A business discovers that stablecoins have left its wallet without authorization. The counterparty is unreachable. The transaction hash is on-chain, the destination exchange is known, and the balance is still sitting in an address that has not yet moved to a mixer. The clock is running. For operators with Panamanian entities, Panamanian banking relationships, or counterparties routing funds through Panama, the question is immediate: what legal machinery is available here, and how quickly can it move?
A stablecoin freeze request in Panama combines on-chain forensics, civil precautionary measures under Panamanian procedural law, and – where the stablecoin issuer is foreign – coordinated action through the issuer's own freeze mechanism. Panama does not yet operate a dedicated virtual asset service provider (VASP) licensing regime with the same architecture as MiCA in the EU or VARA in Dubai, but its civil courts have broad precautionary-measure jurisdiction, and its financial intelligence unit engages with cross-border crypto fraud. This guide maps the steps, the decision points, and the cross-border interactions a business must work through to maximize the chance of recovery.
How Stablecoin Freezes Actually Work
A stablecoin freeze operates at two distinct levels, and conflating them is one of the most expensive mistakes an inexperienced recovery team can make. At the protocol level, issuers of the two largest stablecoins – Tether (USDT) and Circle (USDC) – hold contract-level blacklist authority that allows them to immobilize a specific address. At the judicial level, a court order directs a person or entity with control over assets to refrain from dissipating them. Both mechanisms are available in parallel, and the strongest recovery positions use both.
Tether and Circle generally act on one of three triggers: a law-enforcement request with a case reference, an OFAC or equivalent sanctions designation, or a court order from a recognized jurisdiction. Neither issuer is incorporated in Panama. That means a Panamanian court order alone may not be sufficient to compel issuer action – but it materially strengthens a parallel request routed through a common-law forum or directly to the issuer's compliance team. In our practice, we routinely coordinate the issuer channel and the judicial channel simultaneously. Waiting for one before starting the other loses the window.
On-chain forensics sit underneath both channels. Before any legal request is credible, the applicant needs a transaction hash, a destination address cluster, and – where possible – an attribution to a known exchange or custodian. Professional forensic tools used in this space include Chainalysis, TRM Labs, and Elliptic. A forensic report is not optional; it is the evidentiary spine of every other step.
What Is the Legal Basis for a Freeze in Panama?
Panama's civil procedural framework provides for medidas cautelares – precautionary measures, broadly equivalent to interlocutory injunctions in common-law systems – that a court may grant before or during substantive proceedings to prevent dissipation of assets. The applicant must demonstrate a fumus boni juris (a plausible right) and periculum in mora (risk of irreparable harm from delay). Crypto fraud satisfies both on the right facts: the transaction record is the right, and the fungible mobility of stablecoins is the harm.
Panama has enacted Law 23 of 2015 and related instruments establishing its anti-money laundering and financial intelligence architecture. The Unidad de Análisis Financiero (UAF) – Panama's financial intelligence unit – receives suspicious transaction reports and coordinates with foreign counterparts through the Egmont Group. Where funds have moved through a Panamanian bank or a Panamanian-licensed entity, a criminal complaint filed with the Public Prosecutor's Office (Ministerio Público) can trigger a parallel asset-freeze through the criminal law channel. The two channels – civil precautionary measure and criminal asset seizure – are not mutually exclusive. Running both increases pressure and coverage.
What Panama does not yet have is a bespoke digital-asset property law of the type enacted in England and Wales (where courts have confirmed crypto as property capable of supporting a proprietary claim) or in the BVI. Panamanian counsel must therefore frame the claim in existing civil and property law categories. This is manageable; it is not a barrier. But it does mean that pleading strategy matters more than in jurisdictions with explicit crypto-property statute.
The UAF and the Ministerio Público are the two domestic institutional levers available to a recovery applicant in Panama.Step 1: Secure the On-Chain Evidence Before Anything Else
The first step in any stablecoin recovery action is evidence preservation, and it must happen before a single legal filing. A transaction hash is immutable, but the associated exchange account is not: balances move, accounts close, and KYC records are deleted on schedule. Speed here is not a preference – it is determinative of whether the matter is recoverable at all.
