Recovery windows for misappropriated digital assets are measured in hours, not weeks. When a business discovers that crypto funds have been moved without authority – whether through exchange compromise, a rogue counterparty, or outright fraud – the legal question is immediate: which court can freeze those assets before they are dispersed beyond reach? In Germany, that question sits at the intersection of civil procedure, BaFin's regulatory remit over virtual assets, and the cross-border enforcement tools available to common-law and civil-law jurisdictions alike. This guide sets out the process, the practical sequencing, and the decision points that determine whether a worldwide freezing order (an injunction issued by a court that restrains a defendant's assets globally, regardless of where they are held) can be secured in time to matter.
What Is a Worldwide Freezing Order and When Does Germany Enter the Picture?
A worldwide freezing order is a court injunction that restrains a defendant or respondent from dealing with, dissipating, or moving assets anywhere in the world pending resolution of a substantive claim. In the digital-asset context, it is the primary tool used to hold misappropriated crypto in place while tracing, disclosure, and substantive proceedings unfold. Germany becomes relevant when the defendant, the exchange, the custodian, or the funds themselves have a legal or operational connection to German territory – or when enforcement of a foreign order requires recognition under German procedural law.
Germany's civil courts issue provisional measures – broadly equivalent to interim injunctions – under the German Code of Civil Procedure. These can be directed at domestic assets and, in appropriate cases, structured to reach assets held abroad through a defendant's control. BaFin (the Bundesanstalt für Finanzdienstleistungsaufsicht) supervises crypto-asset service providers operating in Germany under the applicable MiCA transition provisions and the prior German VASP regime, which means a licensed German exchange or custodian falls squarely within BaFin's regulatory perimeter. That creates a parallel track: civil injunctive relief and regulatory pressure can be pursued in coordination.
The cross-border reality is this: most crypto thefts move funds across multiple exchanges and jurisdictions within hours. Germany may be one node in that chain, not the terminal point. A well-structured recovery strategy identifies which nodes carry the most actionable legal leverage – and Germany, as a major EU economy with an established VASP-licensing regime, frequently carries significant weight.
How Does BaFin Fit Into Asset Recovery for Digital Assets?
BaFin is a prudential and conduct regulator, not a litigation vehicle – but its role in a recovery matter is material in ways that practitioners often underestimate. Exchanges and custodians licensed under BaFin (or operating under a MiCA CASP authorisation passported into Germany) are subject to AML/CFT obligations, including the Travel Rule obligation to pass originator and beneficiary data with transfers, and the broader FATF Recommendation 15 requirements for virtual asset service providers.
Under the applicable AML provisions, a BaFin-supervised entity is required to maintain transaction records and to act on legally valid freeze or disclosure requests directed at accounts it holds. A court order or a law-enforcement request supported by a court order is the standard trigger. This means that the civil litigation pathway and the regulatory compliance pathway converge: once a German court issues an interim order requiring a custodian or exchange to freeze a wallet or disclose account information, the BaFin-supervised entity has both a legal and a regulatory obligation to comply.
For recovery counsel, this matters at the sequencing stage. A German exchange that receives a court-backed freeze request cannot simply decline on commercial grounds. The combination of civil court authority and regulatory compliance obligation creates meaningful pressure that does not exist when a request is made informally or without legal backing.
In our cross-border practice, we have seen businesses lose critical time by approaching exchanges with informal requests before obtaining court authority. The exchange's compliance team, acting entirely correctly, declines to act without legal process. The funds move. Obtaining the court order first – even on an expedited basis – changes the dynamic entirely.
For a scoped assessment of your recovery options in Germany and across connected jurisdictions, contact OBOLUS at info@oboluslaw.com. The process above describes the standard path. Your facts – the entity, the asset type, the exchange, the banking – change the analysis. Map your options
What Is the Step-by-Step Process for Securing a Freezing Order in Germany?
The process for obtaining interim asset-preservation relief in Germany follows a defined sequence. Speed at each step is the operative constraint.
Step 1: On-chain forensic tracing. Before any application can be made, the asset trail must be established. This means obtaining transaction hashes, tracing fund flows through the blockchain, and identifying the current location of the funds – which exchange, which wallet address, which jurisdiction. A professional forensic report is typically required to support the application. Forensic work that would take days in a conventional case can often be compressed to hours when the matter is treated as urgent from the outset.
Step 2: Identifying the right court and jurisdictional basis. German civil courts have jurisdiction where the defendant is domiciled in Germany, where the relevant branch of an exchange is located, or where assets are held. For a worldwide order – as opposed to a domestic freeze – the court must be satisfied that it has personal jurisdiction over the defendant or over a person who controls the assets. This is a threshold issue that must be addressed in the application.
