Worldwide Freezing Order: The Disputes Angle

A worldwide freezing order (an injunction freezing a respondent's assets in every jurisdiction where they are held) is the most powerful preservation tool available to a business that has lost digital assets to fraud, theft or misappropriation. The recovery window after a crypto theft is measured in hours, not weeks. Funds that clear one exchange can be fragmented across dozens of wallets and passed through privacy tools before a victim's legal team has even filed a police report. Speed, court choice and the quality of the on-chain evidence package determine whether the assets are frozen or gone. This analysis maps the legal instruments, the cross-border complications, and the practical decisions a business must make from the moment it detects the loss.

The core legal question is whether courts in the relevant forum will recognise cryptocurrency as property capable of being frozen, and whether exchange operators and stablecoin issuers can be compelled to disclose or freeze before the ultimate wrongdoer is even identified. In leading common-law forums – England and Wales, the DIFC Courts, Singapore and Hong Kong – the answer is now clearly yes. The tool kit includes the worldwide freezing order itself, Norwich Pharmacal and Bankers Trust disclosure orders compelling exchanges to identify account holders, and direct issuer freeze requests to stablecoin operators such as Tether or Circle.

The sections below move through the full disputes arc: the property question, the applicable forums, the procedural path, the cross-border complications, a decision matrix for operator profiles, common mistakes, and the firm's position on running a live recovery. An anonymized micro-matter closes the analysis.

Is Cryptocurrency Recognised as Property That Courts Can Freeze?

Cryptocurrency is recognised as property capable of being the subject of a proprietary injunction or a worldwide freezing order in every major common-law forum used for crypto recovery. That recognition is the threshold question: without it, no freezing relief is available. In England and Wales, the case of AA v Persons Unknown [2019] confirmed that crypto assets held in a wallet constituted property under English law. The subsequent decision in Osbourne v Persons Unknown [2022] extended that analysis to non-fungible tokens. Both cases are part of the established English authority underpinning WFO applications today.

Singapore reached a comparable conclusion in CLM v CLN [2022], where the High Court granted a proprietary injunction over cryptocurrency on the basis that it met the criteria for property. Hong Kong followed with a "tokenised" injunction in 2024 (HCA 2417/2024), completing a consistent common-law axis across London, Singapore and Hong Kong. The DIFC Courts have moved in the same direction, with the 2025 matter of Techteryx v Aria Commodities DMCC demonstrating willingness to grant relief in support of foreign proceedings.

The civil-law world is catching up, but more slowly. Courts in continental Europe, Brazil and several Asian jurisdictions apply property concepts derived from their civil codes rather than from common-law equity. Those frameworks can still support freezing relief, but the procedural route and urgency standards differ materially from an English without-notice application. Operators weighing where to file must assess both the forum where the exchange is incorporated and the forum most likely to have in personam jurisdiction over the wrongdoer.

How Does a Worldwide Freezing Order Actually Work?

A worldwide freezing order prohibits a respondent from dealing with or diminishing their assets anywhere in the world, up to a specified maximum value, pending the resolution of the underlying claim. In a crypto recovery context, the order runs against both an identified wrongdoer and – where the wrongdoer is unknown – against "persons unknown" with a connection to a defined wallet address or set of transactions. The "persons unknown" jurisdiction, now well-settled in England and Wales, is critical for crypto cases precisely because wallets are pseudonymous at inception.

The standard English WFO is granted on a without-notice basis at the outset. The applicant must demonstrate: (1) a good arguable case on the merits, (2) a real risk of dissipation, and (3) that the balance of convenience favours the grant. In crypto matters, the dissipation risk element is almost self-proving – the speed and irreversibility of on-chain transfers mean that any delay between the theft and the order creates a material gap during which assets can move beyond reach.

The order is backed by the contempt jurisdiction: a respondent who breaches a WFO can be committed to prison or fined. More practically for crypto recovery, third parties – exchanges, custodians and, in the appropriate circumstances, stablecoin issuers – are bound once they are served with the order and notified of its terms. That third-party effect is what makes the English WFO the instrument of choice when assets are sitting on a centralised exchange.

