Assets move on-chain in minutes. By the time a victim in the United Arab Emirates files a police report, the wallet that received the stolen funds may already have forwarded them twice. That is the first reality of crypto asset recovery in the UAE – and it is the reason timing shapes every decision that follows.
A digital-asset disclosure order compels a third party – a virtual-asset service provider, a correspondent bank, or another custodian – to identify the person controlling a wallet or account. In the United Arab Emirates, courts in both the onshore system and the financial free-zone jurisdictions can grant such orders, and we coordinate closely with admitted local counsel in the UAE because local procedure governs the filing. The order does not guarantee recovery, but it closes the gap between an anonymous wallet address and a named respondent against whom substantive relief can be sought.
This guide sets out the step-by-step process for obtaining digital-asset disclosure in the UAE: when it applies, what each stage requires, what can go wrong, and how the cross-border dimension changes the calculation.
Why Digital-Asset Disclosure Orders Matter in the UAE
A disclosure order is the investigative backbone of crypto asset recovery. Without it, on-chain tracing identifies movement but not identity. With it, a VASP or exchange is compelled to produce know-your-customer records, account logs, and transaction data tied to the wallet address you have already traced.
The UAE has invested heavily in virtual-asset regulation. The Virtual Assets Regulatory Authority (VARA) oversees licensed VASPs in mainland Dubai. The Dubai International Financial Centre (DIFC) and the Abu Dhabi Global Market (ADGM) each operate their own courts and their own financial-services regulators. This layered system matters because the court you approach – onshore, DIFC, or ADGM – determines which procedure applies and which enforcement mechanism is available to compel disclosure.
In our experience, practitioners in cross-border recovery note that the UAE's willingness to engage with digital-asset matters has increased significantly since the mid-2020s. The regulators expect licensed VASPs to cooperate with lawful court process. That expectation creates a genuine disclosure pathway – one that did not exist in practice just a few years ago.
Is the order a silver bullet? No. But it is the step that converts an on-chain trail into a legal case.
Step 1 – Conduct On-Chain Tracing Before Filing
Disclosure applications succeed or fail on the quality of the underlying evidence. Filing without a documented trace – a structured record of where the funds moved and why a specific VASP or wallet is the correct target – wastes court time and tips off the defendant without producing anything useful.
The starting point is the transaction hash and the originating wallet. Blockchain-analytics tools cluster related addresses, identify deposit patterns consistent with a centralised exchange, and flag whether proceeds have been converted into a stablecoin or bridged to another chain. Public blockchains are transparent: on-chain movements are traceable even when the identity behind a wallet is hidden.
What you need before approaching local counsel:
- The transaction hash and sending wallet for every movement you can document.
- A chronological summary of where funds went after leaving your control.
- Identification of the first wallet or VASP at which the trail becomes identifiable – typically a deposit address at a centralised exchange.
- Any supporting evidence: screenshots, platform communications, contract documentation.
We have traced funds that passed through four wallets in under an hour before arriving at a UAE-licensed exchange. The trail was complete; the application was viable. Do not assume that speed defeats tracing – speed leaves a trail too, just a longer one.
A mid-stage CTA: if funds have already moved, time matters. Request a confidential case review at info@axiomtracel.com to assess whether the on-chain trail is still intact and actionable.
Step 2 – Choose the Correct Forum in the UAE
Selecting the wrong court in the UAE can add weeks to a matter and, in some cases, leave you without a usable enforcement mechanism against the VASP you are targeting. The choice between onshore courts, the DIFC, and the ADGM is not academic.
Onshore UAE courts operate in Arabic, apply UAE federal civil procedure, and have jurisdiction over VASPs licensed by VARA. Disclosure orders are available in principle, but local counsel must navigate the procedural steps and, in some matters, translation requirements. Enforcement against a VARA-regulated entity is generally straightforward once an order is in hand.
DIFC courts operate in English, apply a common-law procedural code, and have developed a growing body of practice on urgent applications including freezing and disclosure relief. They have jurisdiction over entities incorporated or licensed in the DIFC. Where the respondent VASP operates from the DIFC, or where a financial counterparty is DIFC-registered, the DIFC courts are often the faster and more predictable route.
