[{"data":1,"prerenderedAt":492},["ShallowReactive",2],{"tag-Kraken":3},[4],{"_path":5,"_dir":6,"_draft":7,"_partial":7,"_locale":8,"title":9,"description":10,"slug":11,"date":12,"lastUpdated":13,"author":14,"readingTime":15,"category":16,"tags":17,"ogImage":24,"featured":7,"body":25,"_type":485,"_id":486,"_source":487,"_file":488,"_stem":489,"_extension":490,"sitemap":491},"\u002Farticles\u002F07-subpoenaing-cryptocurrency-exchange-records","articles",false,"","How to Subpoena Cryptocurrency Exchange Records","A practical guide for attorneys on subpoenaing cryptocurrency exchanges: what records exist, how to request them, jurisdictional complications, and how to work with a forensic expert.","subpoenaing-cryptocurrency-exchange-records","2026-04-28","2025-04-28","Nick Kampe",10,"Legal Reference",[18,19,20,21,22,23],"subpoena","exchange records","KYC","discovery","Coinbase","Kraken","\u002Fog\u002Fsubpoenaing-cryptocurrency-exchange-records.png",{"type":26,"children":27,"toc":473},"root",[28,36,41,48,53,64,74,84,94,104,114,124,130,135,140,145,150,155,160,165,170,175,180,185,191,196,201,215,221,226,231,236,242,247,252,257,262,267,273,278,283,296,302,307,320,333,339,344,349,354,359,364,385,389,395,403,408,416,421,429,434,442,447,455,460,468],{"type":29,"tag":30,"props":31,"children":32},"element","p",{},[33],{"type":34,"value":35},"text","Cryptocurrency exchanges are among the most valuable sources of evidence in any matter involving digital assets. When a party has used a regulated exchange, the records that exchange holds can be comprehensive: verified identity documents, the complete transaction history, records of linked bank accounts, IP addresses used to log in, device identifiers, and records of any customer support interactions that might contain relevant communications.",{"type":29,"tag":30,"props":37,"children":38},{},[39],{"type":34,"value":40},"Knowing how to obtain these records, what to request, and what to do when the exchange is foreign or the party used a non-KYC platform is essential knowledge for any attorney handling a matter where cryptocurrency is a significant issue.",{"type":29,"tag":42,"props":43,"children":45},"h2",{"id":44},"what-exchanges-actually-hold",[46],{"type":34,"value":47},"What Exchanges Actually Hold",{"type":29,"tag":30,"props":49,"children":50},{},[51],{"type":34,"value":52},"Understanding what records exist before drafting a subpoena is the prerequisite to drafting a useful one.",{"type":29,"tag":30,"props":54,"children":55},{},[56,62],{"type":29,"tag":57,"props":58,"children":59},"strong",{},[60],{"type":34,"value":61},"Know Your Customer (KYC) documentation",{"type":34,"value":63}," is the set of identity verification records that regulated exchanges collect when users open accounts. In the United States, regulated exchanges are required under the Bank Secrecy Act and applicable FinCEN guidance to verify user identities. KYC records typically include government-issued identification (a driver's license or passport), a selfie or photograph used for biometric matching, the user's name and date of birth, their address, their Social Security number or equivalent tax identification number, and the records of the verification process itself.",{"type":29,"tag":30,"props":65,"children":66},{},[67,72],{"type":29,"tag":57,"props":68,"children":69},{},[70],{"type":34,"value":71},"Transaction history",{"type":34,"value":73}," is the exchange's internal record of every buy, sell, deposit, withdrawal, and transfer the account has ever executed. This is different from the on-chain record. The exchange's transaction history includes internal transfers, trades between cryptocurrencies on the exchange platform that may not appear as separate on-chain transactions, and the exact timestamps and values of every action. For accounts that have traded for years, this history can run to thousands of transactions.",{"type":29,"tag":30,"props":75,"children":76},{},[77,82],{"type":29,"tag":57,"props":78,"children":79},{},[80],{"type":34,"value":81},"Deposit addresses",{"type":34,"value":83}," are the blockchain addresses the exchange assigned to the user for receiving cryptocurrency. When a user wanted to move cryptocurrency onto the exchange, the exchange provided a specific address for that