Court orders against crypto exchanges in Netherlands

When stolen crypto reaches a Dutch exchange, the clock starts

A payment leaves a wallet in minutes. By the time the victim realises what has happened, the funds may already sit at a centralised exchange in the Netherlands, one conversion away from disappearing into a bank account or another chain. That gap – between theft and cash-out – is where court orders do their most important work.

Dutch courts can issue freezing and disclosure orders against virtual-asset service providers (VASPs) operating in the Netherlands, including centralised exchanges registered under the Dutch anti-money-laundering regime. These orders can compel an exchange to freeze a specific wallet balance and to disclose account and identity information. The process is available to foreign claimants and operates on a without-notice basis when urgency demands it. Recovery is never guaranteed, but the legal tools exist and have been applied in crypto matters.

This analysis covers the instruments available, how they interact with cross-border fact patterns, the procedural steps for a foreign claimant, the honest limits of the system, and what experience at exchanges tells practitioners about timing and evidence.

Why the Netherlands matters as a recovery forum for digital assets

The Netherlands sits at the centre of European crypto infrastructure. Several large centralised exchanges and digital-asset custodians have their EU regulatory base in the Netherlands, meaning Dutch courts have direct supervisory and injunctive reach over entities that hold or control significant on-chain balances. For a claimant whose stolen funds have moved to one of those platforms, a Dutch application may be the fastest route to a freeze.

Exchanges registered with the Dutch financial-intelligence authority are subject to Dutch law and to the jurisdiction of Dutch courts as a matter of ordinary civil procedure. That registration is a choke point. Once a VASP is on-chain identifiable and Dutch-registered, it can be served, compelled to act, and held in contempt if it does not.

The Dutch legal system is a civil-law system, operating through a distinct procedural tradition. It is not a common-law jurisdiction. That distinction matters practically. The instruments available – kort geding (summary proceedings), preliminary injunctions, and disclosure orders – are functional equivalents of tools familiar from common-law recovery, but they operate through different mechanisms. We coordinate closely with admitted local counsel in the Netherlands; local procedure governs the filing.

What makes the Netherlands attractive as a recovery forum is speed. The kort geding – the Dutch urgent interim-relief procedure – can produce a binding court order in days. In our experience, the combination of a well-supported urgent application and a Dutch-registered exchange is one of the faster paths to a crypto freeze available anywhere in Europe.

What court orders are available, and what do they do?

Dutch courts can grant several instruments that map onto the recovery toolkit a claimant needs. Each operates differently, and the right combination depends on what the claimant already knows about where the funds sit.

A preliminary injunction obtained in kort geding can freeze a specific balance at a Dutch-registered exchange, preventing withdrawal, conversion, or transfer while proceedings are on foot. The order binds the exchange directly. Breach can engage contempt-equivalent sanctions under Dutch civil procedure. The order is typically sought without prior notice to the defendant to prevent dissipation – the same rationale that drives without-notice applications in common-law forums.

A disclosure order – functionally comparable to a Norwich Pharmal order or a Bankers Trust order in common-law terms – can compel a VASP to produce account records, know-your-customer (KYC) documentation, transaction logs, and identity information. This serves two purposes. First, it identifies who controls the receiving wallet. Second, it reveals onward movements of the funds, enabling the claimant to trace further down the chain.

A proprietary injunction – asserting that the claimant retains a proprietary interest in the stolen assets – is conceptually available in Dutch civil proceedings, though the precise mechanism differs from English equity. Dutch law recognises unjust enrichment and tracing principles that allow a claimant to assert ownership over identifiable proceeds. This matters because it supports the argument that the exchange is holding the claimant's assets, not merely a debt.

Where the identity of the defendant is not yet known – a common scenario in crypto theft – Dutch courts have shown willingness to entertain applications against parties identified only by wallet address. The functional equivalent of an order against "persons unknown" is achievable, with the VASP as the respondent for service and disclosure purposes.

Stablecoin-specific relief is also worth noting. Where stolen funds have been converted to a stablecoin, the issuer of that stablecoin can, on appropriate legal process, freeze the specific token balance. This requires a separate application but can run in parallel with exchange-directed proceedings.

How does on-chain tracing support a Dutch application?

A court order is only as strong as the evidence behind it. Dutch courts require the claimant to demonstrate a plausible proprietary link between the stolen funds and the assets held at the exchange. That link is established through on-chain tracing.

Public blockchains are transparent. Every transaction is recorded permanently and publicly. The movement of funds from a victim's wallet to a receiving address – and from there through any number of intermediate addresses – is traceable using blockchain-analytics tools. On-chain tracing can typically establish the path from theft to exchange deposit within hours if the chain is unambiguous, though mixing, bridging between chains, or conversion to privacy-enhanced assets can extend that timeline considerably.

