On-chain asset tracing in France is a viable and court-backed strategy for recovering misappropriated digital assets, provided the action is initiated quickly and structured around both the French legal regime and the wider cross-border enforcement environment. The Autorité des marchés financiers (AMF) and the Prestataires de Services sur Actifs Numériques (PSAN) registration regime together shape the disclosure and enforcement tools available to a claimant. This guide sets out the process step by step, from the first on-chain trace to the point of recovery or enforcement, with the cross-border angles that define nearly every case we handle.
Why Speed Is the Decisive Variable in Any French Crypto Recovery
Recovery windows for misappropriated digital assets are measured in hours, not weeks – and that reality is no different in France than it is in London or Singapore. The moment funds leave a controlled wallet, they can pass through mixers, cross-chain bridges or multiple exchanges in rapid succession. Each hop dilutes the evidentiary chain and reduces the probability of a successful freeze. In our cross-border practice, the cases that reach a satisfactory outcome are almost always the ones where counsel was instructed within the first forty-eight hours.
France's legal system does provide meaningful tools for a claimant who moves decisively. The procedural framework is built around interim and conservatory measures that a French court can issue on short notice. A saisie conservatoire (conservatory attachment) allows a creditor to freeze assets provisionally, pending a determination on the merits. The French Code of Civil Enforcement Procedures governs this process, and French courts have shown increasing willingness to apply it to digital assets held on or accessible through regulated platforms. Speed of instruction, quality of the forensic report, and precision in identifying the counterparty exchange determine whether relief arrives in time.
The PSAN registration regime creates a regulated population of service providers in France – a population that is legally obligated to respond to certain judicial and regulatory requests. That obligation is the claimant's practical entry point to exchange-level disclosure and freeze.
The process above describes the standard path. Your facts – the entity structure, the exchange relationship, the jurisdictions in play – change the analysis significantly. For a scoped assessment of your recovery situation, contact OBOLUS at info@oboluslaw.com.
What the AMF/PSAN Regime Actually Means for Asset Tracing
The AMF is the primary market regulator for digital assets in France; the PSAN regime, operating under French monetary and financial law, is the registration and supervision structure that governs most crypto service providers operating in or from France. For a recovery claimant, the relevance of this regime is direct: a PSAN-registered entity has formal regulatory obligations, including anti-money laundering requirements under the applicable VASP provisions transposed from the EU AML directives, that bind it to cooperate with court and prosecutorial orders.
Operators we advise routinely underestimate the significance of the PSAN register as an enforcement anchor. If the exchange holding misappropriated funds is PSAN-registered, a claimant has a clearly regulated entity to address – one with a domestic legal presence, a designated compliance officer, and a known supervisory relationship with the AMF. That is materially different from pursuing an unregistered offshore exchange through diplomatic channels.
Under the AML regime applicable to PSAN-registered entities, exchanges are required to maintain transaction records and customer identity data. A disclosure order obtained through French civil or criminal procedure can compel production of that data. The Travel Rule – the obligation to pass originator and beneficiary data with a virtual asset transfer – additionally means that, for compliant transfers, the exchange may hold information about where funds came from and where they went. In cross-border cases, we also engage the FATF Recommendation 15 framework and allied counsel in the relevant jurisdiction to coordinate simultaneous disclosure requests where the trail runs through non-French platforms.
Step One: Building the On-Chain Trace Before Filing Anything
The first step in any French crypto recovery is a professional on-chain forensic trace, and it must happen before any legal filing is made. A court application without a forensic report is premature; a freeze application built on an incomplete trace is vulnerable to challenge. In our practice, we instruct forensic specialists concurrently with opening the legal file – typically within the first twenty-four to forty-eight hours of instruction.
The trace produces a transaction-level map showing the path of funds from the point of misappropriation through subsequent wallets, to the exchange or custodian address where assets currently sit or were last seen. The key outputs are transaction hashes – the unique identifiers that anchor every on-chain event – wallet addresses, timestamps, and any clustering analysis identifying wallets likely controlled by the same actor.