purpose. The subpoena response should include the complete list of deposit addresses assigned to the account, across all supported cryptocurrencies. These addresses are critical for blockchain forensic analysis because they connect the on-chain record to the account.",{"type":29,"tag":30,"props":85,"children":86},{},[87,92],{"type":29,"tag":57,"props":88,"children":89},{},[90],{"type":34,"value":91},"Withdrawal addresses",{"type":34,"value":93}," are the blockchain addresses the user designated to receive funds when withdrawing. A complete withdrawal history, including the destination addresses, allows an analyst to trace where funds went after leaving the exchange.",{"type":29,"tag":30,"props":95,"children":96},{},[97,102],{"type":29,"tag":57,"props":98,"children":99},{},[100],{"type":34,"value":101},"Linked payment methods",{"type":34,"value":103}," are the bank accounts, credit cards, and other payment instruments the user associated with their account. These records connect the cryptocurrency account to the traditional financial system and may reveal assets or financial relationships not otherwise identified.",{"type":29,"tag":30,"props":105,"children":106},{},[107,112],{"type":29,"tag":57,"props":108,"children":109},{},[110],{"type":34,"value":111},"IP and device records",{"type":34,"value":113}," are the technical logs of where and how the account was accessed. Login IP addresses can be used to establish geographic location during relevant periods. Device identifiers, browser fingerprints, and session records may be relevant to establishing that a specific person accessed the account, particularly in cases involving disputed account ownership or unauthorized access.",{"type":29,"tag":30,"props":115,"children":116},{},[117,122],{"type":29,"tag":57,"props":118,"children":119},{},[120],{"type":34,"value":121},"Customer support communications",{"type":34,"value":123}," are any messages exchanged between the account holder and the exchange's support team. These can contain admissions, explanations, or disclosures relevant to the matter.",{"type":29,"tag":42,"props":125,"children":127},{"id":126},"what-a-subpoena-should-request",[128],{"type":34,"value":129},"What a Subpoena Should Request",{"type":29,"tag":30,"props":131,"children":132},{},[133],{"type":34,"value":134},"A subpoena to a cryptocurrency exchange should be specific about the categories of records sought. Overly broad requests may be resisted as burdensome; overly narrow requests may miss critical records.",{"type":29,"tag":30,"props":136,"children":137},{},[138],{"type":34,"value":139},"A well-structured subpoena to a domestic exchange should request, at minimum:",{"type":29,"tag":30,"props":141,"children":142},{},[143],{"type":34,"value":144},"All account records, including registration information, KYC documentation, and identity verification records, for any account associated with the named individual or with specific identifiers (email addresses, phone numbers, wallet addresses) provided in the subpoena.",{"type":29,"tag":30,"props":146,"children":147},{},[148],{"type":34,"value":149},"Complete transaction history for all accounts identified, including buy and sell orders, deposits and withdrawals, internal transfers, and any other account activity.",{"type":29,"tag":30,"props":151,"children":152},{},[153],{"type":34,"value":154},"All blockchain addresses associated with the account, including all deposit addresses and all withdrawal addresses used throughout the account's history.",{"type":29,"tag":30,"props":156,"children":157},{},[158],{"type":34,"value":159},"All linked payment methods, including bank account numbers, routing numbers, credit card numbers, and any other payment instruments.",{"type":29,"tag":30,"props":161,"children":162},{},[163],{"type":34,"value":164},"All IP addresses and device identifiers associated with account logins, with timestamps.",{"type":29,"tag":30,"props":166,"children":167},{},[168],{"type":34,"value":169},"Any account holds, restrictions, or flags applied to the account by the exchange, and the reasons recorded for those actions.",{"type":29,"tag":30,"props":171,"children":172},{},[173],{"type":34,"value":174},"Any customer support tickets, chat logs, or email communications associated with the