A worldwide freezing order (WFO) – an injunction that prohibits a defendant from dissipating assets globally pending judgment – is the most powerful immediate remedy available to a business that has suffered a digital-asset theft. Courts in England and Wales, the DIFC, Singapore, Hong Kong and several other common-law forums grant them on an without-notice basis, sometimes within hours of an application. But the window is narrow, the procedural bar is high, and the cross-border mechanics of enforcing a WFO against assets held on a centralized exchange, in a smart contract or across multiple chains require precise coordination between legal process and on-chain forensics.
For any business facing active crypto fraud, the first question is not whether a WFO is available – in the right forum, it almost certainly is. The question is whether the evidence is ready, the forum is chosen correctly, and the application lands before the funds move again.
This analysis maps the WFO regime across the leading recovery forums, explains the procedural architecture, contrasts the forums on the dimensions that matter most to an operator under active loss, and sets out the strategic decisions that shape a successful application.
What Is a Worldwide Freezing Order, and Why Does It Matter for Crypto?
A worldwide freezing order is a court-granted injunction directing a defendant to refrain from dealing with, disposing of or diminishing their assets anywhere in the world up to a stated maximum value. In the digital-asset context, the WFO is the cornerstone remedy because crypto assets are uniquely mobile: a defendant can bridge, swap, mix and withdraw across jurisdictions in a matter of minutes. Without judicial intervention, the trail goes cold before any litigation can mature.
The leading common-law forums – England and Wales and the DIFC Courts – have each confirmed that crypto assets are property capable of being subject to proprietary injunctions and freezing orders. In England and Wales, the foundational decision AA v Persons Unknown [2019] established that Bitcoin constitutes property for the purposes of injunctive relief. The principle has since been applied across NFTs, stablecoins and tokens of various structures. The DIFC Courts have developed a parallel line, with disclosure and freezing relief confirmed in recent commercial disputes. Those jurisdictions are now the two most-used forums for initial crypto freezing applications by international operators.
The WFO works alongside two complementary tools. First, disclosure orders – including Norwich Pharmacal orders and Bankers Trust orders – compel third parties such as exchanges and custodians to disclose information about their users and account balances. Second, proprietary injunctions protect a claimant's asserted ownership of the specific assets, not merely a cap on the defendant's general wealth. Together, these three tools form the standard opening suite in a crypto fraud matter.
Critically, the WFO applies to assets globally, not just within the forum's territorial borders. An English WFO, for example, binds the defendant wherever they are, and a defendant who holds assets on an exchange in a third country is still within its reach if they are subject to personal jurisdiction in England.
Which Forums Lead on Crypto WFO Applications?
England and Wales, the DIFC Courts, Singapore and Hong Kong are the four forums where crypto WFO jurisprudence is most developed and where applications proceed with the greatest procedural speed. Each has distinct strengths and serves different cross-border fact patterns.
England and Wales remains the global benchmark. The Commercial Court and the Chancery Division have each developed a deep body of crypto-asset case law. Norwich Pharmacal disclosure against exchanges is well-established. The worldwide reach of an English WFO and the enforceability of English judgments in many other common-law jurisdictions make London the default choice when a defendant has any UK connection or when allied enforcement in multiple jurisdictions is anticipated. The courts move quickly on without-notice applications when urgency is demonstrated.
The DIFC Courts in Dubai have positioned themselves as the premier crypto-recovery forum in the Gulf and, increasingly, for disputes with a Middle East or Central Asian nexus. The DIFC Courts have confirmed they will grant WFOs in support of foreign proceedings – meaning a claimant pursuing claims in another jurisdiction can still seek a DIFC WFO over assets held in Dubai. This is significant for operators whose counterparty maintains accounts at UAE-regulated exchanges or custodians operating under the VARA regime. The DIFC also operates a gateway arrangement with the Dubai courts, allowing enforcement across the wider Emirate in appropriate cases.
