The clock on a crypto fraud claim usually starts running the moment you knew, or reasonably should have known, that you were defrauded, not the day the scheme collapsed. Federal securities claims typically carry a 1 year discovery period with a 3 year statute of repose, while many other federal causes of action follow the 2 year discovery rule and 5 year repose period under 28 U.S.C. §1658. State fraud and conversion claims run on separate, often shorter, timelines. If you suspect fraud, preserve wallet addresses and transaction hashes now and get counsel involved before you assume you have time to spare.
TL;DR:
- The 3-year repose period for crypto securities claims starts from the date of initial solicitation, not the date of individual purchase, which can bar late-discovered fraud cases.
- State laws typically give victims 2 to 6 years to file fraud or conversion claims, but the clock is often tolled until the victim reasonably discovers the fraud, which varies significantly by jurisdiction.
- The discovery rule for crypto fraud depends on when a victim would have reasonably uncovered the scheme, with on-chain obfuscation delaying detection and fraudulent concealment extending limitations.
- Private civil claims, especially under securities law, are most viable within strict deadlines, making early reporting and preservation of evidence critical before assets dissipate or limits expire.
- Pursuing asset freezes via preliminary injunctions and preservation measures often provides better chances for recovery than relying solely on final court judgments.
Table of Contents
- What Is the Statute of Limitations for Crypto Fraud?
- Which Federal Deadlines Govern Crypto Securities Claims?
- Do State Fraud Laws Give You More Time?
- How Does the Discovery Rule Affect Crypto Fraud Timing?
- Why Do Asset Freezes Matter More Than the Final Judgment?
- What Should You Do Right Away After Discovering Crypto Fraud?
- How Do Experienced Litigators Prioritize a New Crypto Fraud Case?
- What Recovery Actually Looks Like for Crypto Fraud Victims
- How Murphy’s Law Helps You Beat the Clock on a Crypto Fraud Claim
- Where to Verify These Deadlines Yourself
- Sources
- FAQ
What Is the Statute of Limitations for Crypto Fraud?
Crypto fraud almost never travels through a single legal channel. A victim’s losses can trigger a criminal investigation, a federal civil enforcement action, and a private lawsuit, all running on different clocks and answering to different agencies. Understanding which lane your claim sits in determines which statute of limitations actually controls.
Criminal investigations, led by the DOJ and FBI, don’t run on a victim’s private limitations clock at all. Prosecutors decide independently whether and when to bring charges, subject to their own criminal statutes of limitations, which are typically longer than civil deadlines for fraud offenses. Federal civil enforcement, brought by the SEC or CFTC, is discretionary too. Neither agency owes any individual victim a lawsuit, and their enforcement priorities shift with policy and budget.
Private civil claims are where most victims’ recovery hopes actually live, and where limitation periods bite hardest. These claims typically fall into a few buckets:
- Federal securities fraud under the Securities Act or Exchange Act, where the token or investment contract qualifies as a security.
- Common-law fraud and misrepresentation claims under state law.
- Conversion claims treating stolen crypto like stolen property.
- Civil RICO claims where the fraud involves a pattern of racketeering activity.
- Breach of fiduciary duty, often relevant against exchanges, custodians, or advisors.
Agency enforcement can result in disgorgement funds that sometimes benefit victims, but that process is slow, uncertain, and entirely outside your control. Treat it as a bonus, never as your limitations backstop.
Which Federal Deadlines Govern Crypto Securities Claims?
Federal law gives crypto fraud victims two overlapping types of deadlines, and confusing them is one of the fastest ways to lose a viable claim. A statute of limitations sets how long you have after discovering the fraud. A statute of repose sets an absolute outer boundary, counted from the defendant’s conduct, that applies no matter when you discovered anything.
- General federal causes of action. Claims created by federal statute after December 1, 1990, follow 28 U.S.C. §1658(b), which allows 2 years after discovery of the facts constituting the violation, subject to a 5 year statute of repose in applicable cases.
- Securities Act private claims. Section 11 and Section 12 claims for misrepresentations in an offering generally require suit within 1 year after discovery, capped by a 3 year statute of repose measured from the security’s first bona fide offering.
- Exchange Act and fraud-based claims. Section 10(b) fraud claims typically follow the same 2 year discovery period and 5 year repose structure that governs most post-1990 federal causes.
The repose trap: Courts have started the 3 year repose clock on crypto token claims at the date of an issuer’s initial solicitation, not the date a particular victim bought in. One analysis of ICO-era securities litigation called timing the “Achilles heel” of crypto securities class actions for exactly this reason, and district courts have since dismissed claims as time-barred on that basis.
