Tracing authorised-push-payment fraud funds into Guernsey

A payment leaves your account on a Tuesday morning. By Wednesday it has cleared a Guernsey-registered account, and by Thursday it may have moved again. Authorised-push-payment fraud works precisely because the victim authorises the transfer – the bank's systems see a routine instruction, and most standard fraud-reversal channels close the moment funds arrive at a new institution. As of early 2026, Guernsey's combination of developed financial-services regulation and responsive courts makes it one of the more tractable offshore destinations for tracing and freezing diverted funds – but only if the right steps are taken quickly.

When authorised-push-payment fraud proceeds land in Guernsey, the practical recovery pathway combines immediate bank-level notification, a Norwich Pharmal order or Bankers Trust order to expose the account trail, and a domestic freezing injunction to hold what remains – all coordinated with local counsel in Guernsey who can file on an without-notice basis within hours to days of the loss being identified.

This guide walks through each step in sequence: what to do in the first hours, how Guernsey courts are approached for urgent relief, what disclosure tools apply, how cross-border recognition works when funds move on, and how to judge whether a matter is viable before committing to the cost of proceedings.

What is authorised-push-payment fraud and why does Guernsey feature?

Authorised-push-payment fraud – APP fraud – occurs when a victim is deceived into instructing a payment they believe is legitimate. The deception can take many forms: a spoofed invoice, a fake conveyancing request, a manipulated supplier detail, or a social-engineering call impersonating a bank. Because the victim authorises the transfer, the transaction record does not by itself demonstrate fraud – it records an instruction, not a theft. That distinction shapes every step of recovery.

Guernsey attracts diverted funds for several reasons. Its financial system is large relative to population. Nominee account structures are available. Its ties to UK and European banking corridors mean payments clear quickly and without obvious friction. And because Guernsey is a well-regulated Crown Dependency rather than a high-secrecy jurisdiction, funds sent there can retain an air of legitimacy that later confuses victims trying to trace them.

In our experience, Guernsey also attracts funds in the second or third hop of a layering sequence – not always the first destination, but a consolidation point before onward movement to a less cooperative jurisdiction. Speed therefore matters not as a general observation but as a hard operational constraint: the window in which funds can be frozen in Guernsey is real and finite.

What should happen in the first 48 hours?

The first 48 hours after an APP fraud discovery are the period in which the most recovery options remain open. Time sensitivity is genuine: dissipation can defeat recovery, and urgent applications are measured in hours to days rather than weeks. The immediate sequence has four components.

First, contact the sending bank and request a recall under the fastest available payment-recall mechanism. In UK-to-Guernsey flows, a SWIFT recall or domestic-equivalent request should go to the beneficiary bank immediately. The recall will rarely recover funds on its own, but it creates a formal record of the dispute and may cause the beneficiary institution to place an administrative hold while it investigates.

Second, document everything before any source is altered. This means preserving the fraudulent communications – emails, messages, call logs, falsified invoices – in unedited form. Screenshot, export to PDF, and record the metadata. Evidence gathered in the first hours is almost always higher quality than evidence reconstructed later.

Third, report to the relevant financial-intelligence authority. In Guernsey that is the Guernsey Financial Intelligence Service. Reports from victims or their advisers can prompt authorities to flag the account at an institutional level. The report does not replace a civil application, but it runs in parallel and can accelerate a bank's own freeze.

Fourth – and critically – take specialist advice before the end of that first day. The question of whether to apply for a domestic freezing injunction without notice depends on whether funds can be shown still to be present or imminently movable. That assessment cannot wait for a weekly meeting slot. We regularly advise clients in the first hours after discovery, when the difference between acting and waiting is still consequential.

How does Guernsey courts process work for urgent freezing relief?

Guernsey's Royal Court has jurisdiction to grant interim relief in civil proceedings, including freezing injunctions, on an without-notice basis where there is good reason to believe that notifying the defendant would cause dissipation. A without-notice freezing application in Guernsey is typically heard within hours to a small number of days of the supporting evidence being prepared and filed.

To obtain a freezing injunction, the applicant must establish a good arguable case on the underlying cause of action – here, the claim in unjust enrichment or knowing receipt – and show that there is a real risk the assets will be dissipated or removed if notice is given. In APP fraud cases, the short interval between payment and the typical layering pattern generally satisfies the risk-of-dissipation requirement.

