Recovery windows for misappropriated stablecoins (tokens pegged to a fiat currency such as the US dollar or euro) are measured in hours, not weeks. A business that discovers a theft on Monday morning must have its counsel moving by Monday afternoon. In Switzerland, a civil freeze request sits at the intersection of Swiss private international law, FINMA oversight, and the contractual freeze authority held by the major stablecoin issuers — and getting the sequencing wrong forfeits the window entirely. This guide walks through each step, the legal basis for each action, and the cross-border reality that every inbound operator must understand before the clock starts.
What a Stablecoin Freeze Request Actually Means in Switzerland
A stablecoin freeze request in Switzerland is not a single instrument — it is a coordinated sequence of at least three parallel actions: an issuer-level freeze, an exchange-level disclosure and hold, and a Swiss civil precautionary measure. Each track has its own threshold, its own decision-maker, and its own clock. FINMA (the Swiss Financial Market Supervisory Authority) does not itself hold a direct operational freeze lever over a foreign-issued stablecoin; rather, the domestic civil courts and the issuer's own compliance infrastructure carry the operative authority. Understanding that distinction is the first step toward a successful recovery strategy.
Swiss contract and tort law provides the substantive basis for a proprietary claim over misappropriated digital assets. Swiss courts have increasingly accepted that tokens can be the subject of civil proceedings — a position that aligns with the direction taken by common-law forums and reflects Switzerland's status as a leading digital-asset hub. The applicable regime is Switzerland's Code of Obligations and the relevant provisions of the Swiss Civil Procedure Code, which together provide the precautionary-measures toolkit that counsel uses to freeze assets before a full merits hearing.
For operators running a business in or through Switzerland — a FINMA-regulated entity, an AIFC or ADGM-facing structure with Swiss banking, or a fund domiciled in a Swiss canton — the analysis has a domestic dimension and a cross-border dimension simultaneously. Both must be worked in parallel.
The two dominant stablecoin issuers — Tether (USDT) and Circle (USDC) — hold contractual blacklist authority over their tokens at the smart-contract level. They generally act on a law-enforcement designation, an OFAC listing, or a court order from a recognised forum. Moving through Swiss civil courts to obtain an order recognisable to these issuers is therefore a core tactical objective, not a background formality.
Step 1: On-Chain Tracing Before Anything Else
Effective on-chain tracing is the foundation on which every subsequent legal step depends — without it, there is no addressable target for a freeze application. The moment a theft or misappropriation is identified, the business should commission a professional forensic trace of the transaction hashes. In our cross-border practice, we co-ordinate that engagement simultaneously with initial legal advice, because the two workstreams feed each other.
A professional forensic report from a recognised blockchain analytics provider does several things at once. It identifies the destination addresses. It maps any intermediate hops through mixers, bridges or intermediate exchanges. It produces a time-stamped audit trail that is legible to a Swiss civil court and to the compliance teams at a stablecoin issuer. Forensic partners operating in this space — Chainalysis, TRM Labs, Elliptic and Asset Reality are among the established names — produce reports that translate raw blockchain data into court-ready evidence.
The common mistake at this step is waiting. Operators sometimes spend two or three days assembling internal documentation before instructing forensic counsel. By then, funds have moved through a second or third exchange, the on-chain trail has lengthened, and a previously reachable address on a co-operating platform has been emptied. The evidence must be captured while the chain of custody is short.
Cross-border note: if the receiving exchange is registered under the MAS regime in Singapore, or is a VASP licensed under the SFC regime in Hong Kong, the disclosure pathway runs through those regulators' frameworks as well as through Swiss process. Knowing where the exchange sits determines which disclosure instrument to deploy alongside the Swiss application.
Preserve all transaction hashes, wallet addresses, and exchange identifiers in a dated record immediately — this is the evidence package that will be attached to every subsequent legal filing.
For a scoped assessment of your tracing and freeze options, contact OBOLUS at info@oboluslaw.com. The process above describes the standard path. Your facts — the entity structure, the user base, and the exchange geography — change the analysis materially.
