A payment leaves your wallet at speed. Within minutes it has cleared one chain, bridged to another, and landed at an address you have never seen. The instinct is to assume the money is gone. That assumption is wrong – and acting on it quickly enough is what separates a recoverable position from one that is not.
England & Wales offers one of the most developed legal systems in the world for freezing crypto assets: a proprietary injunction can be granted against persons unknown, a worldwide freezing order can reach assets held offshore, and a disclosure order against a virtual-asset service provider (VASP) can compel the exchange holding the funds to cooperate – sometimes within hours of the application. The process works, but only if you move before the assets are cashed out or bridged again.
This guide walks through the six steps that matter most, in order, with the timing and prerequisites that govern each one. As of early 2026, English courts remain the most receptive common-law forum for urgent crypto asset recovery applications, and that position is reinforced by a growing line of judicial decisions confirming the nature of digital assets as property susceptible to injunctive relief.
Why England & Wales is a Leading Forum for Crypto Asset Recovery
The English courts have confirmed that digital assets are capable of being property for the purposes of injunctive relief. That single point matters enormously. It means a claimant can apply for a proprietary injunction – asserting a continuing proprietary interest in specific tokens – not merely a personal claim for damages against the thief.
A proprietary claim travels with the asset, not just the defendant. If the tokens move to a third party (other than a bona fide purchaser for value without notice), the claimant's interest can follow them. That is the legal engine that makes on-chain tracing actionable rather than merely academic.
English courts have also accepted that proceedings can be served by NFT airdrop on unknown defendants whose wallet addresses are known but whose identities are not. A freezing order can be directed to a VASP outside England, asking it to freeze the relevant wallet or account pending identification of its owner. We regularly advise clients who first assumed that the anonymity of the on-chain environment was an absolute barrier. It is not. It is a delay – and one that good tracing work can often overcome.
The jurisdiction's strength comes from three directions at once: developed doctrine on digital assets as property; a court system accustomed to granting urgent without-notice relief; and a financial centre whose correspondent-banking relationships give enforcement real teeth. For a claimant chasing funds across two legal systems, the hard part is not establishing the claim – it is maintaining the pace before the asset moves again.
Step One: Preserve Evidence and Initiate On-Chain Tracing Immediately
Before any court application, you need a tracing picture. Without one, you cannot identify the respondent, the asset, or the forum where it currently sits – and without those three things, a judge cannot grant meaningful relief.
The first actions – ideally within the first 24 to 48 hours – are:
- Capture all wallet addresses involved: sender, receiver, and any intermediate hops you can identify from the transaction records.
- Record every transaction hash and timestamp. Screenshots are a start; export the raw chain data where possible.
- Identify the blockchain or blockchains involved. Public blockchains are transparent: every transfer is recorded on an immutable ledger, and blockchain-analytics tools can cluster wallets and attribute them to known entities.
- Note whether stablecoins are involved. Stablecoin issuers can, on appropriate legal process, freeze specific token balances – a separate and faster route that may run in parallel.
- Preserve communications: emails, messages, platform records, any documentation from the initial transaction.
On-chain tracing at this stage answers the most important question: has the asset reached a VASP or exchange choke point? If it has – or if it is likely to – then a disclosure order and a freezing order against the VASP become the primary tools. If the asset is still cycling through self-custodied wallets, the tracing picture must be built further before an application can be made precisely.
Do not wait for the trace to be complete before taking legal advice. The tracing and the legal preparation run simultaneously. Hours genuinely matter here; dissipation – conversion to cash, bridging to another chain, fragmentation across multiple wallets – narrows the recoverable position with every passing cycle.
Step Two: Assess Viability and Choose the Right Instrument
Not every crypto loss has the same recovery profile. A viability assessment looks at five things: the size of the loss relative to the cost of proceedings; the evidence of a traceable chain of custody; the current position of the asset; whether the thief or a VASP can be identified or located; and the existence of a proprietary claim.
