When scam money lands in Georgia: what to do

Scam money moves faster than any bank recall request. When it arrives in Georgia – the Caucasus republic between the Black Sea and the Caspian – it enters a jurisdiction that most Western victims have never dealt with, supported by local counsel they have never met. As of early 2026, Georgian financial supervision and international co-operation mechanisms are still developing, which makes the first hours after discovery decisive. This analysis explains what can realistically be done, which instruments apply, and where the limits are honest ones.

When fraud proceeds land in Georgia, a victim's most effective early moves are parallel: freeze the sending side first, report to the National Bank of Georgia and relevant financial-intelligence bodies, preserve all transaction records, and engage specialist recovery counsel to assess whether cross-border disclosure and enforcement tools can reach the receiving account before the money moves again.

The sections below work through that parallel process in order – from triage in the first 48 hours through to cross-border enforcement and the realistic limits of each instrument. The analysis closes with an honest assessment of what "fraud recovery" in Georgia typically looks like in practice.

Why Georgia Attracts Scam Proceeds

Georgia is not a secrecy jurisdiction in the traditional sense. It has real banks, a functional central bank, and improving anti-money-laundering standards. Those same qualities, paradoxically, make it useful to fraudsters.

Correspondent banking relationships with European and Turkish institutions give Georgian accounts plausible reach into mainstream payment systems. Account opening for foreign nationals has historically been straightforward. And the country sits at the intersection of trade routes that give rapid onward movement – to the Gulf, to Europe, to crypto ramps – a veneer of commercial normality.

For a claimant, the relevant fact is this: Georgian banks are regulated, which means there is a body – the National Bank of Georgia – that can receive a complaint and has supervisory levers over local institutions. That is a starting point. It is not, by itself, a recovery mechanism.

In our experience, funds that arrive in a Georgian bank account rarely stay there long. The typical pattern is receipt, partial withdrawal or further transfer within days, and conversion into either cash, crypto, or a trade-finance structure that obscures the trail. Speed matters more in Georgia than in many jurisdictions precisely because the onward-movement window is short.

The First 48 Hours: What Must Happen in Parallel

The first 48 hours after discovering a fraud determine whether recovery remains a realistic possibility or becomes a documentation exercise. Four things must happen simultaneously – not sequentially.

First, contact the sending bank immediately and request a payment recall or a beneficiary-account freeze through the SWIFT gpi Recall mechanism. Do not wait for legal advice before making this call. If the funds have not yet been credited to the Georgian beneficiary account, a recall may succeed at the correspondent-bank level. Every hour of delay reduces that probability significantly.

Second, preserve every piece of evidence before taking any other step. That means: full transaction confirmations, all communications with the fraudster (emails, messaging-app records, screenshots, call logs), the contract or investment documents if any, and any KYC or identity documents the fraudster provided. Do not delete, annotate, or forward these without specialist advice. Evidence that is altered – even innocently – can complicate later proceedings.

Third, report to your domestic financial-intelligence unit or economic crime authority. A domestic report creates a formal record, triggers any available inter-authority co-operation channels, and may support a mutual legal assistance request later. It is not a substitute for civil action, but it is necessary groundwork.

Fourth, engage a specialist in cross-border fraud recovery to assess the matter. That assessment should cover: where the funds have moved since arrival, what the receiving entity is, whether there is a viable civil or regulatory path, and whether the cost of pursuit is proportionate to what may be recovered.

What must not happen in the first 48 hours? Two things above all. Do not contact the fraudster. Any contact may tip off the recipient, triggering faster dissipation. And do not retain a "recovery firm" that approaches you unsolicited or promises a specific recovery percentage. We return to that point below, because it matters.

Which Recovery Instruments Can Reach Georgian Accounts?

The honest answer is that the toolkit available to a victim of fraud rooted in Georgia is more limited than in common-law recovery hubs, but it is not empty. The analysis turns on whether the claimant seeks relief in their home forum, in an international forum, or in Georgia itself.

A worldwide freezing order obtained in England, Singapore, or another common-law hub can, in principle, bind a defendant wherever they are located. Its reach over assets in Georgia is, however, subject to practical limits: Georgian courts are not obliged to recognise or enforce the order, and the defendant must have assets or activities in the forum granting the order for it to carry any coercive weight over them personally. If the fraudster has a connection to England or another receptive forum – a property, a bank account, a business – a worldwide freezing order becomes immediately relevant.

