Recovery windows for misappropriated stablecoins are measured in hours, not weeks. A stablecoin freeze request in Guernsey is the process by which a business that has lost control of USDT, USDC or equivalent tokens moves a Guernsey court – or uses Guernsey-seated entities as leverage – to immobilise those tokens before they are further dissipated across the chain. The Royal Court of Guernsey sits within a mature common-law tradition and has jurisdiction to grant freezing injunctions and disclosure orders that carry real weight with exchanges, issuers and custodians operating in or through the island. This guide takes you through every step of that process: the legal basis, the evidence you need to assemble before court, the cross-border interaction with issuer-level freezes, and the structural decision points a business must navigate when the recovery clock is already running.
Why Guernsey Is a Viable Forum for a Stablecoin Freeze
Guernsey's Royal Court can grant interim injunctive relief – including asset-freezing orders – on the same common-law principles that underpin relief in England and Wales, and it treats digital assets as capable of being property subject to proprietary claims. That classification matters enormously. If tokens are property, they can be the subject of a freezing order, a tracing claim and ultimately a recovery judgment. Guernsey's position as a leading international finance centre means that funds, custodians and special-purpose vehicles structured under Guernsey law are frequent participants in digital-asset arrangements. When misappropriated stablecoins pass through a Guernsey-regulated entity, or when a respondent holds assets through a Guernsey structure, the island offers direct in-rem jurisdiction that cannot easily be sidestepped.
The cross-border reality is equally significant. Many stablecoin theft scenarios originate outside Guernsey but route through an island-domiciled fund administrator, a Guernsey limited partnership or a custody account maintained by a Guernsey-licensed fiduciary. In our cross-border practice, we see the island used both as a primary forum and as a supplementary jurisdiction alongside proceedings in England and Wales or Singapore. A Guernsey freezing order obtained on an urgent without-notice basis can be served on a local administrator within hours of issue, stalling the movement of assets before a respondent is even aware of the application.
The Royal Court of Guernsey applies the American Cyanamid threshold – a good arguable case, a real risk of dissipation and the balance of convenience – when assessing whether to grant interim freezing relief, consistent with the common-law tradition shared across leading offshore centres.
CTA #1: The process above describes the standard path. Your facts – the entity type, the user base, the wallet trail – change the analysis materially. For a scoped assessment of your recovery options in Guernsey, contact OBOLUS at info@oboluslaw.com.
What Evidence Do You Need Before Filing?
The quality of your on-chain evidence file is the single most decisive factor in whether a without-notice application succeeds. The Royal Court will expect a sworn affidavit from the applicant or its legal advisers identifying, at minimum: the transaction hashes for the misappropriated transfers, a professional forensic report tracing the route of the tokens, wallet addresses attributed to the respondent or the receiving exchange, and a clear narrative establishing how the applicant's property right arose and was then defeated.
On-chain tracing – the process of following token movements across blockchain addresses using forensic analytics – must be performed by a qualified investigator whose methodology will withstand cross-examination. Regulators and courts in the leading hubs increasingly expect a report from a recognised analytics provider; Guernsey's Royal Court, operating in line with broader common-law standards, will apply the same scrutiny. The report must be current at the date of filing: a forensic picture that is even 48 hours old may be undermined by subsequent token movements.
Beyond the forensic file, the applicant must be prepared to give a cross-undertaking in damages – a commitment to compensate the respondent if the injunction is later discharged and the respondent suffers loss. For a business applicant, this typically means providing evidence of financial standing. If the business operates through a thin-capitalised special-purpose vehicle, the court may require a parent guarantee or a cash fortification of the undertaking.
In a recent recovery matter handled by our disputes desk, a payments company identified a misappropriated seven-figure USDC balance tracing through two intermediary wallets to an address linked to a Guernsey-administered fund. We assembled the forensic report, the affidavit and the cross-undertaking package in under 72 hours and moved for without-notice relief before the balance was swept to a further address. The order was granted and the fund administrator was served that afternoon.
The Step-by-Step Process: From Wallet Theft to Freezing Order
A Guernsey stablecoin freeze follows a structured sequence; compressing any step risks fatal gaps in the application or a discharge of the order on appeal.
Step 1 – Secure the evidence immediately. Preserve screenshots, wallet export files, exchange correspondence and any access logs within hours of discovery. Do not move assets from any wallet under your own control; doing so may complicate tracing or trigger the respondent. Engage a forensic analytics provider in parallel with engaging legal counsel – both workstreams run simultaneously, not sequentially.
Step 2 – Instruct Guernsey-qualified counsel (or instructing counsel working with allied practitioners in Guernsey). The Royal Court requires local representation for substantive applications. OBOLUS works with allied counsel in Guernsey for all in-court steps; our role is to lead the strategy, draft the evidence pack and co-ordinate the cross-border elements of the matter.
Step 3 – Draft the without-notice application. The application bundle will include the originating summons (or equivalent procedural vehicle under current Guernsey practice), the affidavit in support, the proposed freezing order in draft, and the cross-undertaking in damages. The draft order must specify the assets, the respondent (which may be "Persons Unknown" where the identity is not yet established), and any ancillary disclosure obligations.