ADGM courts, similarly common-law and English-language, cover entities in the Abu Dhabi Global Market. For a VASP regulated by the FSRA (the ADGM's financial regulator), the ADGM court is the natural forum.
The cross-border question also arises here: if the stolen funds moved through a VASP incorporated elsewhere – say, a European or Asian exchange with a UAE user base – an order from a UAE court may not bind that foreign entity directly. In such cases, parallel disclosure applications in the VASP's home jurisdiction may be necessary. We regularly advise on coordinating applications across two forums simultaneously, with timing aligned to prevent the target from moving assets in the window between orders.
Step 3 – Prepare and File the Disclosure Application
A disclosure order application in the UAE is typically made without notice to the respondent. The logic is simple: a notified VASP may alert the account holder, who then moves funds before the order takes effect. The without-notice mechanism is not a procedural trick; it is a deliberate design feature of urgent asset recovery.
The application requires:
- A supporting statement setting out the factual basis – the theft, the on-chain trail, and the reason the named VASP is the correct respondent.
- Evidence of urgency and the risk of dissipation if notice were given.
- A draft order specifying exactly what information is sought: account-holder identity, KYC records, transaction logs, and any linked accounts.
- A cross-undertaking in damages, offered by the applicant to compensate the respondent if the order turns out to have been wrongly granted.
In DIFC and ADGM proceedings, the procedural architecture for without-notice applications is well-established. Onshore filings require local counsel experienced in urgent civil applications, as the procedural path differs. We coordinate closely with admitted local counsel in the UAE at this stage; they file and appear; we provide the investigative evidence and the strategic framework.
Timing from filing to first hearing is typically measured in days in the free-zone courts, though it varies by case complexity and urgency demonstrated in the papers. Do not assume a week is available. In matters we have handled, the gap between an on-chain deposit at a UAE VASP and a service provider's decision to withdraw liquidity can be 24 to 48 hours.
How Does Cross-Border Enforcement Change the Picture?
The disclosure order is only the first step. Once a name and account are identified, the question becomes: what enforcement action follows, and in which jurisdiction does the real asset sit?
Several scenarios arise in practice. First, the named account holder is in the UAE and the funds are still at the UAE VASP. The path from disclosure to a freezing order – either a domestic freezing injunction or relief targeted at the digital asset itself – is relatively contained within one forum.
Second, and more commonly in cross-border matters, the account holder is identified in the UAE but has already moved the underlying funds out: to a foreign exchange, to an overseas bank, or back on-chain to a non-custodial wallet. Here, the UAE disclosure order has served its purpose – you now have a name – but further enforcement must be sought in another jurisdiction. Recognition of the UAE judgment or order in that jurisdiction, or a fresh application there, becomes the next stage.
Third, the VASP is foreign but has UAE-based customers. In this case a UAE disclosure order may not bind the foreign entity directly. Liaison with the entity's home regulator or a parallel court application is required.
The New York Convention is relevant where the underlying dispute has been resolved by arbitration: enforcement of an arbitral award through the UAE courts is a recognised route, and the UAE is a party to the Convention. For disputes resolved by litigation rather than arbitration, recognition of a foreign judgment in the UAE follows its own procedural path, which local counsel must manage.
The steps above cover the typical pattern. Your matter turns on specific facts – where the money went, how fast, and which forums can act. A confidential case review tells you whether it is worth pursuing.
To assess viability, contact info@axiomtracel.com.
What Common Mistakes Defeat an Otherwise Viable Application?
Three mistakes account for the majority of applications that fail or stall before producing usable disclosure.
Waiting too long before instructing local counsel. On-chain tracing is time-sensitive not just because funds move, but because VASPs routinely purge withdrawal logs, close accounts, and release holds on inactive wallets after internal review periods expire. A trace that is actionable this week may not be actionable in three weeks.
Filing against the wrong entity. Assuming that because a user registered at a particular platform, the custodial VASP is the correct respondent – without confirming which legal entity within a group actually holds the account – leads to orders that produce no useful records. The entity named must be the one that holds the data.