A proprietary injunction is available where the claimant can assert that the funds in the Georgian account are their property – held on constructive trust, for example, because they were obtained by fraud. A proprietary claim travels better than a personal claim because it attaches to the specific asset rather than to the defendant's general conduct. Again, enforcement in Georgia itself requires local proceedings or co-operation, but the injunction creates legal risk for any correspondent bank or onward recipient who is served with notice of it.

A Norwich Pharmal order can compel a third party – such as a correspondent bank in a co-operative jurisdiction – to disclose account information that identifies the fraudster or maps the onward movement of funds. This is often the most productive early step: it does not require the Georgian bank's co-operation directly, if the correspondent is in a receptive jurisdiction. We have traced funds from Georgian beneficiary accounts back through correspondent banks in European hubs precisely this way.

A Bankers Trust order is related but distinct: it compels a bank to disclose its own customer's account information in the context of tracing stolen funds. Where a Georgian bank's correspondent is in England or another common-law forum, a Bankers Trust order against that correspondent is a practical tool for reconstructing the chain.

Letters of request – the formal mechanism for one state's courts to seek evidence or assistance from another – are available in principle between Georgia and states with which it has treaty relations. In practice, the process is slow, measured in months rather than weeks, and is rarely the tool of first resort for an urgent tracing matter. It becomes more useful once the target is identified and the immediate dissipation risk has passed.

What Does Georgian Law and Procedure Actually Offer?

Steps described here reflect general practice. Local admitted counsel must act on the ground in Georgia; what follows is informational only.

Georgia has a civil law tradition with a constitution and civil code modelled partly on continental European systems. Interim protective measures – the local equivalent of freezing relief – are available under Georgian civil procedure, but the evidentiary threshold and procedural requirements differ from common-law jurisdictions. A victim seeking a domestic Georgian freeze cannot simply present an English affidavit and expect the same result as in London or Singapore.

The National Bank of Georgia regulates commercial banks and has the authority to direct banks to freeze accounts in the context of anti-money-laundering or fraud investigations. A well-documented complaint to the National Bank, accompanied by clear evidence of the fraudulent origin of funds, may trigger supervisory action. This is not guaranteed; supervisory bodies act in the public interest, not as agents for private claimants. But it is a channel that costs little and may produce rapid interim relief if the evidence is clear.

Georgia's financial-intelligence unit – the Financial Monitoring Service – receives disclosures from regulated entities and has the power to issue temporary asset-blocking orders in the context of money-laundering investigations. Again, this is a law-enforcement tool, not a private-claimant tool. A well-presented referral from a foreign authority, supported by the victim's domestic report, may prompt action. It will not do so automatically.

Georgian courts can hear civil fraud claims brought by foreign plaintiffs, but litigation in Georgia requires local admitted counsel, pleadings in Georgian, and familiarity with local procedure. Interim relief applications in the Georgian courts carry the same urgency premium as anywhere: delay reduces the probability that assets will still be present when the order arrives. For most cross-border victims, the Georgian civil courts are a parallel or secondary route – pursued while other instruments are being used to trace and freeze – rather than the sole path.

The Cross-Border Enforcement Problem: Where Judgments Go to Wait

Even a well-reasoned foreign judgment against a Georgian defendant does not automatically become enforceable in Georgia. Recognition and enforcement of foreign judgments in Georgia is governed by its domestic civil procedure rules and applicable bilateral or multilateral treaties. Georgia is not a party to the Hague Convention on Recognition and Enforcement of Foreign Judgments (the 2019 instrument), and the absence of a specific treaty with many Western states means that enforcement of a foreign judgment in Georgian courts depends on the principle of reciprocity, which is assessed case by case.

This matters for strategy. A claimant who spends 18 months obtaining a default judgment in their home forum, and then seeks to enforce it in Georgia, may find that the enforcement process is expensive, uncertain, and slow – by which time the assets may have moved again. The better approach, in our view, is to identify where the defendant or their assets have a connection to a more enforcement-friendly forum and to pursue enforcement there, using the Georgian proceedings as a parallel track for disclosure rather than the primary enforcement route.

