[{"data":1,"prerenderedAt":2510},["ShallowReactive",2],{"article-telegram-evidence-crypto-cases-authentication":3,"content-query-RSXng0cKCc":478,"related-telegram-evidence-crypto-cases-authentication":816},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"slug":10,"date":11,"lastUpdated":11,"author":12,"readingTime":13,"category":14,"tags":15,"ogImage":20,"featured":6,"body":21,"_type":472,"_id":473,"_source":474,"_file":475,"_stem":476,"_extension":477},"\u002Farticles\u002F21-telegram-evidence-crypto-cases-authentication","articles",false,"","Telegram evidence in crypto cases: beyond the screenshot","How attorneys can preserve, authenticate, and test Telegram messages that link users, wallet addresses, and cryptocurrency transactions in litigation.","telegram-evidence-crypto-cases-authentication","2026-09-23","Nick Kampe",10,"Legal Reference",[16,17,18,19],"telegram-evidence","digital-evidence","authentication","blockchain-tracing","\u002Fog\u002Ftelegram-evidence-crypto-cases-authentication.png",{"type":22,"children":23,"toc":457},"root",[24,32,37,53,58,63,70,75,80,94,99,104,109,115,127,132,146,151,156,161,166,172,177,182,193,233,238,252,266,272,277,282,287,292,303,309,314,319,324,329,350,356,361,366,371,376,382,388,399,405,414,420,429,435,444],{"type":25,"tag":26,"props":27,"children":28},"element","p",{},[29],{"type":30,"value":31},"text","A Telegram screenshot shows what appeared on a screen. It does not necessarily show who controlled the account, who wrote the message, whether surrounding messages were omitted, or whether the author controlled a wallet address pasted into the chat.",{"type":25,"tag":26,"props":33,"children":34},{},[35],{"type":30,"value":36},"Those distinctions matter in cryptocurrency cases because the message may supply the off-chain link that the public ledger cannot. A transaction can establish that assets moved to an address. A Telegram post can place that address in a conversation. Neither record alone proves that a named person authored the post or controlled the destination.",{"type":25,"tag":26,"props":38,"children":39},{},[40,42,51],{"type":30,"value":41},"A recent federal action puts the problem in practical terms. In a ",{"type":25,"tag":43,"props":44,"children":48},"a",{"href":45,"rel":46},"https:\u002F\u002Fwww.justice.gov\u002Fusao-dc\u002Fpr\u002Fscam-center-strike-force-conducts-seizures-chinese-run-illicit-scammer-marketplace-and",[47],"nofollow",[49],{"type":30,"value":50},"September 9, 2026 announcement",{"type":30,"value":52},", the Justice Department described Xinbi Guarantee as an alleged Chinese-language marketplace operated on Telegram. DOJ said vendors advertised services in the channel, posted cryptocurrency wallets for payment, and received victim funds traced to specific vendors. The U.S. District Court for the District of Columbia authorized seizure of the Telegram channels on September 7, according to the announcement.",{"type":25,"tag":26,"props":54,"children":55},{},[56],{"type":30,"value":57},"That is an allegation and an account of court-authorized investigative action. It is not a verdict, a forfeiture judgment, or a finding that every channel participant committed a crime. For private counsel, it is useful for a narrower reason: it shows how a messaging record and a blockchain path may depend on each other.",{"type":25,"tag":26,"props":59,"children":60},{},[61],{"type":30,"value":62},"This article applies the Federal Rules of Evidence. State evidence rules and the law governing subpoenas, privacy, and access can produce a different answer. Counsel should resolve those issues in the forum where the evidence will be used.",{"type":25,"tag":64,"props":65,"children":67},"h3",{"id":66},"separate-the-propositions-before-collecting-evidence",[68],{"type":30,"value":69},"Separate the propositions before collecting evidence",{"type":25,"tag":26,"props":71,"children":72},{},[73],{"type":30,"value":74},"A Telegram exhibit can be offered to prove several different facts. Each needs its own foundation.",{"type":25,"tag":26,"props":76,"children":77},{},[78],{"type":30,"value":79},"First is content: the exhibit accurately reflects the words, images, wallet address, date, and visible context that appeared in the application.",{"type":25,"tag":26,"props":81,"children":82},{},[83,85,92],{"type":30,"value":84},"Second is account identity: the message came from a particular Telegram account, group, or channel. A username or display name is not enough by itself. Telegram's ",{"type":25,"tag":43,"props":86,"children":89},{"href":87,"rel":88},"https:\u002F\u002Ftelegram.org\u002Fprivacy",[47],[90],{"type":30,"value":91},"privacy policy",{"type":30,"value":93}," says users provide a mobile number and basic account data, while the public screen name and username can differ from a person's real identity.",{"type":25,"tag":26,"props":95,"children":96},{},[97],{"type":30,"value":98},"Third is authorship or control: a person or organization operated the account or wrote the message at issue. Shared devices, channel administrators, bots, forwarded posts, and compromised accounts can break a simple account-to-person inference.",{"type":25,"tag":26,"props":100,"children":101},{},[102],{"type":30,"value":103},"Fourth is the blockchain connection: the address in the message matches the address used in the relevant transaction, and the asserted relationship to that address is supported by evidence. Exact text matching and a transaction hash can establish a ledger connection. They do not establish who held the private key, who owned the assets, or who later received value through an exchange account.",{"type":25,"tag":26,"props":105,"children":106},{},[107],{"type":30,"value":108},"A sound report states each proposition separately. It should not compress them into a conclusion such as \"the defendant's Telegram wallet.\"",{"type":25,"tag":64,"props":110,"children":112},{"id":111},"what-the-federal-rules-require",[113],{"type":30,"value":114},"What the federal rules require",{"type":25,"tag":26,"props":116,"children":117},{},[118,125],{"type":25,"tag":43,"props":119,"children":122},{"href":120,"rel":121},"https:\u002F\u002Fwww.uscourts.gov\u002Fsites\u002Fdefault\u002Ffiles\u002Fdocument\u002Ffederal-rules-of-evidence.pdf",[47],[123],{"type":30,"value":124},"Rule 901(a)",{"type":30,"value":126}," requires evidence sufficient to support a finding that an item is what its proponent claims. The same rule lists several possible routes, including testimony from a knowledgeable witness, distinctive characteristics considered with the circumstances, and evidence that a process or system produces an accurate result. No single route fits every Telegram collection.",{"type":25,"tag":26,"props":128,"children":129},{},[130],{"type":30,"value":131},"A participant who saw and sent the messages may authenticate a conversation through personal knowledge. A forensic examiner may explain how data was acquired from a device or export. Circumstantial evidence may include a stable account identifier, facts known to the alleged author, linked devices, replies from known participants, or records that connect the account to other conduct. The strength of that evidence goes to the particular claim being made.",{"type":25,"tag":26,"props":133,"children":134},{},[135,137,144],{"type":30,"value":136},"Rules 902(13) and 902(14) provide certification routes for records generated by an electronic process and data copied from an electronic device, storage medium, or file. The ",{"type":25,"tag":43,"props":138,"children":141},{"href":139,"rel":140},"https:\u002F\u002Fwww.law.cornell.edu\u002Frules\u002Ffre\u002Frule_902",[47],[142],{"type":30,"value":143},"Rule 902 committee note",{"type":30,"value":145}," explains that copied electronic data is commonly identified with a hash value. A proper certification may remove the need for a foundation witness to authenticate the record or the copy.",{"type":25,"tag":26,"props":147,"children":148},{},[149],{"type":30,"value":150},"Certification has limits. It can support the integrity of the acquired