Ukraine is one of the countries with the highest level of cryptocurrency activity in Europe. Along with the market growth, the number of fraudulent schemes is also increasing: investment scams, phishing platforms, pseudo-brokers, romantic scams, wallet hacks. Both individuals and entrepreneurs fall victim.
However, many victims do not know where exactly to turn in Ukraine, what the police can actually do, how blockchain tracing works in the Ukrainian legal context, and whether there is any chance of recovering assets. This article provides detailed answers to each of these questions.
Short Answer
Recovering cryptocurrency in Ukraine is possible-not in every case, but as a process: evidence fixation, blockchain tracing, contacting the Cyber Police Department, requests to exchanges, and legal support. Since 2022, Ukraine has had legislation on virtual assets that recognizes cryptocurrency as property and opens legal protection mechanisms. The speed of initial actions is the main factor influencing the outcome.
Legal Status of Cryptocurrency in Ukraine
Understanding the legal context is important: it determines what protection tools are available to the victim.
Law on Virtual Assets
In February 2022, the Verkhovna Rada of Ukraine adopted Law No. 2074-IX "On Virtual Assets". The law officially recognizes cryptocurrency and other virtual assets as property, defines market participants, and establishes regulatory frameworks. This means that cryptocurrency theft in Ukraine is theft of property with corresponding legal consequences.
Criminal Liability for Crypto Fraud
Cryptocurrency fraud in Ukraine is qualified under the norms of the Criminal Code. Depending on the circumstances, the following may apply:
- Article 190 of the Criminal Code of Ukraine - fraud (obtaining someone else's property through deception or abuse of trust).
- Article 185 of the Criminal Code of Ukraine - theft (secret appropriation of property).
- Article 361 of the Criminal Code of Ukraine - unauthorized interference with the operation of computer systems (relevant in case of wallet hacks).
- Article 200 of the Criminal Code of Ukraine - illegal actions with documents for transfer, payment cards, and other means of access to bank accounts (may apply in a number of schemes).
The qualification depends on the specific circumstances of the case and is determined by the investigator. This is important to consider when formulating a statement.
Regulator
The regulation of the virtual assets market in Ukraine is entrusted to the Ministry of Digital Transformation and the National Securities and Stock Market Commission (NSSMC). The National Bank of Ukraine (NBU) regulates issues related to virtual assets in terms of payment operations.
Where to Turn if Cryptocurrency is Stolen in Ukraine
An effective strategy is several parallel appeals, not waiting for the result from one. Here are specific addresses.
1. Cyber Police Department of the National Police of Ukraine
The main structure for investigating cybercrimes, including cryptocurrency fraud. You can file a statement:
- Online: through the form on the website cyberpolice.gov.ua
- At the local police station - the investigator will forward the case to the specialized unit
- By phone: 0 800 505 170 (free)
Important: the statement must contain specific data - TXID of transactions, wallet addresses, scheme description, amount of damage. The more precise the statement, the more effective the investigators' work.
2. Prosecutor's Office
If the police are inactive or avoid initiating criminal proceedings - an appeal to the prosecutor's office with a complaint about the investigator's inaction is a legal mechanism of pressure.
3. Blockchain Tracing Specialists
This is the first practical step that should be taken in parallel with contacting the police. Analysts track the route of stolen funds in the blockchain and prepare a report that is submitted to the police, exchanges, and used in legal procedures. Without this report, most appeals are significantly less effective.
4. Exchanges and Services Through Which Funds Passed
If blockchain tracing has established the final exchange or exchanger - an official request for freezing is sent there. Large exchanges (Binance, OKX, Kraken, and others) respond to structured requests with an evidence base.
5. Cryptocurrency Lawyer
Legal support is needed for the correct preparation of statements, building a position, interacting with authorities, and - if necessary - court representation.
How the Cyber Police of Ukraine Works in Investigating Crypto Fraud
The Cyber Police Department is a specialized unit of the National Police that investigates crimes in the field of information technology, including cryptocurrency fraud.
After filing a statement, the process looks as follows:
- Entry into the Unified Register of Pre-trial Investigations (URPI). The investigator is obliged to enter information about the crime into the URPI - this is the official start of criminal proceedings. You should be informed of the case number.
