Assume that, in a particular matter, on-chain analysis shows that USDT 3 million obtained through fraud moved through several addresses and entered an address controlled by a major exchange three days ago.
What happens next?
This is a critical point in digital-asset recovery.
A potential endpoint has appeared, but the most important questions remain unanswered. Is the address an exchange omnibus wallet, a user-specific deposit address, or another type of wallet? Which legal entity operates the account that received the assets? Who is the account holder? Do the assets remain there? Do the Hong Kong courts have jurisdiction? Is there a real risk of further dissipation?
On-chain tracing can indicate where value may have moved. By itself, it cannot freeze an account, identify its holder, or achieve recovery. The next stage requires connecting the technical analysis with evidence organisation, identification of the relevant exchange entity, and appropriate court procedures.
Hong Kong is an important common-law jurisdiction to assess in cross-border digital-asset recovery. But the fact that assets reached a particular exchange does not automatically mean that action can be taken in Hong Kong.
1. Why Hong Kong may be a relevant jurisdiction
Hong Kong has established a licensing and regulatory regime for virtual asset trading platforms. Under the current framework, operators carrying on a business in Hong Kong of operating a centralised virtual asset trading platform, or actively marketing such services to Hong Kong investors, must obtain the appropriate licence and are regulated by the Securities and Futures Commission. The SFC also publishes a list of licensed virtual asset trading platform operators.
However, an exchange holding a Hong Kong licence or maintaining a Hong Kong entity does not mean that every account and wallet operated under the same global brand is controlled by that entity. Assessing whether Hong Kong proceedings are appropriate usually requires identifying the exchange entity that contracted with the user, the service provider connected to the relevant account, the governing-law arrangements in the user terms, the asset-control structure, and the links between Hong Kong and the relevant persons, conduct and funds.
The practical value of Hong Kong proceedings therefore depends not merely on the exchange’s brand name, but on the particular operating entity and the connecting factors in the case.
Hong Kong’s recognition of the proprietary nature of crypto assets provides an important legal foundation. In Re Gatecoin Ltd (in liquidation) [2023] HKCFI 914, the Court of First Instance held that cryptocurrencies constitute property under Hong Kong law and can, in appropriate circumstances, be held on trust.
That recognition allows the courts to address questions of ownership, trusts, proprietary recovery, asset preservation and equitable tracing in a suitable case. Yet the classification of crypto assets as property is only the starting point. It does not mean that every fraud case satisfies the requirements for freezing relief, or that every on-chain address can be treated as the defendant’s personal account.
2. Relief potentially available in Hong Kong
Measures commonly described together as “freezing” in digital-asset recovery are, in fact, distinct forms of legal relief. The appropriate route must be assessed by Hong Kong counsel in light of the applicant’s rights, the status of the assets, the identity of the defendant, and the exchange structure.
Asset preservation and freezing
The principal purpose of a Mareva injunction, or freezing injunction, is to prevent a defendant from transferring or disposing of assets before final judgment so that a future judgment is not rendered ineffective. It does not give the applicant ownership of the frozen assets. Instead, it temporarily restrains the defendant’s dealings with them.
If the applicant contends that the digital assets entering the exchange are themselves assets obtained by fraud, stolen, or transferred without authorisation, Hong Kong counsel may also consider whether there is a basis for a proprietary injunction. Such relief focuses on whether the applicant can assert a legal or equitable proprietary interest in identifiable assets.
Digital-asset matters are complicated by conversion, bridging, splitting, aggregation and commingling. Major exchanges frequently use omnibus wallets to manage assets belonging economically to multiple users. The blockchain shows movements between addresses, while the exchange’s internal ledger records balances attributed to individual users.
Assets entering an exchange address therefore do not necessarily mean that all assets at that address belong to the relevant account holder. The more important question is often which internal user account received the corresponding value and whether that value remains in the account.
Third-party disclosure and account-holder identification
Many victims have wallet addresses and transaction hashes but do not know who controls the wallet or exchange account. Information held by the exchange may then become a crucial route forward.
