Exchange Disclosure Order from a Cross-border Perspective

A business discovers that digital assets have been misappropriated and the trail leads to one or more centralized exchanges. The wallet addresses are known. The problem is that the exchange will not disclose account-holder identity without a legal order, and every hour that passes increases the risk of withdrawal, conversion and permanent loss. An exchange disclosure order (a court order compelling a virtual-asset exchange to reveal account-holder identity and transaction data) is the primary legal instrument for breaking that impasse. This page explains how those orders work, where to obtain them, and why the cross-border dimension changes the analysis materially.

Recovery windows for misappropriated digital assets are measured in hours, not weeks. The moment funds reach an exchange, they can be liquidated, bridged or withdrawn to a non-custodial wallet. Acting before that happens requires simultaneous legal action across multiple forums – and that coordination is the core challenge in any cross-border disclosure matter.

The Legal Basis for Exchange Disclosure Orders

Exchange disclosure orders derive from two well-established common-law instruments, applied to digital-asset fact patterns with increasing sophistication. The first is the Norwich Pharmacal order (an order compelling a third party who is innocently mixed up in wrongdoing to disclose information). The second is the Bankers Trust order (a disclosure order targeted specifically at financial institutions holding assets or records connected to a fraud). Courts in England and Wales have extended both instruments to crypto exchanges on the basis – confirmed in landmark decisions including AA v Persons Unknown [2019] – that digital assets constitute property capable of being the subject of injunctive and proprietary relief.

The practical effect is significant. A petitioner with sufficient transaction evidence can obtain, within days in urgent cases, an order compelling an exchange to disclose the name, address, contact information and full transaction history of an account linked to the misappropriated funds. That disclosure then feeds the next stage: a worldwide freezing order (an injunction that immobilizes a defendant's assets globally, including digital assets on multiple platforms).

The DIFC Courts in Dubai have developed their own disclosure and freezing jurisprudence, issuing worldwide freezing orders in support of both domestic and foreign proceedings. Singapore and Hong Kong courts have similarly granted proprietary injunctions and disclosure orders over digital assets. Each forum has distinct procedural requirements, urgency thresholds and enforcement reach. Selecting the right opening forum is rarely obvious from the face of the facts.

Why the Cross-border Dimension Changes Everything

Exchange disclosure orders are not self-executing across borders. An order granted by an English court binds entities within the jurisdiction of England and Wales – which covers English-registered companies and, in practice, many exchanges that maintain UK operations or serve UK customers. An exchange incorporated in the BVI, operating servers in Singapore, and serving users globally through a Malta entity sits in a different position entirely. A single-forum application may produce perfect disclosure from one exchange while leaving a parallel account untouched.

In our cross-border practice, the question we resolve first is which forum has the strongest anchor to each exchange in the asset trail. That analysis turns on where the exchange is incorporated, where it is licensed, where it holds banking relationships and – critically – which regime it is most sensitive to from a regulatory standpoint. An exchange supervised by MAS in Singapore will respond to a Singapore High Court order. An exchange operating under a VARA licence in Dubai is properly addressed through UAE proceedings. An exchange registered with the FCA under the Money Laundering Regulations has strong reasons to comply promptly with an English disclosure order.

Parallel applications – co-ordinated filings in two or more forums simultaneously – are sometimes necessary. They are expensive. They require aligned counsel in each forum and a sequenced strategy to avoid conflicting interim orders. The decision to run parallel versus sequential applications depends on the geography of the funds, the speed of the trail and the available evidence. We have seen applicants file in the wrong forum first, obtain an order that the exchange cannot comply with across its internal compliance structure, and lose two to three critical weeks re-filing. Sequencing matters as much as speed.

CTA #1 — The process above describes the standard path. Your facts – the entity, the exchange's domicile, the trail geography – change the analysis entirely. Map your options with OBOLUS now.

On-chain Tracing as the Foundation

An exchange disclosure application that arrives at court without a professional forensic trace report rarely succeeds. Courts require the applicant to demonstrate a credible link between the wrongdoing and the specific exchange account. That requires on-chain tracing – the process of following transaction hashes through the blockchain to identify destination addresses – combined with exchange identification, which maps those addresses to custodied accounts at named platforms.

The major forensic tools used in this work – platforms like Chainalysis, TRM Labs and Elliptic – can attribute wallet addresses to exchange clusters with reasonable confidence. That output, when presented by a qualified expert in a court-ready report, gives the application its evidentiary backbone. Without it, the court has no basis for the order and the exchange has no basis for compliance.

Speed matters here too. A professional trace report can, in urgent matters, be turned around in under 48 hours if the transaction data is clean and the path is not heavily mixed or bridged. Mixer usage and cross-chain bridging complicate the trace and extend that window. The first task on instruction is to assess whether the trail is sufficiently visible to support an emergency application, or whether additional investigative work is needed before any court filing.