- Appointment of an Investigator. The case is transferred to an investigator who conducts the investigation.
- Collection of Evidence. The investigator can request data from exchanges, send international requests for legal assistance (MLAT), involve technical specialists.
- Interaction with Foreign Structures. If necessary - requests through Interpol, Europol, or within the framework of bilateral agreements.
Realistic assessment: the police have resources and powers, but the investigation takes time. An independent analytical report on blockchain tracing provided to the investigator significantly speeds up the process - the investigator does not need to perform technical work from scratch.
| What the Cyber Police Can Do | What is Beyond Their Powers |
|---|---|
| Initiate criminal proceedings | Guarantee the return of funds |
| Send requests to exchanges (including international ones) | Instantly freeze assets on a foreign exchange |
| Conduct technical analysis of transactions | Act in jurisdictions without international agreements |
| Identify the fraudster (in some cases) | Compensate for damage directly |
| Interact with Interpol and Europol | Work without an evidence base from the victim |
How to Write a Statement to the Police About Cryptocurrency Theft
The quality of the statement directly affects how quickly and effectively the investigation will begin. A statement written vaguely, without technical details, is processed much slower.
What should be in the statement:
- Your data: Full name, address, contacts.
- The essence of what happened: when, under what circumstances, how you transferred the funds.
- Technical data: TXID of transactions, recipient wallet addresses, network (Bitcoin, Ethereum, TRON, etc.), amounts, dates.
- Description of the scheme: what the platform looked like, how you were persuaded, who contacted you.
- Amount of damage - in cryptocurrency and equivalent in hryvnia on the date of transfer.
- List of attached evidence: screenshots, correspondence, contracts, account data.
- Requirement: enter information into the URPI and initiate criminal proceedings.
It is recommended to file a statement with legal support or after consulting a specialist - this reduces the risk of refusal due to technical errors in the wording.
Blockchain Tracing in the Ukrainian Legal Context
Blockchain tracing is a professional on-chain analysis of the movement of crypto assets. In the Ukrainian legal context, its significance is twofold.
For the police: an analytical report prepared by specialists can be attached to the materials of the criminal proceedings as a technical document. It helps the investigator understand the route of funds, identify related services, and justify requests to exchanges.
For civil proceedings: the report is used as evidence when filing a civil lawsuit - if the identity of the fraudster is established and there are grounds for claiming damages in court.
For appeals to exchanges: a structured report indicating the route of funds and attribution of final services is the basis for an official request to freeze assets. Exchanges are much more responsive to such requests than to appeals without technical documentation.
The result of blockchain tracing is not just a "transaction map", but an evidentiary document structured for a specific legal purpose: police investigation, exchange request, or litigation.
Common Cryptocurrency Fraud Schemes in Ukraine
Understanding the scheme the victim encountered affects the choice of strategy and evidence collection.
| Scheme | How It Works | Investigation Features |
|---|---|---|
| Pseudo-investment platforms | The site mimics a trading platform, shows "profit", blocks withdrawal | Screenshots of the personal account, top-up history, site address, correspondence with the "manager" |
| Romantic scam (Pig Butchering) | Acquaintance on social networks → trust → "investments" → disappearance | Entire correspondence history, scammer's social media accounts, transaction history |
| Phishing sites of exchanges and wallets | Copy of Binance, MetaMask, and others - user enters data | Site URL, visit date, TXID of transactions after login |
| Pseudo-brokers | "Broker" offers capital management, accepts deposit, disappears | Contract, correspondence, details, transaction history |
| Telegram channels and "signals" | Closed channels with "insider information" - entry requires a "deposit" | Channel link, correspondence with the administrator, TXID |
| P2P fraud | Seller does not send crypto after receiving payment or disputes the transaction | Screenshots of the transaction on the platform, bank statements, correspondence |
| Drain attacks through smart contracts | Signing a malicious transaction (airdrop, staking) - wallet depletion | TXID, smart contract address, permission history, signing date |
Is It Realistic to Recover Cryptocurrency Through Ukrainian Legal Mechanisms
Honest assessment: legal mechanisms exist, but their effectiveness depends on a number of factors.
When Chances Are Higher
- The fraudster is in Ukraine or used Ukrainian services - the police have jurisdiction.
