A payment leaves your account. By the time you realise what happened, the funds have already reached Guernsey. The next hours – not days – determine how much of that loss can realistically be addressed.
When fraud proceeds land in Guernsey, the most effective response combines an immediate bank-notification, a prompt report to Guernsey's financial-intelligence unit, and an urgent application for a freezing injunction before the money moves again. Guernsey is a recognised offshore financial centre with a well-developed recovery system; its courts regularly grant interim relief – including freezing and disclosure orders – on short notice and without prior warning to the defendant.
This guide walks through the steps in sequence: what to do in the first hours, how to secure evidence, which instruments are available, and where the cross-border complications arise. As of early 2026, Guernsey's legal system remains one of the more accessible forums for urgent asset-preservation work by overseas claimants.
Why the first hours after fraud matter more than anything that follows
Speed is the single biggest variable in fraud recovery. Assets move; accounts are emptied; money is layered through further transfers before any court has been approached. In our experience, a freezing application filed within 24 to 48 hours of a fraud being discovered has materially better prospects than one filed a week later. This is not scaremongering – it reflects the mechanics of how proceeds are moved.
Guernsey is a serious financial centre, not an unregulated haven. That means regulated banks, a functioning financial-intelligence unit, and judges who understand what a freezing order is for. But it also means that the professionals on the other side of a fraud – the layers, nominee structures, and shell companies used to receive stolen funds – know the system too. They anticipate enforcement. They move money on timelines measured in hours.
What does this mean in practice? Do not wait for certainty before acting. The threshold for an urgent without-notice application is not proof of fraud beyond doubt – it is a serious arguable case combined with a real risk that assets will dissipate. Those two conditions are often met within the first day, if you have records of the transfer and a clear account of what happened.
The steps below assume you have just discovered the fraud or are within 72 hours of discovery. If more time has passed, the sequence changes slightly – but the principles remain the same.
Step 1 – Secure and preserve every piece of evidence you have
Before you contact anyone else, compile what you already hold. This takes 30 minutes and it directly affects whether any court will grant interim relief.
What to gather: all communications with the fraudster (email, messaging apps, voicemail); records of the payment authorisation (wire confirmation, SWIFT reference, payment instruction); account statements showing the debit; any identity documents, contracts, or invoices you were given; and screenshots of any website, platform, or social-media profile used in the fraud. Do not delete, edit, or attempt to "fix" anything – courts and investigators need originals, including metadata.
Save everything in at least two places: a local copy and a secure cloud backup. If the fraud involved a company email or corporate account, instruct your IT team immediately to preserve server logs. Evidence that exists now may not exist tomorrow if the fraudster realises you are aware.
One thing practitioners in cross-border recovery note is that victims often underestimate what they have. A partial email chain, a screenshot of a fake website, a voice recording of a cold call – these are all traceable threads. Preserve them all and let a specialist triage what is useful.
Step 2 – Notify your bank and request a recall or hold
Contact your sending bank immediately. Ask two things: whether the payment can be recalled, and whether they can place a hold on any corresponding account at the receiving end. Banks have internal escalation pathways for fraud; the sooner you invoke them, the longer the window stays open.
Be precise. Give the bank the exact payment reference, the amount, the date and time, and the beneficiary account details. A vague fraud complaint generates a slow response. A specific recall request, framed as a fraud notification, triggers a faster one.
Do not assume this step alone is sufficient – it rarely is. Banking recalls work best in the first hours, before the funds leave the beneficiary account. If the money has already moved within Guernsey or onward to another jurisdiction, a recall alone will not reach it. That is where legal instruments become essential.
Reporting to your bank is a necessary first step, but it is not a recovery strategy. We regularly advise clients who believed the bank was handling it, only to find – weeks later – that the funds had moved and the bank had simply logged a complaint. Parallel legal action is almost always required.
Step 3 – Report to Guernsey's financial-intelligence unit and relevant authorities
Guernsey has a dedicated financial-intelligence unit that receives fraud and money-laundering reports. A timely, well-structured report does two things: it creates an official record, and it can – in the right circumstances – prompt the financial-intelligence unit to issue a production order or an account-information notice to the receiving institution.
Your report should include: your identity and that of your organisation; the amount and payment details; everything you know about the beneficiary; a clear, chronological narrative of what happened; and copies of the key documents you preserved in Step 1.
Alongside the financial-intelligence unit, consider whether a police report is appropriate. Guernsey Police handle serious fraud matters. A contemporaneous police report is not required for civil proceedings, but it establishes the timeline of your knowledge – which is relevant if the defendant later argues delay on your part.