file or the operation of the collection process. It does not prove that a named person typed a message, that the message is true, or that a wallet belonged to that person. Authentication also does not answer hearsay.",{"type":25,"tag":26,"props":152,"children":153},{},[154],{"type":30,"value":155},"Rule 801(d)(2) addresses statements offered against an opposing party. For statements allegedly made by an authorized speaker, agent, employee, or coconspirator, the rule says the statement itself does not establish the required authority, relationship, or conspiracy. Counsel still needs evidence connecting the declarant and the party.",{"type":25,"tag":26,"props":157,"children":158},{},[159],{"type":30,"value":160},"The original-writing rule does not create a blanket ban on screenshots. Rule 1001 treats an output readable by sight as an original of electronically stored information if it accurately reflects that information. Rule 1003 generally permits a duplicate unless authenticity is genuinely questioned or admission would be unfair. A screenshot may therefore be usable, but accuracy and scope remain factual questions. A cropped image with no collection history is much easier to challenge than a preserved export tied to a device and documented process.",{"type":25,"tag":26,"props":162,"children":163},{},[164],{"type":30,"value":165},"Context matters too. Under Rule 106, an adverse party may require related statements that fairness calls for considering at the same time, even over a hearsay objection. Collecting only the message that contains the wallet address can leave counsel unable to assess a correction, reply, forwarded-message marker, or explanation immediately beside it.",{"type":25,"tag":64,"props":167,"children":169},{"id":168},"preserve-the-account-and-device-before-building-the-trace",[170],{"type":30,"value":171},"Preserve the account and device before building the trace",{"type":25,"tag":26,"props":173,"children":174},{},[175],{"type":30,"value":176},"Telegram's architecture changes the preservation question. Its policy says cloud-chat messages and media are stored on its servers so users can reach them from multiple devices. Secret chats are different: Telegram says they are not available in the cloud and can be accessed only from the sending or receiving device.",{"type":25,"tag":26,"props":178,"children":179},{},[180],{"type":30,"value":181},"Deletion risk is also real. Telegram says either participant in a one-on-one chat can clear the entire chat history for both parties without a time limit. An account can also be deleted with its cloud data. Counsel should address lawful preservation promptly and should not assume that a public blockchain preserves the related conversation.",{"type":25,"tag":26,"props":183,"children":184},{},[185,191],{"type":25,"tag":43,"props":186,"children":188},{"href":187},"\u002Fresources\u002Fpreserving-crypto-native-esi",[189],{"type":30,"value":190},"Preserving crypto-native ESI",{"type":30,"value":192}," explains the broader hold and collection problem. For Telegram evidence, the practical collection package should usually include:",{"type":25,"tag":194,"props":195,"children":196},"ul",{},[197,203,208,213,218,223,228],{"type":25,"tag":198,"props":199,"children":200},"li",{},[201],{"type":30,"value":202},"the original device or a qualified forensic acquisition when proportional and authorized;",{"type":25,"tag":198,"props":204,"children":205},{},[206],{"type":30,"value":207},"a native chat or account export, including media, rather than screenshots alone;",{"type":25,"tag":198,"props":209,"children":210},{},[211],{"type":30,"value":212},"screenshots or video that document how the relevant conversation appeared in the application;",{"type":25,"tag":198,"props":214,"children":215},{},[216],{"type":30,"value":217},"the visible account, group, or channel identifiers and the participants or administrators available to the collector;",{"type":25,"tag":198,"props":219,"children":220},{},[221],{"type":30,"value":222},"messages before and after the cited passage, with reply, edit, and forwarding indicators preserved where available;",{"type":25,"tag":198,"props":224,"children":225},{},[226],{"type":30,"value":227},"collection date and time, displayed time zone, device clock, operating system, Telegram version, export settings, and collector identity; and",{"type":25,"tag":198,"props":229,"children":230},{},[231],{"type":30,"value":232},"cryptographic hashes for exported files, followed by preservation of the untouched originals.",{"type":25,"tag":26,"props":234,"children":235},{},[236],{"type":30,"value":237},"These are collection recommendations, not elements imposed in every case. Scope should follow relevance, proportionality, privilege, privacy, and the governing discovery order.",{"type":25,"tag":26,"props":239,"children":240},{},[241,243,250],{"type":30,"value":242},"Telegram's ",{"type":25,"tag":43,"props":244,"children":247},{"href":245,"rel":246},"https:\u002F\u002Ftelegram.org\u002Fblog\u002Fexport-and-more",[47],[248],{"type":30,"value":249},"desktop export documentation",{"type":30,"value":251}," says a user can export some or all chats, including media, in JSON or HTML. An HTML export is useful for review. JSON may preserve structure that a rendered page hides. Neither format should be treated as self-proving. Record who initiated the export, from which account and device, what options were selected, and whether any filters or date ranges were used.",{"type":25,"tag":26,"props":253,"children":254},{},[255,257,264],{"type":30,"value":256},"NIST's ",{"type":25,"tag":43,"props":258,"children":261},{"href":259,"rel":260},"https:\u002F\u002Fnvlpubs.nist.gov\u002Fnistpubs\u002FSpecialPublications\u002FNIST.SP.800-101r1.pdf",[47],[262],{"type":30,"value":263},"mobile device forensics guidance",{"type":30,"value":265}," distinguishes manual extraction from logical and physical acquisition. It warns that manual examination can modify data and cannot recover deleted information. It also recommends integrity hashing of acquired evidence. The publication dates to 2014, so it is a source for collection principles, not current Telegram feature behavior.",{"type":25,"tag":64,"props":267,"children":269},{"id":268},"worked-hypothetical-a-wallet-posted-in-a-fraud-channel",[270],{"type":30,"value":271},"Worked hypothetical: a wallet posted in a fraud channel",{"type":25,"tag":26,"props":273,"children":274},{},[275],{"type":30,"value":276},"Assume a plaintiff received a Telegram message directing payment to a USDT address. The plaintiff has a screenshot, an exchange withdrawal receipt, and a transaction hash showing the transfer to the same address. This is a hypothetical, not a client matter.",{"type":25,"tag":26,"props":278,"children":279},{},[280],{"type":30,"value":281},"The three records can establish a useful sequence. The screenshot can show that the address appeared in the conversation. The exchange record can show that the plaintiff instructed a withdrawal. The blockchain record can show that the transaction reached the matching address.",{"type":25,"tag":26,"props":283,"children":284},{},[285],{"type":30,"value":286},"The sequence still does not prove who authored the message or controlled the address. Counsel should look for independent links: a native export from the plaintiff's account, testimony from the participant who received the message, account identifiers preserved from the application, device records from the alleged author if obtainable, provider or exchange records produced through lawful process, and later communications showing knowledge of transaction details not visible to the public.",{"type":25,"tag":26,"props":288,"children":289},{},[290],{"type":30,"value":291},"If funds later enter a custodial exchange, the public chain may show only a transfer to an address associated with that service. Customer attribution then depends on the exchange's internal records. If the wallet is self-custodied, a signed message or device evidence may support control, but the requested proof must