A proprietary injunction is a distinct but related tool. Where the victim can argue that the fraud proceeds retain their character as the victim's own property – because legal and beneficial title never passed by reason of the fraud – the proprietary injunction gives a stronger basis than a mere Mareva-style order, and it can survive the defendant's insolvency in a way that a personal order cannot. Selecting the right instrument at this stage is not a formality.

Guernsey counsel will also consider Chabra relief against third-party account holders where there is evidence that the immediate recipient has passed funds to a connected party who holds them on behalf of the fraudster. We coordinate these applications closely with local counsel in Guernsey; local procedure governs the filing.

How is the account trail exposed – and what disclosure tools apply in Guernsey?

Freezing an account does not by itself reveal where the money went before or after it arrived. Disclosure is a separate, parallel step. Two instruments are central here.

A Bankers Trust order compels a bank to disclose information about a customer's account in a tracing context – specifically, where the applicant can show a good arguable claim that funds in the account represent their property. In Guernsey, the Royal Court has jurisdiction to make such orders, and applications can be combined with a freezing application on the same without-notice hearing. The Bankers Trust order is the fastest route to seeing the full account transaction record, including onward transfers.

A Norwich Pharmal order compels a third party – not necessarily a wrongdoer – to disclose information that identifies the wrongdoer or the destination of the funds. This is the appropriate instrument where the account holder's identity is known but the beneficial owner behind a nominee arrangement is not, or where a payment processor holds routing data that the victim does not have. Both instruments have a well-developed basis in Guernsey's common-law-influenced jurisprudence.

When the disclosure reveals that funds have already moved on, the Guernsey application does not become irrelevant. The account records obtained under the Bankers Trust or Norwich Pharmal order become the evidential backbone for the next jurisdiction's application – whether that is England and Wales, the BVI, Cayman, or another forum. We have traced funds that left Guernsey into at least three onward destinations in a single matter; the Guernsey disclosure formed the thread that connected them all.

What happens when funds have already crossed another border?

APP fraud proceeds rarely stay in one place. A Guernsey account may hold funds for days before they move – to another offshore centre, to a cryptocurrency exchange, or back into the UK banking system. What strategy applies when the window in Guernsey has already closed?

If funds have reached a common-law jurisdiction with reciprocal enforcement ties – England and Wales, Jersey, Cayman, BVI, Singapore – the same suite of instruments is available, and a worldwide freezing order obtained in one of those forums can, in principle, reach assets in any jurisdiction, subject to the conditions of its grant and any local enforcement step. The Guernsey disclosure record supports the application in the new forum directly.

If funds have entered a cryptocurrency wallet, the character of the trace changes but does not end. Public blockchains are transparent: on-chain movements are traceable even when identities are obscured. Blockchain-analytics tools can attribute wallet clusters and identify the likely point of cash-out – typically a centralised exchange. A disclosure order against the relevant virtual-asset service provider (VASP) or a stablecoin issuer freeze, where the asset is a stablecoin, can then be pursued in the jurisdiction where that VASP is regulated. The cross-border chain-of-title argument – that the funds remain identifiably the victim's property as they pass through these layers – is precisely the argument that supports a proprietary injunction at each stage.

For funds that reach a civil-law jurisdiction, the tools are different but not absent. The New York Convention provides for recognition and enforcement of foreign arbitral awards across most states, which matters where the underlying contract contained an arbitration clause. Letters of request can be used to compel disclosure in many civil-law jurisdictions. We coordinate closely with admitted local counsel in those forums; local procedure governs the filing.

What should not happen: waiting until a full picture is clear before filing anywhere. The cross-border sequence is often run in parallel, with applications in multiple jurisdictions timed to coincide so that a freeze in one forum is not defeated by pre-tipped movement in another.

To assess whether a cross-border trace of this kind is viable in your matter, contact info@axiomtracel.com for a confidential case review.

How to assess whether a Guernsey recovery is worth pursuing

Not every APP fraud matter is worth the cost of Guernsey proceedings. Is the amount sufficient to justify the legal cost of a without-notice application, local counsel engagement, and the time of forensic coordination? That question deserves an honest answer before any engagement.

Several factors bear on viability. The strongest matters share some combination of the following: the loss was recent (ideally within days or weeks); there is a clear payment trail from the victim's account to the Guernsey-connected beneficiary account; there is some indication that funds remain present or that the account holder has traceable assets; and the identity of at least one participant in the fraud chain – even a nominee – is known or obtainable.

Weaker matters typically involve a long delay between the loss and the instruction; a highly fragmented layering chain that has already moved through several cash-out points; or a loss amount that does not comfortably exceed the estimated cost of proceedings in two or more jurisdictions.