- Funds ended up on a verifiable exchange with KYC - there are grounds for a freeze request.
- The victim acted quickly - traces are fresh, assets may not yet be withdrawn.
- There is a complete evidence base: TXID, correspondence, documents, blockchain tracing report.
- The fraud scheme is well-documented - investigators find it easier to qualify the act.
When the Situation Is More Difficult
- Fraudsters are abroad - international cooperation is required, which takes significantly more time.
- Funds passed through mixers or several network chains - on-chain trace is more complex.
- A lot of time has passed - some data is unavailable, traces have "cooled down".
- Fraudsters used decentralized services (DEX, anonymous exchangers) - legal impact is limited.
The complexity of the situation is not a verdict. Even in difficult cases, blockchain tracing can establish part of the route, and legal support helps build a realistic action strategy.
International Aspect: When Fraudsters Are Abroad
Most cryptocurrency frauds have an international character - fraudsters, platforms, and exchanges can be in different jurisdictions. The Ukrainian side in such cases interacts with:
- Interpol - international notifications and arrest requests through the National Central Bureau of Ukraine.
- Europol - within the framework of cooperation with European law enforcement structures.
- MLAT (Mutual Legal Assistance Treaties) - requests for legal assistance to countries with which Ukraine has corresponding agreements.
- Direct requests to exchanges - large regulated platforms respond to official requests regardless of the country of origin of the request if it is supported by an evidence base.
In parallel, the victim can independently or through representatives file complaints with international structures: IC3 (USA), Action Fraud (UK), EFCC (Nigeria), Swiss FEDPOL, and others - depending on the jurisdiction of the fraudster.
Theft of Cryptocurrency in Ukraine During Wartime
Martial law in Ukraine has created an additional context for cryptocurrency fraud. Several relevant aspects:
- Increase in schemes under the guise of "military collections" and "assistance to the Armed Forces of Ukraine". Fraudsters use patriotic narratives to collect cryptocurrency. If you donated funds for "military needs" and they did not reach their destination - this is also fraud, which is investigated.
- Increased activity of schemes for displaced persons. Internally displaced persons are a target for fraudsters offering "investments" or "safe storage" of funds.
- Work of law enforcement agencies. The Cyber Police of Ukraine continues to work under martial law. Investigations are conducted, although the load on the system has increased.
- International partners have intensified support. A number of Western partners are assisting Ukraine in investigating cybercrimes, which expands opportunities for cases with an international trace.
What to Prepare Before Contacting the Police
Contacting the cyber police will be significantly more effective if a complete package of materials is prepared before filing a statement.
- TXID of all transactions related to the theft
- Wallet addresses (yours and the recipient's)
- Network, amount, currency, date, and time of each transaction
- Screenshots of correspondence (Telegram, WhatsApp, Viber, Email, Discord)
- Screenshots of the platform site and personal account
- Contracts, agreements, receipts - if any
- Data of fraudsters' accounts (nicknames, numbers, profile links)
- Bank statements if money was first converted through a bank
- Analytical blockchain tracing report - if already prepared
- Amount of damage in cryptocurrency and hryvnia on the date of transfer
How Trace Legal Helps with Cryptocurrency Theft in Ukraine
Trace Legal works with victims of cryptocurrency fraud - including in the Ukrainian legal context. The company helps navigate the path from initial analysis to evidence base preparation and legal support.
- Initial situation analysis. Assessment of circumstances, available data, and prospects - honestly, without promises of guaranteed results.
- Blockchain tracing. Professional on-chain analysis of the route of stolen assets with the preparation of an analytical report.
- Preparation of the evidence base. Systematization of materials in a format suitable for a police statement, exchange request, or litigation.
- Assistance in preparing a statement to the cyber police. Technically competent statement with correct wording and a complete package of attachments.
- Appeals to exchanges. Official requests for asset freezing or information provision - to the compliance departments of platforms.
- Legal strategy. Consultation on possible legal steps considering Ukrainian legislation and the fraudster's jurisdiction.
- Process support. Monitoring the progress of the investigation, escalation if necessary, updating the analysis when funds move.
If your cryptocurrency was stolen in Ukraine - contact Trace Legal for an initial consultation. Specialists will assess the situation and help determine realistic steps.