Where assets have been converted through a decentralized exchange (DEX – a protocol that facilitates peer-to-peer token swaps without a custodian) before reaching a centralized exchange, the disclosure application still targets the centralized exchange at the end of that chain. The DEX leg does not break the legal link; it complicates the evidentiary one.

What Does the Application Process Look Like?

An exchange disclosure application in the English courts follows a well-defined sequence, though the timelines are compressed sharply where urgency is established. The applicant files without notice to the exchange – the ex parte route – where there is a real risk of asset dissipation or evidence destruction if the exchange is alerted in advance.

The evidence bundle for an ex parte application typically includes: a witness statement setting out the facts of the misappropriation; the forensic trace report; evidence identifying the exchange and its connection to the forum; and a draft order. The court will scrutinize the applicant's candor – full and frank disclosure of all material facts, including any that might weigh against the application, is a non-negotiable obligation. Failure here is the single most common reason otherwise solid applications fail or are subsequently discharged.

If the court is satisfied, it grants the order, usually with an undertaking in damages from the applicant. The exchange then has a defined period in which to comply – producing the account-holder data and the transaction records specified in the order. Service on the exchange, including on non-English exchanges where the English court has asserted jurisdiction, requires careful attention to the methods of service prescribed or accepted by the relevant forum and entity.

Post-disclosure, the case typically moves toward a freezing order against the identified defendant, combined with a substantive claim for recovery. That stage is a separate proceeding, though in urgent cases it can be applied for simultaneously with the disclosure order, on a conditional or rolled-up basis.

In the DIFC Courts, the structure is comparable but the procedural rules differ. The DIFC Courts have demonstrated willingness to issue worldwide freezing orders in support of foreign arbitral proceedings and foreign court judgments. For operators whose disputes involve UAE-nexus exchanges or UAE-domiciled counterparties, the DIFC Courts offer a sophisticated, English-language common-law forum with strong enforcement reach across the region.

The Stablecoin Issuer Dimension

Where misappropriated assets have been converted to or remain as stablecoins, a parallel route opens alongside the exchange disclosure process. Tether (USDT) and Circle (USDC) hold contract-level authority to freeze specific token balances on-chain – effectively immobilizing the assets without needing to recover them from the exchange first. Both issuers generally act on a law-enforcement request, a court order or an OFAC designation.

The significance of this is that a stablecoin freeze can be obtained faster than a court order in some circumstances, particularly where law-enforcement engagement is swift. In others, the court order precedes and supports the freeze request. The two tracks – judicial and issuer-level – are not mutually exclusive. In our practice, we assess both in parallel at the outset of every stablecoin recovery matter.

The practical requirement for an issuer-level freeze is a law-enforcement case reference, transaction hashes, and a professional report. The threshold applied by issuers varies and is not publicly codified. Acting before funds move off-chain or into a non-freezable token class is the controlling variable.

Common Mistakes That Cost Recovery Opportunities

The most damaging errors in exchange disclosure matters are not legal. They are timing and sequencing errors made before a lawyer is engaged. We regularly see businesses that delayed instruction while internally investigating, used informal routes – contacting the exchange's support desk – or attempted to file a disclosure application without forensic evidence. Each of those paths costs days or weeks. In a matter where the funds are still on the exchange, that delay can be terminal.

A second class of errors is jurisdictional overreach: filing in a forum with no clear anchor to the exchange, on the assumption that any common-law court will do. Courts are increasingly alert to forum shopping in crypto matters. An application filed in an inconvenient forum with a tenuous jurisdictional basis may be dismissed, or may produce an order that the exchange's compliance team cannot legally act on. The disclosure must actually arrive in a form the exchange can and will comply with.

A third error – specific to cross-border matters – is failing to preserve evidence on multiple chains simultaneously. If an applicant focuses all early effort on the primary exchange while funds move to a secondary platform in a different jurisdiction, the disclosure obtained from the first exchange may become the only record of a trail that has already moved beyond it. Comprehensive chain-of-custody preservation, across all visible endpoints, is a day-one task.

Finally, applicants sometimes underestimate the cost and candor obligations of the ex parte route. An applicant who presents a selective picture to obtain the order and then faces a return hearing where the exchange or the defendant challenges the order will find the court's response severe. Full disclosure of weaknesses in the application is not optional – it is the price of the ex parte procedure.

CTA #2 — If a prior application stalled, an exchange refused to comply, or a trail has gone quiet, a second-look analysis can identify the structural gap. Reach our disputes desk at OBOLUS.

Decision Matrix: Which Forum for Which Fact Pattern?

Profile A: the relevant exchange is licensed in the UK or has a material UK nexus. The applicant's loss is denominated in a currency or asset class with English-law property rights established. The primary forum is England and Wales. A Norwich Pharmacal or Bankers Trust application, supported by a forensic trace, is the standard route. Timeline from instruction to order: a matter of days in urgent ex parte applications, longer where notice is required.

Profile B: the exchange is VARA-supervised in Dubai or the counterparty is UAE-based. The applicant or the assets have a UAE connection. The DIFC Courts offer an effective common-law forum with worldwide freezing order capability and cross-border enforcement experience in the region. Allied counsel in the relevant jurisdiction coordinates the local filing. Timeline is comparable to the English route for urgent applications.