A decision matrix in plain terms: if funds moved to Guernsey within the last two to four weeks, the amount is material, and you have payment records – pursue an emergency application with local counsel immediately. If funds moved to Guernsey more than two months ago and have almost certainly moved on, use the Guernsey disclosure route to expose the onward trail, then assess viability in the next jurisdiction. If the fraud occurred more than a year ago and the trail has gone cold, a realistic assessment may point to alternative enforcement routes rather than urgent interim relief.

We encourage anyone assessing a potential matter to use the Asset Recovery Viability Check at axiomtracel.com/viability-check/ before committing to instruction costs.

The steps above describe the general pattern for Guernsey-based APP fraud recovery. Your matter turns on specific facts – where the money went, how fast, and which forums can still act. A confidential case review tells you whether pursuing recovery is realistic and what it would cost. Contact info@axiomtracel.com to start that conversation.

Avoiding the second trap: recovery scams targeting APP fraud victims

A recurring theme in this area deserves its own section. APP fraud victims are frequently targeted by a second wave of fraud operators who present themselves as recovery specialists, law-enforcement liaisons, or asset-recovery firms. They typically ask for upfront fees, promise a specific percentage of the lost funds, or claim special access to frozen accounts.

None of these things describe legitimate asset recovery. Genuine recovery work does not promise an outcome, does not guarantee a percentage, and does not resemble the salesmanship of a cold-call operation. Real recovery is conditional on facts – on where the money is, how much remains, and whether the law of the relevant jurisdiction provides an enforceable route. Anyone who tells you otherwise is, in our experience, a second problem rather than a solution.

The markers of a legitimate specialist: they assess viability honestly, including the possibility that a matter is not worth pursuing; they work with admitted local counsel rather than claiming to act directly in jurisdictions where they are not qualified; they explain the likely costs as well as the potential upside; and they do not ask for unrecoverable upfront fees before providing a reasoned assessment.

Fast, disciplined first steps – taken by the victim or their genuine advisers in the first hours – are the real protection against both the initial fraud and the recovery-scam follow-up. Evidence preserved early cannot be unpreserved. Options kept open by prompt action cannot easily be recreated once the window closes.

Related guidance

• Fraud Response: practical guides for fraud victims and their advisers – the full library of first-response and recovery guides across fraud typologies.
• Guernsey as a recovery jurisdiction – how Guernsey's courts and regulatory environment bear on cross-border asset recovery matters.
• Investment fraud recovery routes in Kazakhstan – cross-border enforcement considerations when proceeds have moved to a civil-law jurisdiction.

Frequently asked questions

Q: What should I do in the first hours after a fraud?

A: Contact your sending bank immediately to initiate a payment recall – this creates a formal dispute record. Preserve all evidence in unedited form: messages, emails, call logs, documents. Report to the Guernsey Financial Intelligence Service if funds landed there. Then take specialist advice the same day. The first 48 hours are when the most options are open; waiting even a few days can close the without-notice freezing window entirely.

Q: Is my loss realistically recoverable?

A: Recoverability depends on specific facts, not on general probability. The strongest cases involve a recent loss, a clear payment trail to an identifiable account, and a loss amount that justifies the cost of proceedings in Guernsey and potentially additional jurisdictions. A long delay, a heavily layered trail, or a low-value loss can each reduce the practical viability of proceedings. An honest assessment of these factors – before any costs are committed – is the right first step. Use the Asset Recovery Viability Check at axiomtracel.com/viability-check/ as a starting point.

Q: How do I avoid a second, recovery-focused scam?

A: After an authorised-push-payment fraud, victims are frequently targeted by operators posing as recovery firms. Legitimate asset recovery specialists do not promise a specific recovery percentage, do not demand large upfront fees before a proper assessment, and do not claim direct court access in jurisdictions where they are not admitted. A credible specialist will tell you honestly if a matter is not worth pursuing, explain costs alongside potential outcomes, and work with admitted local counsel in the relevant jurisdiction. If someone contacts you unsolicited claiming they can recover your funds, treat that contact as a risk rather than a solution.

About Axiom Trace

Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed. In Guernsey matters, we routinely coordinate proceedings with local counsel in Guernsey and bring the forensic and cross-border coordination work ourselves. We assess viability honestly, including the cases where proceeding is not the right answer. To discuss a matter, contact info@axiomtracel.com.

Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. Axiom Trace routinely coordinates proceedings with local counsel in Guernsey; this guide describes general practice and does not constitute legal advice in Guernsey or any other jurisdiction. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.