Read the exact status before acting
Take note of the wording shown in the verified app or website. An incorrect-password lock, disabled login, identity review, withdrawal restriction, and closed account are different conditions and may use different recovery processes.
Check whether the message appears only in an email or text. Do not follow its link. Open the provider from a trusted bookmark or type the known official domain, then compare the status inside the authenticated account.
- Exact error or restriction message
- Time and device where it appeared
- Whether login, trading, or withdrawals are affected
- Recent password, email, phone, or 2FA changes
- Recent travel, device, network, or identity updates
- Any official case number already issued
Protect access you still have
If a trusted session remains open, do not log out reflexively. Review recent activity, sessions, API keys, withdrawal addresses, and security notifications without making unnecessary changes.
Secure the linked email and mobile account from a clean device. Change a reused or exposed password, but avoid repeated resets or verification attempts that can create more alerts. Never share a password, one-time code, recovery code, or screen-control access with someone claiming to unlock the account.
Use the matching official recovery route
Use the provider's login recovery, identity review, security appeal, or authenticated support flow that matches the displayed status. A legitimate review may request account identifiers, device history, transaction details, or identity evidence through a protected upload process.
Submit only the information requested and keep the case number. Identity checks and authenticator replacement can take time because they protect account ownership. Do not create duplicate accounts or upload edited documents unless the provider explicitly instructs you to do so.
Escalate without creating a second problem
If the stated review period has passed, reply through the existing official case instead of opening many conflicting tickets. Summarize the exact status, when it started, actions already completed, and the evidence available.
Treat anyone promising guaranteed recovery, priority access, or an employee contact for payment as untrusted. Do not send crypto to unlock an account. If unauthorized activity is possible, state that clearly in the official case and preserve timestamps, messages, IP or device alerts, and transaction IDs.
Common questions
Frequently asked questions
Why would a crypto exchange lock an account?
Possible reasons include repeated login failures, unusual access, a sensitive security change, identity review, policy or regional restrictions, or suspected unauthorized activity. The exact message matters.
Should I create a new account if the old one is locked?
Usually not without official instruction. A duplicate account can complicate identity checks or violate provider rules. Use the recovery or appeal route for the existing account.
Can someone on social media unlock my exchange account?
Do not trust that claim. Use only support reached from the verified provider website or app, and never disclose authentication secrets or send an unlock payment.
Primary references
Official sources checked
These official pages were reviewed on June 15, 2026. Exchange policies can change, so open the source before acting.