Japan's Financial Services Agency and National Police Agency have jointly directed licensed cryptocurrency exchanges to impose tighter withdrawal restrictions and enhanced monitoring to combat fraud losses, according to reporting on the directive.
The agencies' move targets a documented problem: Japanese residents lost ¥45.26 billion to cryptocurrency-related scams in 2023, according to fraud data cited in coverage of the directive. Withdrawal delays force users to wait before moving assets off exchanges, creating a friction point where fraud victims or their contacts may interrupt transfers triggered by social engineering or impersonation attacks.
The directive applies to all exchanges operating under Japan's Payment Services Act licensing regime. Regulated exchanges in Japan, including GMO Coin, DMMBitcoin, and Coincheck, must comply with FSA oversight. The country has maintained strict licensing standards since 2017, when the FSA gained authority to regulate crypto platforms following the ¥58 billion collapse of Mt. Gox's successor entity and the Coincheck hack that exposed security gaps in unregistered operators.
Withdrawal delays are a known anti-fraud tool, though implementation varies. Some exchanges globally hold withdrawals for 24 to 72 hours to allow customers to cancel transfers. Others require email or SMS confirmation steps. Japan's directive does not specify the exact delay period or technical mechanism, leaving implementation details to individual exchanges subject to FSA approval.
Fraud targeting crypto users has grown faster than the exchange ecosystem itself. The ¥45.26 billion 2023 figure represents a marked increase from prior years, driven largely by romance scams and investment impersonation schemes that convince users to transfer funds to attacker-controlled wallets. Once assets leave a regulated exchange, recovery becomes nearly impossible.
The FSA and National Police Agency coordinated the directive to align financial regulation with law enforcement priorities. The National Police Agency operates Japan's Cyber Investigation Division and criminal fraud task forces, giving the joint approach enforcement weight. Exchanges that fail to comply face license suspension or revocation under the Payment Services Act.
The restriction sits alongside existing FSA rules requiring exchanges to segregate customer assets, maintain capital reserves, and report suspicious transactions. Whether withdrawal delays alone reduce fraud losses or simply shift attack vectors, such as to over-the-counter sales or peer-to-peer schemes, depends on how aggressively users are targeted before they reach exchanges in the first place. The effectiveness of the measure will depend on how consistently exchanges enforce delays and whether users can still be socially engineered to approve withdrawals during the holding period.