Ancillary disclosure orders accompany the WFO in practice. A Norwich Pharmacal order compels an exchange to disclose the identity of the account holder behind a wallet address. A Bankers Trust order compels disclosure of the assets and transactions passing through an account, supporting both the tracing exercise and the evidence base for further proceedings. Together, these orders convert on-chain transaction data into named defendants and frozen account balances.

To discuss the procedural options at the outset of a recovery, contact OBOLUS at info@oboluslaw.com. The process above describes the standard path. Your facts – the entity's jurisdiction, the exchange relationship, the size of the loss – change the analysis and the choice of forum materially.

Which Forum Should You Choose for a Crypto WFO Application?

Forum selection in a crypto recovery matter is not merely a question of where the victim is incorporated – it is a strategic decision about where the evidence is strongest, where the relevant exchange or custodian can be served, and where any order will be recognised and enforced. The leading forums for crypto WFO applications each carry distinct advantages and constraints.

England and Wales remains the default for high-value cross-border crypto fraud matters. The courts have developed a mature crypto-asset property doctrine, a settled "persons unknown" jurisdiction, and efficient without-notice procedures. The worldwide reach of an English WFO is recognised and given effect in the Cayman Islands, BVI, Singapore and Hong Kong through the common-law process of granting local relief in support of foreign proceedings. For a business whose assets passed through a UK-regulated exchange or whose counterparty had any connection to England, London is typically the first port of call.

The DIFC Courts serve the same function for operators in the Gulf. The DIFC has a sophisticated English-law-based civil procedure, an efficient interim-relief process, and – crucially – an established enforcement relationship with courts in the wider UAE and across a growing range of treaty partners. For businesses operating in the VAR regime or whose counterparty sits in Dubai or the broader MENA region, the DIFC Courts offer WFO relief that can be domestically enforced without the delay of a recognition proceeding.

Singapore and Hong Kong both provide robust interim-relief options and are the natural choices where the exchange or assets have a material connection to East Asia. Singapore's Monetary Authority of Singapore-regulated exchange sector and Hong Kong's SFC-licensed VATP regime mean that domestic exchanges are reachable through local process without the need to rely on a foreign order's recognition.

The choice is rarely binary. In our cross-border practice, we frequently see matters where the initial WFO is obtained in London, followed immediately by parallel recognition applications in Singapore and the Cayman Islands to pin assets that have moved to exchanges in those jurisdictions. The sequencing of those applications – and the evidence package assembled before the first without-notice hearing – determines whether the assets remain frozen through the recognition gap.

How Does On-Chain Tracing Feed the Legal Process?

On-chain tracing converts a blockchain's public transaction ledger into a legally admissible evidence chain connecting a victim's wallet to the current location of misappropriated assets. Without that chain, a WFO application names the wrong wallets, covers the wrong accounts, and potentially freezes nothing of value. With it, a court can be shown exactly where the funds are sitting and why the respondent – or the exchange holding the account – must be served immediately.

The forensic workflow begins with the transaction hash: the unique identifier of the transfer that removed assets from the victim's control. From that hash, a forensic analyst follows the asset through successive hops – mixing services, intermediate wallets, exchange deposit addresses, bridge protocols – producing a report that attributes each wallet to its controller to the degree that blockchain analysis allows. Where assets are converted into stablecoins such as USDT or USDC, the analysis also identifies whether the balance is still in the original address or has been moved to a fresh wallet.

That last point matters because both Tether (USDT) and Circle (USDC) hold contract-level freeze authority over their issued tokens. They will generally act on a law-enforcement case reference, an OFAC designation, or – in practice – a court order supported by a forensic report identifying the wallet. The forensic report therefore serves a dual function: it supports the court application and it is the threshold document for an issuer freeze request. Both tracks should run in parallel from the first hours after discovery of the loss.

Forensic partners with the capability to produce court-admissible blockchain analysis reports – Chainalysis, TRM Labs, Elliptic and Asset Reality are the names commonly referenced in this space – are part of the operational supply chain for a competent crypto recovery. In our practice, we work alongside forensic analysts to convert on-chain evidence into a coherent evidence package that can be placed before a court on a without-notice basis, typically within one to three business days of the initial instruction, depending on the complexity of the transaction graph.

