If your crypto exchange freezes your account, the applicable law depends on where you live, where the exchange is licensed, and where your funds originated. In Europe, the regulatory landscape has been transformed by MiCA — the Markets in Crypto-Assets Regulation — which took full effect in December 2024. This guide covers the key regulations, regulators, and your rights in every major European jurisdiction.
As crypto compliance counsel operating under Swiss law, I work with clients across all European jurisdictions. The rules are increasingly harmonized, but the specifics — complaint processes, timelines, and enforcement — vary significantly by country.
EU level: MiCA and the AML framework
The EU's crypto regulatory landscape is now governed by two key pieces of legislation:
MiCA (Markets in Crypto-Assets Regulation, EU 2023/1114)
MiCA is the EU's comprehensive crypto regulatory framework, fully effective from December 2024. It establishes:
- Licensing requirements for Crypto-Asset Service Providers (CASPs) operating in the EU
- Consumer protection rules — including transparency about account restrictions
- AML obligations aligned with FATF standards
- The Travel Rule for crypto transfers above EUR 1,000
- Market abuse prevention for crypto-asset trading
Under MiCA, any CASP serving EU residents must be licensed by a national competent authority — even if the CASP is headquartered outside the EU. This means your exchange, if it serves EU customers, is subject to MiCA regardless of where it is based.
AMLR (Anti-Money Laundering Regulation, 2024)
The EU's updated AML framework, effective from 2027, extends to VASPs. Key changes:
- Travel Rule threshold lowered to EUR 1,000
- Stricter beneficial ownership requirements
- Enhanced screening for all transactions
- Mandatory reporting of suspicious transactions
TFR (Transfer of Funds Regulation, EU 2023/1113)
Implements the FATF Travel Rule for crypto. CASPs must ensure that transfers of crypto assets are accompanied by information about the sender and beneficiary. If you receive crypto from another exchange and the sender information is missing, your exchange may freeze the incoming funds.
Your rights under EU law
- Right to information: Under GDPR and PSD2, you have the right to know why your account is restricted. CASPs must provide a clear reason for the freeze.
- Right to complain: You can file a complaint with the national competent authority (BaFin in Germany, AMF in France, etc.). If unresolved, escalate to the European Securities and Markets Authority (ESMA).
- Right to due process: While AML reviews can legally take time, indefinite freezes without communication may violate MiCA's consumer protection provisions.
- Right to your funds: A freeze is not a forfeiture. The CASP remains a custodian of your assets and must return them when the review is concluded or if the account is closed.
Country-by-country guide
Germany
Regulator: BaFin (Bundesanstalt für Finanzdienstleistungsaufsicht)
Key law: KWG (Kreditwesengesetz), crypto custody license under §1 KWG, MiCA
Complaint process: File with BaFin's complaint portal. BaFin can investigate and order the CASP to comply with regulations. If BaFin does not resolve the issue, you can escalate to the administrative courts.
Specifics: Germany was one of the first EU countries to implement crypto custody licensing. BaFin-licensed exchanges must follow strict AML procedures. German residents have strong consumer protection rights under the KWG.
France
Regulator: AMF (Autorité des marchés financiers) and ACPR
Key law: PACTE Law (Loi PACTE), MONAC amendments, MiCA
Complaint process: File with AMF's mediation service. AMF can order the CASP to comply. Escalate to the Paris administrative court if necessary.
Specifics: French crypto regulations under PACTE require AMF registration for PSAN (Prestataire de Services sur Actifs Numériques) status. France has been aggressive in enforcement — several exchanges have been ordered to cease operations.
Netherlands
Regulator: DNB (De Nederlandsche Bank)
Key law: Wwft (Wet ter voorkoming van witwassen en financieren van terroristische), MiCA
Complaint process: File with DNB's complaint department. DNB has been particularly active in crypto enforcement — it fined Binance €3.3 million for operating without registration.
Specifics: The Netherlands has one of the strictest AML regimes in the EU. DNB-registered exchanges must follow stringent compliance procedures.
