Recovery windows for misappropriated stablecoins are measured in hours. A stablecoin freeze request in Turkey – the formal process by which a defrauded business asks a court or law-enforcement authority to compel a token issuer or an exchange to freeze compromised digital assets – must be initiated before the funds move off-platform, are bridged to a privacy protocol, or are liquidated into fiat currency. Under Turkey's evolving crypto law regime, which now sits primarily under the Capital Markets Board's supervision, the procedural path is more structured than many operators assume. This guide sets out every step, identifies the key decision points, and addresses the cross-border complications that arise when assets touch both Turkish and offshore platforms.
Why Speed Is the Only Strategy
The first practical truth about on-chain tracing and freezing orders in Turkey is that the window between theft and irreversibility is short – typically a matter of hours on liquid stablecoin pairs. Once misappropriated funds clear a centralised exchange and reach a self-custody wallet, the legal instruments that compel co-operation from regulated intermediaries become significantly harder to apply. The registered entity is gone; only forensic breadcrumbs remain.
Turkey's crypto fraud recovery process operates on two parallel tracks. The criminal track – filing a complaint with the Public Prosecutor's Office – moves at the speed of the prosecution system, which is not fast enough to freeze funds before they vanish. The civil track, coupled with urgent precautionary measures under Turkey's Code of Civil Procedure, is the instrument that can actually stop a transfer in progress. Understanding the difference is the first step in building a viable recovery strategy.
In our cross-border practice, we have seen businesses lose the opportunity to recover funds not because the legal tools were unavailable, but because they waited for internal approvals before contacting counsel. The cost of delay is permanent in these matters.
The process above describes the standard path. Your facts – the entity, the user base, the banking – change the analysis. For a scoped assessment of your situation, contact OBOLUS at info@oboluslaw.com or map your options here.
The Regulated Basis for a Freeze in Turkey
Turkey's Capital Markets Board (CMB, also known by its Turkish acronym SPK) is the primary regulator for crypto asset service providers under the regulatory amendments to the Capital Markets Law that brought crypto assets within the supervisory perimeter. The CMB licensing regime requires platforms serving Turkish users to register and maintain operational standards, which means that licensed Turkish crypto exchanges are now legally addressable through formal channels.
There are two distinct legal bases for compelling an asset freeze or a disclosure order in Turkey. First, a court-issued precautionary injunction (ihtiyati tedbir) – an interim measure under civil procedural law that can freeze an account or block a transfer before a merits judgment is rendered. Second, a prosecution-backed asset-seizure order under the Criminal Procedure Code, where the Public Prosecutor applies directly to the investigating judge. Both instruments exist; the civil precautionary route is generally faster at the initial stage because it does not require an active criminal investigation to have been formally opened.
The CMB's supervisory reach over licensed platforms is the critical lever. A registered Turkish exchange is bound by its licence conditions, which include co-operation with judicial and regulatory authorities. That co-operation obligation is what makes a court-issued precautionary measure operative in practice, not merely theoretical.
For transfers that have already moved to offshore platforms, the Turkish domestic route alone is insufficient. A parallel approach using the issuer-level freeze authority held by Tether (USDT) and Circle (USDC) – both of which hold contract-level blacklist authority over their issued tokens – becomes essential. Those issuers generally act on law-enforcement direction or a court order from a recognised forum.
Step 1: Preserve the Evidence Before Anything Else
Before filing any document, a business in a recovery situation must capture and preserve every piece of evidence in a format that a Turkish court will accept. This step is non-negotiable. Courts issuing precautionary measures require a credible evidentiary foundation at the point of application, not weeks later.
The minimum evidentiary package consists of: the originating transaction hashes for every transfer in the chain; wallet address records with timestamps; exchange deposit confirmations if the funds landed on a centralised platform; and a professional forensic blockchain report. That report – produced by a qualified on-chain tracing firm using recognised methodology – is the document that bridges the gap between raw blockchain data and a legal narrative the court can follow.
A common mistake at this stage is relying on self-produced screenshots. Turkish courts, like courts in most leading jurisdictions, give greater weight to independently verified forensic evidence. The report should trace the movement of assets from the point of misappropriation through each subsequent wallet, identify the final resting address or exchange deposit, and quantify the balance with precision. If the assets are USDT or USDC, the report should confirm the token contract address and the issuer's freeze capability for that specific contract.
Step 2: How Do You File a Precautionary Injunction in Turkey?
A precautionary injunction application in Turkey is made to the competent civil court – generally the Commercial Court of First Instance in the jurisdiction where the defendant or the platform operates, or where the harm occurred. The application must be accompanied by the evidentiary package, a statement of the legal basis, and in most cases a security deposit to protect the respondent against unjustified freezing.
The application is filed on an ex parte basis – meaning without prior notice to the other side – when prior notice would defeat the purpose of the measure. The court reviews the application, typically within a matter of days at the urgent docket, and issues a decision either granting or refusing the interim relief. A granted injunction is then served on the relevant exchange or custodian, which is legally obliged to comply.
