First steps after fraud if funds went to Georgia

You authorised the transfer. The money left. Now it is sitting in a Georgian bank account – or was, moments ago – and you have no idea what happens next.

The first hours after fraud in Georgia are the hours that determine whether recovery is possible at all. Acting quickly, in the right order, preserves evidence, keeps legal options open, and prevents the funds from moving again. This guide sets out the steps – what to do, what not to do, and where Georgia's legal environment sits in a cross-border recovery.

The sections below take you from the moment you notice the loss through to the point where a specialist can give you a realistic assessment of what is recoverable.

Why Georgia? Understanding the jurisdiction you are dealing with

Georgia is a civil-law jurisdiction with a developing but functioning court system and a banking sector that has grown quickly. It is not an offshore secrecy hub. Banks in Georgia are regulated and subject to know-your-customer requirements. That matters, because it means a receiving account leaves a trail.

Georgian courts can, in principle, issue interim protective measures over assets held within the country. Enforcement of foreign judgments is possible, but the procedural requirements are specific to Georgia, and admitted local counsel must act on the ground. This is not a jurisdiction where a claimant can act alone or rely on a foreign court order landing automatically.

In our experience, fraud proceeds routed to Georgia often do not stay there. The country functions as a transit point as much as a destination. Funds may move onward to other Caucasus or Central Asian accounts within days, or be converted to cash or crypto. That is the core time pressure. Every day of inaction shortens the list of available options.

Is the receiving bank a domestic Georgian institution, or is it the Georgian branch of an international bank? The answer shapes which correspondent banking relationships can be engaged and whether the receiving bank has obligations that run beyond Georgian law alone.

What should I do in the first hours after a fraud?

Stop further payments first. If you use online banking, log in and cancel any pending instructions immediately. Call your bank's fraud line – not the general number, but the dedicated fraud or payments desk – and ask them to initiate a recall or a payment hold. Banks typically have hours to act on a recall before settlement finalises; after that, the leverage shifts to the receiving side.

Write down everything before memory distorts it. The time the payment was authorised. The account details you were given. Every communication – email, text, phone call, document – that preceded the transfer. Do not delete anything. Do not forward anything to third parties without retaining the original. Screenshots, taken immediately, are admissible evidence in most jurisdictions; deleted messages are not recoverable in the same way.

Preserve your devices. If the fraud involved a communication sent to you, the device that received it is evidence. Do not wipe or reset it. If a payment platform was compromised, do not log back in repeatedly – you may overwrite access logs that a forensic examiner could have used.

Contact your sending bank's fraud team and ask them to send a SWIFT recall message to the receiving bank in Georgia. This is a standard interbank process. It does not guarantee return of funds, but it creates a formal record and triggers the receiving bank's own obligations. Ask for written confirmation that the recall has been sent.

If the amount is material, instruct a specialist at the same time as you contact the bank – not after. Waiting for the bank's response before seeking specialist advice is one of the most common and costly mistakes we see. The bank's recall process and a legal application can run in parallel; they are not mutually exclusive.

Preserving evidence: what courts in Georgia will need

Evidence gathered in the first 48 hours tends to be the most reliable and the most complete. Courts and investigators working a Georgian matter will want to see the original payment instruction and authorisation, all communications with the fraudster, bank statements showing the outgoing transfer, and any corporate or identification documents the fraudster provided.

The quality of that evidence affects everything that follows. A disclosure application – an order compelling a bank to reveal account information – depends on the court being satisfied that there is a genuine and particularised claim. Vague allegations produce vague orders, if any.

In our experience, victims who have assembled a clean evidence bundle before seeking legal help move considerably faster than those who have to reconstruct the picture from memory weeks later. A forensic examiner can help structure that bundle, but the raw material has to be preserved first.

Keep a log of everyone you have spoken to about the matter: name, date, time, what was said, and what action they committed to. That log becomes the case management record if litigation follows.

Which legal tools apply to a Georgian recovery?

The instruments available depend on where the application is made, not just where the money went.