In Singapore, the High Court has recognized proprietary injunctions over digital assets. Singapore's status as a major hub for institutional crypto business – regulated under MAS and the Payment Services Act – means that a WFO or disclosure order obtained there can reach exchange accounts held by entities licensed in Singapore. For disputes involving Southeast Asian counterparties, the Singapore courts represent the most efficient primary forum.
Hong Kong issued what is reported to be one of the first orders specifically addressing tokenized assets and confirmed in Re Gatecoin [2023] HKCFI 914 that crypto assets are property. The SFC-regulated VATP regime means that an increasing number of exchange relationships are anchored in Hong Kong, giving the courts practical enforcement leverage over exchange-held assets.
For each forum, the threshold question is the same: can personal or asset jurisdiction be established over the defendant? The most common bases are the defendant's domicile, the location of the exchange or custodian holding the assets, the location of servers, or the place of performance of the underlying agreement.
What Is the Procedural Architecture of a Crypto WFO Application?
A successful crypto WFO application moves through three stages in rapid sequence: on-chain evidence gathering, ex parte application, and post-order enforcement. Missing a step, or executing it out of sequence, can result in the order being set aside or, worse, the assets disappearing before service.
The first stage is forensic. A blockchain forensic report tracing the stolen funds from the originating wallet through any intermediate addresses, exchanges or bridges is the evidentiary foundation of the application. Courts in every leading forum now expect professional-grade forensic analysis, not a screenshot of a transaction hash. The report must identify: the originating address, any mixing or bridging steps, the destination exchange address, and the current holding address or balance where known. In our practice, we engage specialist forensic partners to produce court-ready reports as the first act in any recovery matter – not as an afterthought.
The second stage is the ex parte application itself. The claimant must demonstrate: a good arguable case on the merits; a real risk of dissipation; and that the balance of convenience favors the grant. In crypto fraud, the dissipation risk is almost self-proving – the nature of the asset and the speed of on-chain movement establish it. But the merits case and the full and frank disclosure obligation (the duty to tell the court everything a defendant would say if present) must be prepared meticulously. An application that omits a material fact will be set aside, even if the underlying fraud is clear.
The third stage is service and exchange notification. Once the order is granted, it must be served on the defendant and, critically, on the relevant exchange or custodian. In practice, simultaneous notification to the exchange – often via a dedicated legal or compliance email and backed by the court order – is the step that actually freezes the asset. Tether and Circle each hold contract-level authority to freeze USDT and USDC at the issuer level, and both will generally act on a court order or law-enforcement designation. For exchange-held assets that are not stablecoins, the exchange must be served and must comply with the order as a matter of its own legal obligation in the forum's jurisdiction.
The window between steps one and three is typically measured in days at most. In an active fraud, we have managed this process in under 72 hours from instruction to exchange notification. The timeline is achievable only when the forensic evidence is already in order and the application is filed on a without-notice basis with full urgency evidence.
How Does Cross-Border Enforcement of a WFO Actually Work?
A WFO granted in one jurisdiction does not automatically freeze assets in every country where the defendant holds property. It binds the defendant personally, but enforcing it against third-party custodians in other jurisdictions – and against the defendant's assets held there – requires a separate analysis in each additional forum.
The enforcement architecture typically has three layers. First, the primary forum WFO imposes a personal obligation on the defendant. Breach is contempt of court, punishable by committal or sequestration of assets within the forum's reach. Second, allied enforcement in secondary jurisdictions involves an application to a local court to recognize and give effect to the primary WFO – or, where recognition is not available quickly enough, to issue a parallel local order. Third, exchange-level cooperation – the most operationally immediate mechanism – depends on the exchange's jurisdiction and its own compliance obligation.
