Coinbase Account Restricted? What It Means and What to Do

What a restriction is

Coinbase says it sometimes places restrictions on accounts for safety and compliance purposes.^[1] It also describes temporarily restricting an account as one way to protect customer assets from potential losses on irreversible transactions.^[2] The most common sign is the message “Sorry, account temporarily disabled”, which Coinbase says usually appears because of a potential security issue.^[3]

A restriction is not the same as a closure or a freeze. Coinbase’s own help pages describe several levels:

What Coinbase does	What it says you can still do
Disables buying and selling (for activity its User Agreement prohibits)	Send and receive crypto; cash out to a linked, verified bank account.[1]
Puts the account under review	Convert crypto into cash; withdraw cash to a verified bank account, though security and risk factors can affect the account’s status.[2]
Closes the account (for prohibited activity)	Send remaining crypto to a wallet not connected to your Coinbase account; cash out remaining cash to a verified bank account before the closure goes through.[1]
Freezes funds (“in extremely rare circumstances”)	Only when a court or other authority orders it, or the law requires it under a sanctions programme such as OFAC’s. Coinbase says it contacts the customer where the law allows, and no action is needed until then.[1]

Reasons Coinbase gives

• Security. Suspected malicious activity, a problem during account recovery, or your own request to restrict the account.^[3]
• Unconfirmed personal information. Coinbase says it must keep user information accurate and verified to comply with financial regulations. If you choose not to confirm it, your account is restricted; once you confirm, the restriction is removed.^[4]
• Account review. Coinbase may ask about your account, transactions, source of funds or source of wealth — because of your account activity or profile, regulatory requirements in your region, information that needs updating, or a periodic review. It says the purpose includes fighting fraud, money laundering and terrorist financing, and that a request “doesn’t mean you’ve done anything wrong”.^[5]
• Sanctioned addresses. If you try to send to or receive from an OFAC-sanctioned address, Coinbase blocks those funds and moves them to an internal holding account. It says the rest of your funds stay available.^[6]
• Buying or deposits only. Incomplete identity verification, an unverified payment method, a negative balance, regional limits or bank disruptions can stop you buying crypto or adding cash.^[7]

What to do

1. Read the notice inside Coinbase. Coinbase says notifications in the app or on the website outline any steps you must complete, such as verification or addressing failed send attempts.^[2] Information requests arrive by email or in your account.^[5]
2. For an “account temporarily disabled” message: you need access to your 2-step verification method. Coinbase’s steps are to review its account-security recommendations and make updates, sign in, and try the restricted action again. You can also wait for the restriction to be removed automatically.^[3]
3. Confirm your personal information if Coinbase emailed you about it. The email comes from no-reply@coinbase.com; Coinbase says the restriction is lifted once you confirm.^[4]
4. Answer an account review with documents. Sign in, open the notification or task, answer the questions and upload clear, valid documents. For crypto, Coinbase lists exchange statements, trading history, wallet transaction history, blockchain transaction IDs, mining or staking records and tax records; for a self-custody wallet, records showing the address, transaction history, dates, assets and amounts.^[5]
5. Make documents match the request. Coinbase may reject documents that are expired, blurry, cropped, missing your name, outside the date range or edited. It advises sending an alternative rather than re-uploading the same file.^[5]
6. For blocked sanctioned-address funds, Coinbase says you need a specific licence from OFAC to release them, even if you no longer want the transaction, and then a secure link from Coinbase Support to submit it.^[6]
7. Report crime. If your account was used for criminal activity, Coinbase asks you to report it to law enforcement immediately.^[3]

How long it takes

For security restrictions, Coinbase says resolution and review “typically” take up to 10 business days, some cases take longer, and it emails you when the review is done.^[3] For document reviews, it gives no fixed time: it says review times depend on what was requested, the quality of your documents, the complexity of your activity and whether manual review is needed.^[5] Coinbase also says completing verification or answering a review does not always guarantee the restriction will be removed,^[2] and that if you do not provide requested information, the result can include limits on deposits, withdrawals or trading, or account closure.^[5]

What not to do

• Don’t contact “support” found in search ads, comments or DMs. Coinbase says scammers run fake support phone lines and can spoof real numbers; contact Coinbase only through the phone number or email on its Contact us page.^[8]
• Don’t send documents outside Coinbase. Submit them only through the Coinbase app or an official Coinbase website; Coinbase says it will never ask for your recovery phrase when requesting information.^[5]
• Don’t send crypto to a “safe” address. Coinbase staff will never ask you to send crypto to an external address.^[8]
• Don’t pay for recovery. The FBI warns that fake recovery firms charge an upfront fee and then stop responding or ask for more, and that crypto exchanges only freeze accounts through internal processes or legal process.^[9] Scammers have also posed as the FBI’s IC3 itself; the FBI says IC3 never contacts individuals directly by phone, email or social media and never asks for payment to recover funds.^[10]

Preventing it: check incoming funds

Coinbase lists source-of-funds questions and sanctioned-address blocks among the reasons for reviews and held funds.^[5][6] You cannot control every deposit, but you can avoid accepting coins with an obvious bad history:

• Check the sender before you receive. Run the sender’s address through an AML checker before a P2P trade or a large transfer. Step-by-step: how to check USDT before receiving it.
• Know what “dirty” means. Links to sanctions, scams, stolen funds or mixers are what make coins risky — see dirty crypto.
• Keep records. Save the AML report, the trade order and the chat. These are the kinds of records Coinbase lists for crypto-sourced funds, along with wallet history and transaction IDs.^[5]

An AML check is a precaution, not a guarantee: Coinbase decides based on its own controls. If another exchange holds a deposit, see exchange froze your crypto.