There is also a cross-border dimension here. If the fraud originated elsewhere and the funds merely passed through Guernsey, the financial-intelligence units in the origin and destination jurisdictions may also need to be notified. We coordinate that multi-forum reporting regularly, because a report in isolation to one authority rarely moves as fast as coordinated parallel reports to two or three.
How do Guernsey's courts deal with urgent freezing applications?
Guernsey's Royal Court can grant a freezing injunction – an order that prevents a defendant from dealing with assets up to the value of your claim – on an urgent, without-notice basis. This means the court can act before the defendant knows proceedings have been brought. A freezing injunction applied for without notice is specifically designed to prevent a defendant from dissipating or moving assets once they learn a claim is coming.
To obtain a freezing injunction, you need to satisfy the court on three broad grounds: that you have a good arguable case; that the defendant has assets within the jurisdiction (or assets reachable through Guernsey); and that there is a real risk those assets will be dissipated if notice is given. In fraud cases, dissipation risk is usually straightforward to establish – the nature of the fraud itself provides much of the evidence.
Alongside a freezing injunction, you can seek a disclosure order requiring the defendant, their bank, or another third party to reveal account information and asset locations. The equivalent of a Bankers Trust order – compelling a bank to disclose a customer's account details for tracing purposes – is available in Guernsey and regularly used in recovery matters. A Norwich Pharmal-style order, compelling a third party to identify the wrongdoer, is also part of the toolkit.
We routinely coordinate proceedings with local counsel in Guernsey on exactly these applications. Drafting is fast when the evidence is well-organised; a without-notice application can sometimes be before a judge within 24 to 48 hours of instruction.
How quickly can this happen? That depends on the quality and organisation of your evidence, the availability of local counsel, and the court's emergency list. Measured in realistic terms: days, not weeks, if the matter is prioritised. Every day of delay is a day in which funds can move.
What happens when the money has already left Guernsey?
This is the scenario every recovery practitioner fears – and the one that requires the most careful strategy. Funds do not always stay where they first land. They are layered: transferred from the initial recipient account to a second account, then to a third, sometimes offshore, sometimes converted to another currency, sometimes into crypto assets.
Several tools remain available even when funds have moved on. First, a Guernsey freezing injunction can, in principle, reach assets held by the defendant anywhere – a worldwide freezing order applies to assets globally, not merely within the island. Second, tracing evidence gathered through a Bankers Trust order in Guernsey can follow the money to the next jurisdiction, providing the foundation for proceedings there. Third, Guernsey courts can issue letters of request to obtain evidence or compel disclosure in foreign jurisdictions.
If funds have moved into crypto assets – a pattern we have traced in several matters – on-chain tracing becomes central. Public blockchains are transparent: every transaction is recorded, and wallet-to-wallet movements can be reconstructed even when the identities behind the wallets are obscured. A disclosure order against a centralised exchange or virtual-asset service provider (VASP) can then convert on-chain intelligence into a named account holder.
A matter we coordinated in late 2024 involved funds in the mid-six-figure range that moved from a Guernsey account to a cryptocurrency exchange within 48 hours of the fraud being reported. On-chain tracing identified the destination wallets; a disclosure order against the exchange produced the account-holder data; and a proprietary injunction over the digital assets followed. The process was possible only because the evidence was preserved and proceedings were initiated before the exchange distributed the funds.
The cross-border dimension here is always the hardest part. Different forums require different applications, different local counsel, and different procedural timelines. Coordinating them simultaneously – rather than sequentially – is what prevents one jurisdiction from moving faster than your enforcement keeps pace.
If you are at this stage and the funds have already moved, do not assume the trail has gone cold. Contact us for a case review: the viability of tracing across multiple jurisdictions depends on specific facts that a standard online guide cannot assess. Request a confidential case review at info@axiomtracel.com.
Recognising the myth: reporting to the bank is not a recovery strategy
The most persistent misconception among fraud victims in the first hours is that reporting to their bank – and waiting – is the right response. It is not a complete response. It is one part of a multi-track response.
Banks process fraud complaints within their own internal systems. Those systems are not designed to freeze assets in a foreign jurisdiction, gather disclosure from a third party, or apply for a worldwide freezing order. A bank will do what its procedures allow; anything beyond that requires legal action brought by or on behalf of the victim.