The output of a tracing exercise is a chain of attribution: this wallet received the stolen funds; this wallet deposited to an account at this exchange; the exchange is Dutch-registered. That chain, presented to the court in a supporting affidavit or exhibit, provides the nexus between the theft event and the Dutch respondent. Without it, a Dutch court will not freeze an exchange account.

We have traced funds that moved through three or four intermediate wallets before reaching a Dutch exchange deposit address. Each hop adds complexity. Each hop also adds evidence – because every intermediate address is itself traceable. The adversary's attempt to obscure the trail creates a longer record, not a shorter one.

What on-chain tracing cannot do, on its own, is identify the human behind the wallet. That is where the disclosure order comes in. The tracing establishes where the funds went. The order against the VASP reveals who controls the account. Together they produce what a litigant needs: a named defendant, an identified asset, and a basis for substantive proceedings.

Cross-border mechanics: how does a foreign claimant obtain a Dutch court order?

Most crypto theft victims seeking relief in the Netherlands are foreign claimants. The funds may have been stolen in any jurisdiction. The exchange holding them happens to be Dutch-registered. That disconnect – foreign victim, Dutch asset-holder – is the standard fact pattern, and Dutch civil procedure accommodates it.

A foreign claimant can commence urgent proceedings in the Netherlands directly, provided the Dutch court has jurisdiction. Jurisdiction grounds include the defendant being Dutch-registered, the assets being located in the Netherlands, or the harmful event having effects in the Netherlands. For a Dutch-registered exchange holding stolen crypto, jurisdiction is typically straightforward.

The kort geding application is filed with the relevant district court. The president of the court (voorzieningenrechter) can hear the matter on an urgent basis – in serious cases within a day or two of filing, though more typically within one to two weeks. In genuine emergencies, ex parte (without-notice) relief can be requested at the initial stage.

Evidence is submitted in writing. Dutch procedure does not require oral witness examination at the preliminary stage. A claimant supported by a well-prepared dossier – on-chain trace, exchange identification, witness statement from the victim, legal analysis – can present a compelling case entirely on paper. We coordinate closely with admitted local counsel in the Netherlands on drafting and filing; local procedure governs the substantive format and court presentation.

The respondent exchange, once served, typically does not contest the application on its merits – it has no dog in the fight between claimant and account-holder. Its primary concern is compliance with its own legal obligations. A well-framed order gives the exchange a clear basis to freeze the account and disclose the records without exposing itself to liability for doing so.

Once a disclosure order produces identity information, the matter typically shifts: from an urgent application against the exchange to substantive proceedings against the identified defendant. At that point, enforcement of any judgment across borders becomes the next question – and the New York Convention and EU enforcement instruments become relevant if the defendant or their assets are in another jurisdiction.

Contrasting positions: is Dutch court relief practical for smaller losses?

Not every stolen-crypto matter is suited to Dutch court proceedings. This is an honest assessment of the constraints, not a reason to abandon recovery.

The principal challenge is proportionality. Urgent Dutch court proceedings – including local counsel, forensic tracing, translation of evidence, and court fees – represent a meaningful cost. For losses that fall below a certain threshold, the economics of a full court application may not support the effort. That threshold varies by matter; it is not a fixed number. The structure of the case, the clarity of the on-chain trail, and the likelihood that the exchange holds identifiable funds all affect the calculus.

A second constraint is fungibility. Crypto exchanges commingle assets. If the stolen funds have been converted, withdrawn, or moved since they reached the exchange, tracing them within the exchange's internal ledger requires the disclosure order to work first, before a freeze has practical effect. In those cases, the freeze may not secure the original assets but may support a claim against the exchange or the account-holder for the equivalent value.

A third constraint is the defendant. If the account-holder is in a jurisdiction with poor enforcement cooperation, obtaining their identity through a Dutch disclosure order is valuable intelligence, but converting it into a judgment and then enforcing that judgment may take years. Dutch proceedings are the beginning of the recovery chain, not necessarily its end.

Against these constraints, practitioners should set the alternative: doing nothing. An uncontested theft leaves the funds with the fraudster. A Dutch court application, even if it ultimately fails on its merits, preserves options and creates a legal record that supports parallel proceedings elsewhere. In our experience, the decision to apply is rarely wrong when the on-chain trail is clear and the exchange is Dutch-registered.

For a foreign claimant uncertain whether their matter warrants Dutch proceedings, the practical first step is a structured viability assessment – on-chain tracing to confirm the exchange connection, a brief legal opinion on jurisdiction, and a cost-benefit review. This can typically be completed in days.