Step 3: Preparing the ex parte application. Interim measures in Germany can be applied for on an expedited basis, and in urgent cases the application can be made without prior notice to the defendant (ex parte). The application must set out the claim, the evidence of urgency, and the risk that the defendant will dissipate assets if notified in advance. In digital-asset cases, the speed at which funds can be moved on-chain is itself the evidence of urgency.
Step 4: Serving the order and freezing the assets. Once granted, the order must be served on the defendant and, where relevant, on the custodian or exchange holding the assets. A German-licensed exchange will comply with a validly served German court order. Where the exchange is located in another jurisdiction, recognition and enforcement proceedings in that jurisdiction may be required – this is where allied counsel in the relevant jurisdiction are engaged simultaneously.
Step 5: Disclosure and substantive proceedings. A freeze buys time. The follow-on step is to obtain disclosure of account-holder identity and transaction history, and then to pursue the substantive claim to judgment. In Germany, disclosure obligations attach to parties and, under certain conditions, to third parties who hold relevant information.
How Does a German Freezing Application Interact With English and Other Common-Law Courts?
Germany operates a civil-law system, and its interim measures regime differs in structure from the worldwide freezing orders issued by English and Welsh courts. English courts have historically been the preferred forum for crypto asset recovery globally – the jurisdiction that decided AA v Persons Unknown [2019], which established that crypto assets are property capable of being subject to a proprietary injunction, and which has developed a sophisticated toolkit of disclosure tools including Norwich Pharmacal and Bankers Trust orders. The CFAAR (Crypto Fraud and Asset Recovery) network, launched in London in September 2021, reflects the concentration of recovery infrastructure in that jurisdiction.
For a business with a German connection, the strategic question is: where should the primary proceedings be brought? The answer depends on where the defendant is, where the assets are, and where the claim is most enforceable. Several configurations are common in our practice:
A claimant may bring primary proceedings in England – obtaining a worldwide freezing order and a Norwich Pharmacal disclosure order against an exchange – and then rely on EU/UK mutual recognition mechanisms to enforce that order in Germany. Conversely, a claimant with strong German jurisdictional grounds may obtain a German interim order and seek enforcement of that order in other EU member states under the Brussels regime, or in common-law jurisdictions through bilateral recognition.
The DIFC Courts in Dubai have also emerged as a meaningful enforcement forum. In matters we track, the DIFC has demonstrated willingness to issue worldwide freezing orders in support of foreign proceedings, including in crypto cases. Where funds have transited through UAE-licensed exchanges, a multi-forum strategy – German civil proceedings, English common-law tools, DIFC enforcement – can cover the chain of custody more completely than any single jurisdiction.
The cross-border reality is that no single court covers the globe. Effective recovery requires sequenced, coordinated applications across the forums where the assets actually are.
What Role Do Stablecoin Issuers Play in a German Recovery?
Where misappropriated funds have been converted to stablecoins – as is common, because stablecoins are liquid and transferable across exchanges – a parallel track is available. Tether (USDT) and Circle (USDC) hold contract-level freeze and blacklist authority on their issued tokens, and they generally act on a court order or a law-enforcement referral supported by an OFAC designation or equivalent regulatory trigger.
In Germany, a BaFin-supervised exchange that holds USDT or USDC in an account linked to the theft can be the subject of both a civil court order and a parallel request to the issuer to freeze the token at the contract level. These two mechanisms are complementary, not alternative. The court order creates the legal obligation for the exchange to act; the issuer freeze creates a technical barrier to movement even if the defendant attempts to circumvent the court order by withdrawing to a self-custodied wallet.
Timing is critical here. Issuer freeze requests require transaction hashes, a professional forensic report, and – for Tether and Circle – typically a law-enforcement case reference. Assembling that package in parallel with the court application is standard practice in a well-run recovery matter. Waiting for the court order before approaching the issuer wastes hours that the defendant may use to convert and move the funds.
In our practice, we coordinate the forensic report, the court application, the issuer outreach, and the exchange notification as a single sequenced process from the moment instruction is received.
A Recovery Matter Involving a German-Licensed Exchange
In a recent matter, a digital-asset trading firm discovered that a substantial balance had been moved without authorization to a German-licensed custodian. On-chain tracing confirmed that the funds – denominated in a major stablecoin – were held in an identifiable wallet at the custodian. We applied for and obtained interim preservation relief from a German civil court on an expedited basis, with the application supported by a professional forensic trace report. Simultaneously, we initiated outreach to the stablecoin issuer with the transaction hashes and the court reference. The custodian, acting on its compliance obligations under the applicable AML regime, froze the account within hours of receiving the court order. The funds remained available pending substantive proceedings. The matter resolved without the need for a full trial.
What Are the Most Common Mistakes in German Digital-Asset Recovery?
