A Digital-Age Crackdown: Europe Signs Historic Treaty to Seize Crypto Crime Proceeds

Nine Signatories in Strasbourg

STRASBOURG, France — The European Union and eight European states signed a new legal instrument here on October 14, 2026, that aims to close one of the most stubborn gaps in modern law enforcement: the gap between crime proceeds hidden in bank accounts and those now sitting in digital wallets. Signed on the sidelines of the Council of Europe’s 2026 Octopus cybercrime conference, the additional protocol extends the organization’s 2005 anti-money laundering framework to virtual assets. In practical terms, it brings cryptocurrency exchanges, custodial wallet services and other digital asset businesses into a shared international machinery designed to trace, freeze, seize and confiscate the proceeds of crime, terrorism financing and serious financial wrongdoing. Joining the EU at the ceremony in Strasbourg were Georgia, Greece, Hungary, Luxembourg, Monaco, Montenegro, San Marino and the United Kingdom. The political weight of that list was hard to miss: it includes some of Europe’s most important financial centers, as well as countries on the continent’s eastern and southern edges. Council of Europe Secretary General Alain Berset was blunt about what was at stake. “Criminal money feeds organized crime and buys what should never be for sale: democracy itself,” he said. “No single country can recover criminal assets across borders on its own. With this protocol, none has to try.” The message was aimed as much at prosecutors and police as at the digital asset industry. For years, law enforcement agencies have complained that the speed and borderless nature of cryptocurrency make traditional mutual legal assistance too slow to be useful. The Strasbourg signing was designed to signal that the rules of that game are changing.

A Treaty Built for a Different Era

The legal foundation of the new protocol is one of the most important instruments in the fight against financial crime: the Council of Europe’s Convention on Laundering, Search, Seizure and Confiscation of the Proceeds from Crime and on the Financing of Terrorism, opened for signature in 2005. That convention established common rules for the confiscation of criminal wealth and for cooperation between countries trying to recover money stolen, laundered or hidden across borders. But it was written before bitcoin was created, before stablecoins entered circulation, and before decentralized finance became a serious channel for moving value outside the traditional banking system. The new protocol is intended to modernize that framework for the digital age. It updates the convention’s definitions, expands the legal tools available to each party, and makes clear that the same enforcement machinery that applies to bank accounts should apply to virtual assets and the companies that service them. The text was formally adopted by Council of Europe member states in May 2026, moving it from drafting to the signature stage. Yet the ceremony in Strasbourg was only the beginning. Under the treaty’s own terms, the protocol will enter into force only once five parties ratify it, and at least three of those parties must be Council of Europe member states. That means the operative start date rests on national ratification votes that have not yet happened. The signing was a milestone, but not a finish line. It was, in many ways, the moment when governments committed publicly to a plan that now has to survive the slower, messier process of domestic politics.

The Definitional Shift That Puts VASPs in the Crosshairs

For the digital asset industry, the most consequential change in the protocol is definitional. The text explicitly brings virtual assets and virtual asset service providers — the exchanges, custodians and wallet services that hold and transmit digital money, commonly known as VASPs — into the scope of the 2005 convention. That one change places crypto businesses in signatory countries inside an international seizure and information-sharing network that was previously aimed almost entirely at bank accounts. A law enforcement agency in one participating country will be able to use the treaty’s machinery to obtain records held by a VASP in another country, to freeze digital funds before they can be transferred, and to trace assets across the blockchain with help from foreign authorities. The stated goal, according to officials involved in the drafting, is to close the gap between enforcement powers built for bank money and the reality of value that settles in minutes across jurisdictions. For crypto companies, the implications are significant. Once the protocol is in force, exchanges and custodians will be expected to respond to information requests from foreign regulators, cooperate with asset freezing orders, and maintain records capable of supporting cross-border investigations. Compliance teams will need to understand not just local law but the obligations of an international treaty. The era in which digital asset firms could argue that they were outside the reach of traditional financial crime enforcement is drawing to a close. The protocol is designed to make that argument far more difficult, and the direction of travel is unmistakable.

