Case study: tracing fraud proceeds through England & Wales – crypto tracing

A business owner discovers on a Monday morning that a payment authorised the previous Friday has not reached its intended recipient. The funds moved on-chain within minutes of leaving the exchange. By the time anyone noticed, the transaction trail had crossed two jurisdictions. The instinct is to assume the money is gone. In our experience, that assumption is wrong more often than victims expect – provided action begins immediately.

This case study describes how Axiom Trace traced fraud proceeds through England & Wales using on-chain tracing, a proprietary injunction, and coordinated disclosure orders – demonstrating that movement on a public blockchain leaves a trail, and that England & Wales courts provide fast, effective tools to follow it.

The sections below set out the situation, the strategy chosen, how the process unfolded, and the lessons that apply to similar matters.

Situation: funds moved on-chain and the victim assumed nothing could be done

The client was a technology company based in England & Wales. Over several weeks, a fraudster posing as a trusted counterparty induced the company to transfer a sum in the high six figures – partly in sterling, partly in a major stablecoin – to wallets the client did not recognise as fraudulent until the scheme collapsed.

By the time the client contacted us, the sterling leg had been swept through a centralised exchange. The stablecoin leg had moved through three wallet addresses in under four hours. The client's first adviser had told them recovery was impossible. That assessment, made without any on-chain analysis, was premature.

Public blockchains are transparent. Every transfer is recorded permanently on-chain. The identities behind wallet addresses may be hidden, but the movement itself is not. We explained this at the first call and advised the client to preserve every communication, transaction record, and wallet address before anything else was touched.

The fear driving the client was understandable: funds had moved fast, the fraudster had gone silent, and no obvious counterpart existed to sue. The question was whether a legal choke point could be identified before the assets were cashed out or dispersed further.

Strategy: identifying choke points and choosing the right instruments

Crypto asset recovery in England & Wales depends on identifying the moment funds must pass through a regulated entity – and acting before that moment passes.

Our analysis showed the stablecoin leg was moving toward a centralised exchange operating in a jurisdiction that recognised English court orders. That was the choke point. The sterling leg had already reached a receiving bank in England & Wales. Two separate legal instruments were therefore viable simultaneously.

For the stablecoin, we identified the possibility of a proprietary injunction combined with a disclosure order against the virtual-asset service provider (VASP) holding the receiving wallet. A proprietary injunction can be granted on an urgent, without-notice basis – meaning the fraudster would not be alerted before the order was served. This was critical: any notification at that stage would have triggered further dispersal.

For the sterling leg, a Bankers Trust order directed at the receiving bank would compel disclosure of the account details and the onward movement of funds. Combined with a worldwide freezing order once a defendant was identified, this gave the client a coordinated cross-border position rather than two separate, unconnected actions.

We coordinated with local counsel in England & Wales, who prepared the without-notice applications. Speed mattered: from initial instruction to first application, the window was measured in hours, not days.

Process: from on-chain trace to freezing order

The process moved in three phases. Each phase was contingent on the one before it, and delay at any stage would have narrowed the options.

Phase one – on-chain tracing. Using blockchain-analytics tools, we mapped the stablecoin's movement from the victim's original wallet through the intermediate addresses to the receiving wallet at the VASP. Wallet clustering and attribution indicated the receiving address was linked to an account that had conducted prior on-chain activity consistent with a cash-out pattern. This analysis was packaged as a tracing report for use by local counsel in the without-notice application.

Phase two – disclosure and freezing. The without-notice proprietary injunction and accompanying disclosure order were granted by the court within the urgent window. The VASP was required to freeze the wallet balance and disclose account-holder information. Simultaneously, the Bankers Trust order compelled the receiving bank to provide details of the account that had received the sterling transfer. The two strands of the investigation converged on the same individual.

Phase three – worldwide freezing order and cross-border coordination. With a defendant now identified, a worldwide freezing order was sought and granted. The order extended to assets outside England & Wales, subject to the court's usual safeguards. We coordinated with allied counsel to consider the position in the second jurisdiction where further assets were believed to be held. The matter moved from discovery to a freezing position across two jurisdictions within a period of weeks.

Does every matter reach this outcome? No. The facts here were unusually favourable: the stablecoin had not yet left the VASP, and the receiving bank was regulated in England & Wales. Timing and the specific choke points available were decisive.

Transferable lessons for crypto fraud victims

This matter illustrates several principles that apply across crypto asset recovery cases in England & Wales and beyond.

Speed is the single most important variable. Once stolen crypto is cashed out at a VASP or converted and withdrawn, the legal choke point disappears. The on-chain trail may remain, but the leverage is gone. Victims who act within hours have materially more options than those who wait days.

The assumption that crypto is untraceable is the myth that most often prevents victims from acting. Public blockchains record every transaction. What is hidden is identity – and that is what disclosure orders and VASP cooperation are designed to overcome.

England & Wales provides a well-developed system for exactly this type of matter. The courts are experienced with proprietary injunctions over digital assets, with without-notice disclosure orders against VASPs, and with worldwide freezing orders that extend cross-border reach. For a claimant chasing funds that have passed through an English exchange or bank, this jurisdiction is a genuine enforcement hub – not just a place to file a claim, but a place to act quickly.

Recovery is not guaranteed. This case reached a freezing position; it does not follow that every matter will. But the difference between a matter that can be pursued and one that cannot is almost always about what was done in the first 24 to 48 hours. The client here acted within hours. That decision made everything else possible.

The steps above cover the typical pattern for a matter of this kind. Your own situation turns on specific facts – where the funds went, which VASPs or banks were involved, and how much time has passed. A confidential case review tells you whether the trail is still warm and which instruments are available. Contact info@axiomtracel.com to request one.

For further reading on crypto asset recovery as a discipline, visit our Crypto Asset Recovery insight hub. For jurisdiction-specific guidance on England & Wales as an enforcement forum, see our England & Wales jurisdiction overview. For a closely related enforcement technique involving stablecoins in a neighbouring offshore hub, see our analysis of freezing stablecoins via VASPs in Jersey.

About Axiom Trace

Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed. In our experience, the cases that can be recovered are almost always the ones where the victim acted fast and the trail was followed without assumption. We routinely coordinate proceedings with local counsel in England & Wales, one of the most effective forums for urgent asset recovery. To discuss a matter, contact info@axiomtracel.com.

Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.