Speed and structure are the variables that determine outcomes. The mistakes we see most often are avoidable.
Waiting before engaging counsel. Every hour between discovery and legal action is an hour in which funds can be moved. The correct response to discovering a theft is to engage recovery counsel immediately – not after completing an internal investigation, not after exhausting informal approaches to the exchange.
Approaching the exchange informally first. An exchange's compliance team cannot act without legal process. An informal request not only fails; it alerts the defendant to the investigation timeline. Operators we advise are instructed to make no contact with the exchange until the court application strategy is set.
Failing to preserve the forensic chain. A court application requires admissible evidence. Screenshots from a blockchain explorer are not sufficient. A professional forensic report from a recognized provider, prepared and signed at the time of the tracing exercise, is the standard. Obtaining that report after the fact is harder and less convincing.
Treating Germany as a standalone matter. A defendant who controls funds at a German exchange likely has connections elsewhere. Limiting the application to Germany without mapping the full asset trail may freeze one node while the defendant moves funds from others.
Overlooking the MiCA transition. Germany is in the process of transitioning its prior VASP supervision regime to full MiCA compliance. Exchanges that were registered under the prior German regime and are now operating under MiCA transitional provisions have a different regulatory relationship with BaFin than those that have completed full CASP authorisation. The compliance obligations are substantively similar, but the procedural posture of an application may differ.
If a prior recovery attempt stalled or an exchange declined to act, a second look can surface the structural reason and the route back. Write to OBOLUS at info@oboluslaw.com or reach us via t.me/oboluslaw. Map your options
Self-Assessment: Do You Have the Building Blocks for a German Freezing Application?
Before engaging counsel, a business can assess its position against the minimum requirements for an expedited application.
On the evidence side: Do you have the transaction hashes for the unauthorized transfers? Can you identify the exchange or custodian currently holding the funds? Is a professional forensic trace available or can it be commissioned within hours? Can you demonstrate that the funds moved without authorization – through access logs, communication records, or contractual evidence?
On the jurisdictional side: Does the defendant have a German domicile, place of business, or registered address? Does the exchange holding the funds operate under a BaFin licence or a MiCA CASP authorisation? Is there an EU member state connection that supports jurisdiction under the Brussels regime?
On the timeline side: Have fewer than forty-eight hours passed since the transfer? If more time has passed, the forensic trail may still be live – on-chain records are permanent – but the risk of further movement increases with delay.
If you can answer yes to the majority of these questions, the building blocks for an expedited application are in place. If key elements are missing, counsel can help structure around the gaps.
Related at OBOLUS
- Disputes and Asset Recovery for Digital-Asset Businesses – the full scope of our recovery and disputes practice, from on-chain tracing to enforcement
- Stablecoin Freeze Request: The Structuring Angle – how entity structure and token type affect the freeze mechanics and tax exposure
- Redemption and Liquidity Terms for Regulated Entities – structuring fund liquidity terms to manage recovery risk in the event of asset loss
FAQ
Can stolen crypto actually be recovered?
Yes – in a meaningful proportion of cases where counsel is engaged quickly and the funds remain at an identifiable exchange or custodian. On-chain records are permanent; the challenge is legal speed, not technical traceability. A worldwide freezing order, combined with a stablecoin issuer freeze request where applicable, can hold funds in place before they are further dispersed. Recovery is not guaranteed, but the legal tools are real and have been used successfully in multiple forums including English courts, the DIFC, and German civil proceedings.
How fast must I act after a digital-asset theft?
Immediately. Recovery windows are measured in hours, not days. Funds held on an exchange can be withdrawn to a self-custodied wallet – and from there, converted and moved across chains – within minutes. The standard recovery sequence (forensic trace, court application, exchange notification, issuer freeze request) should begin at the point of discovery. Every hour of delay before engaging counsel is an hour the defendant can use to move the assets beyond reach.
Can a court freeze assets held on an exchange?
Yes. A German civil court can issue interim preservation orders directed at an exchange or custodian operating in Germany, requiring it to freeze a specific account or wallet pending substantive proceedings. A BaFin-supervised entity is subject to both the court order and parallel compliance obligations under the applicable AML regime. English and DIFC courts can similarly issue worldwide freezing orders that reach exchanges in their own jurisdictions, and those orders can be enforced in Germany through applicable recognition mechanisms.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. Operators we advise regularly face multi-forum recovery matters where speed, forensic quality and jurisdictional coordination are the operative variables. We move for freezing relief and exchange disclosure while the trail is live. To discuss your situation, contact info@oboluslaw.com.
By Glen Sorensen, Disputes & Recovery Analyst – specializing in cross-border crypto asset recovery, on-chain tracing, and interim injunctive relief across civil-law and common-law forums.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.