If a recovery clock is running, reach our disputes desk now at info@oboluslaw.com. If a prior application stalled or an account was closed before the freeze could land, a second read of the transaction graph can surface the structural reason and the route back.

Stablecoin Freeze Requests: A Parallel Track

A stablecoin freeze request to Tether or Circle is not a substitute for a court order – it is a parallel instrument that operates on a different timeline and through different legal mechanics. Understanding how those two tracks interact is essential to any coordinated crypto recovery.

Stablecoin issuers freeze tokens at the contract level by blocklisting a wallet address: the tokens remain in the address but cannot be transferred. That freeze is near-instantaneous once the issuer acts. The window for obtaining it is therefore directly tied to the speed with which a victim can assemble the evidence package – the transaction hash, the forensic report attributing the balance to the target wallet, and either a law-enforcement case reference or court documentation supporting the request.

The legal basis for an issuer freeze request sits in the terms of service governing the token's issuance, not in a court order. The issuer has contractual authority to freeze; the court order adds the in personam compulsion that removes any discretion and provides the issuer with protection against a claim by the wallet holder. Running both simultaneously – approaching the issuer commercially while simultaneously progressing the court application – is the standard practice in well-run recovery matters.

The cross-border complication here is issuer jurisdiction. Tether and Circle are subject to regulatory oversight and law-enforcement relationships that may not extend to courts in every country where their tokens are used. An English court order or a US federal law-enforcement referral will generally receive a faster response than a request from a jurisdiction with which the issuer has no established channel. That is a practical reality of the recovery, not a legal deficiency – and it is one of the reasons that forum selection and issuer engagement strategy must be determined together at the outset of a matter, not sequentially.

What Complications Arise When Assets Cross Borders?

Cross-border crypto recovery introduces three specific complications that do not arise in a purely domestic matter: the recognition gap, the jurisdictional gap, and the evidence gap. Each requires a discrete strategy, and all three typically run simultaneously.

The recognition gap is the period between obtaining a WFO in the primary forum and having it recognised and given effect by the court in the secondary jurisdiction where the assets have moved. Assets can continue to flow during that gap. The mitigation is parallel filing: instructing allied counsel in the relevant jurisdiction to file for local recognition or local relief at the same time as the primary application is heard. That requires the forensic evidence package to be structured so that it can be deployed across multiple courts without requiring a new expert report for each forum.

The jurisdictional gap arises where the exchange or custodian holding the relevant account is not incorporated in a jurisdiction that recognises the primary court's orders and is not subject to any treaty or commercial relationship that would incentivise cooperation. Decentralised exchanges present an extreme version of this problem: there is no operator to serve and no account balance to freeze at the protocol level. Recovery from a decentralised exchange requires a different theory of claim, typically tracing into identifiable on-chain positions or pursuing the individuals who control associated wallets.

The evidence gap is the challenge of maintaining a continuous, documented chain of custody between the blockchain record and the documents placed before the court. Blockchain data is public but it requires expert interpretation, and that interpretation must be defensible under cross-examination. A forensic report prepared hastily, without regard to the chain-of-custody requirements of the target forum, can be excluded or its weight reduced at precisely the moment it matters most.

Operators we advise routinely underestimate the time required to prepare a court-ready evidence package. The forensic analysis itself can be produced quickly. The legal framing – converting the transaction graph into a cause of action, identifying the applicable legal test in the target forum, and drafting the supporting witness statements – takes longer. Building that capacity before a crisis, rather than assembling it under pressure in the first 48 hours after a theft, is a structural advantage that most businesses have not yet taken seriously.

Decision Matrix: Which Recovery Path Fits Which Profile?

The right recovery strategy depends on the size of the loss, the current location of the assets, the relationship between the victim and the exchange or custodian, and the quality of the on-chain evidence available at the point of discovery. No single path is optimal for every operator. The following profiles map the principal decision branches.