Compliant exchanges ordinarily retain onboarding identity information, verification documents, contact details, login records, deposit and withdrawal records, and information about internal account transfers. They also owe duties relating to confidentiality, privacy, data protection and compliance. They will not ordinarily provide complete private account information merely in response to a request from a victim or the victim’s lawyer.
In appropriate cases, Hong Kong courts have ordered exchanges or other third parties to disclose information needed to identify account holders, trace funds, or preserve an applicant’s rights. The scope of disclosure is not fixed. It depends on the information actually held by the exchange, the applicant’s legal basis, the necessity of the information, and considerations of privacy, confidentiality and proportionality.
An order may cover onboarding records, account transaction records, login information, or data associated with deposits and withdrawals. The precise scope remains case-specific.
The value of disclosure is not limited to linking an on-chain address to a name. It may help establish whether the funds have been withdrawn, where they went, whether the account is linked to other wallets, and in which jurisdiction further action should be considered.
Proceedings against persons unknown
Conventional litigation generally assumes that the plaintiff can identify the defendant. In digital-asset fraud, however, the victim may know only a wallet address, several transaction hashes, a false screen name, or an exchange endpoint.
In appropriate circumstances, Hong Kong procedure permits proceedings or interim applications against “persons unknown.” The defendants must be defined by objective criteria, such as control of a wallet or participation in identified transactions, rather than by a general reference to anyone whose identity is unknown.
This may allow a victim to evaluate preservation and disclosure measures without waiting until a fraudster’s name, passport and address have all been discovered. Identity identification and asset preservation may sometimes proceed in parallel. How the defendants are described, how documents are served, and how an order binds relevant persons must nevertheless be addressed on the facts.
3. Freezing, disclosure and recovery are different
A matter may move through asset preservation, account disclosure, identity identification, substantive litigation or settlement, and finally enforcement and payment.
But this is not an automatic sequence.
In some cases, an exchange may first impose a temporary restriction through its internal compliance process, after which the claimant must decide whether to seek a court order. In others, account information is needed before deciding whom to sue and where. In still others, the exchange endpoint is identified only after the assets have been withdrawn, leaving the exchange with identity and transaction-history evidence rather than recoverable assets.
Even a freezing or disclosure order does not mean that assets have been recovered. The account balance may be insufficient, the funds may have moved to another platform, the account holder may be an intermediary, or the defendant may have no other executable assets. Hong Kong proceedings may form only one part of a wider recovery strategy, with further action required where the account holder, bank account or other assets are located.
4. Powerful relief carries strict procedural duties
Hong Kong courts can grant consequential interim orders in urgent cases, but applicants must meet corresponding procedural responsibilities.
The duty of full and frank disclosure is particularly important.
On a without-notice application, the respondent does not have an opportunity to be heard before the court makes its initial decision. The applicant must therefore disclose every material fact that may affect the court’s assessment, including facts that support the application and those that may weaken it, support a potential defence, or affect the proper scope of the order.
For example, the applicant may need to explain accurately any uncertainty about the wallet and account structure, whether the exchange has already been contacted, whether it imposed a temporary restriction, and why advance notice to the respondent would be inappropriate.
If material facts are not fully disclosed, the court may later discharge an interim order and make consequential orders as to costs or loss.
An applicant will also commonly be required to give a cross-undertaking in damages. In substance, this means that if the order is later found not to have been justified, the applicant may be required to compensate losses caused by the wrongful freezing or restriction.
Crypto assets can be highly volatile, and exchange accounts may involve other users or legitimate commercial activity. A cross-undertaking is therefore not a formality. Before applying, the claimant should assess not only the prospects of obtaining an order but also the potential consequences if it is later discharged.
Urgency must likewise be supported by evidence. The speed at which crypto assets can move does not automatically make every matter suitable for urgent or without-notice relief. The court may consider whether the funds are still moving, whether the exchange has already taken preservation measures, whether there is a concrete risk of further dissipation, and whether the applicant acted promptly after learning the relevant facts.
5. Why an on-chain tracing report is not enough
An on-chain analysis report is an important starting point, but it is not the complete evidential foundation for court proceedings.
