What Is Binance’s New Withdraw Protection Feature?
Binance has launched Withdraw Protection, a user-controlled lock that allows customers to block onchain withdrawals from their accounts for 1 to 7 days. The feature is designed for high-risk situations where users may face physical coercion, including so-called wrench attacks.
The exchange said users can activate the lock before traveling or entering environments where being known as a crypto holder could create personal security risks. A stricter lockdown mode disables early unlocking, adding a hard delay before funds can be moved.
Binance Chief Security Officer Jimmy Su said the company built the feature after observing cases involving risky or potentially coerced withdrawals. “We are seeing a pattern where some of the users might go to more risky geographical locations,” Su said.
How Does the Lock Work in a Coercion Scenario?
The core value of the feature is delay. In a standard account takeover or coercion case, the attacker may force the legitimate user to pass identity checks, unlock devices, and approve transfers. Conventional security can fail because the real account holder is the one completing the process.
Withdraw Protection changes that timing. If activated before exposure to risk, the user cannot move assets onchain until the lock period ends. Binance said customer service agents cannot override the restriction during the active period.
Su said the purpose is to address the irreversible nature of crypto transfers. Once assets are moved onchain, there is typically no bank-style reversal process. A withdrawal delay gives victims more time to escape danger, contact others, or wait out the lock period.
Investor Takeaway
What Are the Limits of Binance’s Protection?
The feature is not a cryptographic lock. Su described it as an internal policy, meaning it depends on Binance enforcing the restriction through its own systems. Binance said support agents cannot override it, but the lock does not prevent action by law enforcement.
“This does not prevent law enforcement from taking action on accounts,” Su said.
That distinction matters for users assessing the feature. Withdraw Protection may reduce the risk of forced transfers by criminals, but it is not designed to block legal orders, account freezes, or court-directed actions.
The feature also does not remove the need for basic account hygiene. Users still need strong passwords, secure two-factor authentication, and strict control over devices and account recovery channels.
Investor Takeaway
Why Are Exchanges Adding More Friction to Withdrawals?
The threat environment has changed. Data cited from CertiK and crypto researcher Jameson Lopp showed verified physical coercion incidents against crypto holders rose 75% in 2025 to 72 confirmed cases, while assault-related incidents rose 250%.
Withdrawal delays are not new. Coinbase has long offered Vaults with a 48-hour delay and email confirmation, while Kraken provides a Global Settings Lock. Binance’s version is arriving as personal security risk becomes a more visible issue for crypto users with public profiles or large balances.
Su also warned about trading bots that ask users to grant broad API permissions. If those bots are malicious, API keys can be used to create trading losses or enable unauthorized activity. He said users should treat API keys with the same care as passwords and two-factor authentication credentials.
The broader security lesson is that crypto users must reduce their public exposure. For high-balance users, online posts, travel patterns, wallet traces, and public identity can all increase targeting risk. Binance’s new feature adds time, but users still need to make themselves harder targets.
