Crypto Custody and Yield Fraud: Customer Balances, Someone Else’s Bets

Crypto customer funds misappropriation happens when a platform diverts customer deposits into uses it concealed from those customers, including an affiliated trading firm’s bets, debt payments or operating expenses. The customer sees a balance. Inside the business, someone sees the bank account that received the money, the wallet that sent it elsewhere or the permission that let an affiliate withdraw it. That gap between the promise and the asset’s actual use is where a custody or yield fraud case takes shape.

FTX and Celsius show different versions of that gap. In the Commodity Futures Trading Commission’s case against FTX and Alameda, the court found that FTX diverted supposedly safeguarded customer assets and mixed them with funds used for Alameda, as described in the agency’s announcement of the August 2024 order. The Celsius complaint alleged that assurances about safety and rewards concealed risky lending and investment. For finance, engineering, risk and platform staff, these cases reach familiar work: account permissions, collateral calculations, asset reconciliations and the decisions made when those records contradicted the sales pitch.

FTX’s Affiliate Had a Different Set of Rules

At FTX, crypto customer deposits were exposed to an affiliated trading firm’s privileges built into the exchange itself. The Commodity Futures Trading Commission’s complaint against FTX, Alameda and the founder alleged that deposits entered Alameda-controlled bank accounts, where they remained mixed with Alameda’s money. Alameda personnel manually credited the corresponding amounts to customers on FTX’s internal ledger. The website and app showed the credit. The bank account was still under Alameda’s control.

The controls governing Alameda’s trading were equally consequential. According to the complaint, an “allow negative flag” let Alameda transact without the funds needed for the transaction. Other customers’ positions could be sold automatically when their risk exceeded the exchange’s limits. Alameda was exempt from that liquidation process under any conditions, through an exception written into the code.

The agency’s separate complaint against FTX’s engineering executive describes another permission allowing withdrawals below the borrowing limit. It alleges that Alameda’s borrowing limit eventually reached approximately $65 billion and that borrowed assets could leave FTX.

A Customer Could Own It on the Screen Alone

The engineering complaint alleged that Alameda could sell digital assets it did not own, with FTX crediting the buyer anyway. The complaint describes what the customer received:

We keep coming back to that mismatch: the customer bought an asset, and the system supplied a number. Someone reconciling individual coins against customer balances would face a different picture from someone reading the account screen.

The founder complaint also alleged that Alameda valued its concentrated FTT holdings at the quoted market price, without discounting for the price collapse that selling so much of the token would cause. A collateral number could look substantial while depending on a price the position could not realize.

The founder complaint alleged a further trading advantage: Alameda’s orders bypassed parts of the exchange’s routing system and reached it faster than other customers’ orders. That is a privilege an engineer could see while customers saw only the promise of an exchange.

Moving the Liability Made It Harder to See

The engineering complaint alleged that approximately $8 billion in Alameda liabilities moved into a customer sub-account that was not readily identifiable as Alameda’s. Its system notes called it “FTX fiat old.” The negative-balance permission and liquidation exemption moved with it. The complaint says the transfer helped avoid interest and obscured the deficit on FTX’s ledgers.

That same complaint describes a failed effort to separate and reconcile customer assets, FTX assets and Alameda assets. Employees lacked adequate documentation of where funds in different accounts had come from. It also alleges that executives discussed using commingled customer assets to meet Alameda’s debt obligations despite the shortfall they could not repay. The label, the permissions and the failed reconciliation explain how a customer’s deposit could remain visible as a balance while becoming available to an affiliate’s creditors.

What Evidence Is Required to Prove Fraud?

Evidence of crypto custody fraud connects what customers were promised with the assets held for them, the transactions that moved those assets and the people who authorized their use. We examine the promise, the customer ledger, the bank and wallet trail, and the permissions governing the affiliate together. The FTX allegations show why each answers a different question.

Customer terms, account statements and bank or wallet movements can tell conflicting stories, and understanding the gap can require the code permissions, collateral records and internal instructions behind them. Those records are often visible to different teams. The employee preparing customer statements may never control the wallet. The engineer implementing an exception may never prepare the collateral report. We work with insiders to connect those pieces, including what happened when a reconciliation or an internal warning exposed the discrepancy. You do not need the whole bank and wallet trail to start that conversation with us.

Celsius’s Yield Promises Met a Different Balance Sheet

Crypto yield platform safety claims depend on how customer assets are deployed and whether the promised rewards come from those investments. In its July 2023 complaint against Celsius and its chief executive, the Commodity Futures Trading Commission alleged that the business promoted safety and high rewards while placing pooled customer assets into risky lending and investments.

The complaint said Celsius claimed to give customers 80% of its revenue, yet never set reward rates according to its loan yield or other deployment revenue. In 2021, its reward obligations exceeded net revenue by approximately $1 billion. The agency alleged that the chief executive responded by pursuing riskier investments to increase yield rather than lowering rewards or slowing customer growth.