Italy
Regulator: OAM (Organismo Agenti e Mediatori) for registration, Bank of Italy for AML
Key law: Italian AML Decree (D.Lgs. 231/2007), MiCA
Complaint process: File with the Bank of Italy's complaint system. For consumer disputes, escalate to the Italian Financial Arbitrator (ABF).
Specifics: Italy requires all VASPs to register with OAM. Italian residents have consumer protection rights under the Italian Consumer Code.
Spain
Regulator: Bank of Spain (Banco de España) for registration, CNMV for securities
Key law: Spanish AML Law (Ley 10/2010), MiCA
Complaint process: File with the Bank of Spain's complaint portal. For consumer disputes, escalate to the Spanish Financial Complaints Service.
Specifics: Spain requires VASPs to register with the Bank of Spain. Spanish consumer protection law is robust.
Austria
Regulator: FMA (Finanzmarktaufsicht)
Key law: FM-GwG (Finanzmarkt-Geldwaschegesetz), MiCA
Complaint process: File with FMA's arbitration process. FMA can investigate and order compliance.
Specifics: Austria implemented the 5th AML Directive into national law. Crypto businesses must register with FMA.
United Kingdom (post-Brexit)
The UK has its own crypto AML regime, separate from the EU's MiCA. All crypto businesses operating in the UK must register with the Financial Conduct Authority (FCA) under the Money Laundering Regulations 2017 (MLRs).
Regulator: FCA
Key laws: Money Laundering Regulations 2017 (as amended), Proceeds of Crime Act 2002 (POCA)
Travel Rule threshold: GBP 1,000
Complaint process: File with the FCA. If unresolved, escalate to the Financial Ombudsman Service (FOS), which can award compensation up to £430,000.
Specifics: The FCA has been strict about crypto registration — many major exchanges (including Binance and Bybit) were initially unable to operate in the UK. UK bank account closures for crypto activity are also a significant issue — see our bank closure guide.
Switzerland
Switzerland has one of the most crypto-friendly regulatory environments, but also one of the most rigorous. Swiss law provides strong due process protections and banking secrecy — which is why we operate under Swiss law.
Regulator: FINMA (Finanzmarktaufsicht)
Key laws: Anti-Money Laundering Act (AMLA), Financial Market Infrastructure Act (FMIA), Blockchain Act (DLT Framework)
Travel Rule threshold: CHF 1,000
Complaint process: FINMA-regulated entities must follow specific procedures for account restrictions. You have the right to appeal to FINMA and, ultimately, to the Swiss Federal Administrative Court.
Advantage of Swiss counsel: Swiss banking secrecy (Article 321 of the Swiss Criminal Code) protects your financial information. This is a significant advantage when dealing with crypto freezes — Swiss legal counsel can communicate with exchanges and regulators while maintaining confidentiality that lawyers in other jurisdictions cannot guarantee.
Cross-border situations: which law applies?
One of the most complex aspects of crypto freezes is determining which jurisdiction's law applies. The general principles:
- Where you are resident: The AML law of your country of residence applies to you personally.
- Where the exchange is licensed: The exchange must comply with the law of every jurisdiction where it is licensed. If Binance is licensed in France and you are a German resident, both French and German law may be relevant.
- Where the funds originated: If the funds were earned or purchased in one country and transferred to an exchange in another, the source country's regulations may impose additional documentation requirements.
- OFAC extraterritoriality: US sanctions law applies globally. See our OFAC sanctions guide.
Swiss legal counsel is particularly valuable in cross-border situations because Switzerland is not bound by EU regulations but has its own strong AML framework. We can communicate with regulators and exchanges in multiple jurisdictions without exposing your information unnecessarily.
MiCA regulation deep dive
The Markets in Crypto-Assets (MiCA) regulation is the European Union's comprehensive crypto framework, and it fundamentally changes how crypto service providers operate in the EU. While MiCA's primary impact is on exchanges and issuers (not individual users), understanding its provisions helps you understand why exchanges request certain documentation and what legal rights you have as a customer.
