cryptotradingbook

How exchanges enforce geo-restrictions

Foundations → Intermediate · ~14 min read · Reviewed 2026-10-02

At a glance

1. Why exchanges build geo-fences

Four forces drive restrictions. Licensing: serving users in a country without a licence is illegal there - the FinCEN action against Binance (2023) and the DOJ settlements of OKX and KuCoin (2025) started exactly there. Banking partners: banks refuse platforms that serve high-risk jurisdictions. Sanctions: lists like OFAC's SDN list name exchanges directly.Their own terms: restricted-country lists exist because the exchange's own legal department wrote them as a liability shield.

2. The four enforcement levels

We record the level in every exchange profile (see the directory). For hybrid cases the strongest level applies.

LevelMeaningOur tag
noneNo restriction observed in our sources.
tos_onlyProhibited by terms of service, but no technical enforcement observed. Weakest level.tos-only block
ip_blockWebsite/API blocked for listed countries at the network level.
kyc_blockIdentity documents decide - residence is checked at verification. Strongest level.

3. How exchanges determine where you live

Signals, in rising strength: IP address at signup, phone country code, payment method country, KYC document with proof of address, and device/behaviour signals for re-checks. What legally counts is your residence - travelling does not move it.

4. Why strictness varies

Licensed exchanges in strict jurisdictions (UK derivatives ban, US state licences, Japan's FSA) must and do enforce hard. Offshore venues win reach precisely by loose enforcement - the practical cost appears later, not at signup.

Remember: TOS-only does not mean allowed. It means the exchange has not (yet) spent money on enforcement - the terms still apply to you.

5. What this means for you

Check availability before depositing. The practical risks of trading on an exchange not available in your country: frozen funds when enforcement catches up, account closure with return-on-a-good-day processing, no ombudsman, no local regulator, foreign court venue.

6. The VPN reality - no instructions

We do not publish workarounds. Bypassing geo-restrictions (for example via VPN) violates the exchange's terms, your residence does not change, and the documented outcomes are consistent: OKX admitted in its US plea that its IP bans were VPN-circumventable - the consequence was a $500M+ settlement. The practical cost of circumvention lands on the user: frozen funds, no recourse.

7. When this fails

Geo-IP is wrong occasionally; country lists change; app-store removals only stop new downloads. S sanctions screening can false-positive. Check our live profiles instead of memory.

Risk: If an exchange becomes unavailable in your country after you deposited, your practical position is: blocked or slow withdrawals, customer support in a foreign jurisdiction, and no regulator to appeal to.

Knowledge check

  1. Name the four main reasons exchanges restrict countries. (Licensing, banking partners, sanctions, own-terms legal risk.)
  2. Which enforcement level is weakest, and why? (TOS-only - no technical enforcement observed, but terms still apply.)
  3. Which signal legally counts: IP at signup or KYC residence? (Residence - proven by documents and payment methods.)
  4. Name two practical consequences if your exchange becomes unavailable in your country. (Frozen funds / slow withdrawal; no regulator or ombudsman, foreign court.)
  5. Why do we not publish VPN workarounds? (Terms violation, funds risk, no recourse - and it would make us part of the solicitation problem.)