Recovery windows for misappropriated digital assets are measured in hours, not weeks. A business that discovers a wallet compromise or a fraudulent transfer on a Monday morning cannot afford to spend the next fortnight researching jurisdiction. It needs, immediately, a court that can freeze assets before they move again – and counsel who can file before the next block clears. The worldwide freezing order (an injunction restraining a respondent from disposing of assets anywhere in the world) is the sharpest instrument in that toolkit. Within the AIFC (Astana International Financial Centre), Kazakhstan's common-law financial enclave, that instrument is available, enforceable, and increasingly used in digital-asset disputes.
This guide sets out how to obtain a worldwide freezing order in the AIFC step by step: the legal basis, the evidence required, the process from first instruction to order, the cross-border dimension, and the common mistakes that lose recovery windows. Every step is written for a general counsel or founder who already understands the mechanics of a crypto theft and needs the legal answer, not a primer on blockchain.
What is the legal basis for a freezing order in the AIFC?
The AIFC Court is a common-law court operating under its own procedural rules, separate from the Kazakhstani general courts, and its jurisdiction extends to civil and commercial disputes with a nexus to the AIFC. Because the AIFC adopts English common-law principles as its foundational jurisprudence, the court's injunctive toolkit mirrors the one familiar to practitioners in England and Wales. A worldwide freezing order restrains the respondent from dealing with any assets globally, not merely those inside Kazakhstan or the AIFC perimeter. The AFSA (Astana Financial Services Authority) regulates digital-asset activities within the centre, and entities holding digital-asset licences under the AIFC regime are squarely within the court's reach. That combination – a regulated digital-asset environment, a common-law court and a worldwide injunction power – makes the AIFC a meaningful recovery forum for businesses whose counterparty, custodian or exchange has an AIFC nexus.
The AIFC Court's jurisdiction is founded on the AIFC's constitutional instruments and its own court regulations. A claimant need not be an AIFC-licensed entity to invoke the court. The key jurisdictional hook is that the respondent, the disputed assets or the relevant contract has a sufficient connection to the AIFC. In digital-asset matters, that connection often arises because an exchange or custody provider is licensed by AFSA, because the respondent maintains an account there, or because a transfer routing passed through an AIFC-regulated platform.
What must a claimant establish to obtain a freezing order?
To obtain a worldwide freezing order in the AIFC, a claimant must satisfy three conditions that will be immediately familiar to English-law practitioners: a good arguable case on the merits, a real risk of dissipation of assets, and a balance of convenience that favours the grant of relief. Each condition has specific implications in a digital-asset context.
A good arguable case means more than an allegation. The claimant must set out a cause of action – typically fraud, breach of contract, unjust enrichment or proprietary claim over identified tokens – and produce credible evidence to support it. In crypto-theft scenarios, a forensic blockchain analysis report is almost always necessary at this stage. It maps the misappropriated funds from the victim's wallet through intermediate addresses to current holding locations. That report does two things: it grounds the merits case in identifiable assets, and it supports the dissipation risk argument.
The risk of dissipation is rarely difficult to demonstrate in a digital-asset matter. Tokens can move across borders in seconds. Mixing services, chain-hopping and rapid exchange withdrawals are documented patterns. Courts in common-law jurisdictions – including England, Singapore and the DIFC – have consistently held that the speed and anonymity of crypto transfers satisfies the dissipation-risk threshold. The AIFC Court, drawing on the same common-law tradition, applies the same logic.
The balance of convenience and the cross-undertaking in damages complete the picture. The claimant must offer a cross-undertaking to pay the respondent's losses if the order is later discharged. For a corporate claimant, this is normally satisfied by evidence of financial standing. For a substantial fraud victim, the balance of convenience almost always favours the grant of interim relief.
How does the AIFC freezing order application process work, step by step?
The process from first instruction to a sealed worldwide freezing order in the AIFC involves seven discrete steps, each of which must be executed without error and, in most cases, without delay.
Step 1 – Instruct counsel and triage the evidence. On day one, counsel reviews the transaction history, identifies the jurisdictional hook into the AIFC, and assesses whether the forensic trail is sufficient to support the application. If the forensic evidence is thin, a parallel instruction to a blockchain analytics firm runs concurrently. At OBOLUS, we regularly advise clients to commission forensic tracing before the legal strategy is finalised; the analytical report shapes both the merits case and the dissipation-risk arguments.
