Coincheck to Restrict Bitcoin (BTC) Transfers to Newly Registered Addresses From September 15

Coincheck Freezes New Whitelist Entries

Japanese crypto exchange Coincheck will block transfers to newly registered destination addresses for a fixed period under a security upgrade that takes effect on September 15, 2026, the company confirmed in its official announcement published on September 10. The measure covers every withdrawal address registered after the launch date: a send to a fresh destination stays locked through a cooling-off window before it is permitted. Addresses already saved to a user's whitelist are untouched, so transfers to them continue exactly as before. Once the holding period lapses, transfers to the new address resume normally, but the exchange states it will not shorten the window or release funds early on request. The precise length of the restriction remains confidential on security grounds, a design choice that denies fraudsters a predictable timetable to plan around. Coincheck is also telling customers to audit their registered address lists: anyone who finds a destination they did not add should lock the account immediately and contact support, since an unfamiliar entry frequently signals stolen credentials or a phishing compromise. The company frames the change as a direct answer to rising losses from phishing scams and unauthorized access, where victims are socially engineered into registering attacker-controlled wallets and draining their own balances. The rule applies across the platform's listed assets, from Bitcoin down to cross-border assets such as XRP. The move lands at a sensitive moment for the operator: Coincheck recently completed registration as an electronic payment instruments dealer, the second firm in Japan to do so, positioning it to expand into regulated stablecoin issuance, a market where issuers like Circle set the global benchmark.

FSA and NPA Set 11 Measures

The restriction is not a unilateral decision by the exchange. On August 6, 2026, Japan's Financial Services Agency and the National Police Agency formally asked the Japan Virtual and Crypto assets Exchange Association (JVCEA), the sector's self-regulatory body, to harden member firms' defenses against fraud, setting out eleven concrete countermeasures in a joint request to the industry. The catalog spans the full customer journey: stronger onboarding checks to stop fraudulent account openings, warnings and confirmations before transfers, temporary withdrawal limits after fiat deposits or crypto purchases, pre-registration of withdrawal destinations paired with a post-registration holding window, appropriate withdrawal caps, and enhanced monitoring of both trading and access environments. It further calls for faster freezing of suspicious accounts, stronger authentication where impersonation is suspected, verification that transfer requester names match account holders, industry-wide sharing of fraud intelligence, and closer cooperation with police. The agencies pointed to increasingly sophisticated social-media-driven investment and romance scams, along with confirmed cases in which proceeds from special fraud were routed into crypto exchange accounts. The FSA's position is that such safeguards are now necessary for every crypto asset exchange service provider regardless of scale, removing any argument that smaller venues can opt out. The framing matters: the agencies treat fraud as an ecosystem risk that migrates through any account capable of receiving stolen funds, not as an isolated platform failure. Coincheck's cooling-off window implements item four of the eleven. Rival GMO Coin moved first, announcing the same class of control on August 25 and activating it from August 29: new destinations there face a 24-hour hold that begins when the review completion email is sent, with existing registered addresses exempt. Both venues rank among the compliance-focused names in our guide to the best crypto exchanges. Readers tracking the market in real time can follow live spot and futures prices on MEXC.

Cooling-Off Windows Become Standard

The deeper story is methodological: Japan is engineering fraud prevention into the Web3 on-ramp rather than leaving it to consumer education. COINOTAG's reading of the filings is that the binding detail is the no-early-release clause — a negotiable delay is no deterrent at all, which is why both Coincheck and GMO Coin enforce fixed windows, one undisclosed and one standardized at 24 hours. As stolen funds keep migrating toward regulated platforms, expect JVCEA membership to converge on cooling-off withdrawal controls as standard practice, making short verification friction the baseline price of asset protection at the exchange layer.