The instruments available in England & Wales map to the facts:
- Proprietary injunction against persons unknown: used where the on-chain address is known but the identity behind it is not. The application can be made without notice. The order prevents the unknown defendant from dealing with the specific asset.
- Worldwide freezing order (WFO): used where the defendant can be identified, or becomes identifiable, and there is a real risk of dissipation. A WFO can, in principle, reach assets held outside England & Wales, subject to conditions and safeguards. It is a personal order, not a proprietary one, but the two can be obtained together.
- Norwich Pharmal order: compels a third party – typically a VASP or exchange – to disclose information to identify a wrongdoer. This is often the bridge between an on-chain address and a real-world identity. The application is made against the VASP, not the wrongdoer, and is typically without notice.
- Bankers Trust order: compels a bank or financial institution to disclose information about a customer's account in the context of tracing. Relevant where proceeds have been converted to fiat and landed in a bank account.
- Disclosure order against a VASP: functionally similar to a Norwich Pharmal order but targeted at the specific operational context of a crypto exchange – seeking KYC information, transaction records, and IP logs.
In our experience, the most effective approach combines a proprietary injunction and a Norwich Pharmal or VASP disclosure order in a single without-notice application. The injunction freezes the asset; the disclosure order produces the identity. You then serve both the injunction and the substantive proceedings on the identified defendant.
We have traced matters where the initial application produced an identity within days, and where the VASP cooperated quickly once a disclosure order was served. The process is not certain, but the path is well-established. To assess whether your specific facts support a freezing application, visit our crypto asset recovery resource hub.
Step Three: Build the Without-Notice Application
A freezing or disclosure application in England & Wales is typically made without notice to the defendant. The rationale is obvious in a crypto context: notifying the target gives them time to move the asset, and an asset moved before the order is served is an asset the order cannot reach.
Without-notice applications carry a significant duty. The applicant must give full and frank disclosure of all material facts – including facts that might weigh against granting the order. This is not a procedural formality. Failure on this duty can result in the order being discharged, potentially with adverse cost consequences.
The application bundle typically includes:
- A claim form (the substantive proceedings must be issued or shortly to be issued).
- A witness statement setting out the cause of action, the facts relied on, and the evidence of tracing to date.
- A draft order, precisely drafted to identify the asset, the respondent (even if described as "persons unknown" by reference to the wallet address), and the specific relief sought.
- The tracing evidence: blockchain-analytics output, transaction histories, wallet attributions.
- A cross-undertaking in damages, by which the applicant undertakes to compensate the respondent if the order turns out to have been wrongly granted.
The hearing is typically short and urgent. Judges in the Business and Property Courts in England & Wales are accustomed to crypto applications and understand the basic mechanics of on-chain transfer. The quality of the tracing evidence and the clarity of the draft order matter more than the sophistication of the legal argument at this stage.
A gagging or no-notification order – preventing the VASP from notifying its customer that a disclosure order has been served – is routinely sought alongside the disclosure order itself. Without it, the exchange's notification to the account holder could prompt immediate withdrawal of whatever fiat or tokens remain in the account.
How Does the Cross-Border Dimension Change the Picture?
Most crypto asset recovery matters are, in practice, cross-border matters. The VASP holding the asset may be incorporated in one jurisdiction, operated from another, and subject to licensing obligations in a third. The defendant may be unknown, or known but located abroad. The asset may have been bridged across chains and may be denominated in a token that has no single-jurisdiction home.
England & Wales manages this in several ways. A worldwide freezing order is personal to the defendant – it obliges them not to deal with assets wherever they are held, and can, in appropriate cases, be backed by orders requiring disclosure of all assets globally. A disclosure order against a VASP in a cooperative jurisdiction can be recognised and enforced locally with the assistance of allied counsel. Where the VASP is in a jurisdiction with an active mutual-legal-assistance or bilateral cooperation system, the English order can be the trigger for parallel local action.
