approach: when the origin of funds is unclear, additional information may be needed before the deposit can be credited.

Internal Exchange Policies and Risk Thresholds

The same deposit sent to two different exchanges can produce two different outcomes. One exchange may credit the deposit automatically. Another may place it under manual review. This is not necessarily a contradiction—it reflects the fact that different exchanges use different blockchain analytics providers, different internal risk models, different compliance policies, and different thresholds for what triggers additional review. An exchange’s risk appetite, its regulatory environment, the jurisdictions it serves, and its specific compliance obligations all influence how it responds to the same set of risk signals. This means that a deposit that clears one platform without issue may still trigger a review at another, for reasons that relate entirely to that platform’s internal policies rather than anything about the specific transaction.

Why Legitimate Users Can Still Have Crypto Deposits Frozen

One of the most common questions that follows a deposit freeze is straightforward: “I have not done anything wrong. Why is my deposit under review?”

The answer is that exchanges screen the history of the cryptocurrency itself, not only the identity of the account holder. A user who received crypto as payment for legitimate work, bought it through a reputable platform, or received it as a gift may still have that crypto reviewed if its previous transaction path—before it reached the current owner—includes exposure to a high-risk source.

Crypto assets carry their transaction history with them on the blockchain. If funds at some earlier point passed through a wallet connected to a scam, a mixer, or a sanctioned entity, that history is visible to the exchange’s screening system even if the current account holder had no knowledge of or connection to that earlier activity. The exchange is not necessarily concluding that the account holder did anything wrong. It is responding to risk signals in the transaction path that its compliance process requires it to review.

This situation is sometimes called a false positive in compliance terminology: the risk signal exists in the transaction path, but the current account holder has no connection to the underlying activity that created it.

This is also why the same funds can raise different levels of concern depending on how many steps removed the current holder is from the original risk source, and how significant that source is. A distant indirect exposure to a low-risk category is treated very differently from a direct exposure to a sanctioned wallet or a recent hack cluster.

What Happens If Your Crypto Deposit Is Selected for AML Review?

When a deposit is placed under AML Review, the specific process varies between exchanges, but several common elements tend to appear. The funds are temporarily unavailable for trading or withdrawal while the compliance review is active. In some cases, account activity or withdrawal may be temporarily restricted until the review is completed. The exchange’s compliance team reviews the transaction manually, using blockchain analytics and any available account information.

The exchange may contact the account holder to request additional information. This is known as a source of funds request, and it typically involves asking the user to explain or document where the deposited cryptocurrency came from. Depending on the situation, the exchange may ask for proof of the original purchase, exchange account statements, transaction records, wallet ownership evidence, invoices or contracts related to a business payment, or other documentation that helps establish the origin of the funds.

Responding to these requests clearly and promptly, with whatever documentation is genuinely available, is generally more useful than avoiding or delaying the response. The review process cannot be bypassed by contacting support repeatedly or applying pressure—it follows the exchange’s internal compliance procedure on its own timeline. Depending on the outcome, the deposit may be credited to the account, the exchange may request further information before making a decision, or other actions may be taken according to the exchange’s compliance policies and the specific circumstances of the case.

How Long Does an AML Review Take, and Does It Mean Your Funds Are Lost?

There is no standard timeframe for an AML Review. The duration depends on the exchange’s internal procedures, the complexity of the transaction being reviewed, the level of risk identified, whether additional documents have been requested and provided, and how the case is prioritized within the compliance team’s workload. Some reviews resolve within hours or days. Others take longer, particularly when the transaction history is complex or when multiple rounds of information exchange are needed.

A status of Under Review, Pending Review, or Frozen does not automatically mean the funds are permanently lost or that the account has been closed. In many cases, deposits remain temporarily unavailable while the exchange completes its internal assessment. After the review, the exchange may credit the deposit, request additional information before making a final decision, return the funds where permitted by its policies, keep restrictions in place while further review continues, or take other actions under its compliance procedures. The outcome depends on the specific risk findings, the exchange’s policies, the information provided by the account holder, and other factors specific to the case. No general statement about likely outcomes is accurate for every situation.

How to Reduce the Risk of a Frozen Crypto Deposit

No advance check can guarantee that a deposit will never be placed under AML review. Exchanges apply their own risk thresholds to every incoming transaction, and those thresholds can change. But there are practical steps that reduce the likelihood of deposit delays and prepare a user to respond if a review does occur:

• Check Wallet Risk Before Sending or Receiving: Screening a wallet address before a transaction can surface exposure to scams, stolen funds, sanctions, mixers, or darknet markets. It does not provide a legal guarantee of acceptance, but it helps identify obvious risk signals before they reach an exchange.
• Understand Who You Are Transacting With: When receiving crypto from an unknown counterparty—through OTC, P2P, or a business arrangement—knowing something about the source and being able to describe it clearly is useful if a source of funds request follows.
• Avoid High-Risk Counterparties Where Possible: Receiving funds from wallets with significant exposure to high-risk categories transfers some of that exposure to your own transaction history. This is not always avoidable, but awareness of the risk is relevant for larger transactions.
• Keep Records of Significant Transactions: Exchange statements, purchase receipts, wallet transaction histories, invoices for business payments, and TxIDs for all relevant transfers provide the documentation that supports a source of funds explanation if one is requested.
• Understand the Origin of Funds Before Depositing: For large deposits or funds with a complex history, being able to clearly explain and document where the cryptocurrency came from before it reaches the exchange is more straightforward than reconstructing that explanation after a review has begun.
• Be Prepared to Respond Clearly if Asked: If the exchange requests source of funds information, the ability to respond promptly with clear documentation reduces the time the deposit remains under review.

Conclusion

A crypto deposit that is frozen or placed under AML review after an exchange check is a compliance event, not necessarily an accusation. Exchanges screen incoming deposits as part of their legal and internal obligations, and the presence of risk signals in a transaction’s history can trigger review regardless of whether the current account holder was aware of or connected to any earlier high-risk activity.

Understanding what triggers these reviews, what typically happens during them, and what steps can reduce their likelihood gives users and businesses a more accurate picture of how exchange compliance actually works—and helps avoid the confusion that comes from seeing a confirmed blockchain transaction without a credited balance.

FAQ