Recovery windows for misappropriated stablecoins are measured in hours, not weeks. A stablecoin freeze request – the formal legal mechanism by which a court order or direct issuer demand freezes a designated token balance on-chain – is one of the few tools that can stop a theft in progress. In Poland, the process sits at the intersection of civil procedure, emerging crypto fraud doctrine and the cross-border reach of major stablecoin issuers. This guide maps every step, from the moment misappropriation is detected to the point at which a balance is frozen.
Polish civil courts have broad provisional-relief powers. Those powers extend, in practice, to digital assets where the asset can be identified and where an arguable proprietary claim exists. A business that acts decisively – with forensic evidence in hand and counsel briefed within hours – has a realistic path to preservation. A business that waits, hoping the other side will engage voluntarily, almost always watches the window close.
How do stablecoin freezes work legally?
A stablecoin freeze operates through two parallel mechanisms that a claimant should pursue simultaneously. The first is on-chain tracing (mapping the movement of tokens across addresses using forensic tools) to build an evidence trail. The second is legal action – either a court order compelling a custodian or exchange to freeze a balance, or a direct issuer-level request to Tether (USDT) or Circle (USDC), both of which hold contractual authority to blacklist specific token addresses.
Tether and Circle both maintain on-chain blacklist capability and generally act on a law-enforcement case reference, an OFAC designation, or a court order from a recognised jurisdiction. That issuer-level route is fast – technical execution is near-instantaneous once the legal predicate is in place. The court-order route through Polish proceedings provides the domestic legal predicate and is often pursued in parallel with contact to the issuer.
Poland does not yet have a standalone digital-asset law. Courts apply general civil-procedure provisions, property-law principles and, increasingly, EU instruments where they reach the fact pattern. The result is that the legal question – whether a stablecoin balance is an asset capable of preservation – is answered by analogy and by the weight of cross-border authority from common-law jurisdictions that have already answered it. In our practice, Polish courts presented with a fully packaged forensic report and a clear proprietary argument will grant provisional relief; the packaging of that argument is the critical work.
Step 1: Detect, triage and preserve the on-chain evidence
The first legal step is evidence preservation, not the filing of a claim. Within minutes of detecting a misappropriation, a business should extract and timestamp every transaction hash, wallet address and exchange deposit address it can identify. That record is the foundation of the entire case.
On-chain tracing specialists – working from the transaction hashes – can typically reconstruct the movement of funds through intermediate addresses and identify the exchange or custodian at which the funds currently rest. This forensic report is the single most important document in the initial freeze application; courts and issuers both require it before taking any action. The common mistake at this step is delay: every block confirms the movement of funds and makes the trace more complex.
A business should simultaneously place its legal counsel on notice and, if the misappropriation is above a meaningful threshold, report to the relevant Polish law-enforcement authority. A law-enforcement reference strengthens an issuer-level freeze request materially.
Step 2: Identify where the funds currently sit
Polish proceedings are most useful when the target balance sits on an exchange or custodian that can be served with a court order. If the funds sit in an unhosted wallet, the issuer-level route and the law-enforcement route become the primary paths. The step-two question is therefore: has the tracing report identified a regulated custodian, an exchange with a known legal address, or a raw on-chain address?
Each answer points to a different tactical sequence. A regulated EU exchange – reachable under MiCA or a national AML regime – is in the most accessible position for a court order. An exchange outside the EU requires either international service of process or, more practically, a parallel application in a jurisdiction where that exchange has a regulated presence. An unhosted wallet requires the issuer-level route and, if the address is identified, engagement with the forensic community and law enforcement.
In our cross-border practice, we regularly advise businesses on mapping the custodial relationship first, before selecting the forum. A Polish court order is highly useful where the counterparty can be served in Poland or in the EU. For a counterparty sitting in a common-law jurisdiction, a parallel application in England and Wales or Singapore may be the faster route – and those courts have well-developed asset recovery doctrine for digital assets, including the use of worldwide freezing orders (injunctions that freeze a defendant's assets globally) and Norwich Pharmacal orders (disclosure orders requiring a third party to identify a wrongdoer).
Contact OBOLUS now if your trace has identified the custodian and the clock is running. The analysis above describes the standard path, but the entity structure, the user base and the banking all change it. Map your options.