Profile C: the exchange is MAS-supervised in Singapore or the primary asset trail terminates in a Singapore-domiciled account. Singapore courts have granted proprietary injunctions over digital assets and the High Court has demonstrated familiarity with crypto evidence. The applicable procedural rules differ from the English route. Allied counsel in Singapore handles the local application with OBOLUS coordinating the global strategy.

Profile D: the trail involves multiple exchanges across two or more jurisdictions simultaneously, with funds moving in real time. This profile requires a parallel-application strategy. The lead forum is selected on the basis of which exchange holds the largest balance and which court can act fastest. Simultaneous filings in a second forum are sequenced to avoid conflicting orders. This is the most resource-intensive approach and requires close coordination from the first instruction.

Profile E: assets remain as stablecoins (USDT or USDC) and the issuer freeze route is available alongside the court process. Both tracks are initiated simultaneously. Law-enforcement notification is made at the earliest possible stage to support the issuer-level request. The court process provides the judicial backing that strengthens the issuer's compliance obligation.

How This Works in Practice

In a recent cross-border recovery matter, a payments company discovered a substantial misappropriation of stablecoins routed through two centralized exchanges – one UK-nexus, one Asia-Pacific. We initiated the English court process while co-ordinating on-chain forensic work in parallel. Within 72 hours of instruction, we had a court order compelling disclosure from the first exchange and had simultaneously notified the relevant stablecoin issuer with a law-enforcement case reference in support of a contract-level freeze. The second exchange required a separate application in an allied forum, filed within five days. The funds were frozen before the defendant completed withdrawal. No recovery outcome can be guaranteed; this describes our process and the tools available when instruction is immediate.

Addressing the Core Misconception

A common assumption is that once digital assets leave a wallet and reach an exchange, recovery is functionally impossible – that the pseudonymous nature of blockchain addresses, the speed of conversion and the cross-border fragmentation of exchanges place stolen crypto beyond legal reach. That assumption is wrong, and it is increasingly wrong as courts in England and Wales, Singapore, Hong Kong and the DIFC Courts develop a coherent body of digital-asset property law.

The reality is more precise: recovery is possible when instruction is immediate, the trail is visible on-chain, the exchange has a legal anchor to an effective forum, and the applicant presents a well-constructed evidence bundle. Each of those conditions is manageable. None of them is available indefinitely. The window is measured in hours to days, not weeks.

What the law cannot do is retroactively extend that window. An applicant who waits three weeks to engage counsel, in the hope that internal investigation will resolve the matter, typically finds that the funds have moved through the exchange and into a non-custodied wallet, the exchange has purged the account under its own data-retention schedule, or the trail has dispersed across enough intermediate addresses to make forensic attribution speculative. Speed and legal readiness are not ancillary to the recovery strategy. They are the strategy.

Related at OBOLUS

• Disputes & Asset Recovery for Digital-Asset Businesses – the full practice overview covering all recovery instruments and forums.
• Creditor Claims in Crypto Insolvency in Guernsey – how to press a creditor position in a Guernsey crypto insolvency proceeding.
• Airdrop Legal Structuring for Institutional Clients – structuring token distributions to manage securities and tax exposure.

FAQ

Can stolen crypto actually be recovered?

Yes – when instruction is immediate and the trail leads to a custodied account. Courts in England and Wales, Singapore, Hong Kong and the DIFC Courts recognize digital assets as property and have granted disclosure orders and freezing relief over exchange-held balances. Recovery is not guaranteed, but it is a genuine legal possibility when the forensic trail is live and the exchange has a clear legal anchor to an effective forum. Speed of instruction is the controlling variable.

How fast must I act after a digital-asset theft?

Act within hours, not days. Funds on a centralized exchange can be withdrawn or converted rapidly. An ex parte disclosure application in an urgent case can be filed and heard within 24 to 48 hours in leading forums. A stablecoin issuer freeze, where available, can be requested in parallel. The longer the delay before instruction, the greater the probability that funds move to a non-custodied wallet or are converted into an asset class that eliminates the issuer-freeze option entirely.

Can a court freeze assets held on an exchange?

Yes. A worldwide freezing order granted by a court in England and Wales, the DIFC Courts or Singapore can extend to assets held on exchanges within or connected to those jurisdictions. The freezing order follows the disclosure process: once the account-holder is identified, the order is made against the defendant and served on the exchange as a third party holding the assets. Exchange compliance is a matter of legal obligation, not discretion, once the order is properly served.

OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. We move for freezing relief and exchange disclosure while the trail is live – coordinating forensic, judicial and issuer-level tracks simultaneously. Digital assets are the whole of our practice. To discuss your situation, contact info@oboluslaw.com.

By Glen Sorensen, Disputes & Recovery Analyst – specialist in cross-border digital-asset recovery, exchange disclosure proceedings and multi-forum freezing strategy.

This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.