Profile A: Large loss, assets on a centralised exchange, England or a common-law forum available. This is the WFO-first scenario. The priority is a without-notice application in the primary forum, supported by a forensic report and a disclosure order against the exchange. Parallel engagement with the stablecoin issuer if the assets have been converted. Timeline from instruction to without-notice hearing: typically one to three business days with a complete evidence package. Key risk: the assets move off-exchange before service of the order.

Profile B: Mid-range loss, assets fragmented across multiple wallets and exchanges, cross-border movement detected. This profile requires a sequenced strategy: identify the exchange or jurisdiction holding the largest single concentration of the misappropriated assets, obtain a WFO covering that concentration first, and then extend recognition proceedings to the secondary jurisdictions. A single WFO application that tries to cover every jurisdiction simultaneously without a forensic foundation for each is likely to fail for want of specificity. Key risk: overreach in the initial application undermines credibility before the court.

Profile C: Smaller loss, assets on a domestic exchange with a known counterparty. A full WFO application may not be proportionate. A targeted disclosure order under the Norwich Pharmacal jurisdiction, followed by civil proceedings once the defendant is identified, is often the right path. The exchange's AML/KYC records are the primary evidence source, and the disclosure order is the tool to unlock them. Key risk: the exchange has already frozen or closed the account on its own initiative, potentially destroying evidence that would otherwise support the claim.

Profile D: Assets passed through or converted at a decentralised protocol. No exchange to serve; no identifiable custodian. The theory of claim shifts to proprietary tracing into identifiable on-chain positions, or to pursuing the individuals who control wallets that received the misappropriated assets. This is technically and legally the most demanding scenario, requiring forensic analysis that can attribute wallet control to a natural person, combined with a cause of action that survives in the target forum without an identifiable corporate defendant. Key risk: the attribution evidence is insufficient to satisfy the jurisdictional test in any target forum.

What Mistakes Destroy a Crypto Recovery Before It Starts?

The most common mistake in a crypto recovery is delay. Every hour between discovery of the loss and commencement of legal process is an hour in which assets can move, be converted, be fragmented, or exit a jurisdiction. We have seen matters where a business waited days before engaging legal counsel, either because it was pursuing informal remedies with the exchange or because it was uncertain whether legal process was available. By the time the first court application was filed, the forensic trail had gone cold and the assets had passed through multiple layers of obfuscation.

The second most common mistake is treating the forensic analysis and the legal process as sequential rather than parallel. Businesses that wait for a complete forensic report before engaging lawyers lose the first 24 to 48 hours. The forensic analysis and the legal application should begin simultaneously, with the evidence package updated as the analysis develops.

A third structural error is engaging a general-practice firm without crypto-specific expertise. The procedure for a crypto WFO application – the "persons unknown" jurisdiction, the without-notice evidence standard, the drafting of orders that can be served on an exchange's compliance function and that will be recognised in a secondary jurisdiction – requires practitioners who have done it before. A procedural error in the initial application can result in a contested return date that gives the wrongdoer time to dissipate the assets that the order was meant to preserve.

A common assumption that we regularly encounter in this space is that once funds leave a wallet, nothing can be done. That is incorrect, and it often leads victims to delay action or to abandon recovery efforts after an initial failure. The on-chain record is permanent and traceable. The legal tools – WFOs, disclosure orders, stablecoin freezes, exchange cooperation through court process – are well-developed in the leading forums. What is time-sensitive is not the legal theory; it is the operational execution. An hour spent waiting is an hour that a sophisticated wrongdoer is using to move assets further from reach.

Recovery in Practice: An Anonymized Illustration

In a matter handled earlier this year, a fintech operator discovered late one evening that a seven-figure balance of USDT held at a third-party custodian had been transferred out following a social-engineering attack on the custodian's access controls. The forensic analysis, commenced within hours of the discovery call, identified two exchange deposit addresses as the immediate destination of the funds. One exchange was UK-regulated; the other was incorporated in a common-law offshore jurisdiction. Working overnight, we assembled the transaction evidence package and filed a without-notice application in England and Wales the following morning. The order was granted that afternoon. The UK-regulated exchange froze the relevant account the same day on service of the order. Simultaneously, we engaged a stablecoin issuer directly with the forensic report and the court documentation; the issuer placed a contractual freeze on the wallet holding the second tranche within 24 hours of the court order being drawn up. Allied counsel in the offshore jurisdiction obtained a recognition order for the English WFO within a further two business days. The combined effect was that substantially all of the misappropriated balance was frozen before any further movement occurred. Recovery proceedings are ongoing.

