Investor securing financial accounts after a suspicious broker payment

After-payment safety workflow

Broker incident response center

Create a practical response plan when a broker blocks withdrawals, asks for more fees, receives crypto, gets documents, or a recovery firm appears after a loss.

Scan pitch Verify broker Withdrawal risk

Response priority

Ready to build a response plan

Choose the current situation, payment method, exposure signals, and broker/domain to create an action plan.

0 Priority

Broker, domain, or account portal

Current situation

Payment method

Reporting country

Remote access or device control 22 A scammer accessed a computer, phone, browser, or trading platform session. Password, seed phrase, or account login shared 20 Financial, email, exchange, or broker credentials may be compromised. ID, proof of address, card, or selfie uploaded 18 Identity documents may be reused for account takeover or impersonation. More taxes, insurance, or release fees requested 16 Additional fee demands often extract more money without releasing withdrawals. Recovery company or regulator impersonator contacted me 20 Follow-up recovery offers can target people who already lost money. Trading account frozen or withdrawal blocked 16 A blocked withdrawal needs evidence capture and formal reporting before new payments.

Private notes for this checklist

Reset

Incident result

Ready to build a response plan

Choose the current situation, payment method, exposure signals, and broker/domain to create an action plan.

Not checked 0 Priority score

Response timeline

Action plan

Today

Preserve evidence

Save adverts, URLs, emails, phone numbers, account IDs, wallet addresses, transaction IDs, screenshots, platform statements, and withdrawal messages.

Today

Report through official channels

Use official regulator, consumer protection, law-enforcement, exchange, or platform reporting forms. Reports may help investigations even if recovery is not guaranteed.

Open broker verification record

Open

Run the broker/domain through FXICON verification and attach source details when contacting support.

Evidence pack

Save this before accounts or chats disappear

Broker brand, legal entity, domain, account portal URL, and claimed regulator/license number.

Payment receipts, bank references, crypto wallet addresses, transaction hashes, dates, amounts, and currency.

Chat logs, emails, phone numbers, social handles, advert screenshots, group names, and account-manager names.

Withdrawal denial messages, tax or insurance fee demands, KYC requests, remote-access requests, and recovery offers.

Copies of documents shared, device access granted, passwords exposed, and any suspicious app downloads.