There is a second misconception worth addressing directly: that all recovery firms operate the same way, and that a firm offering quick-turnaround guaranteed recovery is equivalent to a specialist who works through courts and formal legal process. They are not the same. Recovery scams – sometimes called advance-fee fraud or recovery-room fraud – specifically target people who have already been defrauded. They promise recovery for an upfront fee and deliver nothing.
Legitimate recovery work is conducted through courts, licensed financial-intelligence channels, and legal instruments. It involves local counsel in the relevant jurisdiction, forensic tracing, and formal proceedings. It does not promise a specific outcome or guarantee recovery. If you are approached by a firm offering certainty or demanding a fee before any work is done, treat that as a warning sign, not a lifeline.
We have traced funds for clients who came to us after paying advance fees to a recovery scam – meaning they suffered a second loss on top of the original fraud. That pattern is preventable, but only if victims know to look for it.
Building a coordinated recovery strategy across borders
The steps above – evidence preservation, bank notification, financial-intelligence unit report, legal proceedings in Guernsey – form the foundation. They are not, in most cross-border fraud cases, the whole picture.
Guernsey is often one node in a larger structure. The fraudster may be domiciled elsewhere. Proceeds may have moved through Guernsey and on to another offshore centre, or into an onshore account in a major financial hub. The corporate entities used to receive the funds may be registered in a third jurisdiction entirely. Tracing the beneficial owner behind a nominee structure – and piercing the corporate veil to reach the real defendant – frequently requires proceedings in more than one forum simultaneously.
In our experience, the clients who achieve the best outcomes are those who coordinate legal action across forums from the start, rather than exhausting one jurisdiction before moving to the next. This requires a strategy: mapping where the assets are, which forums have the most effective interim-relief tools, and in which order to move.
For matters where Guernsey is the first stop but not the last, visit our Guernsey recovery guide for a detailed account of how local proceedings interact with offshore and cross-border enforcement. For a broader picture of the fraud typologies that most commonly drive assets into offshore centres, the Fraud Response insight library covers the patterns we see most often. If the facts in your matter involve a neighbouring Channel Islands jurisdiction, our analysis of what to do when scam money lands in Jersey covers comparable steps under Jersey law.
The next step is a case review. The steps above define the path, but whether each is viable in your specific matter depends on facts that require analysis: where the money is now, what evidence you have, what the defendant's structure looks like, and which courts are best placed to act. Request a confidential case review: info@axiomtracel.com.
Frequently asked questions
Q: What should I do in the first hours after a fraud?
A: Preserve all evidence first – do not delete anything. Then notify your sending bank with exact payment details and request an urgent recall. Report to Guernsey's financial-intelligence unit with a clear, document-supported narrative. In parallel, instruct a specialist to assess whether a without-notice freezing injunction or disclosure order should be applied for in Guernsey. Every hour that passes before a legal hold is in place is an hour in which assets can move beyond reach.
Q: Is my loss realistically recoverable?
A: Recovery depends on specific facts: how quickly you act, where the funds are now, what evidence you have, and which legal system can reach them. There is no universal answer, and any firm that promises guaranteed recovery or a specific percentage is not being honest with you. What we can say is that fast, disciplined first steps – evidence preservation, bank notification, and urgent legal action – keep more options open than waiting. A case review at info@axiomtracel.com will give you an honest read on viability for your specific situation. You can also use the asset recovery viability check at /viability-check/ as a starting point.
Q: How do I avoid a second, recovery-focused scam?
A: Recovery scams – sometimes called advance-fee fraud or recovery-room fraud – target people who have already been defrauded. Warning signs include upfront fees before any work begins, promises of guaranteed outcomes or specific recovery percentages, and pressure to act immediately without time to verify the firm's credentials. Legitimate asset recovery involves formal legal proceedings, local admitted counsel, and forensic tracing. It does not promise certainty. If you are in doubt about a firm approaching you, ask for detail on the legal process they use and the local counsel they instruct. Vague answers are a warning sign.
About Axiom Trace
Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed. We routinely coordinate proceedings with local counsel in Guernsey for urgent freezing, disclosure, and tracing matters. Our approach begins with an honest assessment of what is realistically recoverable before any commitment is made. To discuss a matter, contact info@axiomtracel.com.
Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. Axiom Trace routinely coordinates proceedings with local counsel in Guernsey; it does not itself hold itself out as admitted to practise Guernsey law. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.
Recovering cross-border or crypto assets?
Confidential first review. We map tracing and recovery options and tell you honestly whether a matter is worth pursuing.
Request a case review