In parallel with the civil filing, we regularly advise clients to file a formal criminal complaint with the Public Prosecutor's Office. The criminal and civil tracks reinforce each other: a prosecution investigation can compel exchange records through official channels, while the civil precautionary measure provides the immediate freeze mechanism. The two tracks should not be treated as alternatives.
One practical note on timing: the security deposit requirement can slow the process if the claimant needs to arrange funds. Calculating the deposit correctly and having it ready before filing avoids a day or more of unnecessary delay. This is a procedural point that experienced counsel handles as a matter of course, but it surprises businesses that approach the process without local legal support.
Step 3: What Happens When Assets Have Moved Offshore?
When misappropriated stablecoins have already moved from a Turkish exchange to an offshore platform or self-custody wallet, the purely domestic approach becomes insufficient. Recovery then requires a multi-forum strategy that activates mechanisms beyond the Turkish courts' immediate reach.
The first instrument to consider is an issuer-level freeze. Both Tether and Circle maintain blacklist authority over USDT and USDC respectively. They generally act on law-enforcement direction or a court order from a recognised common-law forum. This is where allied counsel in England and Wales, Singapore, or Hong Kong becomes relevant. A worldwide freezing order (an injunction freezing a defendant's assets globally) obtained in England and Wales can support an application to a stablecoin issuer. Similarly, a proprietary injunction in Singapore has been used in comparable matters involving digital assets held on offshore platforms.
The CFAAR (Crypto Fraud and Asset Recovery) network – launched in London in September 2021 – connects law-enforcement agencies, exchanges and legal practitioners to co-ordinate cross-border recovery responses. Engagement with CFAAR-connected practitioners in the relevant offshore hub accelerates the disclosure and freeze process at platforms that have not received a direct Turkish court order.
In our cross-border practice, the pattern we see most often is a Turkish entity that is defrauded by a counterparty routing funds through a Turkish platform and then immediately bridging to an offshore exchange. The viable recovery path in that scenario runs through both Turkish civil courts and one or more offshore forums simultaneously. Sequential filing – Turkey first, offshore second – almost always misses the window.
If a recovery clock is running, reach our disputes desk now at info@oboluslaw.com. We move for freezing relief and exchange disclosure while the trail is live. Map your options here.
Step 4: Exchange Disclosure Orders and KYC Data
Identifying the beneficial owner behind a wallet address is essential if asset freezing is not immediately available and the recovery strategy must shift to pursuing the wrongdoer directly. In Turkey, the mechanism for compelling a regulated exchange to disclose customer identity data is a court order – either a precautionary evidence order or a discovery order issued in the course of the civil proceedings.
Under the CMB regime, licensed Turkish platforms must maintain KYC records for their account holders. Those records – including identity documents, address data, and account transaction history – are accessible through a properly issued court order. The practical challenge is that the wrongdoer may have used a foreign platform for the deposit. A Turkish court order does not run directly against an entity incorporated and operating outside Turkey.
For offshore exchange disclosure, the relevant instruments are those available in the exchange's home jurisdiction. A Norwich Pharmacal order (a disclosure order compelling a third party who facilitated wrongdoing to reveal the wrongdoer's identity) has been used extensively in England and Wales against exchanges with UK-based operations or UK-accessible platforms. Hong Kong and Singapore courts have issued equivalent orders in comparable circumstances. The forensic report identifying the exchange deposit address is the foundation for each of these applications.
A micro-matter from our practice illustrates the combined approach: in a recent recovery engagement, a Turkish technology business discovered that a series of USDT transfers had been routed by a fraudulent counterparty from a licensed Turkish platform to an offshore exchange. We secured a precautionary injunction before the Turkish platform in the first instance, which preserved a portion of the balance. For the offshore tranche, we co-ordinated with allied counsel to obtain a disclosure order in a leading common-law forum, identifying the account holder within days. The matter resolved before a merits hearing on terms that returned a substantial portion of the affected balance to the client. No specific figures are disclosed by agreement.
Decision Matrix: Which Profile Takes Which Route?
Not every recovery situation follows the same path. The right combination of instruments depends on where the assets currently sit, who the counterparty is, and how much time has elapsed since the misappropriation.
Profile A – funds still on a licensed Turkish exchange: Civil precautionary injunction filed immediately in the Commercial Court of First Instance, with parallel criminal complaint. Timeline to initial court decision is typically a matter of days at the urgent docket. Key risk: delay in assembling the evidentiary package, particularly the forensic report.
Profile B – funds moved to an offshore centralised exchange: Turkish domestic filing for evidence preservation, simultaneous engagement with allied counsel in the offshore exchange's jurisdiction for a disclosure order or freezing application. For USDT or USDC, issuer-level freeze request supported by law-enforcement or court documentation. Timeline is measured in days to weeks across both fronts. Key risk: the offshore exchange processes withdrawals faster than the legal filings can be served.