Step 2 – Prepare the affidavit evidence. A worldwide freezing order application is supported by a sworn affidavit from the claimant or a director of the claimant entity. The affidavit must set out the underlying dispute, the value of assets at risk, the respondent's identity and AIFC connection, the forensic findings, and the specific risk of dissipation. Clarity and concision matter: a court hearing an emergency application reads quickly. Padding the affidavit with irrelevant narrative delays grant and weakens the impact of the key facts.
Step 3 – Draft the order and supporting documents. Counsel drafts the proposed order (which specifies the respondent, the asset classes covered, any carve-outs for ordinary business expenses, and the return date), the application notice, and a skeleton argument. The order should be drawn tightly enough to be enforceable but broadly enough to cover foreseeable asset classes – fiat, tokens, exchange balances and interests in entities holding such assets.
Step 4 – File and seek a without-notice hearing. Where the respondent would likely move assets on notice of the application, counsel applies for a without-notice (ex parte) hearing. The AIFC Court, like its English counterpart, permits this in urgent cases. Full and frank disclosure to the court is mandatory at a without-notice hearing: the claimant must bring all material facts, including those that might favour the respondent.
Step 5 – Attend the hearing and obtain the order. At the hearing, counsel presents the affidavit evidence and the skeleton argument. The court may ask questions on jurisdiction, the merits threshold and the proposed order terms. If satisfied, it seals the worldwide freezing order. Timing from filing to a sealed order in an urgent matter is typically a matter of days, not weeks, though the precise timetable depends on court availability and the complexity of the application.
Step 6 – Serve and notify third parties. Immediate service on the respondent and, critically, on any third parties who hold assets on the respondent's behalf – including exchanges, custodians and banks with an AIFC presence – is essential. Third parties who receive notice of the order are bound by it; a custodian that releases assets after notice faces contempt consequences. In parallel, counsel may seek a disclosure order requiring the respondent or a third party to identify and produce information about the location of assets.
Step 7 – The return date hearing and next steps. The court sets a return date, typically within days to a few weeks of the without-notice order, at which the respondent may appear and the parties argue whether the order should continue. Counsel must be ready to defend the order on the merits and to manage any undertaking in damages dispute. If the respondent does not appear, the order is generally continued pending substantive resolution.
Contact OBOLUS at info@oboluslaw.com for a scoped assessment of your recovery position in the AIFC. The process above describes the standard path. Your facts – the entity, the forensic trail, the AIFC nexus – change the analysis, and the clock is running.
How do exchange disclosure orders work alongside a freezing order in the AIFC?
A worldwide freezing order immobilises assets. A disclosure order compels a party – often an exchange – to identify the wallet addresses, account balances and personal details of the respondent. Both orders are frequently sought at the same without-notice hearing, and in digital-asset matters, the disclosure order is often as valuable as the freeze itself.
The AIFC Court, applying common-law disclosure principles, can require an AIFC-regulated exchange or custodian to produce account information and transaction records. The equivalent instruments in England and Wales – the Norwich Pharmacal order (compelling a third party to reveal the wrongdoer's identity) and the Bankers Trust order (compelling disclosure of account information to trace assets) – inform the AIFC approach. In our cross-border practice, we have seen these instruments used together to convert a pseudonymous wallet trail into identified accounts that can then be frozen.
The interaction with the AFSA regime matters here. A regulated entity – a licensed digital-asset trading facility or custody provider under the AIFC rules – is subject to regulatory obligations that sit alongside any court order. A court disclosure order directed at such an entity carries the weight both of the court's contempt jurisdiction and of the entity's continuing licence obligations. That double pressure accelerates compliance.
One practical note: if the relevant exchange is not AIFC-regulated but holds assets that have been traced through the AIFC, the court may still have jurisdiction to make a supporting order if the AIFC entity is a necessary party or can be served within the AIFC. Cross-border enforcement of the disclosure order beyond the AIFC requires separate recognition steps in the relevant foreign jurisdiction. We advise clients to identify the full exchange and custody map before filing, so that the initial application is structured to capture every reachable venue simultaneously.
What is the cross-border reality for asset recovery involving the AIFC?
Most digital-asset thefts cross multiple jurisdictions before the funds come to rest. A fraudster based in Central Asia may move funds through a Seychelles-registered exchange, a European DeFi bridge and a Hong Kong OTC desk. A worldwide freezing order from the AIFC Court restrains the respondent globally, but enforcing that order against third parties outside Kazakhstan requires recognition of the AIFC judgment in the relevant foreign courts.
