Why the demand appears at the withdrawal stage
On a genuine exchange, tax is not collected by the platform before a withdrawal. In the UK you declare gains to HMRC yourself; no exchange asks you to send additional funds to release your own balance. The same is true of a "liquidity fee", an "anti-money-laundering deposit", a "verification bond" or an "account upgrade".
Where the demand does appear, the balance shown in the account is usually a number in a database rather than a holding the operator has. Asking for a payment at withdrawal is the point at which that difference becomes visible, and it is why the request is always framed as the final step.
What the ledger usually shows
When we trace deposits made to this type of platform, the funds almost never sit at the address you paid. They are typically forwarded within minutes, often the same day, into a consolidation wallet and then onward toward an exchange deposit address, a bridge or a dormant wallet.
- The receiving address frequently handles deposits from many unrelated victims, which is visible on the public ledger.
- Forwarding happens automatically, which shows as consistent timing rather than human-paced activity.
- A second payment made after a tax demand almost always follows the same route as the first.
What to do instead of paying
- Stop making payments, including any "partial" amount suggested as a compromise.
- Save the evidence before the account is closed: screenshots of the balance, the withdrawal request, the fee demand and the full chat history, with dates and URLs visible.
- Export every transaction hash and address you sent to, from your own wallet or your exchange withdrawal history.
- If funds left a UK bank account or card, tell your bank the same day and ask it to record a fraud claim.
- Report to Action Fraud (0300 123 2040 or actionfraud.police.uk) and keep the reference number.
- If you can identify the exchange that received the funds, report the deposit address to it with the transaction hashes — a restriction is only possible while funds are still there.
What a trace can and cannot add
A trace establishes where the money went and whether it reached a service that keeps customer records. That is what makes a report to a bank, an exchange or the police actionable rather than a description of what happened to you.
It does not reverse a confirmed transfer, and it does not name the person behind an address. Anyone telling you the funds can be pulled back by paying one more amount is describing the same pattern you are already in.
If you are looking at your own case rather than reading generally, our cryptocurrency investigation service explains how a case is scoped and worked, the asset tracing hub covers the network-specific work, and our overview of cryptocurrency scam recovery in the UK sets out what is realistic. Asset pages: USDT tracing, Bitcoin tracing and Ethereum tracing. You can also contact the investigations team directly.
Common questions
- Is the tax demand ever genuine?
- No UK exchange requires you to send extra funds before releasing your own balance, and HMRC never collects tax through a trading platform. A payment demanded as a condition of withdrawal should be treated as part of the fraud.
- Should I pay a small amount to test whether it works?
- No. Where a withdrawal is blocked behind a payment, a successful test payment is generally followed by a larger demand rather than a release of funds.
- Can the balance shown in my account be recovered?
- The figure on screen is not usually an asset that exists. What can sometimes be pursued is the value you actually deposited, and only where it can be traced to a service that still holds it.
Have a case you want reviewed?
We scope at intake and tell you honestly whether the onchain data supports a traceable case.
Key terms in this guide
Plain-English definitions from the Wallsec glossary.