Step 4 – Apply for a without-notice hearing. Emergency applications to the Royal Court are possible where genuine urgency is established. The applicant's counsel makes full and frank disclosure of all material facts, including any points that could favour the respondent. Failure of full and frank disclosure is the most common ground on which Guernsey courts later discharge freezing orders.
Step 5 – Serve the order and any ancillary disclosure notice. Once granted, the order is served on the respondent and – critically – on any exchange, custodian or fund administrator that holds the relevant assets. For stablecoins, this includes any Guernsey-regulated fiduciary or administrator through whom the assets are held or managed.
Step 6 – Issue a Norwich Pharmacal-style disclosure request. A Norwich Pharmacal order (an order compelling a third party that is mixed up in wrongdoing to identify the wrongdoer) can be sought simultaneously with or immediately after the freezing order. For a stablecoin recovery, this is the mechanism by which exchange KYC records are compelled, identifying the individual or entity that controls the receiving wallet.
Step 7 – Engage the stablecoin issuer directly. USDT (Tether) and USDC (Circle) each maintain a contract-level freeze capability over their tokens. Issuers generally act on a court order or a law-enforcement designation. A Guernsey court order, served on the issuer with supporting legal papers and a transaction hash, provides the formal basis for an issuer-level freeze independent of exchange co-operation. This dual-track approach – court order plus issuer engagement – is the strongest available position.
Step 8 – Maintain the order and progress to substantive proceedings. A without-notice freezing order is typically followed by a return date at which the respondent may contest the injunction. Evidence must be refreshed; the forensic picture must be updated. If the respondent is unknown, the substantive proceedings will be against "Persons Unknown" until identification is achieved through disclosure.
How Does a Guernsey Order Interact With Cross-Border Proceedings?
Few stablecoin recovery matters are confined to a single jurisdiction, and Guernsey is no exception. The misappropriated tokens may originate in a transaction governed by English law, pass through an exchange licensed in Singapore or a VARA-regulated entity in Dubai, and ultimately rest in a wallet controlled by an individual who is subject to personal jurisdiction only in Hong Kong. The Guernsey order operates most directly where assets or persons are within the Royal Court's reach; for assets elsewhere, the order may need to be recognised or mirrored in other forums.
England and Wales remains the deepest common-law recovery forum for digital assets, and a Guernsey proceeding frequently runs in parallel with – or is superseded by – proceedings in the English High Court, where worldwide freezing orders (injunctions extending to all of a defendant's assets globally) are routinely granted in crypto fraud matters. DIFC Courts in Dubai have similarly demonstrated willingness to grant asset-preservation orders in support of cross-border crypto recovery. In our practice, we regularly advise on the forum selection decision: which jurisdiction's order will have the broadest practical reach for the specific asset type and respondent profile, and in which order those proceedings should be filed.
The CFAAR (Crypto Fraud and Asset Recovery) network, launched in London in September 2021, provides a co-ordination mechanism for practitioners across these forums. Where assets span multiple jurisdictions, parallel applications in two or more forums – Guernsey and England, or Guernsey and Singapore – may be necessary to close all escape routes before the without-notice order is served.
Issuer-Level Freeze Versus Court Order: Which to Pursue First?
The two tracks – engaging the stablecoin issuer directly and seeking a court order – are complementary, not mutually exclusive; the sequencing depends on how quickly the tokens are moving and where the legal threshold sits for issuer action.
Tether and Circle each have the technical capability to freeze tokens at the contract level. In practice, issuers typically require a law-enforcement referral, an OFAC designation, or a court order before acting unilaterally; they are not in a position to adjudicate competing claims to a balance. For a commercial victim without a law-enforcement relationship, the fastest route to issuer action is a court order from a recognised common-law jurisdiction served with a supporting legal letter from instructed counsel and a clear transaction hash. A Guernsey order, served on Tether's or Circle's legal team with those materials, represents a credible formal demand. Issuers do not guarantee action, and their internal processes are not publicly prescribed; a court order simply gives them the clearest possible legal basis to act without exposure.
Where the token balance is still visible on-chain and not yet moving, a practitioner must make a judgment call: move immediately for the court order (taking two to four business days at minimum for even an urgent application) or attempt a direct issuer engagement on an emergency basis. We have seen both approaches succeed and fail depending on the specific issuer, the jurisdiction of the law-enforcement referral and the current position of the tokens. The better practice is to prepare both tracks in parallel from the moment of discovery.
Profile A: tokens stationary in a known wallet, respondent identity partially known → pursue court order and issuer engagement simultaneously; disclosure application for KYC data follows.
Profile B: tokens moving rapidly across multiple wallets, respondent identity unknown → issuer freeze request on an emergency basis while assembling the court application; forensic tracing is the priority.
Profile C: tokens held at a Guernsey-administered fund or custodian → Guernsey court order is the primary vehicle; service on the Guernsey administrator is immediate and enforceable.