account.",{"type":29,"tag":30,"props":176,"children":177},{},[178],{"type":34,"value":179},"Any related accounts identified by the exchange as being linked to the account through common identifying information, device, or IP address.",{"type":29,"tag":30,"props":181,"children":182},{},[183],{"type":34,"value":184},"Including specific email addresses, phone numbers, or wallet addresses as known identifiers in the subpoena, rather than relying solely on the subject's name, substantially improves the response by giving the exchange a means to identify the account reliably.",{"type":29,"tag":42,"props":186,"children":188},{"id":187},"how-exchanges-typically-respond",[189],{"type":34,"value":190},"How Exchanges Typically Respond",{"type":29,"tag":30,"props":192,"children":193},{},[194],{"type":34,"value":195},"Domestic regulated exchanges generally comply with properly served subpoenas in civil matters, though their responses vary in completeness and timeliness. Most major domestic exchanges have legal compliance teams that handle subpoena requests routinely. Response times typically run from two to six weeks, though some exchanges move faster for matters with demonstrated urgency.",{"type":29,"tag":30,"props":197,"children":198},{},[199],{"type":34,"value":200},"The format of the response matters for usability. Request that records be produced in machine-readable formats where applicable (CSV or JSON for transaction histories, for example) rather than as PDF printouts. Machine-readable transaction histories integrate more easily with blockchain forensic analysis tools.",{"type":29,"tag":30,"props":202,"children":203},{},[204,206,213],{"type":34,"value":205},"Some exchanges produce a declaration or affidavit authenticating the records at the time of production. If the exchange does not offer this automatically, request it. Authenticated records are more straightforwardly admissible, and the authentication may support self-authentication arguments under FRE 902(13) or (14). See ",{"type":29,"tag":207,"props":208,"children":210},"a",{"href":209},"\u002Fresources\u002Fblockchain-evidence-admissibility",[211],{"type":34,"value":212},"Blockchain Evidence Admissibility",{"type":34,"value":214}," for the evidentiary framework.",{"type":29,"tag":42,"props":216,"children":218},{"id":217},"timing-and-data-retention",[219],{"type":34,"value":220},"Timing and Data Retention",{"type":29,"tag":30,"props":222,"children":223},{},[224],{"type":34,"value":225},"Data retention policies at major exchanges generally cover five to seven years of account records, but this varies by exchange and by record type. Some types of records, particularly IP and device logs, may be retained for shorter periods than transaction history. Account documentation tied to regulatory compliance requirements tends to be retained longer.",{"type":29,"tag":30,"props":227,"children":228},{},[229],{"type":34,"value":230},"The practical implication is time pressure. A matter where cryptocurrency activity occurred three to four years ago is still well within the retention window for most major exchanges. A matter where the relevant activity is six or more years old may find that some records are no longer available. Serving the subpoena early, before records are purged according to the exchange's retention schedule, reduces this risk.",{"type":29,"tag":30,"props":232,"children":233},{},[234],{"type":34,"value":235},"When matters are time-sensitive, some attorneys request emergency or expedited responses from exchanges, documenting the urgency in the subpoena or in accompanying correspondence. Whether exchanges honor those requests varies; many have formal processes for law enforcement emergency disclosures that do not directly apply in civil matters, but the request may nonetheless accelerate the response timeline.",{"type":29,"tag":42,"props":237,"children":239},{"id":238},"jurisdictional-complications",[240],{"type":34,"value":241},"Jurisdictional Complications",{"type":29,"tag":30,"props":243,"children":244},{},[245],{"type":34,"value":246},"The landscape of cryptocurrency exchanges includes many that are not incorporated in the United States and that may not be subject to direct domestic subpoena power. Some of the most widely used exchanges globally are organized in