Japanese cryptocurrency exchange bitFlyer will block outbound crypto transfers for 48 hours after each yen deposit made by recently verified customers, the company announced on October 2, 2026, in an official press release on PR Times. The restriction takes effect on October 15, 2026.

The policy targets a narrow segment of the exchange's user base: individual customers whose identity verification, or KYC, was completed less than 90 days ago. For those accounts, every yen deposit starts its own 48-hour clock during which crypto purchased with that deposit cannot be sent to external wallets.

The mechanism operates deposit by deposit rather than as a blanket account freeze. It also carries a quantitative cap. During the cooldown window, outgoing crypto transfers can only reach the total deposit amount minus ¥100,000. Deposits of ¥100,000 or less face no cap at all.

The restriction touches only one function: moving crypto off the platform. Trading, yen deposits and withdrawals, and receiving or holding crypto continue without interruption for all users.

bitFlyer framed the measure as an anti-fraud control aimed at freshly verified accounts, a cohort the exchange says attracts account takeovers and related abuse. The design reflects the operational reality of blockchain transactions: once funds leave the platform, transfers are effectively irreversible. A two-day pause gives the exchange — and potentially a fraud victim — a window to detect suspicious activity before the assets move on-chain.

Stacked on existing controls

The new rule does not replace bitFlyer's existing withdrawal brakes. The exchange already applies a 7-day transfer hold on certain deposit methods, including convenience store payments and Pay-easy. The 48-hour cooldown adds a second layer on top of that framework for recently onboarded users.

The timing structure matters for operational planning. Only deposits made on or after October 15, 2026 fall under the new regime. Earlier deposits sit outside it entirely.

bitFlyer operates under the oversight of Japan's Financial Services Agency and has not suffered a hack since its founding in 2014, a record that shapes its risk-management posture. The exchange's decision to tighten controls on new accounts rather than across the board suggests it views the first 90 days of a customer relationship as the highest-risk window for fraud-driven outflows.

Limited blast radius, slower onboarding

For most of bitFlyer's customer base, the practical impact is minimal. Long-standing users fall outside the 90-day verification window, and small depositors avoid the cap altogether.

The friction lands on new users making larger yen deposits who intend to self-custody quickly. For that cohort, each deposit now carries a two-day delay before purchased crypto can leave the exchange. The change effectively raises the operational cost of using bitFlyer as a fast fiat-to-chain on-ramp during the first three months of an account's life.

For competitors in Japan's licensed exchange market, the move sets a precedent for throttled withdrawals as a fraud-prevention tool — a structural trade-off between user experience and loss prevention that other FSA-regulated platforms may evaluate.

The effective date to watch is October 15, 2026, when the first yen deposits from newly verified accounts begin triggering the 48-hour hold.