The steps above cover the typical pattern. Your matter turns on specific facts – where the funds went on-chain, how fast, and whether the Dutch exchange still holds an identifiable balance. A confidential case review tells you whether court proceedings are a proportionate response. Contact info@axiomtracel.com to request one.

What the exchange compliance function does (and does not) do without a court order

A question we hear from clients is whether the exchange will act voluntarily before a court order is obtained. The honest answer is: sometimes, partially, and never reliably enough to substitute for a formal order.

Dutch-registered VASPs operate under anti-money-laundering obligations that include transaction monitoring and suspicious-activity reporting. Where a VASP identifies that incoming funds are linked to a reported theft, it may apply an internal freeze under its compliance obligations. This is not a substitute for a court order – it is temporary, internally reversible, and does not give the claimant any enforceable rights. But it creates a window.

When a claimant contacts an exchange's compliance team with an on-chain trace and a clear theft report, the exchange may freeze the account while it conducts its own due diligence. That voluntary freeze can buy days. Those days should be used to prepare and file the court application, not to negotiate.

Exchanges will not, without a court order, disclose account-holder identity information to a private claimant. Data protection obligations under Dutch law and the applicable EU data-protection regulation prevent it. Only a court order – issued through the appropriate judicial process – can compel disclosure. Clients who expect to obtain KYC records by writing a firmly worded letter to the exchange compliance desk will be disappointed.

A micro-case from practice illustrates the interplay. In a matter in western Europe, autumn 2024, involving a business email compromise that redirected a payment in the mid-six-figure range into a Dutch-registered exchange account, the claimant's first call to the exchange secured a voluntary 48-hour compliance hold. That hold was used to complete the on-chain trace, prepare the kort geding application, and file. The court granted a preliminary injunction before the voluntary hold expired. The disclosure order followed within a week, producing account information that led to a substantive claim against an identified defendant in another European jurisdiction. The original Dutch application took fewer than ten days from theft to freeze confirmation.

Multi-chain and bridging scenarios: where Dutch jurisdiction becomes uncertain

The analysis above assumes a relatively direct path: theft, on-chain movement to a Dutch-registered exchange, Dutch proceedings. Many real matters are more complicated.

Funds are frequently bridged between blockchains – moved from one chain to another through a cross-chain bridge protocol. Each bridge is itself an on-chain actor with its own address and, potentially, its own corporate presence. A theft on one chain that is bridged to another chain before reaching a Dutch exchange introduces an intermediate step that the on-chain trace must account for. It also raises questions about whether the assets at the Dutch exchange are the same assets that were stolen, or whether they are the proceeds of a conversion. Dutch law's approach to tracing through conversion – following value rather than specific assets – determines how far the proprietary claim can reach.

Where funds have been through a decentralised exchange (DEX) before reaching the centralised platform, the position is more complex still. DEXs have no central operator to serve or compel. The chain of attribution may be clear on-chain, but there is no respondent to the court order until the funds reach a regulated entity. Dutch proceedings become viable at the point the funds touch a Dutch-regulated actor, however far down the chain that is.

Privacy coins and mixing services can, in some cases, break the on-chain trail sufficiently to make attribution uncertain. Where uncertainty exists, a Dutch court will apply the civil standard of proof – balance of probabilities – to the tracing evidence. A trace that establishes a strong but not certain link may still support urgent relief, with a cross-undertaking in damages from the claimant as a condition.

Cross-chain and bridge scenarios require the on-chain tracing exercise to document each step of the attribution chain explicitly. A gap in the trace is a gap in the court application. We address this at the investigative stage, before any court filing, to ensure the evidence package is coherent.

For claimants with a particularly complex on-chain trail – multiple chains, bridging, partial mixing – the viability of Dutch proceedings depends on whether the trace can reach a clean attribution to a Dutch-registered entity. Not all cases can. Being told that early saves time and cost.

To assess whether your on-chain trail supports a Dutch application, request a confidential case review at info@axiomtracel.com.

Enforcement beyond the Netherlands: what happens after the disclosure order

A Dutch court order that produces account information identifies a defendant. It does not, by itself, recover the funds. The disclosure order is the beginning of the enforcement chain, not its end.

Once the defendant is identified and their location established, the claimant typically has two paths: commence substantive proceedings in the Netherlands if the defendant has assets there, or commence proceedings in the defendant's jurisdiction of residence or asset location and seek enforcement of any resulting judgment. The path chosen depends on where the money went after the exchange.

Within the European Union, the enforcement of civil judgments between member states is relatively efficient. EU enforcement instruments allow a judgment obtained in the Netherlands to be recognised and enforced in other member states without a separate merits hearing. This materially shortens the time from judgment to enforcement action in, say, Germany, France, or another EU member state.