If you are a claimant based in a common-law jurisdiction – England and Wales, for example – a worldwide freezing order can, in principle, reach assets in Georgia. A freezing application made without notice to the defendant is measured in hours to days, not weeks. The order is then the basis for engaging local counsel in Georgia to seek recognition and enforcement under Georgian procedural law. That two-stage process takes time, which is why the first-stage application must happen fast.

A disclosure order, such as a Norwich Pharmal order in an English court, can compel a bank or institution to disclose information about the account to which funds were sent. The receiving bank in Georgia may also have obligations under its own regulatory framework if approached through proper legal process. Local admitted counsel must be instructed to make that application in Georgia.

Where the fraud has a criminal dimension – and in most cases it does – a criminal complaint filed in Georgia can trigger investigative measures that a civil claimant alone cannot access. Georgian authorities can request account freezes and document production through criminal process. Whether that route runs in parallel or supersedes the civil route is a tactical decision that depends on the specific facts.

If funds have already moved on from Georgia to another jurisdiction, the enforcement picture changes again. Each hop adds a layer of procedure. But the on-chain trail, if the funds converted to crypto, or the correspondent banking trail, if they moved by wire, is traceable. That tracing work should begin immediately, alongside the legal applications.

The steps above describe general practice in cross-border fraud matters. Because Georgia is treated as a content-only jurisdiction here, local admitted counsel must act on the ground for any filing or formal process. Axiom Trace coordinates that engagement; we do not practise Georgian law directly.

To assess whether a Georgian-routed fraud is realistically recoverable, and which instruments apply to your specific facts, request a confidential case review: info@axiomtracel.com.

Does reporting to the police actually help?

Yes – and it matters more than most victims expect. A police or financial-intelligence report in your home jurisdiction creates an official record. That record can support a mutual legal assistance request to Georgian authorities, which is one of the channels through which a foreign state can ask Georgia to freeze an account or preserve documents.

The limitation is speed. Mutual legal assistance is a slow process measured in months, not days. It is not the first-line tool for protecting assets that are moving. But it is an essential parallel track, because it creates the institutional pressure that sometimes produces results when the private civil route stalls.

Report to your national financial intelligence unit or equivalent as well as to the police. In many countries, these are separate bodies with different powers. Both filings cost nothing and both can contribute to the recovery effort.

Do not wait for the police investigation to progress before pursuing civil remedies. The two tracks are independent. A police file does not substitute for a freezing application, and a freezing application does not depend on a police investigation having started.

Cross-border complications: when the money has already moved on

Georgia is frequently a transit jurisdiction. If the receiving account was swept quickly – within hours of receipt – the funds may already have moved to a second or third destination. That complicates the picture, but it does not end it.

Every banking transfer leaves a record. Every SWIFT message creates a log. Correspondent banks that processed the onward transfer have their own record-keeping obligations. A forensic payment-trail reconstruction can follow the money through multiple hops, identifying where it currently sits or where it was last seen before being converted to cash or crypto.

On-chain tracing applies where funds were converted to a digital asset at any stage. Public blockchains are transparent: on-chain movements are traceable even when identities are hidden behind wallet addresses. Blockchain-analytics tools can identify clusters of wallets, exchanges where funds were deposited, and the point at which a stablecoin or other token was cashed out. A freezing order can then be sought over those digital assets, including against a virtual-asset service provider that holds the relevant wallet.

Where funds crossed more than one jurisdiction, the enforcement strategy becomes multi-forum. That means coordinating applications in parallel – something that requires specialist coordination between the tracing team and local counsel in each relevant jurisdiction. In our experience, that coordination is the most time-sensitive element of the whole exercise.

The complexity of a multi-hop, multi-jurisdiction matter should not discourage action. It should accelerate it. The longer the chain grows, the harder it becomes to trace and the more jurisdictions must be engaged simultaneously.

How to avoid a second fraud: the recovery-scam risk

After a fraud, the victim is targeted again. This is not a coincidence. The fraudster who took your money may sell your details to a recovery-scam operator, or may themselves contact you posing as a recovery specialist, a law enforcement contact, or a technology company that can "reverse" the transaction.