That distinction matters enormously for late-discovered ICO fraud. If a token launched in 2019 and you only learned of the fraud in 2026, a court applying the first-offering rule could find your Securities Act claim already dead, even though you personally acted the moment you found out.
Do State Fraud Laws Give You More Time?
State-law claims often become the fallback when federal repose periods have already closed a door, but they come with their own trap: every state sets its own deadline, and the range is wide enough to catch victims off guard.
Most states allow somewhere between 2 and 6 years for common-law fraud or conversion claims, and most apply some version of the discovery rule, tolling the clock until a reasonable person would have found the fraud. Several states also recognize fraudulent concealment or “continuing wrong” doctrines that can extend the window when a defendant actively hid the scheme.
- Check the specific fraud, conversion, and consumer-protection statutes in the claimant’s state of residence, not just where the defendant is based.
- Look for state consumer-protection acts, many of which carry their own limitation periods and remedies (including fee-shifting) separate from common-law fraud.
- Confirm whether your state’s discovery rule requires actual knowledge or merely “inquiry notice,” since courts interpret that standard very differently from state to state.
- Never assume a longer federal repose period buys you time on a parallel state claim, since some states set fraud deadlines as short as 2 years from the transaction itself.
A victim who waits three years to sue while assuming a “typical” 4 to 6 year window can find their claim barred outright in a state that only allows 2. That gap is exactly why counsel should confirm the controlling state law before, not after, a filing deadline passes.
How Does the Discovery Rule Affect Crypto Fraud Timing?
Almost every limitation period that matters in crypto fraud litigation turns on one contested question: when did you reasonably discover the fraud? Courts don’t start the clock on the date money left your wallet. They start it on the date a reasonably diligent victim would have uncovered the scheme, and blockchain obfuscation makes that date genuinely hard to pin down.
Mixers, cross-chain bridges, and layered transfers through custodial exchanges can delay reasonable discovery by months or years, and that delay can work in a victim’s favor if documented properly. Fraudulent concealment doctrines extend limitations further still when a defendant took affirmative steps, false assurances, fake audits, doctored dashboards, to keep victims from suspecting anything was wrong. Equitable tolling requires more: courts generally want proof you pursued your rights diligently despite an extraordinary obstacle.
The trap many victims fall into is anchoring their timeline to a later public disclosure, a regulator’s press release, a news story, an indictment, rather than the date they personally had enough facts to suspect fraud. Courts frequently reject that later date as the trigger.
Pro Tip: Keep a dated log the moment you suspect something is wrong: screenshots, wallet statements, and every communication with the platform. That contemporaneous record is often the single best evidence for proving when your discovery clock actually started.
Why Do Asset Freezes Matter More Than the Final Judgment?
A judgment against a crypto fraudster is often worth exactly nothing without an early freeze, because digital assets can move across borders and through mixers within minutes. That’s why experienced litigators treat prejudgment remedies, not the eventual verdict, as the moment that decides whether a case produces real recovery.
- Temporary restraining orders (TROs) can be sought ex parte, often within days of filing, to freeze specific wallets or exchange accounts before a defendant can move funds.
- Preliminary injunctions extend that freeze while litigation proceeds, typically requiring a stronger evidentiary showing of likely success on the merits and irreparable harm.
- Prejudgment attachment of identified assets can secure a recovery fund even before liability is finally determined.
Legal scholarship on digital asset cases has flagged prejudgment remedies as often more decisive than the underlying judgment itself, precisely because post-judgment enforcement against dissipated crypto assets is so difficult. To win expedited relief, plaintiffs typically need preliminary blockchain tracing, sworn declarations describing the fraud’s mechanics, and evidence that the defendant has both the ability and the apparent intent to move assets before trial.
What Should You Do Right Away After Discovering Crypto Fraud?
Every day spent hesitating is a day closer to a limitations deadline you may not even know applies to your case. The FBI’s Internet Crime Complaint Center recommends preserving specific technical details immediately, and that guidance doubles as sound legal strategy.
- File a report with IC3, the FTC, and the SEC or CFTC if the fraud involved securities or derivatives.
- Record and preserve every wallet address, transaction hash, timestamp, and platform communication tied to the fraud, along with our step-by-step preservation guide.
- Send preservation letters to exchanges and counterparties before evidence gets purged from routine data-retention cycles.