be designed so it does not expose a seed phrase or private key.",{"type":25,"tag":26,"props":293,"children":294},{},[295,301],{"type":25,"tag":43,"props":296,"children":298},{"href":297},"\u002Fresources\u002Freproducible-blockchain-evidence",[299],{"type":30,"value":300},"Reproducible blockchain evidence",{"type":30,"value":302}," should accompany the messaging collection. Preserve the full address, network, asset, transaction hash, block reference, raw transaction data, query source, query time, and any third-party attribution. A Telegram message and a transaction table should be cross-referenced, not merged into a single unsupported ownership label.",{"type":25,"tag":64,"props":304,"children":306},{"id":305},"how-to-test-the-opposing-partys-exhibit",[307],{"type":30,"value":308},"How to test the opposing party's exhibit",{"type":25,"tag":26,"props":310,"children":311},{},[312],{"type":30,"value":313},"Start with the claim. Is the exhibit offered to prove that a message existed, that a person authored it, that its contents were true, or that the person controlled a wallet? The necessary proof changes with the answer.",{"type":25,"tag":26,"props":315,"children":316},{},[317],{"type":30,"value":318},"Then request the material behind the image. Ask for the uncropped file, native export, original device or forensic report, collection notes, hashes, account and channel identifiers, surrounding messages, attachments, and any certification. Identify search terms, date filters, excluded chats, translation steps, and time-zone conversions.",{"type":25,"tag":26,"props":320,"children":321},{},[322],{"type":30,"value":323},"Check for application-specific context. A forwarded message does not show that the forwarding account wrote the original. A channel post may have more than one administrator. A public username may be changed or imitated. A wallet address can be copied by anyone. These facts do not make the exhibit false, but they narrow the inferences it can support.",{"type":25,"tag":26,"props":325,"children":326},{},[327],{"type":30,"value":328},"For a non-English conversation, preserve the original text and identify who translated it, the method used, and any disputed slang or technical terms. The Xinbi announcement describes a channel operated primarily in Chinese. Translation can affect the meaning of service descriptions, payment instructions, and speaker identity. A translated exhibit should remain traceable to the source message.",{"type":25,"tag":26,"props":330,"children":331},{},[332,334,340,342,348],{"type":30,"value":333},"Finally, compare the address character by character and verify it on the correct network. Similar-looking addresses, address poisoning, tokens with the same symbol on different networks, and omitted memo fields can produce a false match. The ",{"type":25,"tag":43,"props":335,"children":337},{"href":336},"\u002Fservices#evidence-review",[338],{"type":30,"value":339},"evidence review service",{"type":30,"value":341}," is structured around testing the collection, attribution, and transaction analysis as separate workstreams. The ",{"type":25,"tag":43,"props":343,"children":345},{"href":344},"\u002Fmethodology",[346],{"type":30,"value":347},"published methodology",{"type":30,"value":349}," explains how source records and analyst conclusions are documented.",{"type":25,"tag":64,"props":351,"children":353},{"id":352},"what-a-defensible-exhibit-package-looks-like",[354],{"type":30,"value":355},"What a defensible exhibit package looks like",{"type":25,"tag":26,"props":357,"children":358},{},[359],{"type":30,"value":360},"A useful production keeps the source and the courtroom view together. Preserve the native export or forensic image as the source. Create a review copy that counsel can search. Prepare the proposed exhibit from that source, and maintain a manifest linking the exhibit pages to the underlying files and hashes.",{"type":25,"tag":26,"props":362,"children":363},{},[364],{"type":30,"value":365},"The authentication declaration or testimony should identify the collector, device or account, acquisition method, dates, settings, output files, and integrity checks. Any Rule 902 certification should track the process actually used rather than reciting the rule in general terms.",{"type":25,"tag":26,"props":367,"children":368},{},[369],{"type":30,"value":370},"The expert analysis should then separate observable facts from opinions. Observable facts may include the displayed account identifier, exact wallet string, message timestamp as rendered, transaction hash, and block data. Opinions may address whether the records are consistent with common control, whether an address attribution is reliable, or whether omitted context changes the analysis. State the assumptions and competing explanations.",{"type":25,"tag":26,"props":372,"children":373},{},[374],{"type":30,"value":375},"This structure does not guarantee admission. It gives counsel and the court a record that can be tested.",{"type":25,"tag":64,"props":377,"children":379},{"id":378},"frequently-asked-questions",[380],{"type":30,"value":381},"Frequently Asked Questions",{"type":25,"tag":64,"props":383,"children":385},{"id":384},"q-is-a-telegram-screenshot-admissible-in-federal-court",[386],{"type":30,"value":387},"Q: Is a Telegram screenshot admissible in federal court?",{"type":25,"tag":26,"props":389,"children":390},{},[391,397],{"type":25,"tag":392,"props":393,"children":394},"strong",{},[395],{"type":30,"value":396},"A:",{"type":30,"value":398}," It can be. The proponent still must authenticate it for the purpose offered, address hearsay if the message is offered for its truth, and show that the image accurately reflects the relevant content. A screenshot is weaker when it is cropped, lacks context, or has no documented source.",{"type":25,"tag":64,"props":400,"children":402},{"id":401},"q-does-posting-a-wallet-address-prove-the-poster-controls-it",[403],{"type":30,"value":404},"Q: Does posting a wallet address prove the poster controls it?",{"type":25,"tag":26,"props":406,"children":407},{},[408,412],{"type":25,"tag":392,"props":409,"children":410},{},[411],{"type":30,"value":396},{"type":30,"value":413}," No. The post proves, at most, that the address appeared in the message if the exhibit is authentic. Control needs separate evidence, such as device artifacts, a valid signed message, exchange records, or conduct tied to the address.",{"type":25,"tag":64,"props":415,"children":417},{"id":416},"q-does-a-rule-902-certification-prove-who-wrote-the-message",[418],{"type":30,"value":419},"Q: Does a Rule 902 certification prove who wrote the message?",{"type":25,"tag":26,"props":421,"children":422},{},[423,427],{"type":25,"tag":392,"props":424,"children":425},{},[426],{"type":30,"value":396},{"type":30,"value":428}," No. Rules 902(13) and 902(14) can authenticate an electronic process or a copied data set through certification. They do not establish authorship, truth, ownership, or wallet control.",{"type":25,"tag":64,"props":430,"children":432},{"id":431},"q-what-should-counsel-preserve-first",[433],{"type":30,"value":434},"Q: What should counsel preserve first?",{"type":25,"tag":26,"props":436,"children":437},{},[438,442],{"type":25,"tag":392,"props":439,"children":440},{},[441],{"type":30,"value":396},{"type":30,"value":443}," Preserve the available device and account data through lawful means, then capture the full conversation and native export before messages or accounts disappear. Record the collection method and time, retain untouched source files, hash the exports, and keep the messaging evidence separate from the blockchain analysis.",{"type":25,"tag":26,"props":445,"children":446},{},[447,449,455],{"type":30,"value":448},"If a matter turns on a Telegram conversation and a wallet path, start with the evidence that can disappear. ",{"type":25,"tag":43,"props":450,"children":452},{"href":451},"\u002Fcontact",[453],{"type":30,"value":454},"Contact ConsensusIntel",{"type":30,"value":456}," to scope preservation, authentication, or transaction analysis before