Crypto Fraud in Hong Kong: Freezing, Tracing and Recovering Stolen Digital Assets

Somewhere between the first friendly message and the moment the withdrawal button stopped working, the money left. Perhaps it was a trading platform recommended by someone you never met but spoke to every day. Perhaps it was an exchange account emptied overnight through a phished password, or a business partner who controlled the wallet keys and decided the partnership was over. However it happened, by the time most victims in Hong Kong understand what they are looking at, the coins have hopped through three or four wallets and are queuing at an exchange somewhere, waiting to become someone else's cash.

The instinct — one the fraudsters actively encourage — is to assume that because cryptocurrency is borderless and pseudonymous, the law cannot touch it. That instinct is wrong. Hong Kong's courts have spent the past few years fitting crypto fraud into the ordinary machinery of civil litigation — property claims, urgent injunctions, disclosure orders against exchanges, judgments against defendants nobody can yet name — and the machinery works considerably better than most victims expect. What it will not forgive is delay.

This guide walks through the civil recovery route in Hong Kong: what the courts say cryptocurrency is, what to do in the first 48 hours, how stolen coins are traced and frozen, how exchanges are made to reveal who holds them, and what a realistic recovery — at a realistic cost — actually looks like.

Cryptocurrency is property in Hong Kong — and that changes everything

Every recovery claim rests on a deceptively academic question: is cryptocurrency property at all? If it is not, you cannot claim your coins back as yours; you are left with personal claims against people you probably cannot find and who probably have nothing else.

Hong Kong answered the question in Re Gatecoin Ltd [2023] HKCFI 914. Gatecoin was a Hong Kong cryptocurrency exchange that collapsed into liquidation, and its liquidators asked the Court of First Instance what the coins it held actually were, and whom they belonged to. The court held squarely that cryptocurrency is property under Hong Kong law and is capable of being held on trust. On the facts, most of Gatecoin's customers still lost the priority battle — the exchange's later terms of service had turned the relationship into one of simple debtor and creditor, leaving them unsecured creditors in the liquidation rather than owners of their coins — but the legal foundation was laid, and it holds.

For a fraud victim, property status unlocks the proprietary toolkit:

You can claim the coins themselves, and whatever they have been swapped into, rather than merely suing the thief for a sum of money he will never pay.
Stolen coins can be impressed with a trust. A fraudster who takes your assets holds them, in equity, for you — and so, potentially, does anyone who receives them afterwards other than an innocent purchaser for value.
Proprietary claims support proprietary injunctions — the court can freeze the specific wallets and exchange accounts your assets have flowed into.
Property survives insolvency. If your traceable coins sit inside a collapsed platform, a proprietary claim can put you ahead of the general body of creditors — precisely the battle Gatecoin's customers were fighting.

The Gatecoin coda matters too. Whether you own your coins or merely have a claim against the platform holding them can turn on the small print you clicked through at signup. Terms of service are not decoration; in an exchange collapse they can be the entire case.

The first 48 hours

Crypto recovery is a race. Coins can pass through a dozen wallets in an afternoon, and a fraudster who suspects pursuit will push them through a mixer tonight. The steps below are worth more in the first two days than most court orders are worth in the second month.

Preserve everything

Capture the evidence while it still exists: transaction hashes, sending and receiving wallet addresses, screenshots of the platform with URLs and timestamps visible, the complete chat history with whoever induced the transfer, emails, bank records and exchange statements. Scam platforms vanish without notice — assume that everything you can see today will be gone next week. This record is the raw material for every tracing exercise and every affirmation that follows.

Report to the police

Make a report promptly — online through the Hong Kong Police's e-Report Centre or at any police station — and keep the report number. The police's Anti-Deception Coordination Centre runs the Anti-Scam Helpline 18222 and can move quickly in appropriate cases; where money has passed through Hong Kong bank accounts, fast police intervention has stopped funds mid-flight. A prompt report also matters later: exchanges and judges alike take a victim more seriously when the fraud was reported at once rather than months on.

Put the exchanges on notice

If a block explorer or an early tracing exercise shows your coins landing at an identifiable exchange, write to its compliance team immediately: identify the transactions, assert your claim, and ask that the receiving account be restricted pending a court order. Many exchanges — particularly platforms licensed by the Securities and Futures Commission under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615) — will temporarily restrict an account credibly flagged for fraud. An informal freeze buys the time a formal injunction needs.

Do not tip off, and do not get scammed twice

Do not confront the fraudster, and never pay a fee to release your funds — the demand for taxes, margin or unlock charges is the second act of the same scam. Be equally wary of recovery agents who find victims online and promise to retrieve coins for an upfront payment. Asset-recovery fraud aimed at people who have already been defrauded is now an industry in its own right.

Tracing: following the coins

The blockchain's transparency cuts both ways. Every transfer of Bitcoin, Ether or a stablecoin is recorded permanently and publicly. Unlike cash in a suitcase, stolen crypto leaves a ledger trail that anyone can read — and professional tracing analysts read it for a living, following your coins from the wallet you paid into, through the layering wallets, to wherever they came to rest.

The destination is the point of the exercise. Coins sitting in a private, unhosted wallet are maddening: you may know exactly where they are and still have nobody to enforce against. What you are hunting for is an off-ramp — a deposit into an exchange — because an exchange account has an owner, and the owner handed over identity documents when the account was opened. Identify the exchange and the deposit address, and you have both a freezing target and a disclosure target.

Two complications recur. Mixers and cross-chain bridges are designed to break the trail, and a determined launderer can make tracing slow, expensive or ultimately inconclusive. And tracing reports cost real money, a point that feeds straight into the costs arithmetic below. But in a striking share of retail frauds, the coins arrive — quickly — at a handful of major exchanges with functioning compliance departments. That is where cases are won.