Profile C – funds moved to a self-custody wallet, no clear exchange deposit identified: Forensic investigation continues to map the wallet cluster. If funds reach a regulated exchange at any future point, a pre-prepared injunction application is filed immediately. KYC disclosure in the likely destination jurisdictions is pursued in parallel. This path is the longest and least certain; the value of sustained forensic monitoring is that it preserves the option to act when the counterparty eventually liquidates.
The Cross-Border Tax and Banking Interaction
A recovery proceeding rarely exists in isolation from the broader tax and banking position of the business pursuing it. Turkish businesses that hold digital assets on their balance sheet face classification and reporting questions under Turkish tax law that can be implicated by a recovery: when a frozen asset is released back to the owner, is that a taxable receipt? If the asset was a liability-side holding – an exchange operator's customer float – the accounting and tax treatment differs again.
Turkey's tax framework for crypto assets has been developing alongside the regulatory regime. The general principle is that gains on the disposal of crypto assets are subject to income or corporate tax treatment depending on the entity type and the nature of the holding, but specific thresholds and rates are set by legislation that should be confirmed against current rules before any position is taken. We work alongside Turkish tax counsel on the interaction between a recovery outcome and the tax position, ensuring that the recovery strategy does not inadvertently crystallise an unexpected liability.
On the banking side, Turkish financial institutions have faced restrictions on facilitating crypto-related payment services. This has practical consequences for inbound businesses: a foreign entity pursuing a recovery through Turkish courts will need a local account or a local correspondent relationship to handle any security deposit requirement. Planning that banking element early – before the court filing – avoids a procedural interruption at the worst possible moment.
Common Assumptions That Cost Businesses Their Recovery
A common assumption is that once funds leave the originating wallet, nothing can be done. That belief is wrong, and acting on it is how recoveries that were viable at hour one become impossible by week two.
The accurate picture is more nuanced. Recovery is harder once funds have moved. But it is not impossible. The relevant question is not whether the funds have moved – they almost always have – but whether they have moved to a point where no regulated intermediary can be compelled to act. That point is further along the chain than most people assume, and it is reached only when the assets sit in a self-custody wallet that has had no interaction with a regulated platform since the theft.
A second assumption is that the criminal complaint is the right first move. It is a necessary move – not making it can prejudice later civil proceedings – but it is not the instrument that freezes assets. The criminal process is slower by design. The civil precautionary injunction is the mechanism with the speed profile that matches the recovery window. Both should be filed, but in the right sequence and without one delaying the other.
A third assumption is that this is a domestic matter. In our experience, almost every significant stablecoin misappropriation in Turkey has a cross-border element within hours. The counterparty routes funds offshore deliberately. A recovery strategy that does not account for the offshore leg from day one will find itself filing the correct papers in the wrong forum.
Related at OBOLUS
- Disputes & Asset Recovery for Digital-Asset Businesses – the full scope of our on-chain recovery and litigation practice across major forums.
- On-Chain Asset Tracing in Ireland – how Irish courts and EU disclosure tools support cross-border crypto recovery.
- Digital Asset Custody Authorisation in Singapore – Singapore's MAS licensing regime for custody and the role of Singapore courts in asset freezing.
FAQ
Can stolen crypto actually be recovered?
Recovery is possible but time-critical. The legal tools – precautionary injunctions, issuer-level token freezes, exchange disclosure orders, and cross-border freezing orders – work best when initiated within hours of the misappropriation. The key variable is whether misappropriated assets still sit with a regulated intermediary that is legally addressable. Forensic tracing identifies that position quickly, and counsel can then move for relief before the funds are moved beyond reach. Recovery is not guaranteed, but early action materially improves the outcome.
How fast must I act after a digital-asset theft?
The honest answer is: immediately. Token issuers such as Tether and Circle can freeze specific addresses on a contract level, but they generally require law-enforcement direction or a court order, and they act faster when the request arrives while the funds are still traceable to a recent misappropriation. Exchange platforms process withdrawals continuously. Every hour of delay shrinks the addressable pool of assets. Engaging legal counsel and a forensic tracing firm within the first hours – not the first days – is the standard that viable recovery cases share.
Can a court freeze assets held on an exchange?
Yes. A Turkish Commercial Court can issue a precautionary injunction directed at a licensed Turkish exchange, compelling the platform to freeze a specified account or block identified transactions pending the merits of the dispute. For offshore exchanges, the equivalent relief must be sought in the exchange's home jurisdiction – England and Wales, Singapore, Hong Kong, and the Cayman Islands are the most operationally relevant forums. In our practice, we co-ordinate both Turkish domestic proceedings and offshore applications in parallel where the asset trail crosses borders.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. Operators we advise routinely face situations where a misappropriation in one jurisdiction requires immediate parallel action in two or three others; we move for freezing relief and exchange disclosure while the trail is live. To discuss your situation, contact info@oboluslaw.com or message us at t.me/oboluslaw.
By Glen Sorensen, Disputes & Recovery Analyst – specialising in cross-border stablecoin recovery, precautionary injunctions and exchange disclosure proceedings across common-law and civil-law forums.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.