Exchange Safety: Practical Guide and Checklist

If an exchange login, withdrawal, deposit, or app suddenly stops working, pause before clicking links or replying to messages. Start from the exchange website or app you already trust, check official notices where available, and treat unsolicited “support” contact as high risk.

This guide cannot tell you whether a specific exchange will unlock an account, credit a deposit, reverse a transfer, or recover funds. It is a safety checklist for reducing avoidable harm while you verify what happened through official channels.

Summary box — what to do now: use a known official route, protect your login and email access, save evidence, avoid private “support” messages, and do not share seed phrases, private keys, passwords, login codes, or remote access.

Date checked: Source links and public guidance cited in this article were checked on 2026-06-19. Exchange support rules, outage pages, account controls, fees, and response timelines can change, so verify exchange-specific details directly with the relevant exchange before acting.

This article is general safety information, not legal, financial, technical-recovery, or account-access advice. If you face legal deadlines, identity theft, or a large loss, consider contacting appropriate professional support or official reporting channels in your jurisdiction.

A real account issue and a scam can feel similar when money appears stuck. Login errors, delayed transfers, device problems, account restrictions, and confusing support messages can create urgency, and scammers often use urgency, impersonation, and promises of help to pressure people into unsafe actions.

Consumer and enforcement guidance repeatedly warns users to be cautious with crypto payment requests, promises of guaranteed results, impersonation, suspicious links, and requests for sensitive access information. For exchange users, the safer first move is to verify through a known official route rather than through links sent by strangers, comments, chat apps, ads, or unofficial accounts.

Use this table as a triage aid, not as proof of what happened. The same signal can have more than one explanation, so keep the wording cautious until the exchange or another verified source confirms details.

1. Pause before replying to any message about the issue.
2. Open the exchange using a saved bookmark, typed address, or official app you already installed.
3. Check official account notices, help pages, and status information if the exchange provides them.
4. Decide whether the problem appears platform-wide, account-specific, transaction-specific, or message-driven.
5. Secure the email account connected to the exchange before relying on password resets.
6. Change compromised or reused passwords and review two-factor authentication settings where available.
7. Preserve screenshots, timestamps, ticket numbers, transaction IDs, addresses, and suspicious messages.
8. Contact support only through the verified exchange website or app.

For login or account access problems, record the exact error message, the time it appeared, the device used, and whether any password reset or new-device email arrived unexpectedly. Do not include passwords, seed phrases, private keys, or full authentication codes in public posts.

For deposit or withdrawal problems, preserve practical evidence such as the transaction ID, network, sending and receiving addresses, memo or destination tag if used, timestamp, and any exchange notice shown in the account. These details may help an official support team understand the issue, but they do not prove that recovery or account access will be possible.

For suspected impersonation, save the message, username, sender address, domain, payment address, and any requested fee or credential demand. Redact personal data before sharing evidence publicly or with anyone outside an official support or reporting channel.

Stop the conversation and verify through official channels if any of these appear:

• “Support” contacts you first through a private message, chat app, comment, or unofficial account.
• The person asks for a seed phrase, private key, login code, password, screen share, wallet file, or remote access.
• The person demands an “unlocking fee,” “verification deposit,” “tax,” “gas fee,” or other payment before help.
• The person claims they can certainly recover funds, release a withdrawal, or use insider access.
• The link goes to a lookalike domain, shortened URL, sponsored result, or unfamiliar ticket portal.
• The person pressures you to act before checking official channels.

Do not install exchange, wallet, browser-extension, or “security” tools from links sent in messages. Do not try to bypass account reviews, identity checks, withdrawal controls, or platform restrictions.

Do not send additional funds to prove ownership, unlock funds, pay tax, or test a route until you have verified the situation through official channels. Do not delete suspicious messages before preserving evidence.

• If the issue appears platform-wide, monitor only official exchange notices or status information and avoid unofficial “fix” links.
• If only your account is affected, secure the connected email account, change exposed passwords, and contact verified exchange support.
• If a transaction is delayed, save the transaction ID, network, address details, timestamps, and any in-account notice before opening a support case.
• If someone offers recovery, unlocking, or insider help for a fee, stop contact and preserve the messages.
• If you believe funds or identity data were stolen, consider reporting through appropriate official channels in your country.

Not necessarily. A delay can have several causes, including account-specific, technical, review-related, or transaction-related issues. Verify through official exchange channels before assuming a breach or responding to anyone who claims special access.

Treat unexpected private support messages as unsafe until proven otherwise. Navigate directly to the exchange’s official website or app and compare the message with official account notices, support guidance, or known support domains.

Be extremely cautious, especially if they promise a certain result, demand upfront fees, or ask for credentials. Consumer and enforcement guidance warns that crypto scammers often use payment demands, impersonation, and promises of profit or recovery to exploit victims.

Protect the connected email account, change exposed passwords, review two-factor authentication settings where available, preserve evidence, and contact the exchange through its verified support route.

A transaction hash is not the same as a private key or password, but it can reveal activity connected to an address. Share only what is necessary, avoid exposing personal account details, and redact sensitive information from screenshots.

• FTC: What to know about cryptocurrency and scams — consumer guidance on cryptocurrency scam patterns, payment demands, and impersonation risks.
• FBI IC3: Cryptocurrency investment fraud public service announcement — law-enforcement warning on crypto fraud tactics and reporting considerations.
• CFTC: Customer Advisory — Avoid Crypto Scams — regulator guidance on avoiding crypto scam claims and high-pressure offers.
• Coinbase Help: Avoiding cryptocurrency scams — exchange help guidance on avoiding scam contact, credential requests, and suspicious offers.
• Coinbase Help: Recognize Coinbase phishing scams — exchange help guidance on phishing, suspicious messages, and safe verification habits.
• Coinbase Status — example of an official exchange status page for checking public service notices.