MiCA was published in the Official Journal of the EU in June 2023 and entered into force in stages: the stablecoin provisions (Title III and IV) applied from 30 June 2024, and the Crypto-Asset Service Provider (CASP) provisions (Title V) apply from 30 December 2024. Every crypto exchange operating in the EU must now hold a CASP authorization — and those that do not are operating illegally.
For individual users, the most relevant MiCA provisions are those governing customer protection. Article 61 requires CASPs to act honestly, fairly, and professionally in the best interests of customers. Article 64 requires CASPs to provide clear, fair, and not misleading information about crypto-assets. Article 68 establishes complaint handling procedures — CASPs must have internal complaint handling procedures and respond to complaints within set timeframes. Article 71 gives customers the right to complain to the relevant National Competent Authority (NCA) if they are not satisfied with the CASP's response.
This means that if an EU-licensed exchange freezes your account and does not respond to your complaint within a reasonable timeframe, you can escalate to the NCA in the exchange's licensing jurisdiction. For example: Binance France SAS is licensed by the AMF — complaints go to the AMF. Coinbase Europe Limited is registered with the Central Bank of Ireland — complaints go to the CBI. Kraken is registered with De Nederlandsche Bank (DNB) — complaints go to DNB's complaints department.
MiCA also has implications for stablecoin freezes. Under Articles 44-48, Asset-Referenced Tokens (ARTs) and E-Money Tokens (EMTs) — which include USDT and USDC when they are issued or marketed in the EU — must comply with specific operational requirements, including redemption rights for token holders. While Tether and Circle have structured their EU operations to use MiCA-compliant tokens (EURT for Tether, EURC for Circle) that are separate from their global USDT/USDT, the global tokens are still affected by MiCA in practice because EU-licensed CASPs must screen them under the regulation's AML provisions.
For source-of-funds requests specifically, MiCA Article 62 requires CASPs to perform ongoing customer due diligence — including monitoring transactions and requesting updated information when risk profiles change. This is the legal basis for exchanges asking for SoF documentation after months or years of smooth account operation: your transaction pattern has changed your risk profile, and MiCA requires the exchange to update its due diligence.
Post-Brexit UK crypto regulation
The United Kingdom has taken a divergent path from the EU on crypto regulation. Post-Brexit, the UK is developing its own crypto framework rather than implementing MiCA. The FCA (Financial Conduct Authority) is the primary regulator for crypto in the UK, and its approach is more restrictive than the EU's — particularly regarding retail crypto access.
The FCA's crypto regime has two main pillars: (1) the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLRs), which require crypto firms to register with the FCA for AML purposes; and (2) the Financial Services and Markets Act 2000 (FSMA), as amended, which gives the FCA broader regulatory powers over crypto firms marketing to UK consumers.
Under the MLRs, every crypto firm operating in the UK must be FCA-registered. As of 2025, only about 10% of applicants have successfully obtained FCA registration — the rest were either rejected or withdrew their applications. This means many global exchanges either do not serve UK customers or serve them through separate UK-registered entities. Binance, for example, operates Binance Markets Limited (FCA-registered) for UK customers, with restricted product offerings compared to its global platform.
The FCA's Consumer Duty, effective from July 2023, has had a significant impact on crypto users. The Consumer Duty requires financial firms (including FCA-registered crypto firms) to deliver good outcomes for retail customers. While the Consumer Duty is primarily aimed at investment products, its application to crypto has led some banks and payment processors to restrict crypto transactions — citing the risk that retail customers may lose money on volatile crypto assets. This is why UK bank account closures for crypto activity are so common: banks are using the Consumer Duty as justification for debanking crypto customers.
If your UK bank closes your account due to crypto activity, you have the right to complain to the Financial Ombudsman Service (FOS). The FOS can investigate whether the bank's closure was fair and can order the bank to reopen the account or pay compensation. The FOS has ruled in favor of customers in several cases where banks closed accounts without adequate explanation or without giving the customer a chance to provide source-of-funds documentation. If you are a UK resident whose bank has closed your account over crypto activity, the FOS complaint process is free, does not require a lawyer, and typically resolves within 8-12 weeks.