The cross-border layer is where most recovery operations either succeed or stall. An English WFO is highly effective against exchanges incorporated in, or with significant operations in, England and Wales or other Commonwealth jurisdictions that recognize English judgments. Against an exchange licensed by VARA in Dubai, a separate DIFC or Dubai Courts order may be needed. Against an exchange in Asia, Singapore or Hong Kong recognition is the most efficient route. Against an exchange in a jurisdiction with no developed recognition mechanism, direct service on the exchange backed by parallel local proceedings may be the only path.
In our cross-border practice, the two-forum strategy – primary WFO in a leading common-law forum combined with a secondary application in the exchange's home jurisdiction – is the structure we reach for when the destination exchange is not seated in the primary forum's effective enforcement reach. The cost of a second filing is almost always lower than the cost of a failed recovery. Operators we advise routinely underestimate how much jurisdictional fragmentation an exchange's corporate structure introduces into what looks like a straightforward freeze.
The CFAAR network – the Crypto Fraud and Asset Recovery network, launched in London in September 2021 – connects practitioners across the major recovery forums. It is a useful operational tool for identifying allied counsel quickly when a secondary filing is needed on short notice.
How Do Exchange Disclosure Orders Complement the WFO?
A WFO prevents dissipation. A disclosure order compels the exchange to reveal the identity of the account holder and the account balance. In crypto fraud recovery, you need both: the WFO freezes the asset, and the disclosure order identifies the defendant precisely enough to serve proceedings and to pursue further enforcement.
In England and Wales, the primary instruments are the Norwich Pharmacal order – requiring a third party who is mixed up in wrongdoing to disclose the wrongdoer's identity – and the Bankers Trust order, which compels disclosure of account and transaction information to assist a tracing claim. Both can be obtained against a UK-regulated exchange, and both can be sought at the same time as the WFO application.
The DIFC Courts have granted equivalent disclosure relief against entities operating under the VARA regime or within the DIFC. Singapore and Hong Kong have parallel instruments. In each forum, the practical question is whether the exchange holds its user KYC data in a form that will be responsive to the order and whether that data is held locally or in a foreign group entity.
A common mistake at this stage is targeting the wrong entity. Many exchanges operate through a group structure: the entity holding the user's assets may be a different legal person from the entity named in the terms of service. A disclosure application against the wrong group member will delay recovery by weeks. In our practice, we spend meaningful time mapping the exchange group structure before filing, to ensure the order is directed at the entity that actually holds the KYC data and the account balance.
One further tool: for stablecoin assets, a simultaneous approach to the issuer – Tether for USDT, Circle for USDC – requesting a precautionary freeze pending a court order can buy critical time. Issuers generally act on law-enforcement requests or on a court order, and some will engage on notice of pending proceedings with adequate supporting evidence. This is not a substitute for the court process, but it can preserve assets while the application is prepared.
Which Forum and Which Instruments Should Your Recovery Use?
The right forum and the right combination of instruments depend on four variables: where the defendant is located or has assets, which exchange or custodian holds the relevant assets, the quantum of the loss, and the timeline available before the assets are likely to move.
Profile A – Large-scale fraud, defendant with UK or Commonwealth connection, assets on a globally-operating exchange. Primary forum: England and Wales. Instruments: WFO + Norwich Pharmacal order + Bankers Trust disclosure. Timeline: ex parte application filed within 24–48 hours of instruction; exchange notification concurrent with service. Key risk: full and frank disclosure obligation; any omission on the ex parte application can undo the order.
Profile B – Defendant or exchange based in the UAE or Gulf region, assets on a VARA-regulated platform or a Dubai custodian. Primary forum: DIFC Courts. Instruments: WFO (in support of foreign proceedings if needed) + disclosure order. Timeline: the DIFC Courts have demonstrated willingness to move quickly on urgent commercial matters. Key risk: establishing jurisdictional nexus in the DIFC; if assets are held by a VARA-licensed entity outside the DIFC, a parallel Dubai Courts or VARA engagement may be needed.
