A cluster of recent Bybit customer complaints is raising questions about how aggressively cryptocurrency exchanges apply transaction-risk controls after users claimed that transactions worth as little as $5 to $21 were followed by restrictions affecting accounts holding thousands — and in one case allegedly more than $200,000.
The reports do not prove that Bybit is incorrectly freezing customer accounts, and the individual claims have not been independently verified. But the repeated sequence is notable: a small withdrawal, payment or transfer is rejected or flagged, a compliance review begins, and the customer then says a much larger account balance becomes inaccessible for days or weeks.
Bybit’s own documentation confirms that such a mechanism is possible. The exchange says a withdrawal can be rejected when its systems consider the destination address high-risk and that an account may subsequently face withdrawal restrictions while further checks are carried out.
A 21 USDT Transaction Has Now Become a Nearly Month-Long Case
One review published on October 5 says a 21 USDT withdrawal on September 6 immediately resulted in a compliance case and two restrictions that blocked both withdrawals and trading. The reviewer says more than $10,000 remains inaccessible almost four weeks later, with no estimated completion date.
However, the new review should not be counted as a separate independent complaint. The UID and compliance case number match an earlier September review describing the same 21 USDT transaction. That earlier version said approximately $25,000 was restricted.
The October 5 post therefore appears to represent a continuing account dispute rather than another customer experiencing an identical problem. That distinction matters because the strength of the story comes from several different accounts showing a similar pattern, not from counting repeated posts about the same restriction as separate incidents.
Other current complaints are nevertheless independent and describe remarkably similar triggers.
One customer says an attempted $7 TRX transaction on September 23 preceded restrictions affecting an account holding approximately $20,581. The reviewer says the transaction became subject to a sanctions or compliance review and that access remained restricted 11 days later.
Another user says an approximately $15 transaction was declined on July 22 before withdrawals were disabled on an account containing around $1,745. The reviewer claims the restriction had continued for 74 days despite multiple support tickets.
A separate October complaint says Bybit rejected a 5 USDT TRC20 payment for a digital subscription after identifying the destination as high-risk. The user says the transaction never left the exchange but that the incident nevertheless resulted in broader account restrictions.
The most extreme allegation comes from a user claiming that a failed $5.40 internal transfer preceded a full account restriction affecting more than $200,000. The customer says the transfer did not reach the blockchain and generated no transaction ID, making that case materially different from complaints involving external wallet addresses.
Bybit Says High-Risk Addresses Can Lead to Account Restrictions
There is an important difference between verifying the complaints and verifying whether Bybit has systems capable of producing the outcome customers describe.
On the second point, Bybit’s documentation is clear.
The exchange says customers may receive a risk warning when its systems identify a potential security risk associated with a withdrawal address. If a user continues with that address and Bybit ultimately classifies it as high-risk, the withdrawal may be rejected and the account may be placed under withdrawal restrictions until additional verification is completed.
Bybit also says its enhanced due diligence process can involve transaction histories, source-of-funds information and blockchain analytics designed to determine whether cryptocurrency originated from legitimate sources. During an EDD review, functions including withdrawals, P2P trading and fiat services may be temporarily limited.
That resembles a recent Binance case involving a rejected $100 transfer, where an attempted transaction that never reached its destination allegedly preceded a longer withdrawal restriction.
Recent Gemini withdrawal complaints have highlighted the same broader distinction between an exchange-wide outage and an account-specific restriction generated by security, funding or compliance controls.
Bybit has also responded publicly to several recent complaints by saying individual cases were being escalated to its compliance team. In other responses, the company has rejected suggestions that customer funds are restricted arbitrarily and said restrictions occur in specific circumstances connected with individual account activity or regulatory requirements.
Why a $5 Transaction Can Trigger a Much Bigger Review
The dollar amount is probably the wrong number to focus on.
