Anyway, this is the weirdest way, potentially causing further problems since private keys are not supposed to be shared between 2 or more parties. If I somehow get caught on AML radar, I can just withdraw my funds while I file complaint that it wasn't me who did it.
Let me explain. To send ERC/TRC/BEP-20 tokens, need to pay for gas in the network's native token. Accordingly, when a client makes a payment for a request, for example, in USDT ERC20, and it has a high AML risk, our service will suspend such an exchange, and the client will be given a private key that holds their funds. We cannot send these funds to the client's address because it requires ETH on the deposit address to send the tokens. According to our rules, we also cannot send ETH to this address for sending tokens, because in that case, our service would be associated with cryptocurrency exceeding the AML risk. As a company that complies with AML regulations on par with other exchanges, in case of a token refund, we can only provide the private key where these tokens are stored.
Please can the Op tell me what kind of exchange?
We are a centralized exchange that only trades cryptocurrency. We do not work with fiat.