The evidence package that anchors every subsequent step contains: the original transaction hash and block confirmation; a wallet-cluster analysis showing the destination address and any subsequent hops; exchange attribution (which platform holds the destination address); a chain-of-custody affidavit executed by the forensic analyst; and screenshots of any off-chain communications that identify the counterparty. Where the stablecoin is USDT or USDC, the forensic report should confirm whether the destination address has been flagged or blacklisted at the protocol level already – that information shapes the urgency of the issuer outreach.
In our cross-border practice, we have seen matters where an applicant delayed forensic engagement by seventy-two hours while seeking internal approvals. By the time the forensic report was ready, the funds had been layered through three additional addresses and partially converted to a privacy-enhanced asset. The recovery position deteriorated significantly. The lesson is structural: forensic engagement authorization should be pre-approved in any treasury risk policy.
Step 2: Engage the Issuer and the Exchange in Parallel
Once the forensic evidence package is assembled, the issuer request and the exchange disclosure request run simultaneously – not sequentially. Waiting for a court order before contacting the issuer treats the freeze mechanism as a reward for judicial diligence rather than a triage tool. Issuers have acted on a credible law-enforcement referral or a well-documented fraud notification before a court order issues, in circumstances where the evidence is clear and the balance has not yet moved.
The issuer request should include: the transaction hash, the destination address, the forensic report, a brief factual statement of the fraud, and – where available – a law-enforcement case number. If the matter has already been reported to the Ministerio Público, that reference number strengthens the request materially. Circle and Tether each maintain compliance contact channels for freeze requests; the request must be routed correctly and followed up, because issuer compliance queues are high-volume.
The exchange disclosure request is a separate instrument. Where the destination address is attributed to a known exchange, the objective is to obtain the KYC identity behind the address before the account is closed or the funds withdrawn. In Panama, an exchange operating locally may be reachable by domestic legal process. Where the exchange is foreign – as is more common – the disclosure request routes through: (a) a voluntary letter to the exchange's compliance team, (b) a court order from a jurisdiction whose orders the exchange respects, or (c) a law-enforcement mutual legal assistance channel. Option (b) is frequently faster than option (c). We regularly advise on which forum is the most efficient given the exchange's incorporation and the asset value.
Step 3: File the Precautionary Measure in the Panamanian Court
A civil precautionary measure in Panama can be filed on an ex parte basis – without notice to the respondent – where notice itself would defeat the purpose, which is precisely the position in a fraud case. The application attaches the forensic evidence, the factual narrative, and a legal opinion framing the claim in Panamanian civil law. The court may require the applicant to post a bond to compensate the respondent if the measure is ultimately found unwarranted.
Timeline is not fixed by statute at a specific number of days – it varies by court and by the complexity of the evidence – but Panamanian courts with commercial experience can move quickly on well-documented applications. The practical target in an urgent matter is to have the application before the court within forty-eight hours of the forensic report being finalized. That requires counsel, the evidence package, and the legal analysis to be ready in parallel, not in series.
A common mistake at this step is submitting the application with only the transaction screenshots and no forensic attestation. Panamanian courts are civil-law courts; they require organized, structured evidentiary presentation. An unsupported blockchain printout without expert certification carries limited weight. Allied counsel in Panama, working alongside our disputes team, manages the local drafting and filing.
Filing the precautionary measure ex parte – without alerting the respondent – is the standard approach where advance notice would allow dissipation.Step 4: Reinforce With a Common-Law Forum Order Where Needed
Panama's civil precautionary measure is effective against assets and persons within the court's territorial reach. Where the exchange, the counterparty, or the stablecoin issuer sits outside Panama – which is the majority of cases – the Panamanian order needs reinforcement from a forum whose orders travel farther. This is the point at which the cross-border architecture of the recovery action becomes decisive.
England and Wales remains the leading forum for worldwide freezing orders (WFOs) – injunctions that freeze a defendant's assets globally – and for Norwich Pharmacal orders (disclosure orders compelling third parties, including exchanges, to identify unknown defendants). The English courts confirmed in AA v Persons Unknown [2019] that crypto assets are property capable of supporting a proprietary claim and a freezing order. The DIFC Courts in Dubai have also issued worldwide freezing orders in support of foreign proceedings. Singapore, Hong Kong, and the BVI offer parallel routes depending on where the exchange or the assets can be connected to those jurisdictions.