Freezing: proprietary injunctions and Mareva relief

Once the coins are located, the immediate object is to stop them moving again. The Court of First Instance has power under section 21L of the High Court Ordinance (Cap. 4) to grant an injunction wherever it is just and convenient to do so, and it has exercised that power repeatedly in cryptocurrency fraud cases.

Two forms of relief matter, and they are usually sought together:

A proprietary injunction freezes the specific assets you claim as your own — the stolen coins and their traceable proceeds, in identified wallets and exchange accounts. Because you are asserting a claim to your own property rather than merely protecting a future judgment, courts grant this relief comparatively readily.
A Mareva injunction restrains the defendant from dealing with assets generally, up to the value of your claim, and can extend worldwide. We explain the doctrine, its safeguards and its price in our guide to freezing orders — here it is enough to say that crypto fraud has become one of its busiest applications.

These applications are made urgently and without notice to the defendant, which imposes real obligations on the applicant: full and frank disclosure of everything that might tell against you, and an undertaking to compensate the defendant if the injunction turns out to have been wrongly granted. Urgency is also your friend on the merits — judges understand perfectly well that a crypto freeze delayed is a crypto freeze defeated.

Critically, Hong Kong courts have granted these injunctions against persons unknown — defendants identified only as the holders of specified wallet addresses or the operators of a named scam platform. You do not need a name to freeze a wallet. And an injunction served on an exchange in respect of an account it hosts operates, in practice, as a hard freeze: compliance departments are rarely willing to let a balance move in the face of a court order.

Making the exchange talk: disclosure orders

A frozen account is leverage; a lawsuit needs a defendant. The bridge between the two is third-party disclosure. Hong Kong courts can order an exchange — even though it is no wrongdoer itself — to disclose what it knows about the account that received your coins: the holder's identity and know-your-customer records, contact details, IP and device logs, linked accounts, and where any onward transfers went. This is the territory of the Norwich Pharmacal order, which we cover separately; in crypto cases the disclosure application is routine and is usually heard together with the injunction.

Two practical notes. First, courts will often add a confidentiality or gagging direction for a period, so that the exchange does not tip off the account holder before the freeze lands. Second, geography matters more than doctrine: Hong Kong-based and SFC-licensed platforms comply with Hong Kong orders as a matter of course, while offshore exchanges vary — some cooperate voluntarily on receipt of a sealed order, others insist on an order from their own home courts, which adds a jurisdiction, a law firm and a bill.

Suing persons unknown — and judgment in default

Armed with tracing evidence and whatever the disclosure orders produce, you sue. Where the fraudster's identity is still unknown, Hong Kong practice allows defendants to be described by category — the person or persons unknown who induced the transfers, the holders of the receiving wallets, the first to fourth recipients of the traceable funds — with named defendants substituted in as disclosure fills the gaps. The court can permit service by alternative means, including by email or through the messaging channel the fraudster used, on the sensible footing that a scammer who spoke to you daily on WhatsApp can be served there too.

Most such defendants never appear. That is not the dead end it sounds: judgment in default can carry declarations that the coins are held on trust for you, orders for their delivery up or payment of their traceable value, and judgment for equivalent sums. Against the persons who do appear — typically local account holders through whose hands the money passed, protesting that they were merely lending an account to a friend — claims for knowing receipt, unjust enrichment or as constructive trustee do the work, and such defendants frequently settle.

The honest arithmetic: costs and prospects

Now the uncomfortable section. The urgent phase of a crypto recovery — tracing expert, solicitors, counsel, a without-notice hearing, disclosure applications, return dates — is heavily front-loaded and is not cheap; the early weeks alone can consume a sum that would swallow a modest claim whole. Nobody should commence this exercise for a small loss without confronting that squarely.

Prospects turn on three things. Speed: claims launched within days, while the coins still sit at a compliant exchange, recover at meaningfully higher rates than claims launched after months of hesitation. Destination: coins traced to a licensed or cooperative exchange are often recoverable; coins that have passed through a mixer into a no-questions-asked offshore platform frequently are not, however strong your legal rights. Proportionality: a six-figure or seven-figure loss with a clean trail justifies the machinery; a five-figure loss usually does not, and the police report, the exchange complaint and patience may honestly be the better use of your money. Partial recovery — some coins frozen in time, others gone — is the most common good outcome, and an honest adviser will say so at the start.

After judgment: turning paper into coins

If the injunction caught a balance at an exchange, judgment is the key that unlocks it: the court can order payment or transfer of the frozen assets in satisfaction, and exchanges comply. Against identified local defendants — the mule account holders, the promoter who sold the scheme at seminars in Kowloon — the ordinary armoury applies: examination of the debtor's means, garnishee proceedings against bank balances, charging orders over property, and the pressure of bankruptcy or winding-up.

Where the judgment must chase assets abroad, you are into cross-border enforcement, which has its own routes, deadlines and traps — our guide to enforcing foreign judgments maps that terrain. The realism runs in both directions: a Hong Kong judgment is a genuinely portable asset in the common law world, and a fraudster's assets are often less offshore than the fraudster is.

The pattern across every successful case is the same: evidence preserved on day one, exchanges on notice by day two, and the freezing and disclosure applications issued while the trail is warm. If you are mapping out those first steps, CommonBench's Legal Chat can help you understand the orders available in the Hong Kong courts, the authorities behind them and the questions to put to a lawyer before the meter starts running.

This article is published by CommonBench for informational purposes only and does not constitute legal advice. If stolen cryptocurrency needs freezing and tracing faster than you can get a first appointment, try CommonBench — AI-powered legal research with verified citations across five common law jurisdictions.