Seizure Without a Conviction

The substantive powers created by the protocol are wide, and they go considerably beyond simply extending old rules to new assets. Courts may now confiscate property even where it is not directly tied to a named offence, provided the court finds that the property derives from criminal activity. In defined cases, a court order alone is sufficient — no criminal conviction is required at all. This is a significant expansion of the traditional model, under which confiscation generally followed a conviction. Third-party assets can also be swept into confiscation proceedings, although the text protects parties who acquired the property in good faith. To stop value from moving before authorities can act, the protocol permits urgent freezing and seizure without prior notice, a measure aimed directly at intercepting proceeds before they reach another account, another platform or another jurisdiction. The institutional requirements are equally ambitious. Each party must establish or designate an Asset Recovery Office to trace criminal proceeds and an Asset Management Office to manage frozen, seized and confiscated assets. Financial intelligence units gain expanded powers, including the ability to obtain information from VASPs, to monitor and halt transactions suspected of laundering, and to access account records held by both financial institutions and digital asset service providers quickly. Parties must also operate a centralized automated system, or an equivalent arrangement, covering both traditional bank account data and virtual asset account data. Cross-border cooperation between the new recovery offices becomes obligatory rather than discretionary, with a three-day response deadline for urgent requests. That is a deliberate attempt to force speed into a process that has historically been slow, fragmented and heavily dependent on personal relationships between investigators.

Where Recovered Assets Go

The protocol does more than say how assets can be taken; it says what happens to them afterward. The text places victims and legitimate owners first. Return of property or compensation to victims can occur before a final confiscation decision, under conditions set out in the treaty. That is an important innovation, because it allows money to flow back to fraud victims without waiting for the end of long criminal proceedings — a process that, in many countries, can take years. Once victims have been compensated, the remaining value follows a clear rule: amounts above 10,000 euros are split equally among the states that took part in the recovery. This is more than a bookkeeping detail. It is designed to create an incentive for cooperation. A country that provides intelligence, freezes assets, or carries out a seizure knows it will share in the financial result. The protocol also encourages parties to apply confiscated virtual assets to “social reuse,” the public interest or other specified purposes. In practice, that could mean funding victim support programs, anti-crime initiatives, public infrastructure or other projects determined at the national level. The exact destination will vary by country, but the principle is embedded in the treaty: recovered criminal wealth should serve the public good, not be lost in a bureaucratic limbo or eventually returned to circulation through poorly managed auctions. The structure is designed to reward cooperation, protect victims and ensure that the fight against crypto crime produces tangible benefits for society.

The Long Road From Signature to Seizure

Taken as a whole, the protocol represents one of the most ambitious international attempts yet to bring legal enforcement into line with the digital asset economy. It recognizes that organized crime has moved online, that financial value now moves faster than diplomatic paperwork, and that no single country can reclaim what criminals scatter across multiple jurisdictions. The signing states — particularly the United Kingdom and Luxembourg, both heavyweight financial centers — are effectively signaling that the era of crypto sanctuary is over. But the true measure of this agreement will come in the ratification process. The protocol will remain a statement of intent until five parties ratify it. And even after it enters into force, the success of the new system will depend on implementation. Asset Recovery Offices will need funding and staff. Financial intelligence units will need secure channels for sharing sensitive data. Courts will need guidance on how to interpret provisions that are intentionally broad. The three-day deadline for urgent requests is an ambitious standard, especially for legal systems unaccustomed to moving at the speed of digital payments. Berset’s argument — that no country has to fight alone — is powerful in theory. The challenge is making it work in practice. For the digital asset industry, the message is already clear: the infrastructure built to move value quickly must now be capable of stopping it just as quickly when the law demands. The 2026 Octopus conference provided a fitting backdrop, reminding delegates that cybercrime and digital finance are no longer separate conversations. The distance between a signature and a successful seizure, however, is still measured in ratifications.