The New York Convention provides a framework for recognising and enforcing foreign arbitral awards where an arbitral clause was part of the underlying transaction – relevant where the initial fraud arose out of a contractual relationship that included an arbitration agreement. Where no arbitration agreement exists, the English court's own jurisdiction as a seat for the substantive proceedings may itself provide the enforcement base.
The practical cross-border steps that run alongside the English application often include: instructing allied counsel in the VASP's jurisdiction to assist with local service and enforcement; preserving evidence in ways that are admissible in both the English proceedings and any parallel local proceedings; and monitoring the on-chain position in real time to catch any further movement that might prompt a variation of the order.
We coordinate closely with local counsel in England & Wales and with allied counsel in the jurisdictions where VASPs are domiciled. The English proceedings set the pace; the local execution makes them effective. For a detailed look at how stablecoin-specific freezing works in a civil-law context, see our note on freezing stablecoins via VASPs in the Netherlands.
Step Four: Serve the Order and Engage the VASP
An order that has been obtained but not served is worthless. Speed of service – particularly service on the VASP – is the operational step that matters most after the court grants relief.
Service on a VASP in England & Wales is generally straightforward if the exchange is registered or has a legal presence here. Service outside the jurisdiction – on a VASP registered in, say, a Caribbean or Asian jurisdiction – requires either permission to serve out, or reliance on local counsel in the VASP's home jurisdiction to effect service under local procedure.
Once served, a compliant VASP will typically:
- Freeze the relevant account or wallet balance pending further order.
- Provide the KYC documentation, transaction history, and IP logs required by the disclosure order.
- Preserve its own records in a form that can be adduced as evidence in the English proceedings.
If the VASP does not comply, enforcement options include contempt proceedings (for a VASP within the jurisdiction) and parallel local proceedings (for a VASP abroad). In our experience, most compliant exchanges respond to properly served court orders. The issue is usually not willingness but speed – and a well-drafted order with a clear timeline for compliance helps here.
Where stablecoins are involved, a parallel request to the stablecoin issuer to freeze the specific token balance can be made at the same time as the VASP application. Stablecoin issuers can, on appropriate legal process, freeze specific balances – a lever that operates at the protocol level, not just the exchange level, and that is therefore harder for the defendant to defeat by withdrawing to a self-custodied wallet.
Step Five: Identify, Pursue, and Enforce Against the Defendant
The disclosure obtained from the VASP – KYC documents, IP addresses, transaction records – is the material for identifying the wrongdoer. That identification then enables the claimant to amend the claim to name a specific defendant, to seek a worldwide freezing order against them personally, and to pursue the substantive proceedings.
A micro-case pattern we have encountered: a matter in Europe, late 2024, involving digital assets in the mid-six-figure range that had been transferred through three wallets before landing at a centralised exchange. On-chain tracing identified the exchange. A disclosure order was obtained in England & Wales without notice, served on the exchange's legal team within 24 hours, and the exchange provided KYC data within a matter of days under the order. The named individual was in a jurisdiction where the English judgment could be recognised. The asset had not yet been withdrawn. The matter did not resolve overnight – enforcement still required local proceedings with allied counsel – but the disclosure step was the one that made everything else possible.
The substantive claim will typically be framed as a proprietary claim (asserting a continuing interest in the specific tokens or their traceable proceeds) and a personal claim (for the tort of conversion, for unjust enrichment, or under the law of obligations as appropriate). Chabra relief – freezing assets held by a third party who is not themselves a wrongdoer but whose assets are available to satisfy a judgment – may also be relevant where the proceeds have been transferred to an associate or a connected entity.
Enforcement of an English judgment abroad depends on the bilateral enforcement relationship between England and the relevant foreign jurisdiction. Where no direct enforcement treaty applies, local proceedings to recognise and enforce the English judgment will be needed. That is the stage where allied counsel in the destination jurisdiction take the lead, working from the English judgment and the tracing record built in the English proceedings.
If you are assessing whether a cross-border matter of this kind is worth pursuing, the England & Wales jurisdiction guide at axiomtracel.com/insight/jurisdictions/england-wales/ sets out the procedural context in more detail.