Outside the EU, enforcement depends on the bilateral or multilateral treaty framework between the Netherlands and the defendant's jurisdiction. Where no treaty applies, a fresh recognition proceeding is required. In some jurisdictions, that proceeding is fast. In others, it adds months.

Arbitral awards present a different position. Where the underlying dispute is resolved through arbitration, the New York Convention provides for recognition and enforcement across most states. This can, in the right fact pattern, offer a more direct enforcement path than court judgment recognition.

In parallel, where the defendant's assets have been identified in a third jurisdiction – not the Netherlands, not the claimant's home forum – a separate freezing application in that jurisdiction may be required. Coordinating multiple simultaneous proceedings across three or more jurisdictions is one of the more complex aspects of crypto recovery. We manage that coordination directly, working with local counsel in each forum.

Objection handling: myths about crypto recovery in the Netherlands

Two persistent misconceptions shape how theft victims approach Dutch court proceedings, often to their detriment.

The first is that once crypto leaves a wallet, it is untraceable and nothing can be done. This is wrong. Public blockchains are transparent. Every on-chain movement – including movements through multiple intermediate wallets, conversion events, and cross-chain transfers – creates a permanent and publicly accessible record. Blockchain-analytics tools allow practitioners to follow those movements with a high degree of precision. The myth that crypto is "anonymous and untraceable" benefits fraudsters who rely on their victims believing it. It is not a description of the technology.

The second misconception – and a more dangerous one – is that a "recovery specialist" offering guaranteed results, upfront fees for a "fund-release process", or claiming insider access to exchange or law-enforcement systems is a legitimate option. These are the hallmarks of a recovery scam: a second-stage fraud that targets people who have already lost money to a first fraud. A genuine recovery practice does not promise outcomes, does not charge upfront fees for access to court processes, and does not claim special relationships with regulators or exchanges. The test is simple: does the firm describe a lawful, court-based process with honest limits? Or does it describe a magic door that costs a fee to open?

Real asset recovery in the Netherlands is court-based, evidence-driven, and transparent about what it can and cannot do. It takes weeks, not days, to complete fully – though urgent relief can be obtained in days. It carries no guarantee. And it starts with a tracing exercise, not a payment to a stranger.

Related analysis from Axiom Trace

• Crypto Asset Recovery – full resource hub: how we trace and freeze digital assets across blockchains and jurisdictions.
• Netherlands jurisdiction overview: the recovery system in the Netherlands, from freezing applications to cross-border enforcement.
• Phishing attack: can the funds be traced and frozen?: step-by-step analysis of crypto recovery after a credential-theft event.

Frequently asked questions

Q: Can stolen crypto really be traced and frozen in the Netherlands?

A: Yes, subject to the specific facts. Dutch courts can grant urgent freezing orders against Dutch-registered virtual-asset service providers and compel them to disclose account information. The prerequisite is an on-chain trace that establishes a clear link between the stolen funds and an account at a Dutch-registered exchange. Where that link exists, urgent proceedings through the kort geding system can produce a freeze in days. No outcome is guaranteed, but the legal mechanism is available and has been used in crypto-asset recovery matters.

Q: How quickly do I need to act after a crypto theft?

A: Speed is material. The window between theft and cash-out can be hours. Once funds are withdrawn from a Dutch exchange into a bank account or converted and moved off-chain, the asset subject to a freezing order may no longer exist in a form the court can freeze. The earliest actionable step – beginning an on-chain trace and alerting the exchange's compliance function – should happen within hours of discovery. A court application should follow within days, not weeks. Every day of delay narrows the range of practical options.

Q: How is a real recovery specialist different from a recovery scam?

A: A genuine recovery practice describes a lawful, court-based process, is transparent about costs, makes no promises of recovery, and does not require an upfront "release fee" or claim special access to regulators or exchanges. Recovery scams – a second-stage fraud targeting people who have already suffered a loss – do the opposite. They promise guaranteed results, claim insider connections, and charge fees before delivering anything. If a firm offers you certainty about recovering crypto, treat that as a warning. Real recovery depends on traceable funds, a competent court, and a responsive respondent. Certainty is not available. Honest analysis is.

About Axiom Trace

Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed. In the Netherlands, we coordinate closely with admitted local counsel; local procedure governs all court filings. We have traced funds through multi-hop on-chain paths to Dutch-registered exchanges and supported urgent freezing applications within short timelines. Our approach begins with an honest viability assessment: if the funds are not realistically recoverable, we say so. To discuss a matter, contact info@axiomtracel.com.

Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. In the Netherlands, Axiom Trace coordinates closely with admitted local counsel; local procedure governs the filing. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.