How to report cross-border fraud effectively

A payment leaves your account on a Tuesday. By Thursday, the funds have cleared a correspondent bank in one country, passed through a corporate account in a second, and arrived at a wallet or cash-out point in a third. Every hour that passes closes one door or opens another – and the doors close faster than most victims expect.

Reporting cross-border fraud effectively means moving along two tracks simultaneously: making formal notifications to preserve legal options, and securing the evidence trail before it degrades. Neither track alone is sufficient. Done together – and done quickly – they keep the widest range of recovery instruments available.

This guide covers each step in sequence, from the first hours after discovery through to instructing specialist recovery counsel. It addresses the cross-border complexity that makes fraud of this kind harder to report than a purely domestic loss.

Why the first hours after discovery define your options

The most important window in cross-border fraud recovery is the one most victims spend in shock. Dissipation – the movement, conversion, or concealment of stolen funds – can begin within hours of a fraud being executed. Freezing orders and disclosure orders both depend on assets still being reachable. Once funds are layered through enough jurisdictions, or converted to a form that obscures the trail, even well-resourced recovery efforts face long odds.

In our experience, victims who act within 24 to 48 hours preserve meaningfully more options than those who wait days. That is not scaremongering. It reflects how payment rails and crypto networks actually operate.

What should you do in that window? Three things, in parallel:

• Contact your bank immediately and ask them to issue a recall or stop on the payment.
• Preserve every document, message, and instruction that relates to the transaction.
• Note every fact you know about the recipient: account details, names, email addresses, phone numbers, wallet addresses if applicable.

None of these steps require a lawyer. All of them become harder if delayed.

How do you notify your bank – and what does that actually achieve?

A bank notification is not a recovery mechanism. It is a first step that may slow the funds and creates a formal record. Contact the fraud desk of your bank directly, not just your relationship manager, and ask explicitly for a payment recall or a stop instruction. Provide the full payment reference, beneficiary account details, the date and amount, and the reason you believe the payment was unauthorised or induced by fraud.

Banks operating under anti-money-laundering regimes have obligations when they receive credible fraud notifications. A well-drafted notification – calm, factual, referencing the relevant transaction identifiers – is more effective than a distressed call. If the payment passed through a correspondent bank, your bank may be able to contact that institution directly. Ask whether they will do so and keep a record of the answer.

What the bank cannot do is freeze funds held at a third-party institution without a court order. That is the limit of this step. It is an important first step, but it is not enough on its own – contrary to one of the most common misconceptions we encounter.

For businesses, notify your internal finance and compliance teams immediately so that related accounts can be monitored for further unauthorised activity.

Which authorities should you report to, and in what order?

Cross-border fraud involves, by definition, more than one jurisdiction. Reporting to a single authority in your home country will rarely, by itself, unlock recovery tools in the countries where the funds now sit. Reporting must reach the right level in each relevant jurisdiction.

As a general guide, work through the following layers:

• Your domestic financial intelligence unit or fraud reporting body. Most jurisdictions maintain a dedicated channel for financial crime reports. File there first. Your report creates a reference number that can be cited in later applications.
• The police or economic crime unit in your jurisdiction. A formal police report is often a prerequisite for obtaining a Norwich Pharmal order or a Bankers Trust order from a civil court – the disclosure instruments that compel banks and third parties to identify where funds went.
• The authority in the destination jurisdiction. If you know or can identify the country where funds arrived, a parallel report to the relevant financial intelligence unit or law-enforcement body in that jurisdiction is worth making. This is harder without local counsel, but it opens a second track.
• Relevant regulators if a licensed entity was involved. If the fraud was perpetrated through or with the involvement of a regulated entity – a broker, a payment institution, a virtual-asset service provider (VASP) – report to the regulator that authorised them. Regulatory pressure can move faster than civil proceedings in some cases.

Filing with multiple authorities is not duplicative. Each filing serves a different legal purpose and can generate independent investigative or enforcement action. Coordinate the filings so they are consistent in the facts stated.

What evidence do you need to preserve, and how?

Evidence preservation is where most self-managed reports fall short. Courts considering freezing orders and disclosure orders will scrutinise the evidence you provide. Gaps in the documentary record weaken applications and give defendants room to challenge.