For fraud proceeds that have moved from Georgia into crypto assets, the analysis shifts again. On-chain movements are traceable even when identities are hidden – public blockchains leave a permanent record. Where funds have been converted to stablecoins, a stablecoin issuer can, on appropriate legal process, freeze specific token balances. Where they have moved to a centralised exchange with a presence in a co-operative jurisdiction, a disclosure order against that virtual-asset service provider can identify the account holder and, potentially, the withdrawal destination. We have traced funds from Georgian bank accounts through crypto ramps into identifiable exchange accounts in this way.

A Pattern from Practice: Two Contrasting Scenarios

Two anonymised matters illustrate the contrasting positions a victim may face.

In the first – a matter in Western Europe, autumn 2024, involving funds in the mid-six figures – a business owner discovered within 24 hours that a payment to a supplier had been redirected to a Georgian account via a business-email compromise. The sending bank was contacted immediately; the correspondent bank in a European hub received a Bankers Trust order within days. The correspondent provided account information confirming that most of the funds had moved to a Turkish beneficiary. That disclosure, combined with a worldwide freezing order obtained against the original fraudster (who had a property in England), allowed the client to reach the Turkish leg of the chain through allied counsel. Not all of the funds were recovered; a portion had been withdrawn in cash before the freeze landed. But the rapid parallel action – recall request, disclosure order, and freezing order simultaneously – preserved a significant part of the claim.

In the second – a matter in the Gulf, winter 2025, involving funds in the low seven figures – a family office discovered the loss only after three weeks, when a quarterly reconciliation flagged the discrepancy. By that point, the Georgian account was empty. The funds had moved through two intermediate accounts, one in a CIS state and one in a crypto exchange, and had been largely cashed out. The tracing work took several months and identified the probable beneficial owner of the Georgian account, but the enforcement options were limited: the defendant had no assets in any co-operative forum, and the cost of pursuing Georgian civil litigation was not proportionate to what could realistically be reached. The matter was documented fully and referred to the relevant law-enforcement bodies, but civil recovery was not achievable on the facts.

Those two outcomes are not presented as predictive. They illustrate an honest point: speed, the sending side's connection to a co-operative forum, and the defendant's footprint in reachable jurisdictions are the three variables that most affect whether recovery is realistic.

The contextual bridge between those scenarios and next steps is deliberate. If your matter looks more like the first pattern – recent discovery, sending bank still reachable, defendant with a footprint somewhere – the case for urgent action is strong. If it looks more like the second, the priority shifts to thorough documentation, law-enforcement referral, and an honest assessment of what civil recovery can add. Both require specialist input quickly.

To assess whether your matter falls within the range where civil recovery is worth pursuing, contact info@axiomtracel.com for a confidential case review.

Avoiding the Second Scam: Why "Recovery Firms" Are a Separate Threat

This section addresses the most persistent myth in fraud recovery: that reporting to the bank is enough, and that the recovery firms who contact victims afterwards are a legitimate next step. Neither is true.

Reporting to the bank is necessary but not sufficient. Banks can attempt payment recalls; they cannot compel foreign banks to return funds, cannot conduct forensic tracing, and cannot obtain freezing orders. A bank's compliance obligation runs to the regulator, not to the defrauded customer. Expecting the bank to recover your money is expecting the wrong thing from the right institution.

The myth about recovery firms is more dangerous. In our experience, a significant proportion of the "recovery firms" that contact fraud victims – often within days of the initial loss, sometimes presenting as regulators or government agencies – are themselves fraudulent. The second-stage recovery scam operates on a simple model: charge upfront fees for "recovery" that never materialises, sometimes using fabricated legal documents to create the appearance of proceedings. A legitimate recovery specialist will never guarantee a specific outcome, never charge a substantial upfront fee without a documented engagement, and will never approach a victim unsolicited.

How do you distinguish a genuine specialist from a scam operator? Several markers are reliable. A genuine firm will give you a clear explanation of which instruments it proposes to use and why. It will name the jurisdictions in which it proposes to act. It will be transparent about the limits of what is recoverable. It will not promise a percentage. And it will welcome your lawyer's scrutiny of the engagement terms.

