Digital-asset disclosure orders in Hong Kong

On-chain, the theft is already happening. The wallet drains in seconds. By the time a victim opens a browser to check the balance, the tokens have moved – once, twice, perhaps through a mixer. The question that lands on our desk is always the same: can anything be done, and how fast does it need to happen?

In Hong Kong, the answer is yes – subject to speed, evidence quality, and the correct legal tools. A disclosure order compels a virtual-asset service provider, a bank, or any third party holding relevant information to identify where the assets went. Combined with a freezing injunction, it can stop dissipation before the thief converts to fiat. The process is demanding, but the legal system in Hong Kong is well-equipped for exactly this kind of cross-border digital-asset matter.

This analysis covers the disclosure instruments available in Hong Kong, how they interact with on-chain tracing, the cross-border complications that arise when funds leave the jurisdiction, and the honest limits of what is achievable.

Why Hong Kong Is a Meaningful Forum for Crypto Asset Recovery

Hong Kong operates a sophisticated common-law system that recognises digital assets as property capable of being the subject of freezing and disclosure orders. As of early 2026, the regulatory regime governing virtual-asset service providers has matured considerably, creating licensed choke points that did not exist a few years ago. That matters in practice: a regulated exchange operating under a local licence is subject to local court orders.

The courts here have shown a willingness to adapt established equitable doctrines to digital assets. A proprietary injunction – including one against "persons unknown" – is available where a claimant can establish a seriously arguable proprietary claim to the stolen tokens. That is the same legal principle that protects real property or a bank account; Hong Kong courts have applied it to cryptocurrency. For a victim whose funds have landed on a local exchange, that adaptability is not a theoretical comfort. It is the basis for urgent relief.

Hong Kong also sits at the intersection of mainland Chinese capital flows and international crypto markets. In our experience, a significant proportion of the matters that cross our desk involving digital assets traced to exchanges in the Asia-Pacific region have at least one touchpoint in Hong Kong – whether at the exchange, the correspondent bank, or the UBO layer of the entity that controls the receiving wallet. That geographic concentration makes the jurisdiction disproportionately important in cross-border crypto asset recovery.

The jurisdiction qualifies as a direct recovery hub: we routinely coordinate proceedings with local counsel in Hong Kong to obtain urgent interim relief on behalf of clients who have suffered a theft elsewhere and traced funds into the territory.

What Is a Digital-Asset Disclosure Order, and When Does It Apply?

A disclosure order in the digital-asset context compels a third party – most commonly a virtual-asset service provider (VASP), a bank, or a nominee – to disclose account information that allows the claimant to identify the wrongdoer or trace the proceeds. Two main instruments are relevant in Hong Kong.

The first is the Norwich Pharmal order. A Norwich Pharmal order requires an innocent third party who has become mixed up in wrongdoing – without being a wrongdoer itself – to produce documents or information to assist the victim. Applied to crypto, the target is typically a centralised exchange that holds know-your-customer records, wallet-to-account mappings, or withdrawal history tied to the receiving address. The exchange did nothing wrong; it simply holds information the claimant needs. That is precisely the situation the instrument addresses.

The second is the Bankers Trust order. This instrument compels a financial institution – originally conceived for banks, but capable of extension – to disclose information about a customer's account in circumstances where that information is needed to trace misappropriated funds. Where stolen crypto has been converted to fiat and the proceeds have entered the banking system, a Bankers Trust order directed at the receiving bank can recover transaction records that on-chain analysis cannot reach.

Both orders are typically sought without notice to the target respondent. The rationale is straightforward: if the wrongdoer is alerted that a disclosure application is pending, assets move again. Applications without notice – sometimes called ex parte applications – are measured in hours to days from filing to hearing, in appropriate urgent cases. Courts in Hong Kong are accustomed to moving quickly when dissipation risk is live.

A third, rarer instrument is worth naming. Where the identity of the wrongdoer is entirely unknown – no name, no exchange account, only a wallet address – a proprietary injunction against "persons unknown" can be sought over the specific digital assets. The legal basis is ownership; the practical effect is that the exchange or custodian holding the assets is put on notice not to release them. This has been used in common-law jurisdictions where the receiving wallet is held at a regulated custodian and the claimant can establish a proprietary claim to the stolen tokens.

