Can an exchange freeze stolen crypto? Contacting compliance

Custodial exchanges control balances on their books once a deposit is credited to a user account. In some cases — fraud reports, law-enforcement requests, or internal risk rules — they may restrict withdrawals. They do not “reverse” the blockchain. They also will not help based on a vague story without verifiable txids.

If funds never touch their wallets, they have nothing to freeze. If funds hit a mixer first, the trail may not support a clean deposit story.

Compliance and fraud desks need identifiers they can look up: deposit transaction hashes, amounts, asset, network, timestamps, and a coherent link from the victim source to their hot wallet or deposit address cluster — with clear confidence language.

• Useful: “Hop 6 lands in a labeled Exchange X hot wallet; hash …”
• Not useful: “I think it went to Binance somehow.”
• Honest: “Cluster attribution names the service tier, not the account holder.”

1. Use the exchange’s official support or legal/compliance channel — not DMs from strangers.
2. State you are reporting suspected illicit proceeds deposited to their service.
3. Include victim source tx, subsequent hashes if known, amounts, and UTC times.
4. Attach explorer links and any professional path extract.
5. Ask what their process is for fraud reports; do not demand a guarantee.
6. Keep a copy of everything you send.

Never send seed phrases to an exchange “to prove ownership” of a self-custody wallet. Ownership proofs, when needed, use safer message-signing patterns — and only through official flows.

Many freezes related to crime require a formal request from authorities. A victim email alone may only open a ticket. Parallel police reporting (see our police guide) can matter. Outcomes vary widely; nobody can honestly promise a freeze.

MBTrace produces an on-chain investigation PDF: path, labels with confidence, cash-out or dead end. That document is designed to be attachable for counsel, police, or exchange correspondence. It is not legal advice and not a recovery service. Analysts review before payment; declined cases cost nothing.

Early notice can help when deposits are still flagged internally. Still, a messy early email without hashes wastes cycles. Spend an hour assembling txids before you hit send. If funds move again after your first ticket, reply with the new hop instead of opening duplicate threads.

• One case ID per incident; reference it in every follow-up.
• Keep tone factual — insults and ultimatums do not speed compliance queues.
• If multiple exchanges appear on the path, contact only those with a defensible deposit story.
• Copy counsel or include them when they are already engaged.

Remember the boundary: even a perfect path PDF is a map. Freezes, account reviews, and subpoenas live in institutional process. Anyone selling a guaranteed freeze from a Telegram handle is selling fiction.

Victims sometimes email random large exchanges because the brand is famous, even when the path never touched them. That creates noise. Tracing answers the prior question: did value enter this custodian’s observable wallets? If no, pick another action — police packet, counsel, or further graphing — instead of shotgun tickets. A short “no deposit found on this service” note in your own file can stop you from repeating the same blind email next week.

Expect requests for government ID, a police report number if you have one, and a coherent timeline. Some desks ask for a signed statement; others only triage with txids first. Respond through the same official ticket. Do not send seeds, remote-desktop access, or photos of handwritten recovery phrases “as proof.”

• Deposit hash(es) into the service’s wallets, not only your loss hash.
• Asset, network, and amount matching the explorer.
• Your contact email that you check daily.
• Any prior ticket IDs with the same exchange.

Silence after a ticket is common. Follow up politely with new hops if the funds move; do not open five parallel tickets that fragment the case. If counsel is engaged, let them decide when formal letters replace informal fraud forms.

Cluster labels can be wrong, delayed, or too coarse. A hop tagged as a major exchange might be a shared hot wallet, a payment processor, or an outdated attribution. Honest reports say “labeled as” and separate observation from conclusion. That honesty is what makes a PDF usable for professionals — overclaiming gets ignored.

MBTrace’s sample report at /sample-report.pdf shows the tone: path, confidence language, and no recovery promise. Use that standard when you judge any vendor pitching “guaranteed freezes.”