Get too profitable on the wrong exchange, and your account gets locked. “Risk control”, they call it. No evidence, no clause, no timeline. This is the playbook offshore exchanges use to trap their own customers — and the case that finally made it impossible to ignore.
The playbook
Line up enough stories from MEXC, Bitget, Gate.io and KuCoin and one pattern emerges. Always the same six steps.
Step 1 — profit or a big balance triggers the freeze. Not a suspicious transaction; just performing too well, or wanting to withdraw a lot.
Step 2 — a vague reason. “Violation of the terms of use” — but which clause, exactly, is never said.
Step 3 — the war of attrition. Endless “reviews”, fresh KYC over and over, sometimes absurd demands.
Step 4 — the rules flip. Profit from a mistake the exchange itself made, and your trades get reversed and your gains taken back.
Step 5 — money comes back (almost) only after public pressure.
Step 6 — the offshore structure makes suing pointless.
It reads like a conspiracy theory until you go through the cases one by one. Start with the most famous.
The case that blew it open
July 2025. A pseudonymous futures trader who calls himself The White Whale watches his MEXC account, holding $3,158,572, go on lockdown. The reason MEXC eventually gives: he allegedly placed two orders within the same second — proof, according to the exchange, of bot use. The trader had completed every KYC step, including live video.
My only conceivable offense? I was too profitable.The White Whale, August 2025
What follows is a textbook example of step 3. MEXC demands he fly to Malaysia in person for an “in-person KYC” — a requirement that appears nowhere in the terms. He refuses. Instead of suing (step 6: the entity is untraceable even to its own regulator in the Seychelles) he goes for step 5: he goes public, launches a bounty that climbs to $2.5 million, and more than 24,000 people join in. On-chain investigator ZachXBT takes up his cause.
On 31 October 2025, MEXC caves. Chief Strategy Officer Cecilia Hsueh, publicly, on X:
We fucked up. We apologize to The White Whale, and his money is already released.Cecilia Hsueh (CSO of MEXC), 31 October 2025 proven
The money comes back. But the core of it stands: it only worked because the trader had reach. “This tweet wouldn't exist if he had 100 followers,” another user wrote. And the wave of complaints that followed — hundreds of traders with frozen accounts alleged — showed this was no one-off.
When you profit from their mistake
Step 4 is the most revealing, because that is where the exchange flips the roles completely. April 2025: a bug in Bitget's own market-making bot sends the price of the VOXEL token haywire; daily volume rockets to some $13 billion — more than bitcoin that day. Traders turn stakes of under $100 into millions.
Bitget's response? It freezes accounts, reverses the trades so the profits evaporate, and then sends lawyers' letters to eight of its own customers who had made more than $20 million between them — describing them as a “professional wool-pulling interest group”. proven
The message is unmistakable: when a customer exploits an exchange's mistake, it is theft. When an exchange freezes a winning customer, it is “risk control”.
Why suing is pointless
Why do these companies get away with it? Because the legal structure was designed that way. MEXC's operator turned out to be an unlicensed entity as far as the Seychelles regulator was concerned; the old company had already been dissolved. Gate is based in the Cayman Islands and routes disputes towards Hong Kong. The Dutch regulator AFM put it plainly in its MEXC warning: it is unclear from which country and which entity the service is offered, making it impossible to establish what position the consumer actually holds — the biggest risk is that consumers lose their entire deposit.
The odds of winning in MEXC's court are “next to none. That's by design.”Lawyers for The White Whale, via BeInCrypto
And the asymmetry is total: regulators fine exchanges for blocking too little (KuCoin paid $297 million to the US for failed anti-money-laundering controls). For freezing a customer without cause, there is no penalty at all.
How it can be done properly
Set a European exchange licensed under MiCAR or MiFID II against that, and the difference is not marketing but law. A licensed exchange must:
- segregate client money from its own funds (art. 70 MiCAR) and may not use client crypto for its own account;
- offer a free complaints procedure (art. 71) — not an error code as the only explanation;
- keep client holdings out of its own estate in the event of bankruptcy (art. 75);
- and — crucially — not trade on its own account on its own platform (art. 76(5)).
That supervision has teeth: when KuCoin's EU arm left its anti-money-laundering roles unfilled shortly after obtaining a MiCAR licence, the Austrian regulator banned it from taking on new customers within three months. So a licence is no whitewash — but the right question is not “does the exchange have a licence?” It is: are the products you use covered by that licence, and which entity is holding your money?
Sources & accountability
Every claim is labelled proven (court/regulator/confession), alleged (substantiated accusation) or rumour. Key URLs: MEXC/White Whale — Cointelegraph, Decrypt; Malaysia demand — Cointelegraph; Bitget/VOXEL — CryptoSlate; AFM warning on MEXC — AFM; KuCoin $297M — DOJ; MiCAR text — EUR-Lex.