An exchange disclosure order compels a trading platform to hand over account data that identifies the person behind a suspicious wallet – and in Georgia, that order can be obtained in days, not months.
A token transfer clears in seconds. By the time a business confirms the loss, the funds may already be moving across chains or through mixer protocols. Recovery windows for misappropriated digital assets are measured in hours, not weeks. The question is not whether an exchange disclosure order is theoretically available in Georgia – it is how quickly counsel can file, how strong the evidentiary package needs to be, and what parallel steps in other jurisdictions keep the trail from going cold. This guide answers each of those questions in sequence, from the first call to the enforcement of a freeze order.
Georgia sits in an unusual position for digital-asset disputes. Its legal system – anchored in civil-law tradition but increasingly influenced by international commercial practice – offers functional tools for asset recovery that are underused by inbound operators. Georgian courts have jurisdiction over exchanges and custodians that operate locally, and the country's National Bank of Georgia has expanded its oversight of virtual asset service providers in step with global FATF (Financial Action Task Force) expectations. That combination matters: an applicant with the right documentation can move fast.
This guide walks through every step of the disclosure order process in Georgia, identifies the cross-border considerations that most practitioners miss, and explains where the process intersects with parallel proceedings in stronger common-law forums.
Who Needs This Guide?
This guide is written for businesses – not retail individuals – that have suffered a measurable digital-asset loss connected to a Georgian exchange, custodian or wallet address, and need to understand their options before the trail goes cold.
The profiles we see most often are: a payments company that processed a transaction to an address later identified as fraudulent; a token issuer whose treasury wallet was compromised and the funds moved to a registered exchange; and a fund whose counterparty routed proceeds through a Georgian platform to obscure beneficial ownership. In each situation, the exchange holds the key – the account record, the KYC file, the withdrawal log.
A common assumption in these situations is that once funds leave the original wallet, nothing can be done. That assumption is wrong. Exchanges are regulated entities with compliance obligations. They hold identity data. Courts can compel its production. The practical barrier is speed and preparation, not legal impossibility.
Operators headquartered outside Georgia face an additional layer: how to instruct Georgian counsel, how to coordinate with any parallel proceedings in the seat of their own jurisdiction, and how to use blockchain forensic evidence in a civil-law environment that was not built around it. We address each layer below.
What Is the Legal Basis for an Exchange Disclosure Order in Georgia?
Georgian procedural law allows courts to compel third parties to produce information and documents where that production is necessary to establish a civil claim or to prevent the dissipation of assets. The mechanism operates within the broader framework of Georgian civil procedure, which gives the court wide latitude to order interim relief in support of substantive proceedings.
Under the applicable regime, an applicant may seek:
- A disclosure order requiring an exchange or custodian to produce account records, KYC documents and transaction logs linked to a specified address or set of addresses.
- An interim freezing measure preventing the withdrawal or transfer of assets held in a specified account, pending substantive proceedings.
- A combination of both, filed simultaneously where speed is critical.
The National Bank of Georgia has, in recent years, issued guidance that aligns domestic VASP supervision with FATF Recommendation 15 and the associated Travel Rule (the obligation to pass originator and beneficiary identification data with a virtual-asset transfer). That alignment creates an important practical benefit: exchanges operating under National Bank oversight already maintain the data that a disclosure order is designed to capture. The order does not ask them to create records; it asks them to produce records they are already required to hold.
For cross-border applicants, the critical structural point is that Georgian courts have jurisdiction over Georgian-registered entities regardless of where the underlying fraud occurred. An exchange incorporated in Tbilisi processes a withdrawal linked to a theft in Singapore – Georgian courts can still reach the exchange's records.
Step One – Secure the Forensic Evidence Before Filing
No disclosure application in Georgia – or any other jurisdiction – succeeds without a forensic foundation. The first step is not a court filing; it is an on-chain investigation that produces a documented transaction trail from the victim wallet to the exchange address.
That investigation should establish:
- The precise transaction hash and block timestamp of the initial transfer or theft.
- The full hop sequence: every intermediate address between the victim wallet and the exchange deposit address.
- Attribution evidence connecting the deposit address to a named or identifiable exchange – ideally through clustering analysis and exchange-specific address format conventions.