- Engage counsel experienced in blockchain tracing early enough to pursue expedited discovery or emergency injunctive relief.
- Avoid any “crypto recovery” outfit that demands upfront payment; the FTC specifically warns these operations often victimize fraud victims a second time.
Pro Tip: Screenshot everything the moment you suspect fraud, including platform terms, marketing claims, and support chats. Scammers routinely edit or delete these pages once they sense a victim is getting suspicious.
How Do Experienced Litigators Prioritize a New Crypto Fraud Case?
Timing dictates strategy more than any other factor in crypto fraud litigation. Experienced counsel triage new matters around three questions: can the funds actually be traced, does the defendant (or a cooperating exchange) have assets within a court’s reach, and is there a realistic path to a freeze before assets scatter further.
The most common mistakes that sink otherwise strong cases are avoidable:
- Waiting weeks or months to report because the victim feels embarrassed or hopes the funds will reappear.
- Hiring unlicensed “recovery” services instead of consulting our asset recovery litigation team.
- Failing to preserve on-chain evidence before it becomes commingled in pooled exchange addresses, where tracing reliability drops sharply.
A jurisdiction-specific deadline check, run early, often reveals options a victim assumed had already closed.
What Recovery Actually Looks Like for Crypto Fraud Victims
Full recovery is realistic only when funds can be traced to identifiable assets, a court has reach over those assets or a cooperating custodian, and the defendant has something left to collect against. Absent those conditions, even a winning judgment can be close to worthless. That is not a reason to skip reporting to the FBI, FTC, or SEC. It is a reason to move fast, get a real cost-benefit read from counsel before spending heavily on litigation, and treat every week of delay as a week that may close a door you did not know existed.
— Mark
How Murphy’s Law Helps You Beat the Clock on a Crypto Fraud Claim
Murphy’s Law is the option for crypto fraud victims who need a licensed litigation team, not an unregulated recovery outfit charging upfront fees for promises it can’t back up. Founded by Liam Murphy, Esq., who has litigated matters involving Celsius, Terraform Labs, and BitMEX, the firm runs fast triage on new matters specifically because limitation periods and asset dissipation both punish delay.
Core services include crypto fraud recovery litigation, blockchain forensic tracing, and emergency motions for asset freezes and temporary restraining orders, the tools that actually determine whether a judgment translates into recovered funds. Our intake process starts with a jurisdiction-specific deadline check: which statute of limitations applies to your claim, whether a repose period has already started running, and what preservation steps to take today. If you’ve lost crypto to fraud, get your case reviewed through our crypto fraud recovery page before another filing deadline closes.
Where to Verify These Deadlines Yourself
Statutes change and courts issue new rulings, so verify current deadlines against primary sources: 28 U.S.C. §1658 for the federal discovery and repose framework, IC3 and the FTC for reporting channels, and the SEC’s enforcement newsroom for active crypto actions.
This article is general information, not a substitute for advice from a qualified lawyer. Consult a qualified legal professional about your own circumstances before acting on anything here.
Sources
- 28 U.S.C. § 1658 — Time limitation on certain civil actions
- Cryptocurrency investment fraud — FBI victim resources
- What you need to know about cryptocurrency scams — FTC
- 2024 IC3 Annual Report
FAQ
Can You Get Your Money Back From Crypto Fraud?
Recovery is possible when funds can be traced to identifiable assets a court can reach, but success depends heavily on early asset freezes and the defendant’s actual solvency, not just a favorable judgment.
How Far Back Can Crypto Fraud Be Investigated?
Criminal investigations by the FBI and DOJ aren’t bound by a victim’s civil limitations clock, but private civil claims typically must be filed within 1 to 6 years of discovery, depending on the statute and state involved.
Who Investigates Crypto Fraud?
The FBI and its IC3 unit handle criminal complaints, while the SEC and CFTC pursue civil enforcement for securities and derivatives fraud, and state attorneys general often investigate under state consumer-protection laws.
Can You Sue for Crypto Theft?
Yes, victims can bring private civil claims for fraud, conversion, breach of fiduciary duty, or federal securities violations, provided the suit is filed within the applicable statute of limitations and, where relevant, before any statute of repose expires.
What Is the Statute of Limitations for Crypto Fraud Under Federal Law?
Most federal causes of action created after 1990 follow the 2 year discovery rule and 5 year repose period under 28 U.S.C. §1658, while Securities Act claims generally require suit within 1 year of discovery and no later than 3 years after the initial offering.