🏛️ Crypto Seizure & Custody Framework

Legal Framework:

• Criminal Justice (Money Laundering and Terrorist Financing) Act 2010 (as amended)
• Proceeds of Crime Act 1996
• MiCA Regulation (EU) 2023/1114 (applicable from December 30, 2024)

Key Features:

• Seizure requires court orders for suspected criminal proceeds
• Technical challenges highlighted by high-profile cases where private keys were lost/destroyed
• Assets seized are transferred to state-controlled wallets
• Conversion to fiat typically occurs quickly to prevent depreciation
• CBI oversees custody requirements for licensed service providers under MiCA

• Previously operated under Virtual Asset Service Provider (VASP) regime established under 5th Anti-Money Laundering Directive
• Transitional period until mid-2026 for existing DASPs to obtain CASP authorization
• No existing VASP passporting rights until CASP authorization obtained
• More than 100 players registered under previous PACTE-influenced framework

Legal Framework:

• Proceeds of Crime Act 2002 (as amended by ECCTA)
• Economic Crime and Corporate Transparency Act 2023
• Money Laundering Regulations 2017 (as amended)
• Code of Practice for Search, Seizure and Detention (updated November 2024 for Northern Ireland)

Key Features:

• Civil and criminal forfeiture powers introduced by ECCTA (April 2024)
• Police can seize crypto without making an arrest (major policy change)
• Magistrates' Courts can issue detention orders for crypto assets and related items
• Maximum detention period: 2 years (extendable to 3 years for international assistance requests)
• Asset Recovery Incentivisation Scheme (ARIS): law enforcement keeps 50% of recovered proceeds
• "Name-and-warn" public enforcement strategy for non-compliant firms

Seizure Process:

• Search warrants under Section 303Z23 POCA
• Assets transferred to enforcement-controlled wallets
• Detention orders under Section 303Z28 (crypto-related items) and Section 303Z32 (crypto assets)
• Release applications possible under Section 303Z34

• Over 90 cases using new seizure powers by end of October 2024
• Estimated £1.24 billion in illicit crypto transactions linked to UK in 2021 (per NCA)
• NCA confiscated £26.9 million in crypto assets (April 2021 - March 2022)
• Full regulatory regime expected to go live by end of 2026
• Authorization gateway opens in 2026
• Firms currently operate under MLR registration requirements

Legal Framework:

• PACTE Act (2019) - remains in force until June 30, 2026
• MiCA Regulation (EU) 2023/1114 - fully applicable since December 30, 2024
• Monetary and Financial Code (Code Monétaire et Financier)
• Transfer of Funds Regulation (TFR) - "Travel Rule" fully applied January 2025
• Ordinance No. 2024-936 on AML/CFT for crypto assets
• DDADUE Law (May 2025) - provides legal framework for pledging crypto assets

Key Features:

• CASPs must report suspicious activity to TRACFIN within prescribed timeframes
• TRACFIN can request asset freezes for significant risks
• Enhanced due diligence for self-hosted wallets
• Reporting requirement for crypto transfers exceeding €1,000 between CASP and self-hosted wallets
• ERMES platform for electronic suspicious transaction reporting (generalized January 2025)
• Custody providers must segregate client assets from company assets

• 18-month transition period until July 1, 2026
• Legacy PSANs registered before December 30, 2024 can operate until July 1, 2026 or until MiCA authorization decision
• No simplified authorization procedure for PSANs transitioning to CASP status
• New entrants must obtain MiCA CASP authorization directly

Legal Framework:

• Money Laundering and Terrorist Financing Prevention Act (Wwft) - implemented 5AMLD provisions in 2020
• MiCA Regulation (EU) 2023/1114
• Dutch Criminal Code provisions on seizure
• Sanctions Act 1977 (applicable to crypto transfers)

Key Features:

• FIOD conducts seizures in cooperation with NHTCU and Public Prosecution Service
• Seized assets transferred to prosecution-controlled wallets
• Immediate conversion to euros to prevent depreciation
• Return value determined by exchange rate at time of actual seizure (per Court of Appeal The Hague ruling)
• Civil seizure possible with court authorization (including NFTs - "Cryptobat" case demonstrates feasibility)
• FATF Travel Rule implemented; full data sharing required for transactions over €1,000
• DNB can impose administrative fines up to millions of euros for Wwft violations
• Pre-scan procedure available through AFM for CASP license applicants
• Cooperation with private sector (Tether, Chainalysis) for asset tracing and freezing

• September 2024: Seizure of €7 million from Cryptex and pm2btc services; servers taken offline for facilitating money laundering
• NFT Seizure Precedent: Dutch court authorized conservatory attachment and judicial custody of "Cryptobat" NFT
• Nine additional crypto service providers registered with DNB during 2024

Legal Framework:

