Why Does Your Exchange Ask for the Source of Funds When You Deposit Crypto?

29 September 2026

When you deposit cryptocurrency into an exchange account and it asks where the funds came from, the exchange is complying with legal obligations - not being nosy. The request is a standard part of anti-money laundering (AML) rules that apply to most regulated crypto platforms worldwide. Exchanges must verify that the crypto you are depositing did not come from criminal activity, sanctions violations, or other prohibited sources. If they skip this check, they risk fines, losing their license, or being cut off from the banking system. The question is not optional for them, and ignoring it can freeze your deposit or get your account closed.

Why the Exchange Needs to Know

Regulated exchanges are legally required to know their customers and the origin of their funds. This is not a policy they choose; it is a regulatory requirement under laws such as the Bank Secrecy Act in the United States, the Fifth Anti-Money Laundering Directive in the European Union, and similar frameworks elsewhere. The rules apply to any platform that holds customer funds, processes trades, or facilitates transfers.

The specific trigger for a source-of-funds question is often a deposit that exceeds a certain size, arrives from an unusual address, or comes from a privacy-enhancing tool like a mixer. But many exchanges now ask for source information on any deposit that looks suspicious or exceeds a low threshold - sometimes as little as a few hundred dollars worth of crypto.

What Counts as an Acceptable Source

Exchanges generally expect you to name a clear, verifiable origin for the funds. Common acceptable answers include:

• Salary or business income - You bought the crypto with money from your job.
• Sale of another asset - You sold property, stocks, or other crypto.
• Gift or inheritance - Someone gave you the crypto or the money to buy it.
• Mining or staking rewards - You earned the crypto through proof-of-work or proof-of-stake.
• P2P trade or exchange - You bought it from another person or on a different platform.

The exchange may ask for supporting documents: bank statements, trade confirmations, pay stubs, or a signed letter from the sender. If you cannot provide anything, the exchange will likely reject the deposit or lock the funds until you explain.

What happens when you do not answer

If you ignore the request or give a vague answer like "the customer bought it on another exchange" without proof, the exchange will usually:

1. Freeze the deposited funds in a non-withdrawable state.
2. Send follow-up emails asking for documentation.
3. Give you a deadline - often 30 days - to provide the information.
4. Close your account and return the funds to the original sending address if you do not comply.

Some exchanges will report the incident to financial intelligence units if the amount is large or the explanation seems fabricated. This is rare for small amounts, but the risk exists.

How to prepare before you deposit

You can reduce friction by having the documentation ready before you send crypto. Follow these steps:

1. Check your exchange's deposit policy - Look for a page titled "Deposit Requirements" or "AML Policy" in the exchange's help center. Note the threshold amounts and document types they accept.
2. Keep a record of your purchase - If you bought crypto on another exchange or a P2P platform, save the trade receipt, order history, or withdrawal confirmation. Screenshots are usually not enough; PDF exports or CSV files are better.
3. Maintain a consistent trail - If you move crypto from a hardware wallet to an exchange, the exchange may want to see the transaction history from the wallet or the origin of the funds that went into it. The further back your records go, the easier the answer.
4. Use the same exchange for deposits and withdrawals - Moving funds between multiple exchanges in a short time increases scrutiny. If you can, buy and hold on one platform.

Why this is not a privacy violation

Some users feel that source-of-funds questions invade financial privacy. The reality is that exchanges are acting as regulated intermediaries. They do not get to decide which rules to follow. If they ignore the requirement, they violate the law and risk being shut down. The privacy loss is a trade-off for access to a platform that connects to the traditional banking system.

If you want to avoid source-of-funds questions entirely, you can use a non-custodial wallet and trade on decentralized exchanges (DEXs) that do not collect personal information. But DEXs have their own risks: lower liquidity, less fraud protection, and no customer support if something goes wrong.

What the laws actually require

The specific legal obligation is called "customer due diligence" (CDD) and "enhanced due diligence" (EDD) for higher-risk transactions. Under most AML regimes, exchanges must:

• Identify the beneficial owner of the funds.
• Understand the purpose of the transaction.
• Verify that the source of wealth is legitimate.
• Report any suspicious activity to authorities.

The Travel Rule, which applies to many jurisdictions, also requires exchanges to share sender and receiver information for transactions above a certain value - typically $1,000 or €1,000. That rule is why you may see the exchange ask for the recipient's name or address before you can send crypto out.

The Bottom Line

Your exchange asks for the source of funds because regulators require it. The question is not optional for the platform, and avoiding it will only delay your deposit or get your account restricted. Keep records of where your crypto comes from, be prepared to provide a clear explanation, and treat the request as a routine part of using a regulated financial service. If that does not suit you, look for unregulated options - but understand what you give up in exchange.

Back to regulation