A payment clears before the victim realises anything is wrong. By the time the fraud is confirmed, the money has already passed through a correspondent account and settled in Cyprus. The question is no longer whether to act – it is whether there is still time to act effectively.
In this anonymised matter, Axiom Trace coordinated a freezing application in Cyprus within days of confirmed loss. The target assets were located, an interim injunction was obtained through local admitted counsel, and a parallel disclosure order was used to trace further movement. Speed and preparation decided the outcome – not the size of the claim.
This case study walks through the situation, the strategy, the process, and the transferable lessons for any matter where funds have reached a Cyprus-based account or entity.
Situation: funds moved to Cyprus and layered through a corporate structure
In early 2025, a mid-sized trading company in Western Europe discovered that a business-email compromise had caused it to transfer a substantial sum – in the high six figures – to an account held by an entity registered in Cyprus. The transfer was made in good faith, on the basis of fraudulent payment instructions. By the time the fraud was identified, approximately 72 hours had elapsed.
Initial checks showed the receiving entity was a private limited company with a nominee structure. The beneficial owner was not apparent from public records alone. The victim's bank had been notified, but the correspondent bank confirmed the funds had already settled. Reporting to the bank, on its own, was not going to recover anything.
Cyprus was chosen by the fraudster deliberately. It is a common-law jurisdiction with a functioning court system, but it also sits within a corporate environment known for nominee and trust structures that can obscure beneficial ownership. The combination of legal accessibility and corporate opacity is exactly what makes Cyprus both a viable recovery forum and a favoured layering destination.
Strategy: why Cyprus and which instruments to use
Cyprus courts apply principles derived from English common law, which means the full range of interim relief familiar to English practitioners – including freezing injunctions, disclosure orders, and proprietary injunctions – is available. We coordinate closely with admitted local counsel in Cyprus; local procedure governs the filing, and Axiom Trace operates as the investigation and coordination layer behind it.
The strategy had three elements. First, a without-notice freezing injunction to prevent the funds being moved or dissipated while the application was prepared. Second, a disclosure order directed at the bank holding the account, to obtain account information and trace further movement. Third, a parallel investigation into the corporate structure – using access to the UBO register and nominee arrangements – to identify the individual behind the receiving entity.
A freezing application made without notice is a standard feature of urgent recovery work: the defendant must not be tipped off before the order is in place. Any delay in filing, or any communication that inadvertently warned the target, would have been fatal to the strategy.
The steps above reflect a pattern we have seen across multiple matters. Your specific situation – where the funds went next, whether further layering occurred, and which forums can still act – determines whether this path is open to you. To assess whether a Cyprus-based freezing application is viable for your matter, contact info@axiomtracel.com.
Process: from confirmed loss to frozen account
Within hours of formal instruction, Axiom Trace began the forensic preparation. This meant reconstructing the payment trail from the victim's bank through the correspondent system to the receiving account in Cyprus, identifying the registered address of the receiving entity, and obtaining whatever public-record information was available on the structure.
Admitted local counsel in Cyprus was engaged the same day. A draft application for an interim freezing injunction was prepared overnight. The evidential requirements for a without-notice application in Cyprus require the applicant to demonstrate a good arguable case, a real risk of dissipation, and full and frank disclosure to the court. Each element was addressed in the supporting materials prepared by Axiom Trace and reviewed by local counsel.
The court heard the application and granted an interim freezing injunction within two business days of instruction. A disclosure order against the receiving bank followed shortly after. The account – at the point the injunction took effect – still held the majority of the original transferred sum. A smaller portion had moved onward, and a second tracing exercise was initiated to follow that movement.
The nominee structure was then addressed through the UBO register, supplemented by the information disclosed under the bank order. The beneficial owner was identified as an individual resident outside Cyprus. That information was shared with the victim's lawyers to support a claim for the underlying fraud.
In our experience, the difference between accounts that are successfully frozen and those that are not comes down to a single variable: how quickly the investigation and application were prepared after confirmed loss.
Transferable lessons for fraud victims and referring lawyers
What does this matter teach? Several things apply across similar recoveries – wherever in the world the money has landed.
- Reporting to your bank is not enough. Banks can recall a transfer while it is still in transit, but once funds settle in a foreign account, a court order is required to freeze them. Notification to the bank is a first step – not a recovery strategy.
- Cyprus is a usable forum. Its common-law procedural system means interim relief is available and recognisable to English-speaking practitioners. But the corporate opacity of many Cyprus-registered entities means the disclosure side of the process is as important as the freezing side.
- The UBO register alone is not sufficient. In this matter, the register provided a starting point, but the disclosed information was incomplete. The bank disclosure order was what produced usable intelligence.
- Cross-border enforcement adds a layer. Where the beneficial owner is resident outside Cyprus, enforcing against that individual requires a further step – recognition and enforcement of a Cyprus judgment or order in the target's home jurisdiction. That process must be anticipated from the outset.
- Recovery-scam risk is real. After a fraud is confirmed, victims are frequently approached by operators claiming to offer recovery services. Real recovery work is investigative and court-based; it does not require upfront fees to "unlock" frozen funds or promises of guaranteed return. If anyone promises certainty, treat it as a warning sign.
Do you have funds already confirmed as having reached Cyprus? The question of whether a freezing application is still viable depends on how much time has passed and what movement – if any – has occurred since the funds settled. A confidential case review can give you a realistic assessment. Contact info@axiomtracel.com.
For broader context on fraud response and first-step guidance, see the Fraud Response insight hub. For jurisdiction-specific information on Cyprus recovery proceedings, visit our Cyprus recovery page. For a related alert on how UBO register changes affect tracing across coordinated jurisdictions, read our analysis of UBO register access changes and recovery implications.
About Axiom Trace
Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed. We coordinate closely with admitted local counsel in Cyprus; local procedure governs the filing of any application there. In our experience, the matters where recovery remains realistic are those where investigation begins within the first days after confirmed loss. To discuss a matter, contact info@axiomtracel.com.
Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. Axiom Trace coordinates closely with admitted local counsel in Cyprus; local procedure governs the filing of any proceedings there. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.
Recovering cross-border or crypto assets?
Confidential first review. We map tracing and recovery options and tell you honestly whether a matter is worth pursuing.
Request a case review