How On-Chain Tracing Feeds the Legal Process

Disclosure orders do not operate in isolation. A court granting a Norwich Pharmal order against a VASP needs to be satisfied that the respondent actually holds the relevant information and that the application is not a fishing expedition. That means the legal application must be supported by a coherent on-chain trace.

What does that look like in practice? Blockchain-analytics tools can follow token movements across addresses, identify clustering of wallets controlled by the same actor, and flag known deposit addresses associated with centralised exchanges. Public blockchains are transparent: every transaction is recorded, timestamped, and permanently available – even when the person behind the address is anonymous. The trace establishes the path from the victim's wallet, through intermediate hops, to a deposit address at a regulated exchange.

That deposit address is the choke point. At that address, the VASP holds a corresponding account with KYC data. The disclosure order forces the VASP to produce the identity, and the freezing order – sought alongside the disclosure order – prevents the VASP from releasing the assets while proceedings continue.

The trace itself has to be done correctly. Common errors include: failing to account for transaction batching; missing a bridge hop that moves assets from one chain to another; and treating "mixing" as the end of the trail when in fact mixed outputs can still be attributed probabilistically. We have traced funds that went through multiple intermediate wallets over several days before landing at an exchange deposit address. The chain is long; it is not broken.

The quality of the on-chain analysis directly affects the strength of the legal application. A court presented with a well-structured trace – showing each hop, each timestamp, and the deposit address tied to a named VASP – is far better placed to grant relief than one looking at a vague assertion that "funds were stolen and sent to an exchange." This is the forensic discipline that underpins the legal step.

What Happens When Funds Cross the Border?

This is where complexity compounds. Funds stolen from a victim in Europe or the Middle East may pass through a Hong Kong exchange on their way to a final destination elsewhere. The victim wants a disclosure order from the Hong Kong court. But the thief, or the assets, may now be outside the territory. What can and cannot be done?

First, consider the disclosure side. A Hong Kong court can grant a Norwich Pharmal order against a VASP that is subject to Hong Kong jurisdiction – whether incorporated locally, licensed locally, or otherwise amenable to the court's process. Where the VASP has a Hong Kong presence but the theft occurred elsewhere, the court can still compel disclosure of account records. That is a significant tool for cross-border matters where Hong Kong is merely a transit point.

Second, the freezing side is more nuanced. A worldwide freezing order – which restrains a defendant from dealing with assets wherever they are situated globally – is available in principle from the Hong Kong courts. A worldwide freezing order can reach assets outside the forum, subject to conditions and safeguards, including the court being satisfied that it would be just and convenient to grant relief on that basis. In practice, enforcing that restraint in a foreign jurisdiction requires recognition of the order locally – which may require separate proceedings in that jurisdiction, coordinated by local counsel there.

Third, there is the question of service. In crypto-asset matters where the defendant's physical address is unknown, proceedings can in appropriate cases be served by airdrop of an NFT to the relevant wallet address. This is an innovation adopted in common-law courts to deal with the practical problem of serving a defendant whose only known presence is an on-chain address. Its use in Hong Kong-seated proceedings follows the same logic applied elsewhere in the common-law world.

The practical consequence is that a single matter may require simultaneous steps in two or three jurisdictions: a disclosure order in Hong Kong against the VASP; a recognition application in a second jurisdiction where the defendant's assets have now arrived; and a separate action in a third jurisdiction where the defendant is believed to be located. That is not unusual in our practice. It is the normal shape of a serious cross-border crypto recovery.

What prevents it from becoming unmanageable is pre-planning: identifying, at the outset, which forum holds which piece and sequencing applications so that information from each step feeds the next. Coordination failures – where a freezing order in one jurisdiction is not yet recognised in the jurisdiction where assets actually sit – can allow a defendant to move funds in the gap. Timing is not an abstract concern. It is the decisive variable.