Inadequate evidence of urgency. Courts granting without-notice disclosure orders need to understand why notice would defeat the purpose. A generic statement that "the respondent might move funds" is not sufficient. Specific evidence – the on-chain movement pattern, the speed of prior transfers, the nature of the fraud – supports the argument that delay defeats recovery.
A fourth, less obvious mistake: treating the disclosure order as the end of the process rather than the beginning. Victims sometimes obtain disclosure, receive a name, and then pause to consider next steps. In that pause, the named party dissipates remaining assets in other wallets or jurisdictions. The disclosure order and the freezing application should, where possible, be prepared concurrently.
Stablecoins, VASPs, and the Choke-Point Strategy
A significant proportion of crypto theft in 2025 and early 2026 involves rapid conversion of the stolen asset into a stablecoin. The logic for the fraudster is obvious: stablecoins do not fluctuate in value while the fraud is being unwound, and some stablecoin networks are perceived as harder to trace than native blockchain assets.
The perception is wrong. And it creates an opportunity.
Stablecoin issuers can, on appropriate legal process, freeze specific token balances. This is a separate and complementary step to a disclosure order against a VASP. Where stolen funds have been converted to a stablecoin, a well-timed application to the issuer – or an order served on the VASP that holds the stablecoin balance – can freeze the asset in place while disclosure is pursued.
The choke-point strategy identifies the point in the on-chain trail at which funds must pass through a regulated entity: a licensed exchange, a stablecoin issuer, a payment processor linked to a bank. At that choke point, legal process can freeze or compel disclosure. The strategy works best when applied within hours to days of the theft, before funds reach a second or third choke point outside the practical reach of UAE process.
For a broader view of the on-chain tracing methods that underpin this approach, see our Crypto Asset Recovery insight hub. For the specific cross-border mechanics of stablecoin freezes in another common European forum, see our analysis of freezing stablecoins via VASPs in Ireland. For jurisdiction-specific context on the UAE recovery environment, our UAE jurisdiction guide covers the procedural landscape in more detail.
Frequently Asked Questions
Q: Can stolen crypto really be traced and frozen in the United Arab Emirates?
A: Yes – subject to the facts of the matter. Public blockchains are transparent: on-chain movements leave a trail even when identities are hidden. Where that trail leads to a virtual-asset service provider licensed in the UAE, courts in the UAE can order disclosure of account-holder identity and, separately, a freezing order over the digital assets held at that provider. Success depends on timing, the quality of the on-chain evidence, and the jurisdiction of the VASP. No outcome is guaranteed, but the pathway is real and has been used in practice.
Q: How quickly do I need to act after a crypto theft?
A: In most matters, hours to days is the operative window. Virtual-asset service providers and centralised exchanges routinely process withdrawals rapidly. Once funds leave a regulated exchange and re-enter a non-custodial wallet, the choke-point opportunity is lost until the next identifiable deposit. A without-notice disclosure application – meaning the order is sought before the VASP is told about it, to prevent alerting the account holder – requires an urgent filing. Delay narrows options. If funds moved today, act today.
Q: How is a real recovery specialist different from a recovery scam?
A: A genuine asset-recovery operation never promises a specific recovery amount, never charges an upfront fee as a condition of "unlocking" funds, and never claims to have a special channel into a blockchain or exchange. Recovery scams frequently target people who have already been defrauded once – they present as investigators or lawyers, charge advance fees, and disappear. A legitimate specialist explains the realistic pathway, coordinates with admitted local counsel, works within applicable law, and charges for investigative and coordination work that actually occurs. If a firm guarantees recovery, that is the warning sign. Axiom Trace does not guarantee outcomes. No honest firm does.
About Axiom Trace
Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed. In the UAE specifically, we coordinate closely with admitted local counsel because local procedure governs filing in each of the three forums described in this guide. We have supported matters involving on-chain tracing across multiple chains, cross-forum disclosure applications, and concurrent freezing and disclosure relief. To discuss a matter, contact info@axiomtracel.com.
Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. In the United Arab Emirates, Axiom Trace coordinates closely with admitted local counsel; local procedure governs the filing. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.
Recovering cross-border or crypto assets?
Confidential first review. We map tracing and recovery options and tell you honestly whether a matter is worth pursuing.
Request a case review