For crypto exchange freezes, the FCA's role is more limited. The FCA does not adjudicate individual customer complaints against crypto firms — that is the role of the Crypto Ombudsman (a relatively new service) or, for FCA-registered firms, the Financial Ombudsman. However, the FCA can take enforcement action against firms that systematically violate consumer protection rules, and filing a complaint with the FCA creates a regulatory record that can support a FOS complaint or legal action.
Choosing a jurisdiction: what matters for crypto users
The jurisdiction in which your crypto exchange is licensed affects your legal rights, the documentation requirements, and the avenues for recourse if your account is frozen. While most users choose an exchange based on fees and product offerings, understanding the jurisdictional differences can help you make a more informed choice — and can be relevant if you are deciding which exchange to move your funds to after a freeze.
EU-licensed exchanges (MiCA CASP authorization): The strongest consumer protection framework. EU-licensed CASPs must comply with MiCA's complaint handling procedures, are subject to NCA oversight, and must provide clear terms of service that cannot include unfair clauses (under the Unfair Terms in Consumer Contracts Directive). If your exchange is EU-licensed, you have the right to complain to the NCA, to use the EU Online Dispute Resolution platform, and to take legal action in EU courts. The disadvantage: EU-licensed exchanges may have stricter KYC and SoF requirements than non-EU exchanges, because MiCA requires ongoing due diligence.
UK-registered exchanges (FCA MLR registration): Strong consumer protection through the FOS and FCA oversight. UK-registered exchanges must comply with the MLRs and the Consumer Duty. The FOS process is free and can order exchanges to release funds or pay compensation. The disadvantage: many global exchanges do not offer full services to UK customers due to FCA restrictions, and UK banks are aggressive about debanking crypto users.
Swiss-licensed exchanges (FINMA): Swiss crypto regulation (under the Blockchain Act and FINMA's FINMA Anti-Money Laundering Ordinance) is comprehensive but lighter-touch than the EU's. Swiss-licensed exchanges (like SEBA Bank or Sygnum) are fully regulated banks with crypto custody licenses. The advantage: Swiss banking secrecy (Article 321 StGB) provides additional confidentiality. The disadvantage: the Swiss legal system is slower than the EU's for consumer complaints, and there is no Swiss equivalent of the Financial Ombudsman for crypto disputes — complaints go to FINMA, which has limited individual complaint resolution powers.
UAE-licensed exchanges (VARA/CBUAE): The UAE has developed a sophisticated crypto regulatory framework through VARA (Virtual Assets Regulatory Authority) in Dubai and the CBUAE (Central Bank of the UAE) for the broader UAE. UAE-licensed exchanges are subject to AML/CFT requirements under FATF-aligned frameworks. The advantage: the UAE is a fast-growing crypto hub with lighter documentation requirements than the EU. The disadvantage: consumer protection mechanisms are less developed than in the EU or UK, and the UAE's legal system (based on civil law with Sharia principles) may be unfamiliar to Western users.
Unregulated or offshore exchanges: Some exchanges operate from jurisdictions with minimal or no crypto regulation (e.g., Seychelles, Marshall Islands, certain Caribbean nations). These exchanges are not subject to FATF-aligned AML oversight, which means they may have less stringent KYC requirements — but also means you have no regulatory recourse if your account is frozen. If an unregulated exchange freezes your account, your only option is legal action in the exchange's home jurisdiction, which may be impractical. We recommend against holding significant funds on unregulated exchanges — the lower KYC barrier is not worth the risk of having no recourse if the exchange freezes your account.
The practical takeaway: if you are choosing an exchange for the first time, or if you are moving funds after a freeze, prioritize exchanges that are licensed in jurisdictions with strong consumer protection (EU, UK, Switzerland). The slightly stricter KYC requirements are a reasonable trade-off for the legal recourse you gain if something goes wrong. And if your account is frozen, knowing which regulator oversees your exchange is the first step in determining your options for resolution.
The bottom line
European crypto regulation is now largely harmonized under MiCA, but the specifics — regulators, complaint processes, and enforcement — vary by country. If your exchange has frozen your account, the first step is identifying which regulator has jurisdiction over your exchange. See our full AML laws by country guide for the complete reference, or contact us with your specific situation.