• Kreditwesengesetz (KWG) - Banking Act (crypto custody provisions since January 2020)
• Kryptomärkteaufsichtsgesetz (KMAG) - companion law implementing MiCA domestically; grants BaFin additional enforcement powers
• MiCA Regulation (EU) 2023/1114
• Geldwäschegesetz (GwG) - Money Laundering Act with crypto-specific provisions (§15a on unhosted wallets, effective 2025)
• German Electronic Securities Act (eWpG) - crypto securities framework (since June 2021)
• Kryptomarkt-Zulassungsübergangsverordnung (KMZÜV) - fast-track licensing regulation

Key Features:

• Proactive enforcement culture: BaFin empowered to issue public warnings and interim cease-and-desist orders
• Court validation of BaFin's enforcement approach (2025 case law)
• Crypto custody defined as: (1) custody/safekeeping, (2) administration of rights, (3) safeguarding of cryptographic keys - any triggers licensing
• Enhanced AML/CFT measures required: customer due diligence, transaction monitoring, recordkeeping, suspicious activity reporting
• EU Travel Rule replaced national crypto travel rule (end of 2024)
• Risk assessment required for transfers to/from unhosted (self-custodied) wallets
• BaFin uses blockchain analytics for enforcement
• Simplified fast-track procedure available for pre-regulated entities (application deadline: August 2025)

• 12-month transitional window (shorter than MiCA's maximum 18 months)
• Existing KWG-authorized institutions must apply for MiCA CASP license by December 31, 2025
• CRR credit institutions can use simplified notification procedure under Article 143(6) MiCA
• Joint BaFin-Bundesbank oversight model continues
• BaFin handles policy, licensing, and enforcement
• Bundesbank regional offices conduct ongoing monitoring

• Government sold entire BTC holdings (46,359 BTC ≈ $3.9 billion) in mid-2024
• KfW issued first blockchain-based digital bond (July 2024)
• BaFin granted crypto custody licenses since 2020 under KWG

Legal Framework:

• Act of 18 September 2017 on prevention of money laundering and terrorist financing (AML Law)
• Royal Decree of 8 February 2022 on status and supervision of virtual currency providers
• Royal Decree of 5 March 2022 on FSMA operating expense reimbursement
• MiCA Regulation (EU) 2023/1114 (applicable since December 30, 2024)
• Law of 11 December 2025 implementing MiCA in Belgium

Key Features:

• FSMA registration mandatory since May 1, 2022 for crypto-to-fiat exchanges and custodian wallet providers
• Administrative fines up to €2.5 million for operating without registration/license
• Transitional period until June 30, 2026 for existing operators
• Marketing must include clear risk warnings; mass campaigns require pre-notification to FSMA
• 14-day withdrawal right for retail holders (under MiCA)
• Market abuse prevention rules (insider trading, manipulation)
• Custody providers must segregate client assets

NBB Responsibilities:

• Prudential requirements and authorizations
• Capital/reserve oversight
• Recovery/redemption plans

FSMA Responsibilities:

• Conduct rules and fair treatment
• Custody agreements
• Service-specific requirements
• Complaints handling
• Conflicts of interest

Note: FSMA supervises portfolio managers, UCITS management companies, AIFMs, market operators. NBB supervises other financial institutions.

• Non-EEA providers banned from operating in Belgium (effective May 1, 2022)
• Existing providers with cross-border operations must have home-country authorization and meet all home-state obligations
• ING study: 30% of Belgian investors have invested in crypto assets
• Grandfathering regime for providers active before May 1, 2022
• Draft implementation law pending parliamentary approval (expected late 2025/early 2026)
• Cross-border passporting available post-authorization

Legal Framework:

• Crypto Asset Market Act (CAMA) - effective July 1, 2024
• Money Laundering and Terrorist Financing Prevention Act (MLTFPA)
• MiCA Regulation (EU) 2023/1114
• EU Transfer of Funds Regulation (Regulation 2023/1113) - Travel Rule
• Digital Operational Resilience Act (DORA, EU Regulation 2022/2554) - applied January 17, 2025
• Law of Obligations Act (treats crypto as property)

Key Features:

• Dramatic regulatory tightening: transition from FIU to FSA represents fundamental shift
• All new CASP licenses issued by FSA since July 1, 2024
• Old FIU licenses valid until July 1, 2026 (no automatic conversion)
• Physical office required in Estonia
• Two resident directors on board required
• Real-time transaction monitoring mandatory
• Suspicious activity reporting to FIU within two days
• Travel Rule compliance: no minimum threshold (stricter than many EU states)
• DORA compliance: ICT-risk frameworks and major incident reporting required (from January 2025)
• GDPR full compliance required for KYC data
• Annual external audit of financial statements required
• Internal auditor or outsourced internal audit required

• €100,000 for Class 2 MiCA services (exchanges, custody)
• €250,000 for transfer services
• €10,000 state application fee

Enforcement Powers:

• FSA can issue, withdraw, and cancel licenses
• Fines up to €5 million or 15% of global turnover
• No sandbox currently available (Innovation Hub provides informal advice)
• Official sandbox under consideration for 2026 (focused on green assets and tokenized securities)

