QuadrigaCX is the easiest case study in modern crypto fraud because the full evidence is now public record. $190M lost. 76,000 customers. Zero meaningful recovery. The post-mortem reports from Ernst & Young and the Ontario Securities Commission read like a playbook. And in 2026, that playbook is running again — at smaller scale, on at least three live platforms we're currently tracking. The structural tells are identical. If you know what to look for, you can spot a Quadriga-shaped exchange before you deposit a dollar.
The dedicated entry on our blacklist is /scam/quadrigacx-b0696c. This post is the diagnostic checklist behind it.
The five-step QuadrigaCX playbook
### Step 1 — A single founder controls everything
Gerald Cotten was Quadriga's CEO, CTO, CFO, and sole holder of the cold-wallet keys. No multi-signature. No corporate co-signers. No board with effective oversight. Every withdrawal funnelled through one person.
The 2026 tell: check the leadership page. If only one name appears, or the listed executives have no LinkedIn history, no prior crypto-industry footprint, and never speak publicly, treat it as Step 1. Real exchanges fight to brand-build their CISO and head of compliance.
### Step 2 — Customer funds and operating funds are commingled
Quadriga had no real custody segregation. Deposits paid yesterday's withdrawals. This is mechanically a Ponzi structure, regardless of intent.
The 2026 tell: ask for a published proof-of-reserves attestation, signed by a named auditor, dated within the last 90 days. Any reputable post-FTX exchange has one. If the platform points you at a screenshot of a wallet address as "proof", that is not proof — it's just a balance. Real proof-of-reserves cryptographically links user liabilities to on-chain assets.
### Step 3 — Banking relationships keep breaking
Quadriga lost banking relationships in 2018 and started routing fiat through third-party "payment processors" with no transparent audit. Customers had to wire to personal accounts of intermediaries.
The 2026 tell: if the deposit instructions name a person, an offshore shell, or a "payment processor" you've never heard of, that's the same structural flaw. A real exchange's banking partner is publicly named and traceable.
### Step 4 — Withdrawals slow, then "delay" becomes "policy"
Quadriga's withdrawal queue stretched from days to weeks to months. The communication shifted from "system upgrade" to "regulatory review" to "blockchain congestion". Each excuse bought a few weeks.
The 2026 tell: scan reviews for the phrase "withdrawal pending". Run the platform name through Google with site:reddit.com for the last 30 days. If 5+ separate users describe a withdrawal stuck >48 hours, the run is already on. Smaller, newer platforms can hide it for months because the queue is short.
### Step 5 — A "tragic event" makes the founder unreachable
Cotten's reported death in December 2018 was the trigger for collapse — but the structural Ponzi had already been running for years. The "event" just stops the music.
The 2026 tell: sudden, vague "founder is unwell / travelling / on retreat" messaging combined with withdrawal pauses is the late-stage signal. Withdraw whatever you can immediately. Do not wait for clarification.
Side-by-side: Quadriga vs. a live 2026 case
We can't legally name the three live platforms by URL in this post until their entries clear the final triage queue — but their blacklist pages will go live at /scams/c/crypto as soon as they do. What we can say is that all three match 4 out of the 5 Quadriga steps today:
- Sole-founder structure: ✓
- No proof-of-reserves: ✓
- Opaque banking / "payment processor" deposits: ✓
- Reddit threads documenting withdrawal delays: ✓
- "Tragic event" trigger: not yet — which is exactly the window you have to get out.
The 90-second self-check before you deposit anywhere
- Paste the exchange URL into /safe-scanner — instant blacklist + domain-age + SSL + content-pattern check.
- Search the brand name + "withdrawal" on Reddit, filtered to the last 30 days.
- Look up the listed CEO on LinkedIn. No profile, or a profile with no prior crypto-industry roles, is a red flag.
- Ask the support chat for the most recent proof-of-reserves report. A delay, a deflection, or "we're working on it" is your answer.
- Wire a $5 test deposit first. Withdraw it before depositing real money. The recovery rate of a stuck $5 is the same as the recovery rate of a stuck $50,000.
What Quadriga actually taught the industry
The lesson was not "crypto is uniquely fraud-prone". The lesson was that the moment a single individual controls custody, you are betting your money on that individual's character, longevity, and tax situation — not on the platform's technology. Every Quadriga-shaped exchange in 2026 is a re-run of the same bet. Don't take it.
If you're currently holding funds on a platform that ticks 3+ of the above steps, the Panic Guide walks through the safest withdrawal-first sequence. Move first, complain second.
---
*Originally published at https://gacs.app/blog/quadrigacx-playbook-happening-again-2026. Free exchange scanner: https://gacs.app/safe-scanner.*