Step 2: The Issuer-Level Freeze Request
The fastest operational lever in any stablecoin recovery is a direct freeze request to the token issuer, because it does not require a court order to initiate — though a court order or law-enforcement reference materially accelerates the issuer's compliance team response. Circle (USDC) and Tether (USDT) both maintain compliance channels for freeze requests, and both hold smart-contract-level authority to render tokens unspendable at a specific address.
To make a compelling issuer request, a business needs: the specific wallet address or addresses holding the funds; the forensic report establishing the misappropriation trail; a brief legal summary establishing the claimant's proprietary interest; and, where available, a law-enforcement case reference or a court order. In our practice, we submit issuer-freeze requests in tandem with civil court filings — not sequentially — because the issuer's compliance team acts faster when they see parallel legal process already in motion.
The common mistake at this step is sending an informal email with no legal support document. An issuer's compliance team is operationally driven and risk-averse. They will not act on an unsubstantiated demand. The submission should read like a legal brief, not a complaint letter.
A timing reality: issuers generally act on OFAC designations and law-enforcement referrals within hours. Commercial civil requests, even well-supported ones, typically take longer — sometimes days. That is why the Swiss civil precautionary track and the issuer track must run simultaneously, not sequentially.
Step 3: Swiss Civil Precautionary Measures — The Court Track
Swiss civil procedure provides for precautionary measures (Vorsorgliche Massnahmen) that a court may grant on an urgent ex parte basis where the applicant can demonstrate a credible proprietary claim and an urgent need to prevent irreversible harm. This is the Swiss civil court's analogue to a common-law worldwide freezing order (an injunction freezing a defendant's assets globally), though its territorial scope and enforcement mechanics differ.
The application must establish three elements: a prima facie proprietary right in the misappropriated tokens; the risk that the respondent will dissipate or move the assets without the order; and proportionality between the relief sought and the potential harm. Forensic evidence mapping the tokens to a specific address satisfies the first two elements in most cases where the chain of custody is short. Proportionality is addressed by scoping the order narrowly to the identified addresses and value.
Swiss civil courts sit in the relevant cantonal jurisdiction. For businesses with a Swiss banking relationship or a Swiss-registered entity, the jurisdictional basis is generally clear. For inbound businesses with no Swiss touchpoint, the analysis turns on where the respondent or the intermediary exchange has assets — a question that requires a conflicts-of-laws analysis under Swiss private international law before the application is filed.
The common mistake at this step is filing a bare application without forensic support. Swiss courts move with reasonable speed on precautionary applications, but they require substantive evidence of the claim. A thin application will be dismissed or adjourned, costing days the business cannot afford.
Cross-border note: a Swiss precautionary order may need to be recognised in another jurisdiction — England and Wales, Singapore, or Hong Kong — to reach an exchange or issuer located outside Switzerland. England and Wales remains the leading common-law forum for crypto asset recovery, and operators we advise frequently run parallel Swiss civil proceedings and English disclosure applications in the same matter to cover both the civil-law and common-law dimensions of a cross-border theft.
Step 4: Exchange Disclosure and Account Hold
Where the misappropriated stablecoins have moved onto a regulated exchange — a platform licensed under FINMA, under MiCA, under the MAS Payment Services Act, or the SFC VASP regime — a disclosure order directed at that exchange is the tool that converts blockchain evidence into actionable intelligence: the name, KYC documentation, and withdrawal-destination details of the account holder behind the receiving address.
In Switzerland, a formal legal request to a domestic exchange sits within the Swiss civil precautionary framework or the Swiss criminal complaint process. A criminal complaint (Strafanzeige) filed with the cantonal police or the cantonal public prosecutor triggers a separate investigative track, and the prosecutor may issue production orders to Swiss-regulated exchanges directly. In our cross-border practice, we assess whether the criminal track — which carries state-backed compulsion — is faster than the civil track for disclosure in a given matter. They are not mutually exclusive; running both is common in serious thefts.