If you are at this stage of the analysis – assets already moved cross-border, exchange identified, local action under consideration – a confidential case review is the practical next step. The specific facts will determine which instruments apply and in which sequence. Contact info@axiomtracel.com to discuss.

Contrasting Positions: What Courts Have Accepted and What Remains Contested

Digital-asset disclosure orders are not uniformly well-settled across all dimensions of their application. The analysis here is honest about where the law is developed and where it is still forming.

Settled ground: that digital assets are property; that a claimant with a proprietary claim can seek a freezing injunction over them; that a regulated VASP holding the relevant account can be compelled by a Norwich Pharmal order to disclose customer identity and transaction data. These propositions are not seriously contested in Hong Kong or in the major common-law recovery hubs with which it interacts.

Contested ground No. 1: the reach of orders against offshore VASPs. Where a VASP is incorporated offshore and has no registered presence in Hong Kong, compelling it to comply with a Hong Kong disclosure order is difficult. The court can still grant the order; but enforcement against a non-compliant offshore respondent may require an application in that respondent's home jurisdiction. That adds cost and delay. In our experience, the practical leverage is often at the banking layer: even if the VASP is offshore, the bank that processes its fiat conversions may be in a jurisdiction where an order is more readily enforced.

Contested ground No. 2: mixers and privacy protocols. Where funds pass through a mixing protocol or a privacy coin, the on-chain trail becomes probabilistic rather than deterministic. Courts in common-law jurisdictions have shown willingness to accept probabilistic attribution evidence from blockchain-analytics tools, but the threshold of proof required to ground a freezing order – a "seriously arguable" case – must still be met. A low-confidence trace will not support an urgent application. This is a calibration question, not a reason to abandon the analysis.

Contested ground No. 3: stablecoin issuer freezes. Some stablecoin issuers have, on receipt of appropriate legal process, frozen specific token balances at the issuer level – effectively immobilising tokens regardless of where the wallet sits. The legal basis for compelling an issuer to exercise this power (as opposed to doing so voluntarily) is not fully settled in Hong Kong. Where the issuer is cooperative and the factual basis is clear, this tool is available in practice. Where cooperation is absent, the legal route to compel is less certain and depends on where the issuer is incorporated.

These distinctions matter for strategy. An application built on settled ground moves faster and carries less court-level risk. An application that relies on contested propositions should be designed with a fallback – a parallel disclosure route, an alternative freezing target, or a recognition pathway in a second jurisdiction. That is the difference between a well-designed recovery strategy and one that stalls at the first objection.

For insolvency practitioners and referring lawyers assessing whether a matter is worth pursuing, understanding which part of the legal pathway is settled and which requires advocacy is part of the viability analysis. Explore our thinking on crypto asset recovery methodology for a broader view of how we structure these assessments.

Practical Steps: What a Disclosure Application Actually Requires

A digital-asset disclosure order is not granted on assertion. It requires a body of evidence assembled quickly and presented coherently. Here is what that process looks like from the inside.

Step one: preserve and document. Before any legal step, the on-chain evidence must be captured in a form that can be put before a court. This means screenshots with timestamps, blockchain explorer records, raw transaction hashes, and the on-chain trace in a format the court can follow. Evidence that exists only on a screen and has not been exported can be lost if an exchange restructures its records or the relevant block explorer goes dark.

Step two: identify the target respondent. The disclosure order must be directed at a specific entity that holds the relevant information. That means identifying the exchange or VASP at whose deposit address the stolen funds arrived, confirming that the entity is amenable to Hong Kong jurisdiction, and – ideally – establishing that it holds KYC records tied to the deposit address. A well-structured on-chain trace provides this; a vague assertion does not.

Step three: establish the proprietary basis. For a freezing injunction alongside the disclosure order, the claimant must show a seriously arguable claim that the assets belong to them – that there was a theft, a breach of trust, or a misappropriation. In most fraud cases this is the easiest element. The harder element is demonstrating that the specific assets now at the exchange are traceable to the theft – the tracing limb. The on-chain trace does this work.