This forensic report serves three distinct legal purposes. First, it grounds the factual basis for an urgent application to the court. Second, it satisfies the threshold showing a French judge requires before granting conservatory relief. Third, it forms the basis of any request to a stablecoin issuer – Tether (USDT) and Circle (USDC) each hold contract-level freeze authority over their issued tokens – to freeze a specific wallet address, an action issuers generally take on the basis of a law-enforcement case reference or a court order. The forensic report, properly structured, supports both tracks simultaneously.
A common mistake at this step is using internal, non-specialist analysis rather than a report from a recognized forensic provider. French courts and exchange compliance teams expect professional-grade output. An imprecisely attributed trace will not support a freeze request.
Step Two: Choosing Between Civil and Criminal Procedure in France
France offers two parallel procedural routes for crypto asset recovery, and the choice between them – or the decision to run them concurrently – is one of the most consequential early decisions in any case.
The civil route proceeds through the French courts using interim relief mechanisms, principally the conservatory attachment mentioned above. A claimant files in the competent civil court, presenting the forensic trace and the legal basis for the claim. The court can issue an order ex parte – without notice to the respondent – if urgency and the risk of dissipation are demonstrated. The attachment order is then served on the relevant exchange or custodian as a garnishee. If that entity is PSAN-registered, service is straightforward. If it sits offshore, the attachment may need to be recognized or supplemented by orders in other jurisdictions.
The criminal route involves filing a complaint with the parquet (public prosecutor) or directly with a specialized unit such as the Office central de lutte contre la criminalité liée aux technologies de l'information et de la communication (OCLCTIC) or the Junalco unit of the Paris prosecutor's office, both of which have digital-asset expertise. A criminal filing triggers prosecutorial powers of compelled disclosure and search that go further than civil orders. The practical limitation is timing: criminal procedure moves at its own pace, and a prosecution-led freeze may not arrive before funds move again.
In our cross-border practice, the cases with the best outcome profiles combine a civil conservatory application for immediate speed with a concurrent criminal filing that secures prosecutorial leverage for the medium term. Neither route is inherently superior. The facts – the identity of the exchange, the amount at stake, the claimant's evidentiary position – determine the balance.
Step Three: Securing Exchange Disclosure and a Freeze Order
Once an interim order or prosecutorial instruction is in place, the practical mechanism is a formal request to the exchange holding the assets. For a PSAN-registered French entity, that request is served directly with the court order. The exchange's compliance team is then obligated to respond within the timeframe the order specifies. We have seen compliant French exchanges act within hours of receiving a properly served order, particularly where the forensic basis is clear and the order is unambiguous.
The disclosure component – compelling the exchange to produce KYC data and transaction records linked to the relevant addresses – typically accompanies the freeze request. Identity data obtained this way can identify the beneficial owner of the receiving wallet, opening the path to a substantive damages claim or criminal referral in parallel.
Where assets have moved to a non-French platform, the analysis extends to the question of recognition and enforcement. England and Wales remains a leading forum for crypto asset recovery, and a worldwide freezing order (an injunction freezing a defendant's assets globally) or a disclosure order obtained there can run in parallel with French proceedings. In recent years, courts in Singapore, Hong Kong, and the DIFC have each granted similar relief in support of foreign proceedings. We work with allied counsel in each relevant jurisdiction to run coordinated applications where the trail crosses borders.
If the assets involve USDT or USDC and have not yet been converted, a freeze request sent directly to Tether or Circle – supported by a law-enforcement case reference and the forensic trace – can immobilize the specific token balance at the contract level. This is not a substitute for a court order, but it can provide days of additional time while proceedings are progressed.
If a prior application stalled or an account was closed before the order arrived, a second review of the procedural sequence can often identify where the gap was and what supplemental application is available. Write to OBOLUS at info@oboluslaw.com or message us via t.me/oboluslaw to discuss.
