10 Crypto Exchange Red Flags That Predict a Collapse

Disclosure: This article is information and opinion, not financial advice. See our full disclaimer.

FTX had a Super Bowl ad. Celsius had 1.7 million users. QuadrigaCX was the biggest exchange in Canada. All three are gone, and here’s the part that still bothers me: in every single case, the warning signs were sitting in plain sight for months. People just didn’t know what to look for, or didn’t want to.

I’ve spent a lot of hours reading exchange post-mortems, bankruptcy filings, the angry Reddit threads from the weeks before each freeze. The same flags show up every time. Not vague vibes. Specific, checkable things. So this is the list I wish someone had handed me years ago: ten red flags that keep predicting collapses, and for each one, the exact check you can run today in a few minutes.

The short version

The biggest crypto exchange red flags are slow or newly restricted withdrawals, yields with no explained source, missing proof of reserves, no verifiable legal entity or license, guaranteed-return promises, a very young domain, unsolicited contact from strangers or “support”, forced use of a native token, fee structures that don’t add up, and sloppy security basics.

1. Withdrawals get slower, or grow new “verification” steps

This is the flag that matters most, because it’s usually the last one you’ll ever see. Celsius froze withdrawals on June 12, 2022, blaming “extreme market conditions”. Bankruptcy filing came a month later. FTX halted withdrawals on November 8, 2022 and was in Chapter 11 within three days. And in both cases, users had been posting about delays creeping from hours into days for weeks beforehand. The signal was public. Nobody priced it.

An exchange inventing new withdrawal hurdles, surprise re-verification, “security reviews” that only apply to money leaving, minimum holding periods that didn’t exist last month… that’s often an exchange quietly managing a liquidity problem.

Run this check: before depositing anything meaningful, deposit a small amount and withdraw it the same week. Time it. Then search “[exchange name] withdrawal problems” on Reddit and X, filtered to the last 30 days. One angry user is noise. Forty in a month is signal.

2. Yield with no explained source

Celsius paid up to 18% APY on some assets. Anchor Protocol, the engine behind Terra, paid a “stable” 20% right up until the whole ecosystem erased roughly $40 billion in May 2022. Neither could ever explain, in plain mechanical terms, where the money came from. Because the honest answer was: from new deposits and escalating risk.

Yield itself isn’t a scam. Staking and lending have real, modest returns. The flag is the missing explanation. If the answer to “who pays this and why?” is marketing language instead of a mechanism, you are the mechanism.

Run this check: find the yield’s source in the platform’s own docs. If you can’t diagram it in one sentence (“they lend my ETH to margin traders and pass me part of the interest”), skip it.

3. No proof of reserves, or wallets you can’t find

After FTX, the big exchanges started publishing proof of reserves: cryptographic attestations, usually Merkle-tree based, that let you verify your balance is included in wallets the exchange actually controls. Kraken, Binance, OKX and others publish these now. An established exchange still refusing to show reserves in 2026 is making a choice, and you should read it as one.

Fair warning about the limits though. Proof of reserves shows assets, not liabilities. An exchange can display $2 billion in wallets while owing $3 billion. It’s a floor for trust, not a ceiling.

Run this check: look for a proof-of-reserves page on the exchange itself, then cross-check its main wallets on a tracker like DefiLlama’s CEX transparency dashboard. Hidden wallets on a platform holding customer money? Walk away. You should also verify if there are any random tokens in your wallet that you are unaware of. Understanding the assets you hold can help prevent losses and unintentional risks. Make sure to regularly check your wallets for any discrepancies or unauthorized transactions.

4. You can’t find out who actually runs it

QuadrigaCX lost about CA$190 million of customer funds in 2019 when its founder died holding sole access to the wallets. Investigators later concluded the whole thing had been operating as a fraud, with fake trading and customer money moved into personal accounts. One man. No board, no audits, no second keyholder. And nobody checked, because the checking felt paranoid. It wasn’t.

A real exchange has a registered legal entity, named executives, a jurisdiction, and licenses you can verify in a government database. Not just claim in a footer. Verify. I wrote a full guide to checking exchange licenses register by register, and the whole routine takes about two minutes per platform.

Run this check: take the license number from the footer and look it up at the source: the FCA register in the UK, FinCEN’s MSB search in the US, your regulator’s list of authorized crypto providers in the EU. A license that’s claimed but not findable is worse than no claim at all.

5. Guaranteed returns, “AI trading”, risk-free anything

The oldest flag and still the most profitable one for scammers. Guaranteed 2% daily. Our AI bot never loses. Risk-free arbitrage. No legitimate exchange guarantees returns, real ones make money from fees and spreads and say so plainly.

The 2026 twist is that the fake platforms look excellent now. Cloned interfaces, fabricated volume, manufactured reviews. Design quality stopped being a trust signal years ago. The promises are where the tell lives.