How Does the CFAAR Network Support Cross-Border Recovery?

The CFAAR (Crypto Fraud and Asset Recovery network, launched in London in September 2021) connects practitioners, forensic specialists and law-enforcement bodies across jurisdictions with a shared focus on digital-asset fraud recovery. Its operational significance is that it provides an established communication channel between legal practitioners and exchange compliance teams, and between legal practitioners in different jurisdictions who need to coordinate parallel applications efficiently.

CFAAR's practical value in a live recovery is not in replacing the legal process – court orders are still required, forensic evidence is still required – but in compressing the timeline for the coordination steps that sit around that process. An exchange that has an established relationship with CFAAR practitioners and that understands the standard evidence package for a disclosure order will process that order more quickly than one encountering the format for the first time. Similarly, the network's cross-border component means that when a UK-obtained WFO needs to be recognised in a secondary forum, the practitioner in that forum is already familiar with the English order format and the evidence standard required.

For victims, the practical implication is that the network relationship of their legal team matters to the speed of recovery. A firm that operates within the CFAAR ecosystem, that has existing relationships with exchange compliance functions, and that has run the full procedural cycle in multiple forums is structurally faster than one that is reconstructing those relationships from scratch in the middle of an emergency. Regulators in the leading hubs increasingly expect VASPs to have documented AML/compliance channels that connect them to this broader recovery infrastructure – it is becoming part of the governance expectation for licensed exchanges, not merely a best practice.

Related at OBOLUS

• Disputes & Asset Recovery for Digital-Asset Businesses – full practice overview: WFOs, disclosure orders and on-chain tracing across 25+ forums.
• Stablecoin Freeze Request in France (AMF/PSAN) – the French regulatory and legal route for emergency stablecoin freezes.
• VARA Licence Application in Brazil – licensing and regulatory structuring for operators entering the Brazilian digital-asset market.

FAQ

Can stolen crypto actually be recovered?

Yes, in a meaningful proportion of cases where action is taken quickly. The on-chain record is permanent – every transaction hash is traceable. Where assets have reached a centralised exchange, a worldwide freezing order and a parallel disclosure order can freeze the account and identify the holder before further movement occurs. Stablecoin issuers can act at the contract level on a court order or law-enforcement reference. Recovery is not guaranteed, but the legal tools are well-developed in the leading common-law forums and the forensic methods continue to improve. Speed of response is the single most important variable.

How fast must I act after a digital-asset theft?

Immediately. The recovery window after a crypto theft is measured in hours. Assets can pass through multiple wallets, be converted between tokens, and reach exchanges in several jurisdictions within a single business day. The forensic analysis and the legal application should begin in parallel from the moment the loss is discovered – waiting for one to complete before starting the other costs critical time. In a well-resourced matter, a without-notice application for a worldwide freezing order can be filed within one to three business days of instruction, provided the transaction evidence is assembled promptly.

Can a court freeze assets held on an exchange?

Yes. A worldwide freezing order binds third parties – including exchanges and custodians – once they are served and notified of its terms. An exchange that moves or permits withdrawal of frozen assets after service commits a contempt of court. Disclosure orders, such as the Norwich Pharmacal jurisdiction in England and Wales, separately compel exchanges to identify account holders and disclose transaction records. Both instruments are well-established in the leading forums and are routinely used to freeze and trace assets on centralised platforms pending resolution of the underlying claim.

OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We move for freezing relief and exchange disclosure while the trail is live, and we work alongside forensic partners to convert on-chain evidence into court-ready disclosure applications. To discuss your situation, contact info@oboluslaw.com or message us at t.me/oboluslaw.

By Lydia Brennan, Tax & Structuring Analyst – specialising in the cross-border legal and financial mechanics of digital-asset disputes, stablecoin recovery proceedings and the tax implications of on-chain asset recovery for corporate victims.

This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.