Pay a fee or tax to unlock your withdrawal: advance-fee crypto scams

The victim already deposited to a fake exchange, romance-investment platform, mining cloud, or “broker.” The dashboard shows a balance. Withdrawal is almost ready — except a rule appears: pay tax to the IRS-lookalike address, cover network gas, clear an AML hold, or buy insurance. Handlers coach urgency: prices will move, the window closes, compliance is calling.

After the first fee, a second appears: underpayment, currency mismatch, or a new regulation. Each payment is a real on-chain transfer to the scammer. The balance on screen never becomes withdrawable to a wallet you independently control.

• Fee demanded in crypto to an address they provide — not deducted from the displayed balance.
• Official-sounding labels: tax, VAT, AML, OFAC, gas, liquidity, insurance.
• Threats that the account will be seized if you refuse.
• Refusal to let you withdraw a test amount to your own exchange account without paying first.

Legitimate custodial services deduct fees from balances they already hold or publish fee schedules you can verify on official domains. They do not cold-call you on Telegram demanding USDT to a personal wallet before a withdrawal. Fake platforms cannot “release” what they never segregated for you; the ledger entry is fiction.

Blockchain transfers you already made to them are generally irreversible. Sending more does not create a legal unlock — it increases loss. Anyone claiming otherwise is selling hope against finality.

Stop the fee loop immediately. Preserve evidence. Do not negotiate a “final” payment under deadline pressure.

Once victims stop paying the platform, a new cast appears: recovery agents, fake lawyers, or “cybercrime units” who found your case. They recycle the same mechanic — pay a bond, pay gas to move seized funds, pay a certificate fee — sometimes while posing as help against the first scam.

Red flags match our recovery-scams guide: guaranteed percentages, seed requests, secrecy, and fake dashboards. Paying a recovery fee after an unlock fee is a known double-hit pattern, especially after pig-butchering and fake-exchange losses.

1. Hashes of original deposits and every unlock/tax/gas fee payment.
2. Addresses that received fees and any QR codes or invoices.
3. Screenshots of the withdrawal error, fee notice, and chat instructions.
4. Platform URL, app name, and handler usernames.
5. UTC timeline from first deposit through last fee.

File a police report when you can do so safely. Bring primary sources, not only screenshots of the fake balance. Our police guide outlines packet basics. If funds (including fee payments) later hit labeled exchange clusters, a factual compliance contact may apply — see the exchange-freeze guide. Nobody can honestly promise a freeze or refund.

Both the original deposits and the fee payments are traceable events. A path report can show consolidation patterns and possible KYC doors. That supports authorities and counsel. It does not unlock the fake account or reverse fees.

• Helps when you need a coherent hop table across many small fee txs.
• Helps when several networks were used for “tax” vs “gas” stories.
• Does not guarantee identifiable cash-outs or institutional action.

MBTrace delivers an investigation PDF (from $50+, typically 24–48h after payment) only after an analyst accepts the case. No seeds, no recovery promise. Tone reference: /sample-report.pdf. Soft CTA: report a case if you need that document for your packet.

1. Refuse further unlock, tax, or gas payments.
2. Export chats, URLs, and all related txids.
3. Secure remaining real wallets and exchange logins.
4. Ignore inbound recovery DMs; verify any helper against seed/guarantee red flags.
5. Report to police; consider tracing if a letter-ready path would help.
6. If the loss started via romance or a fake trading app, read those guides for context-specific evidence tips.

Day-one containment overlaps the first-24-hours checklist. Emotional pressure is intentional — slow down and use a second pair of eyes before any crypto leaves your wallet again.

• Real exchange: you logged in via a bookmarked official domain; fees show in the withdrawal UI and debit the same account balance.
• Real self-custody: network gas is paid from the wallet you control when you broadcast — not sent ahead to a stranger to “enable” a future withdrawal.
• Scam: balance trapped on their screen; separate prepayment demanded; support only through the handler who sold you the deposit.

This article is general information, not legal advice. Local procedures differ. Honest investigation products sell documents and refuse outcome guarantees — the opposite of unlock-fee theater.