Get a consultation from Trace Legal →
Step-by-Step Algorithm: Recovering Cryptocurrency in Ukraine
-
Step 1. Record transactions and gather evidence.
TXID, addresses, network, amounts, screenshots of correspondence, sites, documents. Do not delete anything.
-
Step 2. Seek blockchain tracing.
Specialists analyze the route of funds and prepare a report - the basis for all further actions.
-
Step 3. File a statement with the Cyber Police Department.
Online at cyberpolice.gov.ua or at the local police station. With a complete package of documents and technical data. Demand entry into the URPI.
-
Step 4. Send appeals to exchanges.
If tracing has established the final platform - an official freeze request to the compliance department.
-
Step 5. If necessary - international complaints.
IC3, Action Fraud, and other structures depending on the jurisdiction of the fraudster and platforms.
-
Step 6. Legal support.
Consultation on a civil lawsuit, pre-trial procedure, or other legal instruments.
-
Step 7. Monitor the progress of the investigation.
Request information from the investigator about the progress of the case. In case of inaction - a complaint to the prosecutor's office.
Frequently Asked Questions (FAQ)
- Is cryptocurrency theft a crime in Ukraine?
- Yes. With the adoption of the Law on Virtual Assets (2022), cryptocurrency is recognized as property. Cryptocurrency fraud is qualified under the Criminal Code of Ukraine - primarily under Article 190 (fraud) or Article 185 (theft), and in case of hacks - under Article 361 (unauthorized interference with computer systems).
- Where to turn if cryptocurrency is stolen in Ukraine?
- First of all - to the Cyber Police Department of the National Police of Ukraine (cyberpolice.gov.ua, tel. 0 800 505 170). In parallel - to blockchain tracing specialists for transaction analysis and to exchanges through which the funds passed.
- What is the URPI and why is it important to demand entry?
- The URPI is the Unified Register of Pre-trial Investigations. Entry into it means the official start of criminal proceedings. If the investigator accepted the statement but did not enter it into the URPI - the proceedings are not actually conducted. Demand the case number in writing.
- Can Ukrainian police help if fraudsters are abroad?
- Yes, but it is more complicated and takes more time. The Cyber Police of Ukraine interacts with Interpol, Europol, and foreign law enforcement agencies through MLAT mechanisms. International cooperation is possible but requires more time than domestic investigations.
- Is a notary or lawyer needed to file a statement?
- A notary is not needed. A lawyer is not mandatory but advisable - especially if the amount is significant or the situation is complex. A legally competent statement with correct qualifications increases the chances of an effective investigation.
- Can a statement be filed anonymously?
- The police are not obliged to check anonymous statements. To initiate criminal proceedings, a statement from an identified person with personal data is required. Your data within the framework of the proceedings is protected by procedural law.
- What to do if the police refuse to accept the statement?
- This is a violation of your rights. Record the fact of refusal in writing or request an explanation in writing. Then file a complaint with the prosecutor's office or submit a statement directly online through cyberpolice.gov.ua.
- How long does an investigation take in Ukraine?
- Depends on the complexity of the case. Domestic investigations with identified suspects in Ukraine can be completed faster. International cases take significantly longer - from several months to several years. Having a ready analytical blockchain tracing report speeds up the process.
- Is it realistic to recover USDT or Bitcoin in Ukraine?
- In some cases - yes. If the funds passed through a verified exchange, and an official request with an evidence base was sent there - freezing is possible. If the fraudster is identified - civil recovery is possible. Each case is individual, and prospects can only be assessed after analyzing the specific situation.
- Does Trace Legal help Ukrainian citizens?
- Yes. Trace Legal works with victims of crypto fraud in Ukraine - helps conduct blockchain tracing, prepare the evidence base, draft a statement to the cyber police, and build a legal strategy considering Ukrainian legislation.
Cryptocurrency Stolen in Ukraine? Start with the Right Steps
Ukrainian legislation recognizes cryptocurrency as property, and the cyber police investigate such cases. But an effective investigation starts with a well-assembled evidence base and blockchain tracing - not just a statement to the police.
Trace Legal helps victims in Ukraine navigate the entire path: from transaction analysis to legal support.