offshore jurisdictions including the Cayman Islands, the British Virgin Islands, Seychelles, and similar locations. These exchanges may serve U.S. customers while structuring their legal entities specifically to minimize exposure to U.S. civil process.",{"type":29,"tag":30,"props":248,"children":249},{},[250],{"type":34,"value":251},"When the target used a foreign exchange, the subpoena options are different. Letters rogatory, or formal requests through the Mutual Legal Assistance Treaty (MLAT) process, are the standard mechanisms for obtaining evidence from foreign entities in civil matters. These processes are substantially slower and less certain than a domestic subpoena. MLAT requests can take months to years.",{"type":29,"tag":30,"props":253,"children":254},{},[255],{"type":34,"value":256},"Some foreign exchanges cooperate voluntarily with properly documented requests, particularly if they have U.S. subsidiaries or U.S. legal counsel. A formal letter from counsel, explaining the legal proceedings and requesting voluntary production, is worth attempting before committing to the MLAT process.",{"type":29,"tag":30,"props":258,"children":259},{},[260],{"type":34,"value":261},"Terms of service arbitration clauses in exchange user agreements are a separate complication. Some exchanges argue that any disputes, including subpoena compliance disputes, must be addressed through the arbitration process specified in their terms of service. Courts have not uniformly accepted this argument in third-party subpoena contexts, but it may add delay and complexity.",{"type":29,"tag":30,"props":263,"children":264},{},[265],{"type":34,"value":266},"The practical approach when facing a foreign exchange is to first pursue blockchain forensic analysis to understand the full scope of the party's exchange activity before committing to the most difficult subpoena targets. If forensic analysis reveals that a party also used domestic exchanges, start with those.",{"type":29,"tag":42,"props":268,"children":270},{"id":269},"when-the-party-used-a-non-kyc-exchange-or-dex",[271],{"type":34,"value":272},"When the Party Used a Non-KYC Exchange or DEX",{"type":29,"tag":30,"props":274,"children":275},{},[276],{"type":34,"value":277},"Not all cryptocurrency trading activity goes through KYC exchanges. Non-KYC peer-to-peer platforms, Bitcoin ATMs (many of which have minimal verification requirements below certain transaction thresholds), and decentralized exchanges (DEXs) are all options that a party seeking to minimize their KYC footprint might use.",{"type":29,"tag":30,"props":279,"children":280},{},[281],{"type":34,"value":282},"For non-KYC exchanges and peer-to-peer platforms, the records that exist are typically more limited, but some still exist. Bitcoin ATM operators are subject to reporting requirements above certain transaction thresholds and often collect phone numbers or other minimal identification. Peer-to-peer platforms may maintain account records even without formal KYC, and a subpoena to the platform may produce useful information.",{"type":29,"tag":30,"props":284,"children":285},{},[286,288,294],{"type":34,"value":287},"For DEXs, there is no institution to subpoena in the conventional sense. Tracing funds that went through a DEX requires reading the on-chain smart contract interaction record directly. See ",{"type":29,"tag":207,"props":289,"children":291},{"href":290},"\u002Fresources\u002Fwhat-lawyers-need-to-know-about-defi",[292],{"type":34,"value":293},"What Lawyers Need to Know About DeFi",{"type":34,"value":295}," for a detailed treatment of how DEX activity is analyzed.",{"type":29,"tag":42,"props":297,"children":299},{"id":298},"working-with-a-forensic-expert-to-identify-targets",[300],{"type":34,"value":301},"Working with a Forensic Expert to Identify Targets",{"type":29,"tag":30,"props":303,"children":304},{},[305],{"type":34,"value":306},"The question of which exchange to subpoena first, or whether a party used an exchange at all, is one where blockchain forensic analysis and legal strategy intersect. A forensic analyst who can trace known wallet addresses on the blockchain may be able to identify which exchanges received funds from those addresses before the subpoenas are served. That identification narrows the field