Bybit Unveils 2025 Security Milestone: Intercepts $300M in Impersonalization, Scams and Frauds via New AI-Driven Risk Framework
Feb 27, 2026

Bybit, the world’s second-largest cryptocurrency exchange by trading volume, today revealed the comprehensive results of its 2025 Security Initiative. Bybit has implemented an industry-leading, multi-layered defense architecture that has successfully protected thousands of users and set a new benchmark for proactive security in the digital asset space. In 2025, $17 billion in cryptocurrency was lost to scams and frauds, according to a report by Chainalysis.

Redefining Industry Standards: The Triple-Tier withdrawal Fraudulent Defense Framework

To move beyond reacting to scams after the damage is done, Bybit has pioneered a Dynamic Risk-Based protection system that steps in before money is lost. The system divides potential scam situations into three levels of risk. Each level has a different response - designed to protect the withdrawal process of users while keeping the platform smooth for normal trading activity. 

Tier 1: Early Warning (Low Risk): Utilizing big-data heuristics to identify unusual patterns—such as mass withdrawals to a singular new address—Bybit deploys automated surveys. These insights allow the Risk Operations team to preemptively blacklist dangerous destinations.

Tier 2: Real-time Alert (Medium Risk): For accounts flagged via credential stuffing databases(cross-referencing leaked data from the external web) or suspicious withdrawal addresses, Bybit triggers real-time alerts during withdrawal. The alert encourages users to pause and review the withdrawal, a step aimed at countering social engineering tactics that rely on urgency or emotional pressure.

Tier 3: Immediate Blocking and Cooling-off (High Risk): For wallet addresses linked to confirmed scams, including so-called “pig butchering” investment schemes, Bybit implements Real-time Withdrawal Blocking paired with a mandatory One-Hour Cooling-Off Period, providing a vital window for users to regain composure and verify the transaction. 2025 Impact & Key Metrics: By the Numbers

The effectiveness of these measures implemented in Q4 2025 has yielded unprecedented results for user safety:

  • Scam Recovery & Prevention in Q4: Out of $500 million in flagged withdrawals, Bybit successfully intercepted and recovered $300 million, protecting the life savings of over 4,000 users.

  • AI-Driven Detection in Q4: Bybit’s proprietary AI algorithms identified 350 high-risk investment fraud addresses via on-chain data, shielding 8,000 users from potential withdrawal losses.

  • Infrastructure Resilience in 2025: The platform successfully thwarted over 3 million credential stuffing (account takeover) attempts by hackers.

  • On-Chain Vigilance in Q4: The system auto-labeled 350 addresses and manually tagged 600 addresses through ticket operations, saving $1 million in imminent fraud losses.

A Collaborative Fortress: Industry & Government Synergy

Bybit believes that security is not a competitive advantage but a collective responsibility. Our 2025 strategy focused heavily on External Intelligence Integration:

"Our mission in 2025 was to transform risk control from a ‘silent shield’ into an active, intelligent guardian," said David Zong, Head of Group Risk Control at Bybit. "By integrating AI-driven on-chain monitoring with real-time intelligence from industry partners like TRM , Elliptic and Chainalysis, we not only just protect Bybit users, but also help map the DNA of fraudulent networks. We are sharing these standardized monitoring clues across the ecosystem because a safer industry for one is a safer industry for all."

Category

Measure & Innovation

Result / Industry Impact

Platform Security

Anti-Credential Stuffing Net: Blocked 3M+ automated login attacks.

Industry-first, real-time anti-credential stuffing engine at a CEX scale.

User Protection

The “Cooling-Off” Protocol: Mandatory 1-hour delay for high-risk withdrawals. 

Drastically reduces the success rate of urgent social-engineering scams.

Scam Detection

On-chain AI Pattern Recognition: Real-time detection of “pig-butchering” investment flows.

Identified 350+ predatory addresses; protected 8,000 users.

Industry Collab

Standardized Intel Hub: Integrates the risk-transaction identification capabilities of TRM, Elliptic, and Chainalysis.

Real-time identification of risky transactions in Bybit cryptocurrency deposits and withdrawals.

On-chain Risk Control

End-to-end holistic cross-chain tracing:  Comprehensive illicit-fund tracking across bridges, mixers, and multi-chain forensic investigations.

Secured asset freezes totaling $4.32M for 335 fraud victims.

#Bybit / #TheCryptoArk  

Newcomer Registration
Don't worry about missing a beat! Every new edition of the newsletter goes directly to your inbox. Sign up now!
Sign up now