For exchanges outside Switzerland, the disclosure instrument depends on the forum. An English Norwich Pharmacal order (a disclosure order requiring a third party who has become mixed up in wrongdoing to identify the wrongdoer) is the most commonly used tool for exchanges registered in the UK or in common-law offshore jurisdictions. Singapore and Hong Kong courts have their own analogues.
An anonymized micro-matter illustrates the sequencing in practice. In a recent matter involving a payments company, funds misappropriated in a structured withdrawal scheme were traced to accounts on two exchanges — one Swiss-regulated, one registered in a major Asian financial centre. We filed a Swiss precautionary application and a parallel disclosure request in the Asian forum simultaneously. The Swiss-regulated exchange responded to a legal hold request within the timeline set by the court; the Asian exchange responded to a local disclosure order. The combined documentation was used to support an issuer-level freeze request to Circle, which rendered the USDC balance at the destination address unspendable before the counter-party attempted a further withdrawal. The business recovered a substantial portion of the misappropriated balance.
If a prior application stalled or an exchange refused to engage, a second look can surface the structural reason and the route back. To discuss your situation, write to OBOLUS at info@oboluslaw.com.
Cross-Border Interaction: FINMA, Swiss Banking, and Inbound Structures
Switzerland's role as a digital-asset hub — the Zug "Crypto Valley" ecosystem, FINMA's token taxonomy guidance, and the presence of Swiss-regulated custody and exchange operations — means that many cross-border recovery matters have a Swiss dimension even when the claimant is domiciled elsewhere. Understanding how FINMA oversight interacts with a civil freeze request is essential for any inbound business.
FINMA supervises licensed Swiss entities — exchanges, custodians, and fintech-licensed operators — and those entities carry AML obligations under the applicable Swiss provisions. A Swiss-regulated exchange receiving a court-ordered hold or a law-enforcement production order is legally compelled to comply. An exchange that ignores a valid Swiss court order faces regulatory consequences from FINMA in addition to civil contempt exposure. That combination of civil and regulatory pressure is a meaningful enforcement lever that counsel can deploy.
For businesses with a Swiss banking relationship — a scenario common among crypto funds and token issuers who use Swiss private banks for treasury management — a civil freeze order can also attach to Swiss bank accounts holding fiat proceeds of a crypto theft. Swiss banks are among the most AML-disciplined institutions in the world, and they respond to properly constituted court orders with predictable compliance timelines.
Tax dimension: a successful recovery of misappropriated funds does not automatically resolve the tax position in the jurisdiction where the claimant is established. Operators should confirm with their tax advisers — in Switzerland and in their home jurisdiction — whether a recovery receipt triggers income recognition, how losses from the theft were previously treated, and whether the VAT or GST treatment of the misappropriated asset is affected by the recovery. This is a post-recovery hygiene step that businesses frequently overlook.
A common assumption is that once funds have left Switzerland — or if the theft occurred in another jurisdiction — Swiss law cannot assist. That is not accurate. Swiss private international law has well-developed rules for claims with a foreign element, Swiss courts can grant precautionary relief in support of foreign proceedings in appropriate circumstances, and the CFAAR (Crypto Fraud and Asset Recovery) network, launched in London in September 2021, provides a practitioner-level coordination mechanism across multiple forums including Switzerland, England and Wales, Singapore, and Hong Kong. The multi-forum reality is an asset, not a barrier, if counsel operates across all of them.
Decision Point: Which Track Should Move First?
The sequencing decision — which of the three tracks (issuer, civil court, criminal complaint) moves first — depends on the specific facts and should be made by counsel within the first two to four hours of receiving instructions. The following profiles illustrate the most common configurations.
Profile A — funds sit at an identifiable address on a regulated exchange, stablecoin is USDC or USDT, theft occurred within the last 24 hours: the issuer freeze request and the exchange legal hold move simultaneously, with the civil precautionary application filed within 24 to 48 hours as supporting process. Criminal complaint is filed in parallel to add compulsion to the exchange disclosure request.