Step 3: Prepare and file the freeze application in Poland
A Polish provisional-relief application for asset preservation requires a showing of two things: that the claimant has an arguable underlying claim, and that without preservation there is a real risk the defendant will dissipate the asset before judgment. Digital-asset cases fit this test well – the fungibility and portability of stablecoins are precisely the features that satisfy the dissipation risk.
The application package will typically include the forensic tracing report, evidence of the claimant's proprietary interest in the original funds, evidence of the misappropriation (transaction records, wallet screenshots, any communications), and the legal argument that the stablecoin balance is an asset in respect of which the court can grant relief. That legal argument – framed in Polish civil-procedure terms – is the work of counsel and must be prepared quickly.
Polish courts can grant a provisional freezing order (an order preserving a specific asset pending resolution of the dispute) without hearing the defendant. That ex parte route is available where notice would defeat the purpose of the relief. In our experience, digital-asset matters almost always justify the ex parte approach: the very reason relief is needed is that the asset can be moved in seconds.
The common mistake at this step is submitting a partial forensic report. Courts will not guess at the ownership chain; the report must trace the funds from the claimant's known address to the current resting point in a form that a judge unfamiliar with blockchain technology can follow. A short explanatory annex – written in plain language for the court – materially improves the success rate of the application.
Step 4: Approach the issuer or exchange directly
Tether (USDT) and Circle (USDC) can freeze specific addresses at the smart-contract level and have both acted on such requests in documented law-enforcement and court-order contexts. This route is pursued alongside, not instead of, the court application. The issuer request typically requires: a transaction hash identifying the balance, a law-enforcement case reference or court order, a professional forensic report, and a formal written request from counsel.
The timeline for issuer-level freezes is short once the predicate is met. Technical execution is near-instantaneous; the bottleneck is assembling the legal package. This is another reason why the evidence-preservation step must happen within hours of discovery.
For exchange-held balances, the equivalent step is a direct legal letter to the exchange's compliance team, accompanied by the court order or the provisional application. EU-registered exchanges operating under MiCA or national AML obligations have cooperative disclosure duties and will generally act on a court order. Exchanges outside the EU require more careful handling – the correct legal instrument depends on where the exchange is incorporated and regulated.
What happens after the freeze?
A freeze preserves the asset; it does not return it. Once a balance is frozen – whether at the issuer level or through a court order binding the exchange – the claimant must pursue the underlying claim to judgment or settlement. In parallel, the claimant will typically seek a disclosure order compelling the exchange to identify the account holder behind the address. That identity information is essential to serving the claim.
If the account holder is identifiable, the case moves into conventional litigation or criminal referral. If the account holder remains anonymous – a common situation in crypto-fraud cases – the case proceeds against "persons unknown," a procedural device recognised in leading common-law forums. The frozen balance sits pending the outcome.
There is a time limit on provisional relief in Polish proceedings. The applicant must commence substantive proceedings within the period set by the court; failure to do so will see the freeze lapse. Counsel must therefore be coordinating the main claim alongside the preservation application from day one.
A recent matter illustrates the timeline pressure. A payments company detected a misappropriation of a stablecoin balance – a seven-figure sum – on a Friday afternoon. We were engaged within two hours, briefed a forensic partner that evening and had a tracing report identifying the resting exchange by Saturday morning. A formal legal letter to the exchange's compliance team went out that day, citing the court application being prepared. The exchange placed an internal hold on the account before the Polish application was filed. The balance remained frozen through the disclosure stage. No court fight was needed to obtain the hold; the credible legal package did the work.
What cross-border complications should a claimant expect?
Most stablecoin misappropriations cross at least one jurisdictional line. The asset originates in one country, moves through exchanges in several others and comes to rest in a wallet or account with a different jurisdictional nexus. Polish proceedings address the domestic anchor point, but they cannot, on their own, reach every node in that chain.
The cross-border dimension typically creates three practical complications. First, service of process on a foreign defendant is slower than domestic service; emergency relief must therefore be applied for before the defendant is identified or before the full picture is known. Second, enforcing a Polish court order in a non-EU jurisdiction requires either recognition proceedings in that jurisdiction or – more practically – a parallel application in a forum that has jurisdiction over the exchange. Third, tax and banking consequences of recovery deserve early attention: funds returned to a corporate claimant may carry withholding, reporting or banking-compliance implications depending on how the recovery is structured.