The AIFC shares the common-law tradition with England and Wales, Singapore, Hong Kong and the DIFC Courts. In practice, that means a judgment or order of the AIFC Court can be presented to those courts in support of parallel applications, and the common foundation reduces – though does not eliminate – the friction of recognition. We regularly work alongside allied counsel in the relevant jurisdictions to file simultaneous or sequential applications so that assets cannot be moved from one forum to another to escape a freeze.
The CFAAR (Crypto Fraud and Asset Recovery) network, launched in London in September 2021, represents a developing ecosystem of practitioners across common-law courts who coordinate multi-jurisdictional crypto recovery. The AIFC's alignment with common-law principles positions it as a natural partner jurisdiction within that network logic, even where formal CFAAR membership is not the operative mechanism.
A second cross-border layer is the stablecoin freeze option. Where the misappropriated assets are USDT or USDC, the issuers – Tether and Circle respectively – hold contract-level authority to blacklist specific token addresses. They generally act on a law-enforcement request or a court order. An AIFC worldwide freezing order, served on the relevant issuer in parallel with a law-enforcement notification, can support a freeze request. The window to make that request before the attacker converts to a non-freezable asset class is typically hours, not days. Speed of instruction is not a preference; it is a structural requirement of the recovery process.
Banking is a further cross-border consideration. A respondent who holds fiat proceeds of a crypto theft in a bank account – whether in Kazakhstan or abroad – can be reached by the worldwide element of the AIFC order, subject to recognition. Identifying the fiat destination quickly, often through exchange KYC records obtained under a disclosure order, is a standard component of a coordinated recovery strategy.
How does a coordinated AIFC freezing order work in practice?
In a recent recovery matter, a technology company based in Central Asia discovered that a significant volume of stablecoins had been misappropriated through a compromised custody arrangement that had an AIFC-licensed entity in the transfer chain. The company engaged OBOLUS within hours of discovering the loss. We instructed forensic blockchain analysts concurrently with drafting the affidavit evidence, identified the AIFC jurisdictional hook from the licensed custody provider's involvement, and filed a combined application for a worldwide freezing order and a disclosure order. The AIFC Court granted the without-notice order within days. The disclosure order produced account information that identified two further exchanges holding the transferred assets. We coordinated with allied counsel in a second common-law forum to file parallel recognition and freezing applications. A material portion of the funds was immobilised before the respondent could effect a further transfer. The matter proceeded to substantive recovery proceedings on a solid evidentiary foundation.
What mistakes most often cost recovery in AIFC freezing order applications?
The most common and costly mistake is delay. Every hour after a theft is discovered is an hour in which the respondent can move assets further down the chain, convert between asset classes, or withdraw to a self-custody wallet beyond immediate reach. Businesses that spend two or three days conducting internal investigations before contacting counsel typically find that the on-chain trail has gone cold or that the assets have left the reachable exchanges.
A second frequent error is inadequate forensic evidence. A court will not grant a worldwide freezing order on the basis of a claimant's assertion that funds were stolen. The forensic blockchain analysis report – mapping the movement of specific tokens through identified addresses to their current probable location – is the evidential foundation of the application. A report that stops at the first intermediate address, or that does not identify the receiving exchange, leaves the court unable to assess the dissipation risk with precision.
Third, claimants frequently underestimate the disclosure obligation at a without-notice hearing. Full and frank disclosure means presenting facts that might weigh against the grant of the order. A claimant who omits a material adverse fact – a competing claim, a contractual dispute context, a prior relationship with the respondent – risks having the order discharged at the return date hearing, losing costs, and being held on the cross-undertaking.
Fourth, the scope of the order matters. An order drafted too narrowly – covering only the specific wallet addresses identified in the forensic report – can be sidestepped by moving assets to a new address before service. In our practice, we draft the order to cover all assets beneficially owned by the respondent, with specific identification of known addresses and accounts as examples, not as a closed list.
Finally, failing to notify stablecoin issuers and exchanges promptly once the order is sealed wastes the enforcement window. Third-party notification is not a formality; it is the mechanism by which the order actually prevents asset movement. We structure notifications to exchanges, issuers and banking counterparties as a matter of hours after sealing, not days.