That is the pressure inside a yield business: the promised payout keeps coming due, even when the assets deployed do not earn enough to fund it. According to the complaint, Celsius used customer assets for operating expenses and rewards and failed to reconcile customer assets and liabilities coin by coin. By June 2022, new customer deposits were funding payments to existing customers.

The Collateral and Deployment Records Told Another Story

The Celsius complaint described a board meeting where only 20% of institutional loans were reported as fully collateralized, while 47% were unsecured. Those internal figures sat against assurances about collateral. For someone working in lending or risk, the loan book and the collateral supporting each borrower are the concrete comparison with that assurance.

The agency also alleged that decentralized finance became Celsius’s largest deployment category by spring 2022, despite claims of minimal exposure. The complaint said the company routinely made directional trades despite contrary representations and failed to disclose losing access to digital assets on a third-party service.

The complaint also described an internal email in which the chief executive acknowledged a borrower’s default, and an assets-and-liabilities committee meeting where that default was discussed. It contrasted those records with his public denial of a default.

The public message was much simpler. The complaint quotes the chief executive saying:

The Commodity Futures Trading Commission alleged that Celsius had negative net assets of $820 million by May 13, 2022. Withdrawals froze the following month. It also alleged that employees edited recorded broadcasts to remove the chief executive’s false statements after they aired, while circulating emails explaining when he had made them and why they were false. Editing the pitch after the sale. The chief executive later admitted a commodities-fraud violation in his June 2026 civil consent order.

When the Dashboard Invents the Trading

A platform can also display trading that never occurred. The Commodity Futures Trading Commission’s complaint against Debiex alleged that customer-service representatives controlled the information customers saw, including fictitious profits, losses, balances and transactions. Digital assets moved through numerous wallets, while the agency found no evidence of the trading shown in the platform’s records. A federal court entered a fraud judgment against Debiex in March 2025.

The wallet trail brings a separate identification problem. Merchants of Integrity? Commodity Trading and Corruption Research for a World in Transition, published by GI-ACE in 2022, describes how blockchain records make tampering detectable. It also explains what that transaction history identifies:

For a custody inquiry, that means connecting the transaction to the business or person controlling the destination. Internal account records and transfer permissions can supply the connection a public wallet trail leaves open. Debiex makes the other comparison concrete: whether the transfers match the trades customers were shown.

Goliath Ventures supplies a parallel involving supposed yield. The CFTC’s complaint alleged that new customer deposits funded payouts presented as returns from liquidity pools. It said the company was not participating in those pools as promised. The civil complaint also records the founder’s guilty plea to federal criminal charges, in which he admitted orchestrating the fraud and using customer money for personal spending.

The same basic promise appears in the Commodity Futures Trading Commission’s case against Kikit & Mess Investments and its principal. The agency alleged that customers supplied money for managed forex and cryptocurrency portfolios, but the defendants used it for the principal’s expenses and false profits paid to clients. Across these cases, the useful question is what activity generated the payment called a return.

What a Withdrawal Freeze Can Reveal

Withdrawal communications can expose the distance between a platform’s explanation and its finances. In Debiex, the complaint alleged that customer service demanded supposed taxes before allowing withdrawals, then kept withholding funds after customers paid. It also described charging for a purported VIP withdrawal channel. The account balance became the basis for demanding still more money.

In Goliath, the agency alleged that an explanation about an audit concealed the lack of funds to continue payouts. The complaint quotes an internal instruction to stop customer communications and dashboard updates. Those messages connect what the business told customers with what staff knew and were directed to do.

The concealed shortfall in FTX’s books had a public counterpart: the court ordered FTX and Alameda to pay $8.7 billion in restitution in the civil action. Customer repayment and whistleblower rewards concern different money.

We work with insiders on the concealed conduct behind those events: the transfer approvals, the exceptions and the explanations that customers never saw. A withdrawal freeze can bring the problem into public view after staff have already encountered it in the books.

Where the CFTC Fits

The Commodity Futures Trading Commission can pursue fraud involving digital commodities, including fraud in cash-market transactions. FTX and Celsius show why concealed asset use belongs in that conversation. We assess the connection between the conduct you know and the agency’s authority with whistleblower lawyers who know digital-asset and commodities cases.

The CFTC Whistleblower Program can pay qualifying whistleblowers an aggregate 10% to 30% of monetary sanctions collected. A whistleblower case under the False Claims Act can pay 15% to 30% of what the government recovers. These are separate programs. We help identify the route that fits the conduct you know.

When You Know Where the Assets Went

If you work in treasury, engineering, risk or platform operations and know why customer promises diverged from the assets held, speak with our whistleblower experts about the decisions behind that gap. We build the case with you around the asset movements, permissions and internal knowledge, and bring in crypto fraud whistleblower lawyers who understand custody and yield businesses. From the first conversation, we stay beside you to build your strongest crypto whistleblower case.