Profile C – Defendant and assets with a Southeast Asian nexus, exchange licensed by MAS in Singapore. Primary forum: Singapore High Court. Instruments: proprietary injunction + disclosure order. Timeline: MAS-regulated exchanges have robust compliance infrastructure; service is operationally straightforward. Key risk: Singapore's regime requires demonstrating the assets are identifiable property held on trust or otherwise subject to a proprietary claim.
Profile D – Smaller quantum, clear blockchain trail, fast-moving defendant. Stablecoin freeze request to issuer (Tether/Circle) concurrent with on-chain tracing; primary court filing in the most accessible connected forum. The issuer approach is not a substitute for a court order, but for stablecoins it can freeze the specific tokens within hours. Key risk: issuer cooperation is not guaranteed without a law-enforcement reference or a court order; do not rely on it as the sole strategy.
Profile E – Complex multi-chain, multi-exchange dissipation pattern. Multi-forum strategy from the outset: a primary WFO in a leading common-law forum, simultaneous secondary applications in each exchange's home jurisdiction, and a coordinated forensic operation updating the trail in real time. This is the most resource-intensive structure, but for seven-figure or larger losses it is the architecture that preserves the most recovery options. In our cross-border practice, we have coordinated simultaneous filings across three jurisdictions within a single working week on matters of this profile.
What Are the Most Common Mistakes in Crypto WFO Applications?
The most expensive mistake in a crypto recovery matter is waiting. Recovery windows for misappropriated digital assets are measured in hours, not weeks. Every day between the theft and the filing is a day in which the defendant can bridge, mix or withdraw. Courts understand urgency, but they cannot create evidence that no longer exists on-chain.
The second mistake is filing without adequate forensic evidence. A WFO application unsupported by a professional on-chain tracing report will face serious scrutiny, and in some forums will be adjourned for further evidence – by which point the assets may have moved. The forensic report is not optional; it is the evidentiary core.
The third mistake is selecting the forum for convenience rather than for strategic fit. Filing in the closest court, or the cheapest court, rather than the court with effective reach over the exchange or custodian holding the assets, produces a WFO that is legally valid but operationally toothless. The order must be capable of reaching the asset.
The fourth mistake is underestimating the full and frank disclosure obligation on an ex parte application. A court that grants a without-notice order does so on the basis that the applicant has told it everything the defendant would say. Failure to disclose a material fact – even one that does not ultimately undermine the merits – will give the defendant grounds to set the order aside, potentially with a costs award against the claimant and a brief window in which the assets can move.
The fifth, and perhaps most underappreciated, mistake is failing to map the exchange's corporate structure before service. Serving the wrong entity means the order does not bind the entity holding the KYC data or the account balance. This delays recovery while an amendment is sought and gives the defendant notice that proceedings are on foot.
A micro-matter illustrates the cost of delay. In a recent matter, a payments company discovered a significant stablecoin misappropriation by an insider. The first 36 hours were spent in internal escalation rather than in legal triage. By the time we were instructed, the assets had been moved through two bridge transactions and were held at a centralized exchange outside the primary jurisdiction. We filed a WFO application in a leading common-law forum and simultaneously filed for a disclosure order against the exchange in its home jurisdiction. The order was served within four business days of instruction. The assets were frozen before the defendant could complete a further withdrawal. The outcome was not guaranteed by the strategy, but the strategy was the only one that had a realistic prospect of success at that point in the timeline. Earlier instruction would have given us additional options.
A Common Assumption: Once Funds Leave the Wallet, Nothing Can Be Done
A common assumption among businesses that have suffered a digital-asset loss is that the irreversibility of blockchain transactions makes recovery impossible. This assumption conflates the technical immutability of a transaction record with the legal enforceability of rights against identifiable defendants and third-party custodians.