the record is reduced to screenshots.",{"title":7,"searchDepth":458,"depth":458,"links":459},2,[460,462,463,464,465,466,467,468,469,470,471],{"id":66,"depth":461,"text":69},3,{"id":111,"depth":461,"text":114},{"id":168,"depth":461,"text":171},{"id":268,"depth":461,"text":271},{"id":305,"depth":461,"text":308},{"id":352,"depth":461,"text":355},{"id":378,"depth":461,"text":381},{"id":384,"depth":461,"text":387},{"id":401,"depth":461,"text":404},{"id":416,"depth":461,"text":419},{"id":431,"depth":461,"text":434},"markdown","content:articles:21-telegram-evidence-crypto-cases-authentication.md","content","articles\u002F21-telegram-evidence-crypto-cases-authentication.md","articles\u002F21-telegram-evidence-crypto-cases-authentication","md",{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"slug":10,"date":11,"lastUpdated":11,"author":12,"readingTime":13,"category":14,"tags":479,"ogImage":20,"featured":6,"body":480,"_type":472,"_id":473,"_source":474,"_file":475,"_stem":476,"_extension":477},[16,17,18,19],{"type":22,"children":481,"toc":803},[482,486,490,500,504,508,512,516,520,530,534,538,542,546,555,559,569,573,577,581,585,589,593,597,605,636,640,650,660,664,668,672,676,680,688,692,696,700,704,708,722,726,730,734,738,742,746,750,758,762,770,774,782,786,794],{"type":25,"tag":26,"props":483,"children":484},{},[485],{"type":30,"value":31},{"type":25,"tag":26,"props":487,"children":488},{},[489],{"type":30,"value":36},{"type":25,"tag":26,"props":491,"children":492},{},[493,494,499],{"type":30,"value":41},{"type":25,"tag":43,"props":495,"children":497},{"href":45,"rel":496},[47],[498],{"type":30,"value":50},{"type":30,"value":52},{"type":25,"tag":26,"props":501,"children":502},{},[503],{"type":30,"value":57},{"type":25,"tag":26,"props":505,"children":506},{},[507],{"type":30,"value":62},{"type":25,"tag":64,"props":509,"children":510},{"id":66},[511],{"type":30,"value":69},{"type":25,"tag":26,"props":513,"children":514},{},[515],{"type":30,"value":74},{"type":25,"tag":26,"props":517,"children":518},{},[519],{"type":30,"value":79},{"type":25,"tag":26,"props":521,"children":522},{},[523,524,529],{"type":30,"value":84},{"type":25,"tag":43,"props":525,"children":527},{"href":87,"rel":526},[47],[528],{"type":30,"value":91},{"type":30,"value":93},{"type":25,"tag":26,"props":531,"children":532},{},[533],{"type":30,"value":98},{"type":25,"tag":26,"props":535,"children":536},{},[537],{"type":30,"value":103},{"type":25,"tag":26,"props":539,"children":540},{},[541],{"type":30,"value":108},{"type":25,"tag":64,"props":543,"children":544},{"id":111},[545],{"type":30,"value":114},{"type":25,"tag":26,"props":547,"children":548},{},[549,554],{"type":25,"tag":43,"props":550,"children":552},{"href":120,"rel":551},[47],[553],{"type":30,"value":124},{"type":30,"value":126},{"type":25,"tag":26,"props":556,"children":557},{},[558],{"type":30,"value":131},{"type":25,"tag":26,"props":560,"children":561},{},[562,563,568],{"type":30,"value":136},{"type":25,"tag":43,"props":564,"children":566},{"href":139,"rel":565},[47],[567],{"type":30,"value":143},{"type":30,"value":145},{"type":25,"tag":26,"props":570,"children":571},{},[572],{"type":30,"value":150},{"type":25,"tag":26,"props":574,"children":575},{},[576],{"type":30,"value":155},{"type":25,"tag":26,"props":578,"children":579},{},[580],{"type":30,"value":160},{"type":25,"tag":26,"props":582,"children":583},{},[584],{"type":30,"value":165},{"type":25,"tag":64,"props":586,"children":587},{"id":168},[588],{"type":30,"value":171},{"type":25,"tag":26,"props":590,"children":591},{},[592],{"type":30,"value":176},{"type":25,"tag":26,"props":594,"children":595},{},[596],{"type":30,"value":181},{"type":25,"tag":26,"props":598,"children":599},{},[600,604],{"type":25,"tag":43,"props":601,"children":602},{"href":187},[603],{"type":30,"value":190},{"type":30,"value":192},{"type":25,"tag":194,"props":606,"children":607},{},[608,612,616,620,624,628,632],{"type":25,"tag":198,"props":609,"children":610},{},[611],{"type":30,"value":202},{"type":25,"tag":198,"props":613,"children":614},{},[615],{"type":30,"value":207},{"type":25,"tag":198,"props":617,"children":618},{},[619],{"type":30,"value":212},{"type":25,"tag":198,"props":621,"children":622},{},[623],{"type":30,"value":217},{"type":25,"tag":198,"props":625,"children":626},{},[627],{"type":30,"value":222},{"type":25,"tag":198,"props":629,"children":630},{},[631],{"type":30,"value":227},{"type":25,"tag":198,"props":633,"children":634},{},[635],{"type":30,"value":232},{"type":25,"tag":26,"props":637,"children":638},{},[639],{"type":30,"value":237},{"type":25,"tag":26,"props":641,"children":642},{},[643,644,649],{"type":30,"value":242},{"type":25,"tag":43,"props":645,"children":647},{"href":245,"rel":646},[47],[648],{"type":30,"value":249},{"type":30,"value":251},{"type":25,"tag":26,"props":651,"children":652},{},[653,654,659],{"type":30,"value":256},{"type":25,"tag":43,"props":655,"children":657},{"href":259,"rel":656},[47],[658],{"type":30,"value":263},{"type":30,"value":265},{"type":25,"tag":64,"props":661,"children":662},{"id":268},[663],{"type":30,"value":271},{"type":25,"tag":26,"props":665,"children":666},{},[667],{"type":30,"value":276},{"type":25,"tag":26,"props":669,"children":670},{},[671],{"type":30,"value":281},{"type":25,"tag":26,"props":673,"children":674},{},[675],{"type":30,"value":286},{"type":25,"tag":26,"props":677,"children":678},{},[679],{"type":30,"value":291},{"type":25,"tag":26,"props":681,"children":682},{},[683,687],{"type":25,"tag":43,"props":684,"children":685},{"href":297},[686],{"type":30,"value":300},{"type":30,"value":302},{"type":25,"tag":64,"props":689,"children":690},{"id":305},[691],{"type":30,"value":308},{"type":25,"tag":26,"props":693,"children":694},{},[695],{"type":30,"value":313},{"type":25,"tag":26,"props":697,"children":698},{},[699],{"type":30,"value":318},{"type":25,"tag":26,"props":701,"children":702},{},[703],{"type":30,"value":323},{"type":25,"tag":26,"props":705,"children":706},{},[707],{"type":30,"value":328},{"type":25,"tag":26,"props":709,"children":710},{},[711,712,716,717,721],{"type":30,"value":333},{"type":25,"tag":43,"props":713,"children":714},{"href":336},[715],{"type":30,"value":339},{"type":30,"value":341},{"type":25,"tag":43,"props":718,"children":719},{"href":344},[720],{"type":30,"value":347},{"type":30,"value":349},{"type":25,"tag":64,"props":723,"children":724},{"id":352},[725],{"type":30,"value":355},{"type":25,"tag":26,"props":727,"children":728},{},[729],{"type":30,"value":360},{"type":25,"tag":26,"props":731,"children":732},{},[733],{"type":30,"value":365},{"type":25,"tag":26,"props":735,"children":736},{},[737],{"type":30,"value":370},{"type":25,"tag":26,"props":739,"children":740},{},[741],{"type":30,"value":375},{"type":25,"tag":64,"props":743,"children":744},{"id":378},[745],{"type":30,"value":381},{"type":25,"tag":64,"props":747,"children":748},{"id":384},[749],{"type":30,"value":387},{"type":25,"tag":26,"props":751,"children":752},{},[753,757],{"type":25,"tag":392,"props":754,"children":755},{},[756],{"type":30,"value":396},{"type":30,"value":398},{"type":25,"tag":64,"props":759,"children":760},{"id":401},[761],{"type":30,"value":404},{"type":25,"tag":26,"props":763,"children":764},{},[765,769],{"type":25,"tag":392,"props":766,"children":767},{},[768],{"type":30,"value":396},{"type":30,"value":413},{"type":25,"tag":64,"props":771,"children":772},{"id":416},[773],{"type":30,"value":419},{"type":25,"tag":26,"props":775,"children":776},{},[777,781],{"type":25,"tag":392,"props":778,"children":779},{},[780],{"type":30,"value":396},{"type":30,"value":428},{"type":25,"tag":64,"props":783,"children":784},{"id":431},[785],{"type":30,"value":434},{"type":25,"tag":26,"props":787,"children":788},{},[789,793],{"type":25,"tag":392,"props":790,"children":791},{},[792],{"type":30,"value":396},{"type":30,"value":443},{"type":25,"tag":26,"props":795,"children":796},{},[797,798,802],{"type":30,"value":448},{"type":25,"tag":43,"props":799,"children":800},{"href":451},[801],{"type":30,"value":454},{"type":30,"value":456},{"title":7,"searchDepth":458,"depth":458,"links":804},[805,806,807,808,809,810,811,812,813,814,815],{"id":66,"depth":461,"text":69},{"id":111,"depth":461,"text":114},{"id":168,"depth":461,"text":171},{"id":268,"depth":461,"text":271},{"id":305,"depth":461,"text":308},{"id":352,"depth":461,"text":355},{"id":378,"depth":461,"text":381},{"id":384,"depth":461,"text":387},{"id":401,"depth":461,"text":404},{"id":416,"depth":461,"text":419},{"id":431,"depth":461,"text":434},[817,1239,2017],{"_path":818,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":819,"description":820,"slug":821,"date":11,"lastUpdated":11,"author":12,"readingTime":822,"category":14,"tags":823,"ogImage":828,"featured":6,"body":829,"_type":472,"_id":1236,"_source":474,"_file":1237,"_stem":1238,"_extension":477},"\u002Farticles\u002Ftokenized-stock-ownership-evidence","Tokenized