Step four: file without notice. The application goes before a judge – in urgent cases, within hours or days. Axiom Trace coordinates this with local counsel in Hong Kong, who files and argues the application. The without-notice basis requires the claimant to give full and frank disclosure of all material facts, including facts that might favour the respondent. Courts take this obligation seriously; an applicant who fails to comply risks the order being set aside.

Step five: serve and enforce. Once the order is granted, it must be served on the VASP and the assets must be restrained before the wrongdoer can move them out. This is the moment at which speed becomes absolute. An order that is not served before funds are withdrawn is, in practical terms, an empty document.

Step six: use the disclosure to build the next layer. The KYC records disclosed by the VASP identify a name, a document, perhaps an address. Those details feed the next legal step: an action against the identified defendant, recognition of a judgment abroad, or a further disclosure order in the jurisdiction where that person is now located.

For a broader picture of how UBO-layer identification interacts with recovery proceedings in related contexts, see our analysis of UBO register access changes and their recovery implications.

Honest Limits: What Disclosure Orders Cannot Do

Recovery specialists who tell you that a disclosure order guarantees recovery are not being honest. Here is what the instrument cannot do.

A disclosure order produces information. It does not itself return funds. Even after a disclosure order identifies the defendant, the victim must still pursue that defendant through proceedings, obtain a judgment or award, and then enforce it against assets that may have moved on. Each of those steps takes time and consumes cost.

If the funds have already been converted to cash and withdrawn before the order is served, the on-chain portion of the recovery is defeated. What remains is a forensic investigation into fiat flows – bank records, correspondent banking chains, potentially an anti-money-laundering referral to a financial-intelligence unit. That is a different type of investigation, slower and more dependent on regulatory cooperation.

If the defendant is located in a jurisdiction that does not recognise or enforce Hong Kong judgments – or where the rule of law is unreliable – enforcement becomes the hard problem, not the order itself. The New York Convention provides for recognition and enforcement of foreign arbitral awards across most states, but a court judgment is a different instrument: its recognition abroad depends on the bilateral or multilateral framework between the relevant jurisdictions. Where no such framework exists, a creditor may find that it holds a valid judgment that it cannot practically enforce.

None of this is a reason not to act. It is a reason to act informed. The worst outcome for a fraud victim is to spend months and significant cost pursuing an order, only to find that enforcement is impossible because the defendant is judgment-proof or located in a jurisdiction that offers no practical route to execution. That is why honest viability analysis comes first. Consider using the Asset Recovery Viability Check as a first filter before committing to proceedings.

A point on the recovery-scam environment is warranted here. Victims who have lost digital assets are frequently targeted by operators who promise to recover funds in exchange for upfront fees, claiming special relationships with exchanges or law enforcement. These operators are, in almost every case, conducting a second fraud. A genuine recovery specialist – whether a law firm or an investigations boutique like Axiom Trace – does not promise recovery, does not request upfront "recovery fees" unconnected to actual professional work, and does not claim that blockchain transactions can be "reversed" outside a legal process. If you have been approached with such a promise, treat it as a warning sign.

Strategy and Sequencing: The Cross-Border Architecture of a Disclosure Matter

For a referring lawyer or funder assessing a crypto disclosure matter, the key strategic question is not whether the instruments exist – they do – but how to sequence them efficiently across jurisdictions given the live dissipation risk.

The architecture looks like this. First, the on-chain trace establishes where the funds are now. That answer determines the primary forum. If the assets are at a Hong Kong-regulated VASP, Hong Kong is the urgent forum for both the disclosure order and the freezing injunction. If the assets have moved on, the primary forum shifts – but Hong Kong may still be relevant as the forum where the receiving account held the funds in transit, and where disclosure of the transit records is available.

Second, the disclosure order and the freezing injunction should be sought simultaneously, not sequentially. The freezing order without the disclosure order leaves the claimant unable to identify the defendant for service. The disclosure order without the freezing order allows assets to dissipate during the time it takes to process the disclosed information. They are designed to work together.