- Any mixer or bridge protocols used in transit, with an explanation of why attribution remains viable despite them.
In our cross-border practice, we have seen applications fail at the first hearing because the forensic report was produced internally by the claimant without professional validation. Georgian courts, like most civil courts engaging with blockchain evidence for the first time, place weight on independent expert analysis. A report produced by a specialist forensic provider – with a named expert who can be cross-examined if required – carries substantially more evidentiary weight than a self-generated transaction summary.
The forensic step typically takes between two and five business days, depending on the complexity of the hop sequence. Where funds are still in transit, parallel steps should begin immediately: contact the relevant exchange compliance team on a without-prejudice basis, and begin drafting the court application in parallel.
If a recovery clock is running, reach our disputes desk now at info@oboluslaw.com. The process above describes the standard path. Your facts – the entity, the user base, the banking – change the analysis. Speed at step one determines whether step five is even possible.
Step Two – Assemble the Court Application Package
Once the forensic report is in hand, the disclosure application package is assembled. Under Georgian civil procedure, the application must satisfy threshold requirements of standing, jurisdiction and merits probability before the court will grant interim relief without notice to the respondent exchange.
A complete application package in this context will include:
- A witness statement or sworn affidavit from a director or authorized officer of the applicant, setting out the factual background, the nature of the loss and the connection to the Georgian exchange.
- The professional forensic report, with the expert's qualifications and methodology stated.
- Evidence of the applicant's standing – typically corporate documents confirming the entity's existence and the authority of the person swearing the affidavit.
- A draft of the proposed order, specifying exactly what records are sought and the timeframe for production.
- A cross-undertaking in damages, offered by the applicant against the risk of any harm caused to the exchange by the order if the underlying claim ultimately fails.
The standard for granting interim relief without notice in Georgia requires the applicant to satisfy the court that there is a serious issue to be tried and that delay caused by giving notice would likely frustrate the purpose of the order. In a fast-moving digital-asset context, that threshold is typically met where the forensic trail is live and the funds have not yet been withdrawn to a non-custodial address.
Step Three – The Without-Notice Hearing and Order
In an urgent exchange disclosure matter, the court hearing may occur within one to three business days of filing, depending on the judge's calendar and the urgency represented. Georgian courts sitting in Tbilisi are the primary venue for commercial matters of this type.
At the without-notice hearing, counsel presents the application and forensic evidence. The judge may ask clarifying questions on the chain of custody for the blockchain evidence, the basis for asserting that the deposit address connects to an account held at the named exchange, and the cross-undertaking. If the court is satisfied, it grants the disclosure order and, where sought, an interim freezing measure in the same sitting.
The order is then served on the exchange, which is given a defined production window – typically measured in business days rather than weeks. In our experience advising on multi-forum recovery matters, a well-prepared package heard by an experienced commercial judge produces a production order that the exchange cannot lawfully ignore without risking contempt of court exposure.
One practical nuance: some exchanges operating in Georgia are registered as information technology or payment companies rather than as licensed VASPs under National Bank supervision. Where that is the case, the applicant may need to rely on a broader disclosure mechanism under civil procedure rather than on VASP-specific regulatory leverage. The application structure is similar; the respondent's compliance posture may be different. Experienced counsel will assess this before filing.
Step Four – Using Disclosure to Pursue Freezing Relief
Disclosure of account records is rarely the end of the process. Once the exchange produces the KYC file and transaction log, the applicant has two further tools.
First, the account identity data allows the applicant to identify and potentially serve the person behind the wallet in substantive proceedings. If that person is identifiable and has reachable assets in Georgia or in another jurisdiction, a substantive claim for unjust enrichment, fraud or proprietary recovery follows.
Second, the transaction log may reveal that funds are still held in an exchange account, not yet withdrawn. In that situation, a freezing order against the account is the immediate priority. Under Georgian civil procedure, the court may expand its interim relief to include a freeze of specified assets once the applicant can show with particularity that the assets are the subject of the claim and that there is a real risk of dissipation. The forensic trail, combined with the exchange's own records, typically provides that particularity.