and allows subpoenas to be directed at the most productive targets first.",{"type":29,"tag":30,"props":308,"children":309},{},[310,312,318],{"type":34,"value":311},"The ",{"type":29,"tag":207,"props":313,"children":315},{"href":314},"\u002Fmethodology",[316],{"type":34,"value":317},"ConsensusIntel methodology",{"type":34,"value":319}," includes this kind of pre-subpoena analysis as a standard early step in investigations. Identifying likely exchange accounts through on-chain analysis, then confirming them through subpoena, is more efficient than subpoenaing all known exchanges hoping to find the relevant accounts. It also produces a stronger evidentiary foundation, because the blockchain analysis provides independent support for the connection between the address and the exchange.",{"type":29,"tag":30,"props":321,"children":322},{},[323,325,331],{"type":34,"value":324},"For guidance on how exchange subpoenas fit into the broader investigation strategy, see ",{"type":29,"tag":207,"props":326,"children":328},{"href":327},"\u002Fresources\u002Fcommon-mistakes-crypto-investigations",[329],{"type":34,"value":330},"Common Mistakes in Cryptocurrency Investigations",{"type":34,"value":332},", which addresses the specific error of over-relying on exchange responses without supplementing them with on-chain analysis.",{"type":29,"tag":42,"props":334,"children":336},{"id":335},"practical-recommendations",[337],{"type":34,"value":338},"Practical Recommendations",{"type":29,"tag":30,"props":340,"children":341},{},[342],{"type":34,"value":343},"Serve exchange subpoenas early. The data retention clock is running, and the sooner records are preserved, the better the completeness of the production.",{"type":29,"tag":30,"props":345,"children":346},{},[347],{"type":34,"value":348},"Include all known identifiers in the subpoena, not just the party's name. Email addresses, phone numbers, and wallet addresses that the party has disclosed or that have been identified through other discovery are all useful identifiers.",{"type":29,"tag":30,"props":350,"children":351},{},[352],{"type":34,"value":353},"Request machine-readable formats for transaction histories. The ability to analyze thousands of transactions programmatically is only available if the data is in a usable format.",{"type":29,"tag":30,"props":355,"children":356},{},[357],{"type":34,"value":358},"Request an authenticating declaration with the production. The authentication step is easier to handle at the time of production than after the fact.",{"type":29,"tag":30,"props":360,"children":361},{},[362],{"type":34,"value":363},"Coordinate with a forensic analyst before and after the exchange response. Before, to identify the right targets and inform the subpoena content. After, to integrate the exchange records with the blockchain analysis and build the complete picture of the party's activity.",{"type":29,"tag":30,"props":365,"children":366},{},[367,369,375,377,383],{"type":34,"value":368},"For matters where exchange subpoenas are a central part of the investigation, ",{"type":29,"tag":207,"props":370,"children":372},{"href":371},"\u002Fabout",[373],{"type":34,"value":374},"ConsensusIntel",{"type":34,"value":376}," supports the full cycle from pre-subpoena blockchain analysis through post-response forensic integration. ",{"type":29,"tag":207,"props":378,"children":380},{"href":379},"\u002Fcontact",[381],{"type":34,"value":382},"Contact us",{"type":34,"value":384}," to discuss how that work fits into your case timeline.",{"type":29,"tag":386,"props":387,"children":388},"hr",{},[],{"type":29,"tag":42,"props":390,"children":392},{"id":391},"frequently-asked-questions",[393],{"type":34,"value":394},"Frequently Asked Questions",{"type":29,"tag":30,"props":396,"children":397},{},[398],{"type":29,"tag":57,"props":399,"children":400},{},[401],{"type":34,"value":402},"Do cryptocurrency exchanges report to the IRS?",{"type":29,"tag":30,"props":404,"children":405},{},[406],{"type":34,"value":407},"Yes. U.S.