Third, where a worldwide freezing order is sought, the claimant should immediately identify the foreign jurisdictions where enforcement will be needed and instruct local counsel there in parallel. Recognition proceedings in a foreign jurisdiction can run alongside the Hong Kong action; they do not have to wait for Hong Kong proceedings to conclude.

Fourth, the banking layer should never be overlooked. Even in a crypto-native theft, the ultimate conversion to spendable fiat runs through a bank. A Bankers Trust order directed at the receiving bank – if that bank is in Hong Kong or in a jurisdiction where a recognition application is feasible – can capture wire transfer records, beneficiary account details, and correspondent-bank information that on-chain data does not supply. The financial forensics and the on-chain tracing are complementary, not alternatives.

Practitioners handling insolvency-related crypto matters – where digital assets have been stripped from an estate – will note that the disclosure and freezing tools available to a liquidator or receiver are largely the same as those available to a defrauded individual, but sit on a different legal footing: the officeholder acts with the authority of the court and in the interest of creditors, which can affect the willingness of a court to grant wide-ranging disclosure against third parties.

Across all these scenarios, the factor that determines whether a strategy succeeds is not the sophistication of the instruments. It is the speed with which the on-chain trace is produced, the quality of the legal packaging, and the coordination between the Hong Kong-seated action and whatever is needed abroad. Assets do not wait for slow coordination. The disclosure framework in Hong Kong is as well-developed as anywhere in the common-law world. The question is whether the victim moves fast enough to use it.

The steps above describe the typical pattern in a well-run disclosure matter. Your situation turns on its own specific facts – which VASP received the funds, which jurisdiction holds the defendant's identity, and how much time has passed. A confidential case review is the fastest way to assess what is realistically available. Contact info@axiomtracel.com to begin.

FAQ: Digital-Asset Disclosure Orders in Hong Kong

Q: Can stolen crypto really be traced and frozen in Hong Kong?

A: Yes, subject to the facts. Public blockchains record every transaction permanently, and blockchain-analytics tools can follow tokens from a victim's wallet to a deposit address at a regulated exchange – even after multiple hops. Where that exchange is subject to Hong Kong jurisdiction, a Norwich Pharmal order or proprietary injunction can compel disclosure of the account holder's identity and freeze the assets. The outcome depends on speed, the quality of the on-chain trace, and whether the funds remain at a traceable choke point when the legal steps are taken.

Q: How quickly do I need to act after a crypto theft?

A: Immediately. Digital assets move within seconds, and each additional hop introduces new layers of obscuration and new jurisdictional complications. Without-notice freezing and disclosure applications are measured in hours to days in urgent cases – but even that window can close if a defendant monitors their exchange account and withdraws before service. Preserving on-chain evidence, identifying the receiving VASP, and instructing counsel should all happen on the same day as discovery of the theft. Delay narrows options. It does not close them entirely, but recovery becomes progressively harder with each passing day.

Q: How is a real recovery specialist different from a recovery scam?

A: A genuine specialist – whether a law firm or an investigations boutique – does not promise recovery, does not guarantee a percentage return, and does not request large upfront "release fees" disconnected from actual professional work. Real recovery involves court orders, regulated legal processes, and verifiable steps that the client can audit. Recovery scam operators promise access to special channels, claim to be able to "reverse" blockchain transactions (which is technically impossible outside specific protocol conditions), and request payment before producing any verifiable result. If you have been approached after a loss with such a promise, treat it as a second fraud targeting the first.

Related Insights

• Crypto Asset Recovery – methodology, instruments, and cross-border considerations
• Hong Kong as a Recovery Forum – jurisdiction guide for claimants and practitioners
• UBO Register Access Changes and Their Recovery Implications

About Axiom Trace

Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed. In our experience, the matters that resolve in a victim's favour are almost always those where tracing and legal steps begin within the first 24 to 48 hours of discovery. We have traced stolen digital assets across multiple blockchains, through mixers, and into regulated exchanges in several jurisdictions – including Hong Kong. To discuss a matter, contact info@axiomtracel.com.

Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. We routinely coordinate proceedings with local counsel in Hong Kong; local procedure governs all filings. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.