In a recent matter, a payments company identified that misappropriated stablecoins had been deposited into an exchange account in a transitional jurisdiction in the Caucasus region. Working through allied counsel in that jurisdiction, we coordinated the disclosure and freezing application simultaneously, such that by the time the exchange received the disclosure order, the funds in the account were already subject to an interim freeze. The exchange could not disburse pending the court's determination. The matter was resolved through a negotiated return before the substantive hearing.
How Does a Georgian Disclosure Order Interact With Proceedings in Other Jurisdictions?
Georgia is not a common-law forum. A disclosure order obtained in Tbilisi does not automatically generate recognition in England, Singapore or New York. Cross-border coordination is therefore a structural element of any serious recovery strategy, not an afterthought.
Where the beneficial owner of the misappropriated funds is identifiable and has assets in a common-law jurisdiction, a parallel freezing application in that forum – using the Georgian disclosure evidence as the factual foundation – is often the stronger enforcement lever. England & Wales offers a worldwide freezing order that reaches assets globally, including those held at exchanges in other jurisdictions, where the respondent is subject to English jurisdiction or where the court is satisfied that justice requires the reach.
The CFAAR (Crypto Fraud and Asset Recovery) network, launched in London in September 2021, operates as a coordination mechanism for practitioners across jurisdictions working on connected recovery matters. Where a Georgian disclosure order produces evidence pointing toward a respondent with assets in a CFAAR-member jurisdiction, the practical path often combines both actions.
For a business sitting between a Georgian exchange and assets potentially held in a common-law forum, the legal question turns on which forum's order delivers the faster freeze and the stronger enforcement mechanism. In our cross-border practice, we regularly advise on that sequencing question before any application is filed.
Stablecoin cases raise a further dimension. Tether (USDT) and Circle (USDC) both hold contract-level freeze authority over their issued tokens, and both issuers have acted on court orders and law-enforcement references in appropriate cases. Where misappropriated funds remain in stablecoin form – still traceable and frozen on-chain – a parallel issuer freeze request, backed by the Georgian court order, can preserve the asset while enforcement proceeds.
To map the licence, banking and recovery stack for your specific situation, write to info@oboluslaw.com. If a prior application stalled or an account was closed, a second read can surface the structural reason and the route back.
Which Recovery Path Fits Your Profile?
Not every situation calls for an exchange disclosure order as the primary tool. The right instrument depends on the stage of the trail, the jurisdiction of the exchange and the profile of the loss.
Profile A – Funds on deposit at a Georgian exchange, trail is live: File a combined disclosure and interim freeze application in Georgia immediately. Engage forensic specialists in parallel. Timeline to first order: typically one to three business days from a complete application. Key risk: the exchange produces records showing funds already withdrawn to a non-custodial address – at which point the trail must be extended through forensic analysis and potentially a second application in another jurisdiction.
Profile B – Funds passed through a Georgian exchange to a common-law jurisdiction: Use the Georgian disclosure application to obtain the KYC data, then file a substantive claim and freezing application in the common-law forum once the respondent is identified. Timeline: the Georgian disclosure step adds days to the process; the common-law freezing application can follow within days of receiving the records. Key risk: delay in the Georgian step allows the respondent to move assets from the common-law jurisdiction.
Profile C – Stablecoin funds, exchange identified, issuer freeze viable: Run three parallel tracks – the Georgian disclosure application, a law-enforcement referral (to generate the case reference the issuer typically requires for a voluntary freeze), and a direct freeze request to the issuer. This is the fastest available path where all three are viable simultaneously. Key risk: the issuer declines without a court order, requiring the court track to complete before the freeze can be implemented.
Profile D – Trail is cold, funds moved to a mixer or cross-chain bridge: Prioritize the forensic investigation before any court filing. A disclosure application without a viable trail does not assist the court and may alert the respondent. Experienced forensic partners can often extend the attribution chain through clustering analysis and exchange deposit pattern recognition. Only when attribution is viable does the court application follow.
What Are the Most Common Mistakes in Exchange Disclosure Applications?
In our practice advising businesses on digital-asset recovery, the same errors recur across jurisdictions, including Georgia. Avoiding them is the difference between a successful first hearing and an adjournment that costs days the applicant cannot afford.