Recovery scams are the second theft. They succeed because the victim is distressed, the first fraudster appeared legitimate, and the offer of recovery feels like relief. The warning signs are: a fee demanded upfront, a promise of a specific recovery amount or percentage, urgency designed to prevent you from taking advice, and contact initiated by the recovery firm rather than by you.

Legitimate asset recovery is conditional, not guaranteed. No practitioner who works lawfully can promise a specific sum or percentage. Fees may be structured in different ways, including conditional arrangements, but no upfront fee should be paid to an unknown firm without independent verification of who they are and how they operate.

Axiom Trace does not cold-call victims. We do not promise recovery percentages. We take matters on the basis of an honest assessment of viability – and we will tell you if the prospects do not justify the cost.

If you have already been approached by a recovery firm and are unsure whether it is legitimate, request a confidential second opinion before paying anything: info@axiomtracel.com.

Assessing viability: is the loss worth pursuing?

Not every fraud is recoverable. That is an honest statement, not a discouraging one. The variables that matter most are the amount lost relative to the cost of recovery, how quickly action was taken, whether the funds are still identifiable and localised, and whether the fraudster has any attachable assets.

Georgia-routed matters can be pursued where the funds are still in the receiving account or where the onward trail is short and traceable. Where funds have been swept through multiple jurisdictions over several weeks, the cost-benefit analysis shifts, and a specialist needs to give you a realistic read on whether the effort is warranted.

Speed of action is the single variable most within a victim's control. Funds move fast. Legal processes, even urgent ones, take time to initiate. The gap between a fraud and the first legal step is the window in which dissipation most often occurs.

Our Georgia recovery briefing sets out the procedural context in more detail. For a broader picture of how fraud typologies affect recovery options, the Fraud Response insight section covers the range of scenarios we see in practice. If your matter has a cross-border dimension involving another jurisdiction, the Estonia cross-border update illustrates how jurisdictional changes affect recovery strategy.

The steps above cover the typical pattern for a Georgia-routed fraud. Your matter turns on specific facts – where the money went, how fast, and which forums can act in time. A confidential case review tells you whether it is worth pursuing and what the first steps would look like for your situation: info@axiomtracel.com.

Frequently asked questions

Q: What should I do in the first hours after a fraud?

A: Contact your bank's fraud desk immediately and ask them to initiate a payment recall to the receiving bank in Georgia. Preserve all evidence – communications, documents, screenshots – without deleting anything. Report to police and your national financial intelligence unit. Instruct a specialist in parallel, not after waiting for the bank to respond. The first hours determine whether a freezing application is viable; delay narrows the options available to you.

Q: Is my loss realistically recoverable?

A: It depends on the specific facts: how quickly you acted, whether the funds are still traceable in Georgia or have moved on, and what the amount is relative to recovery costs. Some Georgia-routed fraud matters are recoverable; others are not cost-effective to pursue. A proper viability assessment requires a specialist to review the evidence you have – the payment trail, the fraudster's account details, and the timeline. We will give you an honest answer, not a guarantee.

Q: How do I avoid a second, recovery-focused scam?

A: Be alert to any firm that contacts you unsolicited, demands an upfront fee before work begins, or promises a specific recovery amount or percentage. Legitimate asset recovery is conditional on the facts; no recovery specialist who works lawfully can guarantee an outcome. Verify any firm independently before paying anything. If you have been approached and are unsure, request a second opinion from an independent specialist before committing funds.

Related insight

• Fraud Response – insight and guidance for fraud victims and insolvency practitioners
• Georgia: cross-border asset recovery briefing
• What changed in Estonia for cross-border asset recovery

About Axiom Trace

Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed. In our experience, the matters that produce the best outcomes are those where the client acted quickly and brought disciplined, specialist help to bear in the first days – not the first weeks. We assess each matter honestly and will tell you clearly when the prospects do not justify the cost of pursuit. To discuss a matter, contact info@axiomtracel.com.

Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. The steps described above reflect general practice; because Georgia is a content-only jurisdiction for these purposes, admitted local counsel must act on the ground for any filing or formal process. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.