stock evidence: which record proves ownership?","How attorneys should separate blockchain transfers, master securityholder files, custody records, and synthetic exposure in tokenized stock disputes.","tokenized-stock-ownership-evidence",11,[824,825,826,827],"tokenized-securities","securities","custody","evidence","\u002Fog\u002Ftokenized-stock-ownership-evidence.png",{"type":22,"children":830,"toc":1216},[831,836,841,848,862,867,881,886,892,906,912,917,922,928,933,938,944,949,962,968,973,978,984,997,1010,1015,1021,1026,1031,1036,1041,1046,1052,1057,1062,1086,1098,1104,1109,1114,1119,1125,1130,1135,1140,1144,1150,1159,1165,1174,1180,1189,1195,1204],{"type":25,"tag":26,"props":832,"children":833},{},[834],{"type":30,"value":835},"A wallet can display a token with the name and ticker of a public company's stock without making the wallet holder a registered shareholder. The token may be the stock itself, evidence of a security entitlement held through an intermediary, a record that prompts an offchain ownership update, or a separate security whose return tracks the stock. Each model creates a different evidentiary chain.",{"type":25,"tag":26,"props":837,"children":838},{},[839],{"type":30,"value":840},"For counsel, the first question is not whether a blockchain transfer occurred. It is what legal and operational record the transfer changed. The answer determines which records support ownership, which party must be examined or subpoenaed, and how narrowly an expert should state a conclusion.",{"type":25,"tag":842,"props":843,"children":845},"h2",{"id":844},"what-changed-in-september-2026",[846],{"type":30,"value":847},"What changed in September 2026?",{"type":25,"tag":26,"props":849,"children":850},{},[851,853,860],{"type":30,"value":852},"On September 17, 2026, the Securities and Exchange Commission issued an ",{"type":25,"tag":43,"props":854,"children":857},{"href":855,"rel":856},"https:\u002F\u002Fwww.sec.gov\u002Ffiles\u002Frules\u002Fexorders\u002F2026\u002F34-106402.pdf",[47],[858],{"type":30,"value":859},"order granting temporary conditional exemptive relief",{"type":30,"value":861}," for certain Tokenized Securities Venues, or TSVs. A TSV that satisfies the order's conditions may operate a permissioned automated market maker for tokenized National Market System stock without being treated as an exchange under Section 3(a)(1) of the Securities Exchange Act of 1934. The order also provides narrower dealer relief for certain liquidity providers using proprietary capital.",{"type":25,"tag":26,"props":863,"children":864},{},[865],{"type":30,"value":866},"The exemptions took effect on September 17, 2026, and run through September 17, 2031, unless the Commission modifies them. They are not a general approval of tokenized stock. The order covers specified secondary trading under stated conditions, excludes primary issuance, and does not displace antifraud, antimanipulation, registration, sanctions, or other applicable law. A TSV relying on the order must be a U.S. person, but the property rights associated with a security can still depend on state law, governing documents, and the holding structure.",{"type":25,"tag":26,"props":868,"children":869},{},[870,872,879],{"type":30,"value":871},"A second development concerns the records behind the token. The SEC issued proposed transfer agent rules on September 1, 2026, and the proposal was ",{"type":25,"tag":43,"props":873,"children":876},{"href":874,"rel":875},"https:\u002F\u002Fwww.federalregister.gov\u002Fdocuments\u002F2026\u002F09\u002F04\u002F2026-18190\u002Ftransfer-agent-rules",[47],[877],{"type":30,"value":878},"published in the Federal Register on September 4",{"type":30,"value":880},". Comments are due November 3, 2026. This is a proposal, not a live obligation. Its discussion of existing market structure is still useful because it identifies the master securityholder file as the official list of registered owners and distinguishes registered ownership from beneficial ownership through an intermediary.",{"type":25,"tag":26,"props":882,"children":883},{},[884],{"type":30,"value":885},"Taken together, the September actions make one point hard to avoid: an onchain balance is part of the evidence, but the system's record hierarchy determines what that balance means.",{"type":25,"tag":842,"props":887,"children":889},{"id":888},"which-record-carries-the-ownership-fact",[890],{"type":30,"value":891},"Which record carries the ownership fact?",{"type":25,"tag":26,"props":893,"children":894},{},[895,897,904],{"type":30,"value":896},"The SEC staff's January 28, 2026 ",{"type":25,"tag":43,"props":898,"children":901},{"href":899,"rel":900},"https:\u002F\u002Fwww.sec.gov\u002Fnewsroom\u002Fspeeches-statements\u002Fcorp-fin-statement-tokenized-securities-012826-statement-tokenized-securities",[47],[902],{"type":30,"value":903},"Statement on Tokenized Securities",{"type":30,"value":905}," describes several models. The statement is staff analysis, not a Commission rule, and it creates no new legal obligations. Its taxonomy is useful for classifying the instrument before drawing conclusions from blockchain data.",{"type":25,"tag":64,"props":907,"children":909},{"id":908},"issuer-sponsored-tokenization-with-an-onchain-master-file",[910],{"type":30,"value":911},"Issuer-sponsored tokenization with an onchain master file",{"type":25,"tag":26,"props":913,"children":914},{},[915],{"type":30,"value":916},"An issuer or its transfer agent may integrate distributed ledger technology into the master securityholder file. In that model, a transfer of the crypto asset changes the ownership record. The onchain system may record the wallet address, quantity, and issue date while associated offchain records identify the securityholder by name and address.",{"type":25,"tag":26,"props":918,"children":919},{},[920],{"type":30,"value":921},"The blockchain record matters directly here, but a wallet address alone may still be incomplete. Counsel should obtain the issuer or transfer agent's wallet-to-holder mapping, the applicable governing documents, any restrictions on transfer, the complete transfer history, and records of corrections or administrative changes. A visible token balance supports a technical state at a point in time. Identifying the registered holder may require the linked offchain data.",{"type":25,"tag":64,"props":923,"children":925},{"id":924},"issuer-sponsored-tokenization-with-an-offchain-master-file",[926],{"type":30,"value":927},"Issuer-sponsored tokenization with an offchain master file",{"type":25,"tag":26,"props":929,"children":930},{},[931],{"type":30,"value":932},"An issuer may instead maintain the authoritative ownership record offchain. The token does not itself convey the security's rights. A token transfer acts as notice or an instruction that causes the issuer or its agent to update the master securityholder file.",{"type":25,"tag":26,"props":934,"children":935},{},[936],{"type":30,"value":937},"This distinction can decide a dispute. A confirmed blockchain transaction may prove that the token moved, while the offchain file shows whether the requested ownership update was accepted, rejected, delayed, reversed, or posted to a different account. The two records