The first and most common mistake is filing before the forensic evidence is ready. An application supported only by a screenshot of a transaction and an assertion that funds went "somewhere" fails the threshold for without-notice relief. Courts require a documented, expert-validated trail. Filing prematurely alerts the respondent – through the service of a failed application – and does not pause the fund movement.
The second mistake is underestimating the standing documentation required. Georgian courts require applicants to demonstrate corporate identity and authorized representation. An applicant that is a BVI or Cayman entity must often produce apostilled or notarized corporate documents. Assembling these takes time; they should be prepared as soon as the decision to proceed is made.
The third mistake is treating the disclosure order as the end of the process rather than the beginning. The order produces evidence. That evidence must then be used – in substantive proceedings, in a parallel forum, or in a negotiated resolution. Businesses that secure the disclosure and then pause while considering their options lose the advantage that speed provided.
The fourth mistake, specific to cross-border operators, is failing to coordinate Georgia-specific steps with parallel proceedings in another forum. A freezing order in England may require the Georgian exchange to produce records in support. A subpoena in a US proceeding may conflict with Georgian procedural rules in ways that create delay. Integrated multi-forum counsel – not locally siloed advice – is the structural requirement for these matters.
Self-Assessment Checklist Before Instructing Counsel
Before making the first call to a recovery lawyer, gather the following. The more complete this package is at instruction, the faster the application can be filed.
- Transaction hash or hashes for the initial transfer or suspected theft event.
- The wallet addresses involved, including any intermediate addresses you have identified.
- A timeline of events: when the loss was discovered, what internal steps have been taken, whether any communication has occurred with the exchange.
- Confirmation of the exchange's identity and the jurisdiction in which it is registered.
- Corporate authorization documents for your entity, including a board resolution authorizing the proceedings.
- Any law-enforcement reference numbers, if a report has already been filed.
- Identification of any other jurisdictions that may be relevant – where your entity is based, where the respondent may be located, where the exchange is regulated.
This checklist is a starting point, not an exhaustive list. Complex matters – particularly those involving multiple exchanges, multi-chain hops or identified respondents with international assets – will require additional documentation. Counsel will advise on that specificity at the initial strategy review.
Related at OBOLUS
- Disputes & Asset Recovery for Digital-Asset Businesses – the full scope of our recovery and litigation practice across 25+ forums.
- Smart Contract Dispute Resolution from a Cross-Border Perspective – how on-chain code disputes are resolved across jurisdictions.
- Token Legal Classification Under Heightened Scrutiny – how regulators assess token status when enforcement risk is elevated.
FAQ
Can stolen crypto actually be recovered?
Yes – in a material number of cases, particularly where funds remain on a custodial exchange. The conditions for recovery are: a traceable on-chain trail, a regulated exchange holding the relevant account, and swift legal action. Disclosure orders compel the exchange to produce identity data; freezing orders preserve assets pending substantive proceedings. Neither outcome is guaranteed, but the legal tools exist and are regularly used by businesses with professional counsel.
How fast must I act after a digital-asset theft?
Immediately. The realistic window for a freezing action – before funds are withdrawn to a non-custodial address beyond practical reach – is measured in hours to days, not weeks. The first priority is securing the forensic evidence while the trail is live. The second is filing the court application with a complete evidentiary package. Every day of delay narrows the available options and increases the probability that the trail becomes cold.
Can a court freeze assets held on an exchange?
Yes. Courts in Georgia and in leading common-law forums including England & Wales and Singapore have granted orders requiring exchanges to freeze specified account balances pending the resolution of civil claims. The exchange, as a regulated custodian, holds the asset on behalf of the account holder. A court order directed at the exchange operates as a freeze on the asset itself. Exchanges subject to such orders face contempt of court exposure if they disburse in breach.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the entirety of our practice, and we act only for businesses. We move for freezing relief and exchange disclosure while the trail is live – that is not a slogan; it describes how the work is actually done. To discuss your situation, contact info@oboluslaw.com or reach us at t.me/oboluslaw.
By Glen Sorensen, Disputes & Recovery Analyst – specializing in multi-forum digital-asset recovery, exchange disclosure proceedings and cross-border freezing relief for business claimants.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.