Cross-Border Angles: Tax, Banking, and What Recovery Means Structurally
Every crypto recovery case with a French dimension carries cross-border consequences that extend beyond the pure litigation track. Two in particular – tax treatment of recovered assets and banking access during proceedings – arise in almost every matter we handle and are consistently underestimated by claimants.
On tax: the treatment of a recovered digital asset in France depends on the legal characterization of the recovery. A restitution of stolen property is generally treated differently from a gain, but the pathway through the applicable French tax regime must be confirmed case by case. We coordinate this analysis with our tax practice at the outset, not at the point of recovery – because the banking and entity structure through which recovered funds are received can affect the tax position materially.
On banking: the practical reality for many claimants is that even a successful freeze and recovery requires a receiving account capable of holding or converting the returned digital assets. Where a business's banking relationships are already under pressure – as is frequently the case during fraud events or regulatory investigations – this can create a bottleneck. We advise on the banking structure in parallel with the recovery strategy, not as a separate mandate. That is the logic behind the way we manage cross-border matters: licensing, banking, and recovery are one integrated question, not three disconnected workstreams.
A note on the MiCA dimension: as the EU-wide MiCA (Markets in Crypto-Assets Regulation) regime matures and PSAN obligations evolve toward the CASP authorisation model, the compliance infrastructure of French-regulated platforms will become more uniform across the EU. That convergence benefits claimants. A platform authorized under MiCA is required to maintain robust AML records and to cooperate with competent authorities – exactly the infrastructure a tracing action depends upon.
A Case in Context: Cross-Border Stablecoin Recovery with a French Node
In a recent matter, a technology company based outside France discovered that a seven-figure stablecoin balance had been misappropriated through a compromised custody arrangement and moved to a series of addresses, one of which resolved to a PSAN-registered French exchange. We were instructed within thirty-six hours of discovery. A professional forensic trace was completed overnight, producing transaction hashes and wallet clustering data sufficient to ground an urgent conservatory application. Acting concurrently, we contacted allied counsel in a second jurisdiction where part of the balance had been routed to a non-French platform. French civil proceedings were filed, and the conservatory order was served on the exchange within four days of instruction. The exchange's compliance team responded with account suspension and identity disclosure. The information obtained identified the beneficial owner and opened a parallel criminal file. The bulk of the stablecoin balance remained frozen pending the substantive claim. The matter illustrates the pattern we consistently see: the speed of instruction and the quality of the forensic report are the variables that determine whether relief arrives in time.
Decision Matrix: Which Recovery Route Fits Your Situation
The right approach depends on the profile of the matter. Understanding your situation against these parameters determines where to focus effort first.
If the misappropriated assets sit on a PSAN-registered French exchange and the forensic trail is clear, a civil conservatory application supported by a strong forensic report is the fastest route to a freeze. Timeline to interim relief, from filing to order, is typically a matter of days in urgent cases before a French commercial or civil court. The key risk is exchange compliance speed; a well-served order on a regulated entity generally produces a response.
If the trail runs through multiple jurisdictions – one leg in France, another in Asia or the Gulf – a coordinated multi-forum strategy is necessary. A single jurisdiction order will not freeze assets on a non-French platform. The civil application in France and the coordinated applications in London, Singapore, or the DIFC run in parallel, with allied counsel managing each leg. Timeline extends, but coverage is broader. The key risk is coordination latency; the forensic report must be consistent across all forums.
If the amount at stake is in the low six figures or below, the cost-benefit of full multi-forum litigation requires careful analysis. In those matters, a criminal filing may be the more proportionate route, transferring investigative costs to the state while preserving the civil option. We assist claimants in making this assessment before committing to a litigation path.
If assets have been converted to fiat and withdrawn, the on-chain tracing window has closed. The action shifts to identity disclosure and civil enforcement against the beneficial owner. This is a slower path, but it is not a dead end if KYC data can be obtained from the relevant exchange through court order.