If you are unsure whether a recovery contact is legitimate, the safest course is to make no payment and seek independent legal advice before proceeding. The resources on our fraud typologies hub include guidance on identifying fraudulent recovery approaches.

Self-Assessment: Is Your Georgia Matter Realistically Pursuable?

Not every loss is recoverable. An honest assessment is a service, not a concession. The following questions help a victim or their adviser assess viability before committing to the cost of pursuit.

Where did the funds go after the Georgian account? If they remain in a Georgian bank account, the clock is still running but options exist. If they have moved to a country with no mutual-assistance treaty and no correspondent-bank presence in a co-operative forum, the path is harder. If they have gone into crypto, tracing is still possible – but the outcome depends on which exchange or wallet cluster received them and whether that entity is in a reachable jurisdiction.

Does the defendant have any footprint in a co-operative forum? A property in a common-law jurisdiction, a business registered in the EU, or a crypto-exchange account in a country with effective VASP regulation – any of these creates a choke point that enforcement can reach. Without any such footprint, a foreign judgment may have nowhere to land.

How much time has passed? Hours to days: recall and freezing options are live. Weeks: tracing and disclosure become the priority. Months: the focus shifts to identifying reachable assets and deciding whether the cost of enforcement is proportionate. Years: civil recovery becomes difficult; law-enforcement referral may be the more realistic path.

What evidence exists? A clean transaction trail, clear communications showing the fraud, and identifiable recipient details all strengthen the position. Gaps in the evidence – particularly around the identity of the recipient – increase the cost and uncertainty of the disclosure phase.

For a structured assessment, our Georgia jurisdiction briefing covers the current state of co-operation mechanisms and procedural requirements in more detail. Separately, the first-response guide at first steps after fraud if funds went to Georgia sets out the immediate actions for victims in the first 72 hours.

Related Reading

• Fraud Typologies Hub – practical guidance on scam types, victim action-guides, and first-response steps across jurisdictions.
• Georgia Jurisdiction Briefing – the co-operation context, banking supervision, and procedural considerations for recovery matters involving Georgian accounts.
• First Steps After Fraud if Funds Went to Georgia – a 72-hour action guide for victims and their advisers.

Frequently Asked Questions

Q: What should I do in the first hours after a fraud?

A: Contact the sending bank immediately to request a payment recall – before taking any other step. At the same time, preserve all evidence without alteration: transaction records, communications, and any identity documents the fraudster provided. Report to your domestic financial-intelligence or economic crime authority. Then engage a specialist to assess whether urgent cross-border relief – such as a worldwide freezing order or a disclosure order against the correspondent bank – is available on your facts. The first hours are the highest-leverage period; do not spend them waiting.

Q: Is my loss realistically recoverable?

A: Recoverability depends on three factors: how quickly you act, whether the defendant or their assets have a footprint in a co-operative forum, and where the funds went after arriving in Georgia. Some matters are clearly viable – recent discovery, funds still in the receiving account, defendant with assets elsewhere. Others are not, particularly where significant time has passed, the funds have been withdrawn in cash, and the fraudster has no reachable assets. A confidential case review is the fastest way to get an honest answer. We do not take matters where the realistic probability of recovery does not justify the cost of pursuit.

Q: How do I avoid a second, recovery-focused scam?

A: Second-stage recovery fraud – where a firm posing as a recovery specialist extracts further fees from fraud victims without ever recovering anything – is widespread. The markers of a fraudulent recovery approach are: unsolicited contact shortly after the original loss, promises of a specific recovery percentage or guarantee, demands for substantial upfront fees before any engagement document is provided, and an inability to name specific instruments or jurisdictions. A legitimate specialist will explain their methodology clearly, welcome scrutiny from your own lawyer, and never promise an outcome. If you are uncertain, make no payment and take independent advice first.

About Axiom Trace

Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and co-ordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed. We do not promise outcomes; we assess what is realistically achievable and pursue it with the instruments that fit the facts. In our experience, the matters where early specialist input made the difference are those where the client acted quickly and asked honest questions. To discuss a matter, contact info@axiomtracel.com.

Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. Steps described in relation to Georgian law and procedure are informational only; admitted local counsel in Georgia must act on the ground. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.