The decision about which forum to invoke turns on four variables: where the exchange is incorporated or regulated; where the defendant has reachable assets; the size of the balance (which determines whether the cost of multi-forum litigation is proportionate); and how quickly the forum can act on an ex parte basis. We map that analysis at intake. In our cross-border practice, the Panama domestic action and a common-law forum order run on parallel tracks, with the Panamanian filing preserving local relief and the common-law order reaching the exchange.
In a recent matter, a Latin American payments company identified that stablecoins had been redirected by a rogue contractor to an address attributed to a well-known exchange. We filed for a precautionary measure through allied counsel in the relevant domestic jurisdiction while simultaneously seeking a disclosure order in a leading common-law forum. The exchange produced KYC records within days of service. The identity of the account holder was confirmed, and a civil claim was filed before the balance left the exchange. The matter settled at a significant recovery before trial.
Step 5: Lodge the Criminal Complaint With the Ministerio Público
The criminal channel in Panama runs in parallel with, not instead of, the civil track. A formal denuncia filed with the Ministerio Público opens an investigative file, generates a case reference number that can accompany the issuer freeze request, and activates Panama's mutual legal assistance treaty (MLAT) network for cross-border investigative cooperation. Panama is a party to a range of bilateral and multilateral assistance instruments, and its UAF is an Egmont Group member – which means financial intelligence exchange with counterpart units abroad.
The criminal channel moves on a different clock from the civil. The Ministerio Público has investigative powers – including powers to compel document production from regulated financial entities – that are not available to a civil litigant. However, criminal investigations are not directed by the victim; the state controls the pace. The civil precautionary measure is therefore the primary recovery instrument for asset freezing, and the criminal complaint is the secondary channel for identification and international cooperation.
Operators we advise are sometimes surprised that filing a criminal complaint does not automatically freeze assets. In Panama, as in most civil-law systems, the civil and criminal tracks are procedurally separate. A criminal seizure order requires a separate judicial authorization within the criminal process. That authorization can follow from the complaint, but it requires the prosecutor to move it forward. Relying solely on the criminal track and deferring the civil application is a structural error that costs recovery time.
Which Profile Fits Which Recovery Path?
Not every matter has the same fact pattern, and the recovery architecture should match the specific situation. Three profiles cover the majority of cases we see.
Profile A – Panamanian entity, funds on a foreign exchange, balance intact. This is the most recoverable scenario. The domestic precautionary measure preserves local jurisdiction; the parallel common-law forum order targets the exchange for disclosure and freeze. The issuer channel runs simultaneously. Timeline to a freeze position: days to low weeks on an expedited basis, depending on the forum and the quality of the forensic package. Key risk: the exchange may require a court order from its own jurisdiction of incorporation rather than from Panama.
Profile B – Foreign entity, Panamanian bank account is the source or intermediary. The domestic criminal and civil channels are both available because the Panamanian bank is within the court's reach. The UAF engagement is particularly valuable here because Panamanian banks are subject to AML supervision and can be compelled to produce transaction records. Key risk: the bank's internal process for responding to court orders has its own timeline. Timeline is broadly similar to Profile A for the court filing; the bank's response adds variability.
Profile C – Funds have moved beyond Panama, counterparty is unknown. This is the hardest profile. The forensic work becomes the first priority to establish an address attribution. The Panamanian nexus (entity, bank, counterparty connection) determines whether domestic process is useful or whether the recovery action is better anchored in the exchange's home jurisdiction. We assess the jurisdictional anchor at intake and advise on the most efficient route, which may be a common-law forum with no Panamanian element at all.
For a scoped assessment of your recovery options, contact OBOLUS at info@oboluslaw.com. The process above describes the standard path. Your facts – the entity, the exchange, the balance, the cross-border structure – change the analysis, and they change it quickly when a clock is running.
What Goes Wrong: The Most Common Recovery Errors
A common assumption is that once the funds have left the wallet, no legal mechanism can reach them. That assumption is wrong, and acting on it causes the very outcome it predicts. The window closes because the assumption prevents action – not because action was impossible.
The errors we see most frequently fall into four categories. First, delay in forensic engagement. Every hour of delay increases the probability that the funds move to an address with no exchange attribution. Second, treating the Panamanian criminal complaint as the primary recovery tool. It is a valuable parallel instrument; it is not the asset-freeze mechanism. Third, approaching the stablecoin issuer without a law-enforcement reference or a forensic package. Issuer compliance teams receive high volumes of unsubstantiated freeze requests and cannot act on them. Fourth, failing to identify the correct common-law forum for the exchange disclosure order. Sending a Panamanian court order to a New York exchange that operates under NYDFS supervision is not the right instrument.