Run this check: if any page contains “guaranteed”, “risk-free”, or a specific promised return, close the tab. This one filter removes most outright frauds on its own.

6. The domain is younger than the “since 2019” claim

Fake exchanges routinely claim years of history on a website registered eleven weeks ago. Takes under a minute to catch, and almost nobody bothers.

Run this check: look up the domain on a WHOIS service (ICANN’s lookup is fine). Registered four months ago but “trusted since 2018”? Done. While you’re at it, sanity-check the trading: huge claimed volume with near-empty order books and wide spreads means the numbers are printed, not traded.

7. Someone brought you there

Nobody legitimate DMs strangers about an exchange. The wrong-number text that becomes a friendship that becomes an investment tip is a documented playbook, pig-butchering operations run it at industrial scale, and the “exclusive platform” they steer you to is controlled by them end to end. It shows fake profits until your deposit is big enough to steal, then invents a “tax” you must pay to withdraw.

Same family: support agents who contact you first. Real support never initiates, and never asks for passwords, 2FA codes, or seed phrases. Even real channels get weaponized. The Coinbase incident of late 2024, where bribed support contractors leaked data on tens of thousands of users, fueled exactly this kind of follow-up phishing.

Run this check: ask yourself how you found this platform. An ad or your own research is normal. A person you’ve never met in real life is the red flag itself, and at that point the platform almost doesn’t matter.

8. Everything routes through their token

Forced conversion of deposits into a native token. Withdrawals paid only in that token. Boosted yields exclusively for holders. These structures make your exit depend on an asset the platform itself controls and can devalue. FTX’s balance sheet was famously propped up by FTT, its own token, and when FTT cracked, so did the exchange.

To be fair on the trade-off: exchange tokens aren’t inherently scams. BNB holders get real fee discounts on Binance, that’s a legitimate loyalty mechanic. The line is optionality. A discount for using the token is fine. A requirement to hold it to get your money out is not.

Run this check: read the withdrawal terms before depositing. If exiting in the asset you deposited isn’t guaranteed, don’t enter.

9. The fee math doesn’t add up

Fees you can’t find before signing up. Withdrawal costs discovered at withdrawal time. Spreads wide enough to hide a second fee inside. Legitimate exchanges publish full fee schedules because competing on fees is part of their business model. Platforms that hide fees are telling you where the real revenue comes from.

Run this check: find the complete fee schedule in under two minutes without creating an account. Can’t? That’s your answer.

10. Security basics are missing

No app-based or hardware 2FA (SMS-only is weak). No withdrawal address whitelisting. No cold storage policy. No bug bounty. Typos in the interface. Each alone is minor. Three together describe a platform that treats security as a cost, and platforms like that eventually prove it: over $2 billion was stolen from crypto services in the first half of 2025 alone, per Chainalysis.

Run this check: before funding an account, confirm the exchange supports authenticator-app or hardware-key 2FA plus address whitelisting. Enable both on day one.

Already on an exchange that’s waving flags?

Don’t announce. Don’t wait for clarity. Don’t hope. Withdraw in stages starting now, because flag number one teaches that by the time trouble is official, withdrawals are already frozen. Move funds to a wallet you control or to a licensed exchange you’ve actually verified. If a withdrawal gets blocked, document everything (screenshots, ticket numbers, timestamps) and report it to your national fraud authority. Recovery is rare, but reports are what get platforms investigated and domains seized. And ignore anyone who contacts you offering to recover your funds for a fee. Recovery scams specifically farm the victims of the first scam.

FAQ

How do I know if a crypto exchange is legit?

Verify, don’t vibe. Confirm the license in the regulator’s own database, check the domain age against its claimed history, find the proof-of-reserves page, test a small deposit-and-withdrawal cycle, and search for withdrawal complaints from the last 30 days. Fifteen minutes of checking beats any number of five-star reviews.

Are unregulated exchanges automatically scams?

No. Regulation varies wildly by country and some functional exchanges operate in gray zones. But an unregulated exchange offers you no legal recourse when something goes wrong, and something going wrong is a recurring event in this industry. Treat unregulated platforms as high-risk venues for money you can fully afford to lose, not as a home for savings.

Can I get my money back from a fake exchange?

Usually not, and anyone who guarantees recovery is running the follow-up scam. Your realistic moves: report to your national fraud authority and the platform where the scammer found you, notify your bank if fiat was involved (chargebacks occasionally work for card deposits), and document everything. Law enforcement does seize scam infrastructure. Individual restitution is the exception, not the rule.

Is it safe to keep crypto on any exchange long-term?

Safer than it was in 2022, on the top licensed platforms. But “not your keys, not your coins” survived as a saying because it keeps being true. My view: an exchange is a place to trade, not a place to store. For meaningful long-term holdings, self-custody in a hardware wallet removes this entire category of risk.

---

Spotted an error or an outdated fact? Tell us, we fix things in public. Corrections policy here.