Four Parallel Recovery Avenues
framework
Core idea
There are four legal routes to stolen crypto, and they are not alternatives to choose between. Each has a different timeline, a different lever, and a different failure mode, so a serious recovery runs them at once and lets them apply pressure from separate directions. Picking one and waiting to see whether it works is how the window closes.
Components
| Avenue | Primary purpose | Timeline | Key advantage | Limitation |
|---|---|---|---|---|
| Civil litigation | Asset recovery and damages | File immediately | Speed, and the victim keeps direct control | Expensive, and enforcement across borders is hard |
| Criminal referral | Seizure and prosecution | After evidence gathering | State resources and cross-border tools | Little control, and priority varies wildly |
| Regulatory action | Systemic pressure on intermediaries | After initial assessment | Industry-wide leverage over VASPs | Broader focus, slower to move |
| Arbitration | Contractual recovery | Per the agreement terms | Private, specialist tribunal | Only reaches parties to the contract |
Civil levers worth knowing: preliminary injunctions and freezing orders, third-party disclosure orders, service by alternative means where the defendant is unknown, and a provisional liquidator where shell companies are involved. Common law systems add proprietary tracing, constructive trust arguments for commingled funds, unjust enrichment as a fallback, and account of profits.
Criminal levers: jurisdictions with specific cryptocurrency theft statutes, computer crime provisions that explicitly cover wallet credentials, money laundering predicate offences, and fraud provisions reaching smart contract manipulation. The referral package needs the theft mechanism explained in non-technical language, a fund-flow visualisation, and chain of custody for everything.
Regulatory levers: VASP licensing conditions, Travel Rule obligations, market manipulation prohibitions, and AML/CTF frameworks. The named regulator differs by jurisdiction (for example FinCEN, SEC and CFTC in the US; national FIUs and ESMA in the EU; MAS in Singapore; VARA and FSRA in the UAE; FCA and NCA in the UK). Verify the current perimeter before relying on any of these, because regulatory remits in this space change frequently.
When to use
As soon as the loss is scoped and before committing budget, so the avenues can be sequenced to start in parallel rather than discovered one at a time.
Avoid when
Do not let civil and criminal tracks collide. Their timelines conflict, disclosure in one can compromise the other, and coordinating them is a deliberate task rather than something that resolves itself.
Related
Compelling VASP Disclosure: The Legal-Process Ladder · Recovery Jurisdictions and Crypto Case Law · The Six-Step Crypto Recovery Framework · Working with Law Enforcement: Capacity, Speed, and Cross-Sector Coalitions · Exchange Tiers and the Escalation Clock · Recovery Budget Tiers by Asset Value