should be reconciled rather than treated as duplicates.",{"type":25,"tag":64,"props":939,"children":941},{"id":940},"third-party-custodial-tokenization",[942],{"type":30,"value":943},"Third-party custodial tokenization",{"type":25,"tag":26,"props":945,"children":946},{},[947],{"type":30,"value":948},"A third party may hold the underlying stock and issue a tokenized security entitlement. The token represents an indirect interest in stock held in custody, not direct registration on the issuer's books. The intermediary's entitlement records, custody account, reserve or reconciliation records, and customer agreement become central.",{"type":25,"tag":26,"props":950,"children":951},{},[952,954,960],{"type":30,"value":953},"The blockchain can show transfers of the tokenized entitlement. It does not, without the intermediary's records, establish that enough underlying shares were held, that the claimant was credited correctly, or that the holder could exercise voting, dividend, conversion, or withdrawal rights. Attorneys reviewing these arrangements may need ",{"type":25,"tag":43,"props":955,"children":957},{"href":956},"\u002Fservices#exchange-custody",[958],{"type":30,"value":959},"exchange and custody analysis",{"type":30,"value":961}," in addition to transaction tracing.",{"type":25,"tag":64,"props":963,"children":965},{"id":964},"synthetic-exposure",[966],{"type":30,"value":967},"Synthetic exposure",{"type":25,"tag":26,"props":969,"children":970},{},[971],{"type":30,"value":972},"A third party may issue its own linked security or security-based swap whose value refers to another company's stock. The holder may have a claim against the third-party issuer without any ownership or entitlement in the referenced stock. The SEC's September 17 TSV order expressly excludes these synthetic instruments from its definition of Tokenized NMS Stock.",{"type":25,"tag":26,"props":974,"children":975},{},[976],{"type":30,"value":977},"A ticker, logo, or price link is therefore poor evidence of the instrument's legal character. Counsel should start with the offering documents, token terms, issuer identity, contract code, custody arrangement, and rights granted to the holder. If the instrument provides no rights against the referenced issuer, a report should not call the wallet holder a shareholder of that issuer.",{"type":25,"tag":842,"props":979,"children":981},{"id":980},"what-can-the-blockchain-establish",[982],{"type":30,"value":983},"What can the blockchain establish?",{"type":25,"tag":26,"props":985,"children":986},{},[987,989,995],{"type":30,"value":988},"A properly collected blockchain record can establish that a transaction was included in a particular block, which addresses and contracts participated, what state changes and event logs were recorded, and what the relevant contract reported as a balance. For EVM networks, the transaction receipt and execution trace may be needed because a transaction hash alone does not prove successful execution. ",{"type":25,"tag":43,"props":990,"children":992},{"href":991},"\u002Fresources\u002Fevm-receipts-logs-execution-traces",[993],{"type":30,"value":994},"Receipts, logs, and EVM traces",{"type":30,"value":996}," explains that distinction.",{"type":25,"tag":26,"props":998,"children":999},{},[1000,1002,1008],{"type":30,"value":1001},"Those facts do not automatically identify a human or company behind a wallet. They also do not resolve whether a transfer was authorized under governing documents, whether an offchain record was updated, whether the issuer recognizes the holder, or whether a custodian maintained the promised underlying position. Control of a signing key is evidence of technical power. It is not a substitute for the ownership and priority analysis discussed in ",{"type":25,"tag":43,"props":1003,"children":1005},{"href":1004},"\u002Fresources\u002Fucc-article-12-digital-asset-control",[1006],{"type":30,"value":1007},"UCC Article 12 and digital asset control",{"type":30,"value":1009},".",{"type":25,"tag":26,"props":1011,"children":1012},{},[1013],{"type":30,"value":1014},"Technical collection should include the network, complete token contract address, transaction hash, block number, block timestamp, receipt status, relevant logs, pre-transfer and post-transfer balances, and contract code or verified source used in the analysis. If the contract is upgradeable, preserve the implementation address, proxy state, administrator, and upgrade history. These are evidence recommendations, not requirements imposed on every litigant by the SEC order.",{"type":25,"tag":842,"props":1016,"children":1018},{"id":1017},"what-evidence-will-a-tsv-create",[1019],{"type":30,"value":1020},"What evidence will a TSV create?",{"type":25,"tag":26,"props":1022,"children":1023},{},[1024],{"type":30,"value":1025},"The September 17 order requires a TSV to publish a detailed notice at least 30 calendar days before operating under the exemption. The notice must describe the venue's ownership and governance, eligible participants, permissioning criteria, tokenization process, treatment of issuer-sponsored and third-party tokens, smart contract addresses, upgrade authority, trading procedures, fees, settlement arrangements, service providers, systems safeguards, known risks, and complaint procedures. Revised versions must remain available on the venue's website.",{"type":25,"tag":26,"props":1027,"children":1028},{},[1029],{"type":30,"value":1030},"For each Tokenized NMS Stock, the notice must describe the TSV's procedures for evaluating its legal status, technical soundness, and operational integrity. It must also describe the steps used to verify that holders receive the same rights and privileges as holders of the equivalent traditional NMS stock. For stock tokenized by an unaffiliated third party, the issuer may object within 30 calendar days after receiving the required notice to that token being made available for trading on the TSV. A timely objection prevents the TSV from making that token available under the exemption.",{"type":25,"tag":26,"props":1032,"children":1033},{},[1034],{"type":30,"value":1035},"The order also requires transaction data for the prior 30 days to be freely available in a machine-readable format and updated within ten minutes of a transaction. The data must include the asset symbols, U.S. dollar price, size, transaction time, and direction. The venue must also identify the liquidity pool and smart contract address and publish specified pool volume and size data.",{"type":25,"tag":26,"props":1037,"children":1038},{},[1039],{"type":30,"value":1040},"The public feed is not the complete evidentiary record. A TSV must keep current records of trading interest, executions, cancellations, modifications, participant screening, wallet verification, fees, trading stoppages, volume calculations, operational events, and notices. It must preserve those records while the exemption is effective and for three years afterward. Distributed ledger records can satisfy the condition only if the Commission can readily access them in both human-readable and reasonably usable electronic formats.",{"type":25,"tag":26,"props":1042,"children":1043},{},[1044],{"type":30,"value":1045},"These duties apply to a TSV relying on this order. They should not be attributed to every token issuer, exchange, broker, transfer agent, or blockchain application. The order also says the TSV is not registered with the Commission for the exempt activity and is not subject to Regulation NMS for that activity. Counsel should identify the entity, activity, and source of each duty before treating the order as a discovery checklist.",{"type":25,"tag":842,"props":1047,"children":1049},{"id":1048},"what-should-counsel-preserve-and-request",[1050],{"type":30,"value":1051},"What should counsel preserve and request?",{"type":25,"tag":26,"props":1053,"children":1054},{},[1055],{"type":30,"value":1056},"Start by classifying the instrument. Obtain the token terms, offering documents, issuer and intermediary agreements, contract address, network, and any conversion