Authorization Timeline:

• CASP applications: 40 working days
• ART/EMT issuer applications: 60 working days (extendable by 20 days)
• Pre-application consultation with FSA available

Transition Statistics:

• As of August 2025: zero FSA-issued CASP authorizations (providers not rushing due to grace period)
• 25 service providers registered for cross-border operations in Estonia
• Existing providers must file complete MiCA-CASP application by December 30, 2024 to use grace period

• Early adopter: introduced crypto licensing in 2017
• FIU revoked over 1,000 licenses in 2020 due to AML concerns
• 2019 Coin Metro hack (€1.7 million theft) prompted security regulation tightening
• Major policy shift from "license mill" reputation to strict institutional-grade requirements
• Crypto Markets Act (CMA) effective July 1, 2024, aligning with MiCA
• Maximum 18-month transition period until July 1, 2026

The most dramatic example is Estonia (from 2,000+ licenses to 45 active providers), but the trend is visible across all jurisdictions with increased capital requirements, governance standards, and enforcement rigor.

• Higher barriers to entry
• Professionalization of the sector
• Exit of under-capitalized or non-compliant providers
• Greater institutional participation
• Enhanced AML/CFT requirements

• UK leading with no-arrest seizure requirement (ECCTA 2023)
• Netherlands demonstrating effective multi-agency coordination (FIOD, NHTCU, Public Prosecution)
• Germany integrating advanced blockchain analytics into BaFin enforcement
• All jurisdictions facing technical challenges with private key access and recovery
• Rapid liquidation protocols to prevent asset depreciation
• Court-supervised detention and forfeiture procedures

Growing collaboration with blockchain analytics firms and service providers for enhanced tracing, monitoring, and asset freezing capabilities:

• Analytics Firms: Chainalysis, TRM Labs, Elliptic
• Service Providers: Tether (Netherlands cooperation for USDT freezing)
• Real-time transaction monitoring
• Enhanced suspicious activity detection
• Cross-border coordination facilitation
• Technical expertise sharing

Common structure emerging across jurisdictions separating prudential from conduct supervision:

Uniform enforcement across EU under Transfer of Funds Regulation (EU 2023/1113), with varying thresholds and implementation approaches:

• Estonia: No minimum threshold (strictest in EU)
• Most EU countries: €1,000 threshold for enhanced due diligence
• UK: Implementing independently post-Brexit
• France: ERMES platform for electronic reporting (generalized January 2025)
• Germany: National rule replaced by EU Travel Rule (end 2024)
• Full beneficiary and originator information sharing required
• Enhanced monitoring for self-hosted wallet transfers

UK's Asset Recovery Incentivisation Scheme (ARIS) provides a potential model for other jurisdictions:

• UK ARIS Model: Law enforcement retains 50% of recovered proceeds
• Direct funding motivation for enforcement agencies
• Incentivizes proactive investigation and seizure
• Supports specialized training and technology investment
• Could be adapted to other jurisdictions for enhanced effectiveness
• Balances public interest with enforcement efficiency

Common challenges faced across all jurisdictions:

• Technical barriers: Private key access and recovery remains problematic (Ireland "Fishing Rod Case")
• Asset depreciation risks: Volatile crypto values during detention periods (Netherlands uses immediate conversion)
• Cross-border coordination complexity: Different legal frameworks and procedures
• Jurisdictional uncertainty: Decentralized protocols and cross-border transactions
• Resource constraints: Need for specialized expertise and technology
• Balancing innovation with enforcement: Avoiding over-regulation while preventing illicit activity

1. Establish cross-border coordination protocols for crypto seizures (learn from Netherlands FIOD model)
2. Invest in blockchain analytics tools and specialized training (Germany BaFin integration)
3. Develop private key management procedures and secure custody infrastructure
4. Create rapid liquidation protocols to prevent asset depreciation (Netherlands immediate conversion approach)
5. Consider asset recovery incentive programs modeled on UK ARIS (50% retention)
6. Formalize public-private partnerships with blockchain analytics firms (Chainalysis, TRM Labs, Elliptic)
7. Share best practices on civil forfeiture, no-arrest seizure procedures (UK ECCTA model)
8. Build specialized units with technical and legal expertise in crypto investigations
9. Develop evidence preservation standards for digital assets and blockchain data

1. Harmonize seizure procedures across jurisdictions for cross-border cases
2. Establish clear private key recovery protocols and legal standards
3. Develop specialized courts/prosecutors for crypto asset cases
4. Create secure custody infrastructure for long-term asset holding by state agencies
5. Implement transparent liquidation procedures for confiscated assets
6. Consider asset recovery incentives for enforcement agencies
7. Mandate regular reporting on seizure volumes, values, and outcomes
8. Balance innovation with enforcement - avoid over-regulation while preventing illicit activity
9. Foster international cooperation on standards, information sharing, and joint operations
10. Invest in regulatory capacity - specialized expertise, technology, and resources