A fifth error deserves separate mention: inadequate cross-border coordination. The domestic action and the foreign action must be synchronized in timing and in pleading. A common-law court will be asked to recognize or rely on the facts developed in the Panamanian proceeding. If those facts are framed differently, or if the timelines are inconsistent, the foreign court's confidence in the application is reduced. We regularly advise on the integration of both tracks to ensure consistency.
If a prior recovery attempt stalled – whether because the issuer did not respond, the exchange closed the account, or the court filing was rejected – a second structural read can surface the reason and the route forward. Write to us at info@oboluslaw.com.
The Tax and Banking Dimension
Recovery actions have tax and banking consequences that operators frequently overlook until they create a secondary problem. In a fraud recovery, funds returned to the business may be treated differently from ordinary operating income depending on how the original loss was characterized and in which jurisdiction the entity sits. Where the recovering entity holds a Panamanian territorial tax exemption – Panama taxes only domestically-sourced income – the recovery's tax character may turn on whether the original funds and the misappropriating transaction had a Panamanian source. That analysis is entity-specific and requires coordinated tax counsel alongside the disputes team.
The banking dimension is equally important. Panamanian banks have become more cautious about crypto-related transactions under the influence of FATF guidance and the country's own compliance pressures following its periods on international grey lists. A recovery that results in a large stablecoin balance being converted and repatriated to a Panamanian bank account will attract scrutiny. The documentation supporting the recovery – the court orders, the forensic reports, the corporate authorizations – should be organized as a banking compliance package before the funds arrive, not after the bank raises a query.
We advise operators to treat the tax and banking integration as part of the recovery plan from the outset, not as a post-recovery administrative step. The cost of failing to do so is a secondary compliance event that can delay or complicate access to the recovered funds.
Related at OBOLUS
- Disputes and Asset Recovery for Digital-Asset Businesses – our full-scope disputes and recovery practice across 25+ forums
- Smart Contract Dispute Resolution: Where the Legal Lines Are Drawn – analysis of on-chain dispute mechanisms and the courts that govern them
- GP/LP Structuring for Digital Assets in Czech Republic – cross-border structuring options for digital-asset fund vehicles
FAQ
Can stolen crypto actually be recovered?
Yes – recovery is achievable in the right circumstances, but it is never guaranteed and it depends critically on speed. Where the stablecoin balance remains in an attributed exchange address, a combination of a judicial precautionary measure, a stablecoin issuer freeze request, and an exchange disclosure order can stop the funds from moving and identify the account holder. Recovery rates fall sharply once funds are converted, layered through multiple addresses, or moved to a privacy-enhanced asset. Early legal and forensic engagement is the single largest factor in determining whether recovery is possible.
How fast must I act after a digital-asset theft?
Recovery windows are measured in hours, not days. The critical milestones are: forensic engagement within hours of discovery; issuer freeze request within twenty-four hours where the forensic package allows; and a court application within forty-eight to seventy-two hours where the balance remains on an exchange. Each delay compounds the risk of dissipation. In our practice, we maintain a triage process for urgent recovery matters precisely because the legal machinery must move at the pace of the blockchain, not the pace of a standard litigation calendar.
Can a court freeze assets held on an exchange?
Courts in leading common-law jurisdictions – England and Wales, Singapore, Hong Kong, the BVI, and the DIFC Courts – have issued freezing orders and disclosure orders that effectively immobilize assets held on centralized exchanges. The order is typically directed at the exchange as a third party holding assets belonging to or traceable to the defendant. In Panama, a domestic precautionary measure can reach assets and parties within the court's territorial jurisdiction; for assets on foreign exchanges, reinforcement through a common-law forum order is standard practice.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Our disputes team coordinates freezing relief and on-chain tracing across leading common-law forums, moving for the right relief while the trail is live. Digital assets are the whole of our practice. To discuss your recovery situation, contact info@oboluslaw.com or reach us via t.me/oboluslaw.
By Glen Sorensen, Disputes & Recovery Analyst – specialist in on-chain asset tracing, cross-border freezing orders, and multi-forum recovery strategy for digital-asset businesses.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.