To have practical legal value, an analysis should explain where the funds originated, the addresses through which they passed, whether they moved through decentralised exchanges or cross-chain bridges, the platform at which they arrived, and the basis for any attribution of an address. It should also explain the limitations of its conclusions and avoid presenting probability as certainty.
For victims in China, the case record will often contain extensive Chinese-language material, including chat records, bank transfer records, exchange records, police reports, platform screenshots and identity clues. These materials need to be organised into a coherent factual chronology, transaction schedule and evidence index, and then matched against the on-chain transactions.
Hong Kong counsel must use that record to assess jurisdiction, the rights that the applicant may assert, whether interim relief is appropriate, whom to name as defendants, and whether barristers, experts or lawyers in other jurisdictions should be engaged.
The real challenge is therefore not knowing the names of a “freezing order” or “disclosure order.” It is arranging technical analysis, factual evidence and multi-jurisdictional procedures in the correct sequence.
6. Costs and case economics
Urgent injunctive relief, third-party disclosure, on-chain analysis and subsequent litigation in Hong Kong can involve significant initial and continuing costs.
Those costs may include blockchain forensics, Hong Kong solicitors and barristers, court proceedings, translation, notarisation, service, expert reports, substantive litigation and enforcement. Where other jurisdictions are involved, additional local counsel and investigation costs may arise.
The decision to proceed should not turn solely on the amount lost or on the fact that funds once entered an exchange. More important questions include whether assets may still exist, whether the on-chain endpoint is reliable, whether Hong Kong has sufficient connecting factors, whether the applicant has a sustainable claim, and whether the expected costs are proportionate to the potential recovery.
Where the amount is relatively small, the asset endpoint is unclear, or no meaningful enforcement leverage exists, procedural costs may exceed the potential recovery. Conversely, where multiple victims were affected by the same scheme, sharing factual investigation and on-chain analysis may sometimes improve the economics. Whether victims can appropriately act together still depends on their individual transactions, legal rights and potential conflicts of interest.
7. What to do after locating an exchange endpoint
Funds reaching an identifiable exchange will often create an information route and a possible asset-preservation opportunity worth evaluating. It does not mean that the assets are secure or that the Hong Kong courts necessarily have jurisdiction.
Victims should promptly preserve transaction hashes, wallet addresses, chat records, platform information, bank and exchange transfer records, police reports, and the date and analysis by which the endpoint was identified.
Whether to contact the exchange immediately, in what capacity, and with what materials requires strategic judgment. Premature, unsupported or poorly framed contact may be ineffective and may affect later assessments of urgency and procedural arrangements.
Before commencing Hong Kong proceedings, a feasibility assessment should ordinarily confirm whether the on-chain endpoint is reliable, identify the particular exchange operator, consider whether the assets may remain, evaluate the jurisdictional basis in Hong Kong, identify potentially available legal measures, and compare the likely costs with the potential recovery.
A responsible assessment may also conclude that commencing proceedings in Hong Kong is not recommended.
8. Roles in cross-border collaboration
Crypto-asset matters often require the coordinated progression of evidence organisation in China, professional on-chain analysis, Hong Kong jurisdictional assessment, and local court procedures.
LineTraces can assist Chinese clients and counsel by organising facts and evidence, structuring on-chain transaction information, coordinating professional analysis providers, and connecting the matter with qualified lawyers in relevant jurisdictions in light of the fund flows.
Hong Kong legal opinions, court applications and litigation are independently handled by Hong Kong-qualified lawyers. The client relationship, scope of work, fee arrangements and respective responsibilities should be agreed before any formal engagement.
Lawyers handling crypto-asset matters are welcome to contact us to discuss case-specific allocation of responsibilities and possible collaboration.
Contact
Discuss a matter or professional collaboration
To discuss a specific matter, counsel collaboration or cross-jurisdictional coordination, contact Yvette Yi Li by email or WeChat.
Website
linetraces.comScan to connect
An initial contact or submission of information does not create an attorney-client relationship. Please do not send highly sensitive or confidential material before conflicts checks have been completed and an engagement has been formally accepted.