In our cross-border practice, we have seen businesses pursue the Polish route to a successful freeze and then stall at the enforcement stage because no allied counsel had been engaged in the exchange's home jurisdiction. Coordinating those strands early – appointing allied counsel in the relevant jurisdiction at the same time as filing in Poland – compresses the overall timeline materially.
We work alongside forensic partners to convert on-chain evidence into court-ready disclosure applications across multiple forums simultaneously. That parallel-track approach is standard in our disputes work and is typically what separates a successful freeze from a frozen balance that never gets returned.
If a prior application stalled or an account was closed, a second review can identify the structural reason and the route forward. Write to OBOLUS to map your options before the window closes entirely.
Which route should your business take?
The right tactical sequence depends on the claimant's profile and where the funds currently sit. The following decision paths reflect how we assess incoming recovery matters.
Profile A – Corporate claimant, funds on a regulated EU exchange. Polish court proceedings for provisional relief, served on the exchange's EU registered address, is the primary route. Timeline to a hold is a matter of days to a few weeks from brief to filing, depending on the complexity of the tracing and the court's administrative speed. Key risk: the exchange moves the funds if the application is not filed urgently.
Profile B – Corporate claimant, funds on a non-EU exchange, USDT balance. Direct issuer request (Tether) as the primary immediate route, supported by a law-enforcement case reference. Polish proceedings build the legal predicate; parallel proceedings in the exchange's home jurisdiction provide local enforcement. Timeline varies by jurisdiction. Key risk: the issuer request is refused without a recognised court order.
Profile C – Corporate claimant, funds in an unhosted wallet, USDC balance. Issuer route (Circle) and law-enforcement are the primary paths. Court proceedings serve to establish the proprietary claim and support the disclosure application against any exchange the address later interacts with. Timeline is open-ended. Key risk: the address is abandoned and the funds moved to a jurisdiction-neutral mixer.
In each profile, early engagement with counsel and forensic partners is the single variable most within the claimant's control.
Related at OBOLUS
- Disputes & Asset Recovery for Digital Asset Businesses – full-practice overview of on-chain recovery, freezing orders and disclosure strategy
- Exchange Disclosure Orders for Established Operators – how to compel an exchange to identify an account holder behind a suspected fraud address
- PSP and Acquiring Agreements in the United States – the federal and state MTL regime for payments businesses with US exposure
FAQ
Can stolen crypto actually be recovered?
Recovery is possible but not guaranteed. The realistic path depends on three things: how quickly the theft is detected, whether the funds have reached a regulated custodian or exchange that can be compelled to act, and whether the stablecoin issuer (Tether or Circle) will act on a formal legal request. Where funds are traced to a regulated exchange before withdrawal, a combination of court orders and issuer-level freeze requests has achieved preservation in cases we are familiar with. Speed is the controlling variable.
How fast must I act after a digital-asset theft?
Within hours. The recovery window is short because stablecoins can be bridged, swapped or withdrawn to unhosted wallets within minutes of a theft. The immediate priorities are: extract every transaction hash, engage forensic tracing counsel, brief legal counsel, and report to law enforcement to obtain a case reference. The case reference supports an issuer-level freeze request. Every hour of delay narrows the window further and complicates the tracing exercise.
Can a court freeze assets held on an exchange?
Yes, where the exchange has a legal presence that can be served with process or where it operates under a regulatory regime that imposes cooperative obligations. In the EU, exchanges authorised under MiCA or national AML regimes are the most accessible targets for a court-ordered hold. Outside the EU, enforcement requires either recognition proceedings in the exchange's home jurisdiction or a parallel application in a forum with direct jurisdiction. A freezing order binds the exchange as a third party to hold the balance pending resolution of the underlying claim.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We move for freezing relief and exchange disclosure while the trail is live, working alongside forensic partners to convert on-chain evidence into court-ready applications. To discuss your situation, contact info@oboluslaw.com.
By Glen Sorensen, Disputes & Recovery Analyst – specialising in on-chain asset tracing, cross-border freezing orders and exchange disclosure applications for corporate claimants.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.