Step Six: Avoid the Mistakes That Defeat Recovery
What kills a recoverable position? Delay is the most common factor. An asset that has cycled through five wallets, been converted to a privacy coin, and finally cashed out through an unregulated exchange in a non-cooperative jurisdiction is not beyond all hope – but the effort and cost required are significantly greater than if the matter had been identified at the first VASP choke point.
The second killer is contaminated evidence. Engaging a vendor who does not follow defensible forensic methodology, or capturing blockchain data in a form that is not admissible, creates problems at the disclosure and trial stage. Blockchain-analytics output used in an English court application needs to be capable of being explained, challenged, and relied upon by a witness who understands the underlying methodology.
The third – and an important one for any reader who has been approached after a loss – is the recovery scam. Recovery scams target fraud victims specifically. They promise what legitimate recovery cannot promise: a guarantee of funds returned, an upfront fee for services, an unrealistic timeline. A genuine recovery specialist will assess your matter honestly, tell you what is and is not achievable, and will not ask for a large upfront fee before any tracing work is done. The English courts do not guarantee outcomes; neither do we. What we can tell you is whether the tracing position is strong enough to support an application, and what that application is likely to cost versus what it is likely to recover.
The steps above cover the pattern for most crypto-freezing matters in England & Wales. Your matter turns on specific facts – where the asset is now, how fast it moved, and whether it has reached a VASP choke point. A confidential case review tells you whether a freezing application is viable and what it would take to pursue it. Contact us at info@axiomtracel.com to request one.
Related Resources
- Crypto asset recovery: hub for on-chain tracing, VASP choke points, and freezing digital assets
- England & Wales as a recovery forum: jurisdiction guide for cross-border and crypto matters
- Freezing stablecoins via VASPs in the Netherlands: how civil-law courts handle token freezes
Frequently Asked Questions
Q: Can stolen crypto really be traced and frozen in England & Wales?
A: Yes – and the English courts are among the most capable forums globally for doing so. Digital assets are recognised as property susceptible to injunctive relief. A proprietary injunction can be granted against persons unknown, identified by wallet address alone. A disclosure order against a virtual-asset service provider (VASP) can produce the identity behind the wallet within days. Whether a specific matter is recoverable depends on where the asset has moved and how quickly action is taken.
Q: How quickly do I need to act after a crypto theft?
A: Immediately. The window between the theft and cash-out at an exchange is often measured in hours. Once an asset has been converted to fiat and withdrawn, or bridged through a privacy protocol, recovery becomes significantly harder and more expensive. The tracing work and legal preparation run simultaneously; neither waits for the other. A freezing application in England & Wales can, in urgent cases, be heard the same day or the next business day. Every hour of delay reduces the available options.
Q: How is a real recovery specialist different from a recovery scam?
A: A legitimate asset recovery specialist will tell you honestly what is achievable, will not promise a guaranteed return, and will not demand a large upfront fee before conducting any tracing or legal work. Recovery scams specifically target fraud victims – people who are desperate and who have already lost money. They promise certainty where none exists, and they charge fees for nothing. If you have been approached by someone offering to recover your crypto for a fee paid upfront and guaranteeing results, treat that as a second fraud. Genuine asset recovery is conditional, fact-dependent, and honest about its limits.
About Axiom Trace
Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We routinely coordinate proceedings with local counsel in England & Wales and allied counsel in the jurisdictions where VASPs are domiciled and foreign judgments must be enforced. We work lawfully and within applicable sanctions regimes. Our work is honest about what recovery requires and what it cannot guarantee. To discuss a matter, contact info@axiomtracel.com.
Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. Axiom Trace routinely coordinates proceedings with local counsel in England & Wales; local procedure governs the filing. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.
Recovering cross-border or crypto assets?
Confidential first review. We map tracing and recovery options and tell you honestly whether a matter is worth pursuing.
Request a case review