Preserve, in original and unmodified form:

• All emails, messages, and call records relating to the fraud, including any that arrived before the transaction – the grooming or instruction stage.
• The payment instruction or transfer documentation itself, including any screen recordings or screenshots made at the time.
• All account statements showing the outgoing payment and any preceding unusual activity.
• Any websites, company registrations, or LinkedIn profiles associated with the fraudster – these can be taken down quickly, so capture them early using a dated screenshot.
• If the fraud involved crypto: the wallet addresses to which funds were sent, any transaction hashes, and records of any communications that occurred through the platform.

Store copies in at least two separate locations. Do not alter, annotate, or forward the originals without keeping an unmodified copy. If you have already forwarded documents, note the date and recipient – do not try to reconstruct a false sequence.

In crypto-related fraud, on-chain tracing can follow fund movement across wallets and exchanges even when the fraudster has tried to obscure the trail. Public blockchains are transparent: on-chain movements are traceable even when identities are hidden. Early preservation of transaction data – before exchanges purge records or the fraudster moves further – matters greatly.

When should you instruct specialist recovery counsel?

As soon as you have notified your bank and secured your evidence, seek specialist advice. Do not wait for a police investigation to conclude. Police investigations in cross-border fraud cases can take months or years; civil recovery through interim relief operates on a different timescale and a different legal track.

The civil track – using a worldwide freezing order, a proprietary injunction, a Norwich Pharmal order, or a Bankers Trust order – can run independently of any criminal process. In appropriate cases, a without-notice application for freezing relief can be heard within hours to days. A freezing or disclosure application is typically made without notice to avoid tipping off the defendant. That means your instruction to counsel must itself be handled discreetly.

When assessing a recovery firm or set of lawyers, ask these questions:

• Do they work in the jurisdictions where the funds actually went?
• Can they coordinate with local counsel in those jurisdictions directly, or will they need to find someone?
• Do they have experience obtaining without-notice relief?
• Do they distinguish clearly between tracing, freezing, and enforcement – or do they treat "recovery" as a single step?

Recovery is not a single step. Tracing establishes where assets are. Freezing immobilises them. Enforcement converts a judgment or order into actual receipt. Each phase has different requirements and different costs.

The steps above cover the typical pattern in the first days after a fraud. Your situation turns on specific facts – where the money went, how fast, and which forums are available to act. A confidential case review can tell you whether the matter is realistically pursuable and what the likely path looks like. Contact us at info@axiomtracel.com to request one.

How does the cross-border dimension change what you must do?

A domestic fraud – payee and payer in the same jurisdiction, funds never leaving – is hard enough. Cross-border fraud adds three distinct complications.

First, jurisdiction. Courts grant relief over assets within their territory. To reach assets in a second country, you either obtain a worldwide freezing order from a court with personal jurisdiction over the defendant (and then enforce it abroad), or you initiate parallel proceedings in the destination jurisdiction. Both paths require local counsel on the ground.

Second, cooperation timelines. Letters of request – the formal mechanism for one court to seek assistance from a court in another jurisdiction – can be slow. In urgent cases, practitioners often use without-notice applications in the destination jurisdiction, instructing allied local counsel directly. This is faster but requires that local counsel be identified and briefed immediately.

Third, sanctions and compliance. If funds have moved to or through a jurisdiction subject to international sanctions, recovery proceedings must be structured to comply with applicable sanctions regimes. This is not a reason to abandon recovery; it is a reason to instruct counsel who understands the constraints and works within them.

For matters involving crypto, the cross-border dimension is even more compressed. Funds can move across dozens of wallets in multiple countries within minutes. On-chain tracing can follow that movement, but exchange choke points – the VASPs or centralised exchanges where crypto is ultimately converted – are the practical enforcement lever. Disclosure orders against VASPs, or stablecoin issuer freezes in appropriate cases, are the instruments most commonly used at that stage.

We regularly advise on matters where funds have crossed three or more jurisdictions before the client contacted us. The honest message is that more crossings mean more cost and more complexity – but they do not make recovery impossible.

How do you avoid a second fraud disguised as recovery?