A Common Assumption: "Once Funds Leave the Wallet, Nothing Can Be Done"
This is the most damaging misconception in digital-asset recovery, and it causes claimants to delay – which makes it self-fulfilling. In our practice, the assumption almost always rests on one of three misunderstandings.
First, that blockchain transactions are irreversible, which they are. The recovery mechanism is not a reversal; it is a freeze and restitution through legal process. The funds do not move backward; the entity holding them is ordered to hold them and, ultimately, to transfer them to the claimant. The blockchain's immutability is, in this framing, an advantage: the on-chain record is forensically perfect and cannot be altered by the counterparty.
Second, that courts do not understand or accept crypto as property. This was a live concern several years ago. It is not today. Courts in England and Wales, Hong Kong, Singapore, and the DIFC have each confirmed that digital assets constitute property capable of being the subject of proprietary claims and injunctive relief. French courts are on a similar trajectory, and the PSAN regime provides a regulated infrastructure that makes exchange-level enforcement practical.
Third, that the perpetrator has already moved the funds beyond reach. Sometimes this is true. More often, the forensic trace reveals that assets have consolidated at an exchange awaiting conversion – precisely the moment when an urgent conservatory order can interrupt the withdrawal. The perpetrator's rational behavior after a theft is to convert and withdraw; that process takes time, and the window it creates is the recovery window.
We move for freezing relief and exchange disclosure while the trail is live. That is the core of what this practice does.
Related at OBOLUS
- Disputes and Asset Recovery for Digital-Asset Businesses – our full recovery practice across 25+ forums, from urgent freezing relief to enforcement
- Smart Contract Dispute Resolution: A Cross-Border Perspective – legal strategy for disputes arising from on-chain agreements and protocol failures
- DAO Legal Wrappers for Institutional Clients – structuring decentralized organizations with legal certainty for institutional counterparties
FAQ
Can stolen crypto actually be recovered?
Yes – in a meaningful proportion of cases, particularly where action is taken quickly and the assets have not yet been fully converted and withdrawn through unregulated channels. The mechanism is a court-ordered freeze and restitution, not a reversal of the blockchain transaction. Courts in France, England and Wales, Singapore, Hong Kong, and the DIFC have each granted relief that resulted in the recovery of digital assets. The decisive variables are speed of instruction, quality of the forensic trace, and whether a regulated entity holds or has held the assets.
How fast must I act after a digital-asset theft?
The window is typically measured in hours to a few days, not weeks. Digital assets move rapidly through wallets, bridges, and exchanges. The moment funds reach a regulated exchange and before they are converted to fiat or withdrawn is the highest-probability point for a freeze. A professional forensic trace and a legal file should be opened simultaneously, within the first twenty-four to forty-eight hours of discovering the misappropriation. Delay is the single largest factor in recovery failure. Contacting counsel on the day of discovery is not an overreaction – it is the correct response.
Can a court freeze assets held on an exchange?
Yes. A French court can issue a conservatory attachment order that is served directly on a PSAN-registered exchange, requiring it to suspend the relevant account and hold the balance pending the outcome of proceedings. Similar orders – including worldwide freezing orders in England and Wales and proprietary injunctions in Singapore and Hong Kong – can be obtained in parallel where assets have moved cross-border. PSAN-registered entities in France have compliance obligations that make them responsive to properly served court orders. Unregistered offshore exchanges are harder to reach through this route, but allied counsel in other jurisdictions can often address that leg of the matter.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. In recovery matters, we move for freezing relief and exchange disclosure while the trail is live – acting on the forensic trace within hours, not days. To discuss your situation, contact info@oboluslaw.com.
By Glen Sorensen, Disputes & Recovery Analyst – specialist in cross-border digital-asset recovery, on-chain forensics coordination, and emergency freezing applications across common-law and civil-law jurisdictions.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.