Profile B — funds have passed through a mixer or bridge, destination address is on an unregulated or offshore platform, elapsed time is more than 48 hours: the forensic trace is the immediate priority; the civil court application may be premature without a clear addressable target. Counsel maps the available disclosure routes — English Norwich Pharmacal, Singapore or Hong Kong courts, CFAAR network — before committing to a primary forum. The issuer freeze may still be viable if the final resting address can be identified.
Profile C — the theft was perpetrated by an insider, the funds are in a Swiss-registered entity's treasury, and the amount is material: the civil and criminal tracks move simultaneously in Switzerland; asset-tracing is complemented by a Swiss civil attachment (Arrest) over the insider's Swiss assets. This is the scenario where the domestic Swiss toolkit is most fully deployed.
In every profile, the irreversible mistake is waiting for internal sign-off before instructing counsel. Recovery rates fall sharply with every 24-hour delay after misappropriation. The decision to act should be made at the first credible indication of theft — not after the internal audit is complete.
Self-Assessment: Is Your Business Ready to Move Quickly?
Before a theft occurs, operators can reduce recovery time substantially by having the following in place. The absence of any of these items adds hours to the critical first phase.
- A current forensic-partner relationship, or a retainer under which a forensic team can be activated within hours.
- An identified legal counsel who can file precautionary applications in Switzerland and, if needed, in at least one common-law forum (England and Wales, Singapore, or Hong Kong).
- Complete transaction records and wallet-address registers, maintained in real time and accessible to counsel immediately on instruction.
- A documented incident-response protocol that specifies who authorises counsel instruction and at what financial threshold.
- Awareness of which exchanges and custodians hold the business's assets, their regulatory jurisdiction, and the applicable disclosure-request pathway for each.
Operators we advise regularly conduct a pre-incident preparedness review — a short-scope exercise that maps the exposure, identifies the legal toolkit available for each asset class held, and confirms the incident-response chain. It takes a fraction of the time that a reactive first-24-hours scramble costs.
Related at OBOLUS
- Disputes and asset recovery for digital-asset businesses – our full disputes practice for exchanges, funds, and token issuers
- On-chain asset tracing in the British Virgin Islands – disclosure and tracing through the BVI FSC framework
- De-risking and account closure defence in Switzerland – protecting your Swiss banking relationship under FINMA oversight
FAQ
Can stolen crypto actually be recovered?
Yes — recovery is possible, but it is time-sensitive and fact-dependent. The principal tools are issuer-level freezes (available for USDT and USDC where the token sits at an identifiable address), civil precautionary orders through a competent court, and exchange-disclosure instruments that identify the account holder behind a receiving address. Success rates fall with every hour of delay. Acting within the first 24 hours gives counsel the widest range of options and the highest probability of reaching the funds before they are moved again.
How fast must I act after a digital-asset theft?
Immediately. Recovery windows are measured in hours. Funds moved to an exchange can be withdrawn, converted, or bridged to an unregulated platform within a single business day. The first priority is preserving the on-chain evidence — transaction hashes, addresses, timestamps — and instructing counsel and a forensic partner simultaneously. A 48-hour delay does not close every door, but it materially narrows the options, particularly for issuer-level freeze requests, which are most effective when the funds are still stationary at an identified address.
Can a court freeze assets held on an exchange?
Yes. In Switzerland, a civil precautionary measure can attach to digital-asset balances held at a Swiss-regulated exchange. For exchanges outside Switzerland, the applicable instrument depends on the forum — an English worldwide freezing order or Norwich Pharmacal disclosure order, a Singapore proprietary injunction, or an equivalent in Hong Kong. Running parallel proceedings across forums is common in cross-border matters. A Swiss-regulated exchange that holds a defendant's assets and receives a valid court order is legally obliged to comply; non-compliance carries both civil contempt and FINMA regulatory exposure.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We move for freezing relief and exchange disclosure while the trail is live — working alongside forensic partners to convert on-chain evidence into court-ready disclosure applications. To discuss your situation, contact info@oboluslaw.com.
By Glen Sorensen, Disputes & Recovery Analyst — specialising in cross-border stablecoin recovery, civil precautionary proceedings in Switzerland, and multi-forum disclosure strategy for digital-asset businesses.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.