This section belongs in any honest guide on reporting fraud. Recovery scams – operations that approach fraud victims and offer to recover lost funds for an upfront fee – are themselves a major category of fraud. They are sometimes run by the same operators who defrauded the victim initially.

The signals of a legitimate recovery specialist are the opposite of what a scam operator offers. A legitimate firm:

• Does not guarantee recovery or name a percentage success rate.
• Does not ask for a large upfront fee before demonstrating what they know about your matter.
• Explains its process in terms of identifiable legal instruments and steps, not vague "contacts" or proprietary methods.
• Works through local counsel in the relevant jurisdiction when proceedings must be filed, rather than claiming to act in all countries directly.
• Does not cold-call fraud victims or approach them unsolicited through social media.

At Axiom Trace, we do not guarantee outcomes and we do not promise a return of specific funds. What we do is trace, advise on freezing strategy, and coordinate enforcement – telling clients honestly at the outset what is and is not realistic.

If you have been approached by a firm claiming they can recover your funds for an upfront payment, treat that approach with the same scepticism you would apply to the original fraud. The Fraud Response resource section on this site covers the typology of recovery scams in more detail.

Before instructing anyone for recovery, request a feasibility assessment. Understanding what is realistic – early and honestly – protects you from both false hope and a second loss. You can review how we approach that at our feasibility report service page.

A note on a real cross-border enforcement matter

To illustrate how these steps connect in practice: in a matter involving a fraudulent transfer in the mid-seven figures, the client came to us several weeks after the fraud, having reported to their bank and to police but having taken no civil action. Funds had moved across two jurisdictions before stopping in a third. We conducted an initial tracing exercise, confirmed the funds had not yet been fully dissipated, and coordinated without-notice applications in two forums simultaneously. Local counsel in the destination jurisdiction obtained interim relief within days of instruction. The case is referenced in more detail, in anonymised form, as part of our cross-border enforcement case study series.

The practical lesson is not that this outcome is typical. It is that the gap between "money is gone" and "money is still reachable" is often smaller than victims assume – provided the right steps are taken quickly.

Related topics at Axiom Trace

• Fraud Response hub – typologies, first-response guides, and victim resources
• Feasibility report – assessing whether a matter is realistically recoverable before committing to full proceedings
• Case study – enforcing a cross-border award against assets across jurisdictions

Frequently asked questions

Q: What should I do in the first hours after a fraud?

A: Contact your bank's fraud desk immediately and request a payment recall. Preserve all documents, messages, and transaction records in unmodified form. Note every detail you have about the recipient – account numbers, names, contact addresses, and wallet addresses if the fraud involved crypto. Do not alter or delete any communications, even ones that are embarrassing. Speed matters: dissipation can begin within hours, and a prompt bank notification creates a formal record that supports later legal action.

Q: Is my loss realistically recoverable?

A: It depends on where the funds went, how quickly you act, and what evidence you have. Some matters are recoverable through civil freezing and disclosure orders, particularly where funds have not yet been dissipated or fully layered. Others are not – and an honest assessment early protects you from spending further money on an unviable pursuit. We offer a structured feasibility assessment that addresses this question directly, based on the specific facts of your matter. No recovery is guaranteed; viability depends on the evidence and the jurisdiction involved.

Q: How do I avoid a second, recovery-focused scam?

A: Any firm that guarantees fund recovery, quotes a percentage success rate, or asks for a large upfront fee before showing you what they know about your matter should be treated with serious caution. Legitimate asset recovery specialists – including Axiom Trace – explain their process in terms of identifiable legal instruments, work with local counsel where proceedings must be filed, and do not make outcome promises. Recovery scams are a documented second-stage fraud targeting victims who have already lost money. If you have been cold-approached after your fraud became known, that contact should itself be treated as a potential fraud.

About Axiom Trace

Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed. In our experience, the matters where early instruction makes the greatest difference are cross-border frauds where funds are still moving. To discuss a matter, contact info@axiomtracel.com.

Our team has coordinated urgent interim relief in matters spanning multiple jurisdictions simultaneously. We provide honest, evidence-based assessments of recoverability – and we do not take on matters we do not believe are viable.

Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.