or redemption terms. Determine whether the token represents registered stock, a security entitlement, an offchain instruction, or synthetic exposure.",{"type":25,"tag":26,"props":1058,"children":1059},{},[1060],{"type":30,"value":1061},"Then identify the authoritative record and the party that maintains it:",{"type":25,"tag":1063,"props":1064,"children":1065},"ol",{},[1066,1071,1076,1081],{"type":25,"tag":198,"props":1067,"children":1068},{},[1069],{"type":30,"value":1070},"For issuer-sponsored stock, request the master securityholder file, transfer journal, wallet mapping, rejected transfer records, correction history, and relevant governing documents.",{"type":25,"tag":198,"props":1072,"children":1073},{},[1074],{"type":30,"value":1075},"For a custodial entitlement, request the intermediary's entitlement ledger, customer account records, underlying custody statements, position reconciliations, corporate action allocations, and records of any shortfall or freeze.",{"type":25,"tag":198,"props":1077,"children":1078},{},[1079],{"type":30,"value":1080},"For a TSV trade, preserve every version of the public notice, public transaction data, smart contract code, wallet permissioning records, order or trading interest data, execution records, fee records, and stoppage or incident notices.",{"type":25,"tag":198,"props":1082,"children":1083},{},[1084],{"type":30,"value":1085},"For a synthetic instrument, request the issuing party's obligation, collateral terms, valuation method, hedging or reference-price records, and communications describing the holder's rights.",{"type":25,"tag":26,"props":1087,"children":1088},{},[1089,1091,1096],{"type":30,"value":1090},"Requests should preserve native fields and system identifiers, not just PDF statements or explorer screenshots. The issuer, transfer agent, intermediary, custodian, and venue may each use a different account identifier for the same person or position. A useful production includes the mapping among those identifiers and the timestamp, timezone, source system, and change history for each record. This follows ConsensusIntel's ",{"type":25,"tag":43,"props":1092,"children":1093},{"href":344},[1094],{"type":30,"value":1095},"reproducible forensic methodology",{"type":30,"value":1097},", which separates source data, processing, and conclusion.",{"type":25,"tag":842,"props":1099,"children":1101},{"id":1100},"how-does-the-record-hierarchy-work-in-practice",[1102],{"type":30,"value":1103},"How does the record hierarchy work in practice?",{"type":25,"tag":26,"props":1105,"children":1106},{},[1107],{"type":30,"value":1108},"Hypothetical example: A client controls a wallet showing 500 tokens labeled as shares of Public Company A. The blockchain records a successful transfer to the client's allowlisted address. A dispute later arises over whether the client owned 500 shares on the transfer date.",{"type":25,"tag":26,"props":1110,"children":1111},{},[1112],{"type":30,"value":1113},"If Company A's transfer agent used the blockchain as part of its master securityholder file, the onchain transfer and the linked holder record may support registered ownership. If the master file remained offchain, counsel must determine whether the transfer agent posted the ownership change after receiving the onchain instruction. If an unaffiliated custodian issued a tokenized security entitlement, the client may hold an indirect interest that depends on the intermediary's books and custody position. If the token was a linked security, the client may have only a contractual claim against its issuer.",{"type":25,"tag":26,"props":1115,"children":1116},{},[1117],{"type":30,"value":1118},"The same wallet balance can therefore support four different conclusions. The expert should identify the model and state the evidence for it before using the word \"owner.\" If the necessary issuer, intermediary, or custody records are missing, the report should say what the blockchain establishes and leave the ownership question unresolved.",{"type":25,"tag":842,"props":1120,"children":1122},{"id":1121},"how-should-an-expert-frame-the-opinion",[1123],{"type":30,"value":1124},"How should an expert frame the opinion?",{"type":25,"tag":26,"props":1126,"children":1127},{},[1128],{"type":30,"value":1129},"A defensible report separates observation, attribution, record reconciliation, and legal assumption. It might state that the blockchain recorded 500 token units at a specified address at a specified block, that the venue associated the address with a named account, and that the transfer agent's produced file credited the same account with 500 shares. Each statement identifies its source.",{"type":25,"tag":26,"props":1131,"children":1132},{},[1133],{"type":30,"value":1134},"The report should also identify gaps. A wallet signature may support control of an address at a particular time, but not authority to act for a company. A token contract may report a balance, but not prove that a custodian held matching shares. A TSV notice may describe intended rights, but the actual agreement, transfer agent file, and custody records may be needed to test whether those rights existed and were performed.",{"type":25,"tag":26,"props":1136,"children":1137},{},[1138],{"type":30,"value":1139},"The September 2026 SEC materials supply a useful vocabulary and new records. They do not decide ownership in a private dispute. Federal securities law, state commercial and corporate law, contracts, issuer records, intermediary records, and the technical system may all bear on the answer. Counsel should define the jurisdiction and claim before asking an expert to bridge any missing layer.",{"type":25,"tag":842,"props":1141,"children":1142},{"id":378},[1143],{"type":30,"value":381},{"type":25,"tag":64,"props":1145,"children":1147},{"id":1146},"q-does-a-tokenized-stock-balance-prove-that-the-wallet-holder-owns-shares",[1148],{"type":30,"value":1149},"Q: Does a tokenized stock balance prove that the wallet holder owns shares?",{"type":25,"tag":26,"props":1151,"children":1152},{},[1153,1157],{"type":25,"tag":392,"props":1154,"children":1155},{},[1156],{"type":30,"value":396},{"type":30,"value":1158}," Not by itself. The balance proves what the token contract recorded for an address. Ownership may depend on whether the blockchain is part of the master securityholder file, whether an offchain transfer was posted, whether the token represents a security entitlement, and what rights the governing documents grant.",{"type":25,"tag":64,"props":1160,"children":1162},{"id":1161},"q-is-a-tokenized-securities-venue-registered-as-an-sec-exchange",[1163],{"type":30,"value":1164},"Q: Is a Tokenized Securities Venue registered as an SEC exchange?",{"type":25,"tag":26,"props":1166,"children":1167},{},[1168,1172],{"type":25,"tag":392,"props":1169,"children":1170},{},[1171],{"type":30,"value":396},{"type":30,"value":1173}," No. A venue that satisfies the September 17, 2026 order may rely on temporary conditional relief from the Exchange Act definition of \"exchange\" for the covered activity. The order requires the venue to disclose that it is not registered with the Commission for that activity.",{"type":25,"tag":64,"props":1175,"children":1177},{"id":1176},"q-what-record-should-counsel-request-first",[1178],{"type":30,"value":1179},"Q: What record should counsel request first?",{"type":25,"tag":26,"props":1181,"children":1182},{},[1183,1187],{"type":25,"tag":392,"props":1184,"children":1185},{},[1186],{"type":30,"value":396},{"type":30,"value":1188}," Request the instrument terms and identify the authoritative ownership or entitlement record. For direct registered stock, that is generally the issuer's or transfer agent's master securityholder file. For an indirect interest, the intermediary's entitlement ledger and custody records may be more important than the public blockchain balance.",{"type":25,"tag":64,"props":1190,"children":1192},{"id":1191},"q-are-the-september-2026-transfer-agent-changes-already-binding",[1193],{"type":30,"value":1194},"Q: Are the September 2026 transfer agent changes