-based cryptocurrency exchanges file Form 1099 reports with the IRS for customers who meet applicable thresholds, and the Infrastructure Investment and Jobs Act of 2021 expanded these reporting requirements. The IRS treats cryptocurrency as property, and exchanges are required to report proceeds from sales. IRS records may be a useful supplemental source in civil matters, though obtaining them requires appropriate process.",{"type":29,"tag":30,"props":409,"children":410},{},[411],{"type":29,"tag":57,"props":412,"children":413},{},[414],{"type":34,"value":415},"Can I subpoena an exchange in a state court proceeding?",{"type":29,"tag":30,"props":417,"children":418},{},[419],{"type":34,"value":420},"Yes, subject to the civil procedure rules of the applicable state. Most states have discovery rules that allow subpoenas to non-party businesses operating within the state. For exchanges incorporated in other states or foreign jurisdictions, the subpoena mechanism depends on the specific jurisdiction and whether the exchange has registered to do business in the forum state.",{"type":29,"tag":30,"props":422,"children":423},{},[424],{"type":29,"tag":57,"props":425,"children":426},{},[427],{"type":34,"value":428},"What if the party used multiple email addresses to open exchange accounts?",{"type":29,"tag":30,"props":430,"children":431},{},[432],{"type":34,"value":433},"The party's disclosure obligations require them to identify all accounts. If there is evidence suggesting multiple accounts (such as through blockchain analysis identifying exchange interactions that do not correspond to the disclosed accounts), the subpoena can be issued to the exchange with all known identifiers, including wallet addresses that interacted with the exchange's deposit addresses. The exchange can then search its records for any account associated with those identifiers.",{"type":29,"tag":30,"props":435,"children":436},{},[437],{"type":29,"tag":57,"props":438,"children":439},{},[440],{"type":34,"value":441},"How does the exchange verify that a subpoena is legitimate before responding?",{"type":29,"tag":30,"props":443,"children":444},{},[445],{"type":34,"value":446},"Exchanges have legal teams that review subpoenas for proper form, jurisdiction, and compliance with applicable law. A defectively served or poorly formed subpoena may be rejected or result in a limited response. Having legal counsel review the subpoena, or working with counsel experienced in cryptocurrency litigation, reduces the risk of technical objections.",{"type":29,"tag":30,"props":448,"children":449},{},[450],{"type":29,"tag":57,"props":451,"children":452},{},[453],{"type":34,"value":454},"What if the exchange is acquired or goes bankrupt?",{"type":29,"tag":30,"props":456,"children":457},{},[458],{"type":34,"value":459},"Exchange records are often among the most valuable assets in a bankruptcy estate and are typically preserved through insolvency proceedings. The bankruptcy trustee or receiver may be the appropriate party to whom subsequent subpoenas should be directed. Note that the timing of a subpoena in relation to an exchange's financial difficulties may affect both the availability of records and the process for obtaining them.",{"type":29,"tag":30,"props":461,"children":462},{},[463],{"type":29,"tag":57,"props":464,"children":465},{},[466],{"type":34,"value":467},"Is there a way to determine what exchange a wallet used without serving a subpoena?",{"type":29,"tag":30,"props":469,"children":470},{},[471],{"type":34,"value":472},"Blockchain forensic analysis can often attribute exchange interactions to specific platforms based on databases of exchange deposit addresses that have been compiled over time. This allows an analyst to identify likely exchange targets before serving the subpoena. The subpoena then confirms the account and produces the account-level records that the blockchain alone cannot provide.",{"title":8,"searchDepth":474,"depth":474,"links":475},2,[476,477,478,479,480,481,482,483,484],{"id":44,"depth":474,"text":47},{"id":126,"depth":474,"text":129},{"id":187,"depth":474,"text":190},{"id":217,"depth":474,"text":220},{"id":238,"depth":474,"text":241},{"id":269,"depth":474,"text":272},{"id":298,"depth":474,"text":301},{"id":335,"depth":474,"text":338},{"id":391,"depth":474,"text":394},"markdown","content:articles:07-subpoenaing-cryptocurrency-exchange-records.md","content","articles\u002F07-subpoenaing-cryptocurrency-exchange-records.md","articles\u002F07-subpoenaing-cryptocurrency-exchange-records","md",{"loc":5},1779289486700]