Compliance systems do not necessarily treat a $5 transaction as harmless simply because it is small. What can matter more is where the funds are going, where they came from, which wallet clusters have previously interacted with the address and whether blockchain analytics associate a counterparty with scams, hacks, sanctioned entities or other suspicious activity.
FATF’s risk-based guidance for virtual-asset service providers specifically discusses wallet-address screening and blockchain analytical tools as part of transaction-risk assessment.
This is also why crypto sanctions screening increasingly extends beyond explicitly blacklisted companies. Funds can pass through multiple addresses before reaching a regulated exchange, forcing compliance systems to make judgments about indirect exposure rather than simply checking whether the wallet itself appears on a sanctions list.
From that perspective, a $7 withdrawal to a highly risky counterparty can theoretically matter more than a $10,000 withdrawal to an established exchange wallet.
The $5.40 internal-transfer complaint is harder to fit into that explanation. If the user is correct that the transfer remained entirely inside Bybit and never touched an external blockchain address, external wallet screening alone would not explain the alleged restriction. It could involve another internal risk signal, or the timing could be coincidental. There is currently not enough public evidence to determine which.
The Bigger Problem Is the Scope of the Restriction
For retail investors, the uncomfortable part is not that exchanges run compliance checks. They have strong reasons — and often regulatory obligations — to stop transactions associated with scams, stolen assets, sanctions exposure or money laundering.
The harder question is proportionality once the system triggers.
If a 5 USDT transaction raises a legitimate concern, rejecting that transaction is easy to understand. Restricting a five-figure account for weeks is a much bigger intervention, particularly when the customer says the platform has not explained what additional information is required or when the review might end.
That does not mean the restriction is unjustified. Compliance teams sometimes cannot disclose exactly what triggered an alert because doing so could reveal how detection systems work. But the trade-off becomes increasingly difficult as reviews stretch from hours into weeks or months.
A separate Binance account review carrying a potential 60-day timeline recently illustrated the same issue: the practical risk for customers is not necessarily losing ownership of their assets, but temporarily losing control over when those assets can be traded or withdrawn.
Repeated Small-Transaction Cases Could Expose a False-Positive Problem
The pattern becomes more important if additional independently documented cases appear.
A well-designed compliance system should be sensitive enough to stop genuinely dangerous transactions. The problem is that greater sensitivity usually creates more false positives. Blockchain analytics are particularly complicated because wallet histories are messy: ordinary users can receive assets that previously passed through exchanges, bridges, mixers, gambling platforms, hacks or sanctioned services without knowing the full transaction history.
If Bybit’s controls are successfully identifying genuinely risky counterparties, these complaints may simply show what aggressive compliance looks like from the customer side.
If relatively weak wallet associations are instead producing account-wide restrictions lasting weeks or months, the issue becomes different. The risk engine may be protecting the platform while transferring a large operational cost to innocent customers caught in review queues.
The next useful evidence will therefore not be another anonymous complaint saying an account is frozen. What matters is whether different users can document the same restriction state, whether Bybit eventually identifies the triggering risk category, how long reviews take to resolve, and whether accounts are restored after customers provide requested information.
For investors, there is also a simpler lesson. Centralized exchanges remove the burden of private-key management, but they replace it with platform-access risk. A balance can remain visible in an account while the practical ability to trade, withdraw or hedge it disappears during a compliance review.
The transactions attracting scrutiny in the latest Bybit complaints are tiny. The balances allegedly affected are not. That mismatch is exactly why the pattern is worth watching.
Johan Shamshad is a financial markets writer at Dave Finances covering cryptocurrencies, trading platforms, brokers, fintech, financial regulation, and developments across global markets. He previously worked at Gulf News, adding newsroom experience to his coverage of fast-moving financial and digital-asset markets.
His work focuses on identifying market-moving events, company developments, regulatory changes, product launches, and shifts in trading and financial infrastructure.
Johan contributes news and analysis designed to help readers understand not only what happened, but why a development matters and how it may affect the wider financial landscape.