If a recovery clock is running, reach our disputes desk now at info@oboluslaw.com. If a prior recovery attempt stalled or an account was closed before the order could be served, a second read can surface the structural reason and the route back.
Which businesses should pursue a freezing order in the AIFC, and when?
Not every crypto-theft victim has an AIFC claim. The decision to file in the AIFC rather than – or in addition to – another common-law forum depends on the jurisdictional hook and the location of the recoverable assets.
Profile A – AIFC-connected respondent or custodian. The clearest candidate is a business whose counterparty or the exchange holding the stolen assets is licensed by AFSA. In this profile, the AIFC Court has direct jurisdiction over the regulated entity, the disclosure order is immediately effective, and the worldwide freeze reaches both the AIFC-held assets and any further assets in the respondent's control globally. Indicative timeline from instruction to sealed order: days, subject to court availability and evidence readiness. Key risk: the respondent moves assets between instruction and sealing; mitigated by speed and parallel stablecoin freeze requests.
Profile B – Central Asian or Silk Road corridor fraud with an AIFC touch-point. A business that has suffered a fraud involving counterparties in Kazakhstan or the broader Central Asian region may find that a transfer routing passed through an AIFC entity, even if neither party is domiciled there. The AIFC touch-point creates jurisdiction; the worldwide element of the order reaches the broader asset pool. Timeline is broadly similar to Profile A. Key risk: recognition of the AIFC order in secondary jurisdictions is an additional procedural step that adds time; address by filing in secondary courts immediately after the AIFC order is sealed.
Profile C – Claimant seeking to complement an existing English, DIFC or Singapore order. A claimant who already has a freezing order from another common-law forum and discovers assets in the AIFC can present the foreign order to the AIFC Court in support of a recognition and enforcement application, or file a fresh application. The common-law foundation reduces the recognition friction. Timeline varies by the procedural posture of the existing proceedings. Key risk: inconsistent terms between the original order and the AIFC order; draft both consistently from the outset.
A common assumption among businesses in the aftermath of a digital-asset theft is that once funds leave the wallet, nothing can be done. That assumption is false. The combination of on-chain tracing, common-law freezing jurisdiction, stablecoin issuer freeze authority and exchange disclosure orders provides a layered enforcement toolkit that – when deployed within hours of discovery – can immobilise assets before the attacker converts or disperses them. The critical variable is not the jurisdiction; it is the speed of instruction.
Related at OBOLUS
- Digital asset disputes and recovery practice – our full cross-border toolkit for crypto fraud, freezing orders and on-chain tracing
- Exchange disclosure orders: the disputes angle – how to compel exchanges to produce account and transaction data
- AML audit defence: the disputes angle – managing regulatory investigations alongside live recovery proceedings
FAQ
Can stolen crypto actually be recovered?
Yes, in meaningful cases. Recovery depends on the speed of response, the quality of on-chain forensic tracing, and the existence of a jurisdictional hook – such as an AIFC-regulated exchange – that allows a court to make disclosure and freezing orders. Stablecoin issuers can freeze specific token addresses on court order or law-enforcement request. Recovery is not guaranteed, but a coordinated legal and forensic response within hours of discovery materially improves the outcome.
How fast must I act after a digital-asset theft?
Immediately. The practical window to freeze assets before they are converted or dispersed is typically hours, not days. Courts in leading common-law forums – including the AIFC – can grant without-notice freezing orders in urgent cases within a matter of days of instruction. The longer the delay before instructing counsel, the further the assets travel and the harder the forensic trail becomes to follow. Treat discovery of a theft as a same-day instruction event.
Can a court freeze assets held on an exchange?
Yes. An AIFC worldwide freezing order, served on an AIFC-licensed exchange, binds that exchange as a third party. A separate disclosure order can compel the exchange to produce account information and transaction records. Exchanges that receive notice of a court order and continue to process withdrawals face contempt consequences. For exchanges outside the AIFC, enforcement requires recognition of the order in the relevant foreign jurisdiction – a step that counsel should plan for at the time of drafting the original application.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We move for freezing relief and exchange disclosure while the trail is live, and we work alongside forensic partners to convert on-chain evidence into court-ready disclosure applications. To discuss your situation, contact info@oboluslaw.com.
By Glen Sorensen, Disputes & Recovery Analyst – specialist in cross-border digital-asset freezing orders, disclosure applications and on-chain tracing across common-law forums including the AIFC, England and Wales, the DIFC and Singapore.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.