The blockchain record is, in fact, the evidence base for the recovery. Every transaction is permanently recorded. Forensic tools can trace funds through dozens of hops, across chains and through mixing attempts, with a degree of precision that far exceeds what is achievable with traditional banking records. The fact that a transaction cannot be reversed does not mean that the assets cannot be frozen at the point at which they come to rest – which, in most frauds, is a centralized exchange where the defendant needs to convert them to fiat.
Courts in England and Wales, the DIFC, Singapore and Hong Kong have each confirmed that crypto assets are property, that proprietary claims over them can be asserted, and that third-party custodians can be compelled to freeze and disclose. The legal tools exist. The question is always whether the evidence is ready and whether the application is filed before the defendant completes the conversion cycle. Operators we advise who act within the first 24 hours of discovering a fraud consistently have more recovery options than those who wait for the full picture to emerge internally before involving lawyers.
The myth of irreversibility is also legally dangerous because it causes businesses to delay instruction in the belief that legal process will not help. That delay is, in practice, the principal reason recoveries fail – not the absence of legal tools, but the absence of speed in deploying them.
We move for freezing relief and exchange disclosure while the trail is live. That is the capability that differentiates a recovery that succeeds from one that does not.
If a recovery clock is running, reach our disputes desk now. The process above describes the standard path. Your facts – the exchange, the asset type, the defendant's likely jurisdiction – change the specific analysis and the forum selection. Map your options with our disputes team before the trail goes cold.
Related at OBOLUS
- Disputes & Asset Recovery for Digital-Asset Businesses – full-scope recovery counsel from on-chain tracing through to enforcement and judgment
- On-Chain Asset Tracing for Early-Stage Founders – forensic-led tracing engagements structured for founders navigating a first recovery matter
- Transaction Monitoring Setup in Panama – compliance architecture for operators managing AML obligations in a cross-border structure
The process above describes the standard recovery path. If you have already instructed once and the application stalled, or if an exchange refused to cooperate, a second structural read can identify the forum or entity issue. Write to info@oboluslaw.com with a summary of where you are. Map your options.
FAQ
Can stolen crypto actually be recovered?
Yes, in many cases – provided the right legal steps are taken quickly. Courts in England and Wales, the DIFC, Singapore and Hong Kong recognize crypto assets as property and will grant freezing orders, proprietary injunctions and disclosure orders against exchanges. Recovery depends on the speed of the application, the quality of the forensic evidence, and whether the assets have come to rest at an exchange that is reachable by court order. We work alongside forensic partners to convert on-chain evidence into court-ready disclosure applications.
How fast must I act after a digital-asset theft?
Speed is the critical variable. Recovery windows are measured in hours, not days. Every hour that passes is an opportunity for the defendant to bridge, mix or withdraw. A professional forensic report must be commissioned immediately. A legal team should be briefed at the same time, not after the internal investigation is complete. In our practice, the difference between a successful freeze and a failed application often comes down to whether instruction was given on day one or day three. Act on the same day the loss is discovered.
Can a court freeze assets held on an exchange?
Yes. A worldwide freezing order binds the defendant personally, preventing them from dealing with their exchange-held assets. Separately, a disclosure order under Norwich Pharmacal or Bankers Trust principles can be served directly on the exchange, compelling it to freeze the account and disclose the account holder's identity. For stablecoin assets, simultaneous notification to the issuer – Tether for USDT or Circle for USDC – can produce a token-level freeze concurrent with the court application. The exchange must be in a jurisdiction where the court order carries legal force.
OBOLUS is an independent digital-asset law boutique acting exclusively for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance obligations that sit around them. Digital assets are the whole of our practice. We work alongside forensic partners to convert on-chain evidence into court-ready disclosure applications, and we move for freezing relief while the trail is live. To discuss your situation, contact info@oboluslaw.com or message us at t.me/oboluslaw.
By Glen Sorensen, Disputes & Recovery Analyst – specialist in cross-border crypto asset recovery, WFO applications and exchange disclosure proceedings across common-law forums.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.