What Are the Most Common Mistakes That Destroy a Recovery Case?
The errors that end recovery cases almost always occur in the first 48 hours after discovery, and they are preventable with the right pre-incident legal posture.
The first and most damaging mistake is delay. Moving tokens to a mixer, a privacy protocol or a further exchange takes seconds. Every hour of internal deliberation before legal counsel is instructed is an hour of dissipation risk. We have seen cases where a victim spent three days gathering internal approvals before contacting external lawyers; by that point, the trace was cold and the issuer held no balance to freeze. The principle that recovery windows are measured in hours is not rhetorical – it reflects the practical reality of on-chain settlement finality.
The second mistake is incomplete forensics. A court will not grant a freezing order on the basis of a rough screen-grab and a verbal description. The affidavit must be forensically grounded. Instructing an analytics provider after legal proceedings begin – rather than simultaneously – adds critical days to the preparation timeline.
The third mistake is forum selection driven by familiarity rather than analysis. A Guernsey application is appropriate where assets or entities are Guernsey-connected; it is not automatically the strongest forum if the primary assets are in a DIFC-licensed exchange or a Hong Kong-regulated custodian. The choice of forum must reflect where the order can most quickly be served and enforced.
A common assumption is that once funds leave the originating wallet, legal recovery is impossible. That belief is wrong. On-chain tracing technology has advanced to the point where tokens that have passed through five intermediary addresses can still be attributed to a controlling wallet, and disclosure orders compel exchanges to reveal the identity behind that wallet. The limits of recovery are practical (speed, cost, issuer response) not technical. We move for freezing relief and exchange disclosure while the trail is live – that is precisely when the law's tools are most effective.
CTA #2: If a prior application stalled or a recovery attempt has hit a jurisdictional wall, a second read of the structure can surface the route back. Write to our disputes desk at info@oboluslaw.com.
Self-Assessment Checklist: Are You Ready to File?
Before instructing counsel to file a without-notice application, a business should be able to answer yes to each of the following.
- Transaction hashes for the misappropriated transfers are identified and preserved.
- A forensic analytics report is either complete or can be delivered within 24 hours of instruction.
- The applicant entity has the standing to bring a proprietary claim (it was the direct owner or transferee of the relevant tokens).
- Evidence of financial standing to support the cross-undertaking in damages has been gathered.
- Any Guernsey-domiciled entity in the chain (fund, administrator, custodian) has been identified.
- Counsel in Guernsey (directly or via allied practitioners) has been engaged or is on standby.
- The law-enforcement reporting decision has been made (reporting is often a prerequisite for issuer-level engagement).
- The cross-border forum map has been reviewed: is Guernsey the primary or supplementary forum?
A business that answers no to any of the first four points is not ready to file; it is assembling the preconditions. That assembly can typically be compressed into 48 to 72 hours with proper co-ordination – but only if it starts immediately.
Related at OBOLUS
- Disputes and asset recovery for digital-asset businesses – our full practice overview for cross-border crypto fraud and recovery mandates
- On-chain asset tracing: the structuring angle – how entity structure affects the forensic and legal trace in recovery matters
- Redemption and liquidity terms in Switzerland – stablecoin issuer obligations and reserve considerations under the FINMA regime
FAQ
Can stolen crypto actually be recovered?
Yes – recovery is possible in many cases, though it is never guaranteed. The key variables are speed (tokens move faster than legal process without urgent action), forensic quality (tracing must establish the chain of custody on-chain), and forum (the applicant needs a court that can serve a freezing order on an exchange or administrator that actually holds the assets). Common-law courts in England, Singapore, Hong Kong and Guernsey have each granted proprietary relief over digital assets. A well-assembled application in the right forum, filed while the trace is live, gives the best recovery prospect.
How fast must I act after a digital-asset theft?
As fast as possible – ideally within hours of discovery. On-chain settlement is final and near-instant; a token balance moved to a mixer or a new exchange can become practically unrecoverable within 24 to 48 hours. Legal counsel and a forensic analytics provider should be engaged simultaneously, not sequentially. An emergency without-notice application can be heard in days in most leading common-law forums, but the forensic file must be ready before the application is filed.
Can a court freeze assets held on an exchange?
Yes. A freezing injunction can be addressed to an exchange directly as a third-party respondent, ordering it not to transfer, dispose of or deal with specified assets. Separately, a Norwich Pharmacal or equivalent disclosure order can compel the exchange to identify the account holder behind a wallet address. Both orders are available in Guernsey, England, Singapore and other common-law forums. Exchange co-operation varies in practice; a court order is the most reliable mechanism and, in most leading jurisdictions, non-compliance carries contempt liability.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We move for freezing relief and exchange disclosure while the trail is live – structuring the legal, forensic and cross-border elements as a single co-ordinated mandate. To discuss your recovery situation, contact info@oboluslaw.com.
By Glen Sorensen, Disputes & Recovery Analyst – specialising in cross-border stablecoin recovery, freezing injunctions and on-chain forensic evidence across common-law forums.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.