already binding?",{"type":25,"tag":26,"props":1196,"children":1197},{},[1198,1202],{"type":25,"tag":392,"props":1199,"children":1200},{},[1201],{"type":30,"value":396},{"type":30,"value":1203}," No. The SEC's transfer agent release is a proposed rule, with comments due November 3, 2026. Existing law and rules remain in force unless and until the Commission adopts final changes. The separate TSV order became effective on September 17, 2026, subject to its conditions.",{"type":25,"tag":26,"props":1205,"children":1206},{},[1207,1209,1214],{"type":30,"value":1208},"A tokenized stock matter should begin with instrument classification and the record hierarchy, not a wallet screenshot. If a dispute turns on those records, ",{"type":25,"tag":43,"props":1210,"children":1211},{"href":451},[1212],{"type":30,"value":1213},"contact ConsensusIntel",{"type":30,"value":1215}," to scope a technical review alongside counsel's legal analysis.",{"title":7,"searchDepth":458,"depth":458,"links":1217},[1218,1219,1225,1226,1227,1228,1229,1230],{"id":844,"depth":458,"text":847},{"id":888,"depth":458,"text":891,"children":1220},[1221,1222,1223,1224],{"id":908,"depth":461,"text":911},{"id":924,"depth":461,"text":927},{"id":940,"depth":461,"text":943},{"id":964,"depth":461,"text":967},{"id":980,"depth":458,"text":983},{"id":1017,"depth":458,"text":1020},{"id":1048,"depth":458,"text":1051},{"id":1100,"depth":458,"text":1103},{"id":1121,"depth":458,"text":1124},{"id":378,"depth":458,"text":381,"children":1231},[1232,1233,1234,1235],{"id":1146,"depth":461,"text":1149},{"id":1161,"depth":461,"text":1164},{"id":1176,"depth":461,"text":1179},{"id":1191,"depth":461,"text":1194},"content:articles:tokenized-stock-ownership-evidence.md","articles\u002Ftokenized-stock-ownership-evidence.md","articles\u002Ftokenized-stock-ownership-evidence",{"_path":1240,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":1241,"description":1242,"slug":1243,"date":1244,"lastUpdated":1244,"author":12,"readingTime":1245,"category":14,"tags":1246,"ogImage":1249,"featured":6,"body":1250,"_type":472,"_id":2014,"_source":474,"_file":2015,"_stem":2016,"_extension":477},"\u002Farticles\u002F23-sanctions-blockchain-tracing-ofac-match-evidence","Sanctions and blockchain tracing: What an OFAC match proves","How attorneys should distinguish OFAC-listed addresses, vendor attributions, indirect transaction paths, ownership rules, and risk-score evidence.","sanctions-blockchain-tracing-ofac-match-evidence","2026-09-19",13,[1247,1248,19,827],"ofac","sanctions","\u002Fog\u002Fsanctions-blockchain-tracing-ofac-match-evidence.png",{"type":22,"children":1251,"toc":1991},[1252,1257,1262,1268,1273,1296,1301,1315,1329,1335,1341,1355,1367,1381,1386,1392,1397,1410,1416,1439,1453,1458,1464,1469,1483,1496,1502,1507,1520,1526,1531,1574,1586,1599,1605,1610,1658,1671,1692,1698,1703,1708,1719,1725,1739,1744,1758,1771,1777,1782,1787,1792,1798,1901,1905,1911,1920,1926,1935,1941,1950,1956,1965,1971,1980],{"type":25,"tag":26,"props":1253,"children":1254},{},[1255],{"type":30,"value":1256},"A blockchain tracing report says a wallet is “connected to a sanctioned exchange.” That phrase may describe an exact address published by the U.S. Department of the Treasury's Office of Foreign Assets Control, a commercial attribution to a listed person, an indirect transaction path, or a vendor-generated risk score. Those findings are not interchangeable.",{"type":25,"tag":26,"props":1258,"children":1259},{},[1260],{"type":30,"value":1261},"A public blockchain can establish transactions between addresses. It does not, by itself, establish who controlled an address, who owned the property, what a party knew, which sanctions authority applied, or whether a transaction was prohibited. Counsel should begin with a narrower question: What exactly matched, on what date, under which authority, and based on what evidence?",{"type":25,"tag":842,"props":1263,"children":1265},{"id":1264},"why-is-an-ofac-designation-not-a-tracing-conclusion",[1266],{"type":30,"value":1267},"Why is an OFAC designation not a tracing conclusion?",{"type":25,"tag":26,"props":1269,"children":1270},{},[1271],{"type":30,"value":1272},"OFAC administers sanctions programs under different statutes, executive orders, and regulations. The legal effect of a match depends on the governing program, the parties and property involved, jurisdiction, ownership, and timing. A blockchain trace may supply relevant facts, but it does not determine which legal rule applies.",{"type":25,"tag":26,"props":1274,"children":1275},{},[1276,1278,1285,1287,1294],{"type":30,"value":1277},"The September 17, 2026 BitBank action illustrates the distinction. OFAC added BitBank, its developer Pishtaz Simorgh Electronic Trade Company, and three individuals to the Specially Designated Nationals and Blocked Persons List. Treasury described BitBank as a digital asset venture controlled by OFAC-designated Iranian financier Babak Zanjani and stated that Zanjani used it to facilitate transfers of hundreds of millions of dollars' worth of Bitcoin to the Islamic Revolutionary Guard Corps. Those are Treasury's administrative findings and allegations, not judicial findings. (",{"type":25,"tag":43,"props":1279,"children":1282},{"href":1280,"rel":1281},"https:\u002F\u002Fhome.treasury.gov\u002Fnews\u002Fpress-releases\u002Fsb0632",[47],[1283],{"type":30,"value":1284},"Treasury release",{"type":30,"value":1286},"; ",{"type":25,"tag":43,"props":1288,"children":1291},{"href":1289,"rel":1290},"https:\u002F\u002Fofac.treasury.gov\u002Frecent-actions\u002F20260917",[47],[1292],{"type":30,"value":1293},"OFAC list update",{"type":30,"value":1295},")",{"type":25,"tag":26,"props":1297,"children":1298},{},[1299],{"type":30,"value":1300},"The public entries issued with that action did not publish a digital currency address for BitBank. A later provider label connecting an address to BitBank would therefore be a third-party attribution unless OFAC separately published the address. Calling it an “OFAC-listed address” would overstate the official record.",{"type":25,"tag":26,"props":1302,"children":1303},{},[1304,1306,1313],{"type":30,"value":1305},"The designation date also is not necessarily the first date on which restrictions applied. ",{"type":25,"tag":43,"props":1307,"children":1310},{"href":1308,"rel":1309},"https:\u002F\u002Fofac.treasury.gov\u002Ffaqs\u002F1250",[47],[1311],{"type":30,"value":1312},"OFAC FAQ 1250",{"type":30,"value":1314}," states that Iranian digital asset exchanges meet the regulatory definition of an Iranian financial institution and are blocked under Executive Order 13599 and the Iranian Transactions and Sanctions Regulations regardless of whether they appear by name on the SDN List. Property and interests in property of those exchanges within U.S. jurisdiction or the possession or control of a U.S. person are blocked and must be reported.",{"type":25,"tag":26,"props":1316,"children":1317},{},[1318,1320,1327],{"type":30,"value":1319},"The analysis for non-U.S. persons is different. ",{"type":25,"tag":43,"props":1321,"children":1324},{"href":1322,"rel":1323},"https:\u002F\u002Fofac.treasury.gov\u002Ffaqs\u002F1257",[47],[1325],{"type":30,"value":1326},"OFAC FAQ 1257",{"type":30,"value":1328}," identifies separate potential consequences: designation of a person that materially assists or supports a designated exchange; correspondent or payable-through account restrictions on a foreign financial institution that knowingly conducts or facilitates a significant financial transaction for the exchange; and statutory sanctions involving significant transactions with designated Iranian financial institutions. Those authorities address different actors, conduct, and consequences.",{"type":25,"tag":842,"props":1330,"children":1332},{"id":1331},"what-are-the-five-findings-that-reports-often-collapse-into-one-match",[1333],{"type":30,"value":1334},"What are the five findings that reports often collapse into one match?",{"type":25,"tag":64,"props":1336,"children":1338},{"id":1337},"_1-an-exact-match-to-an-address-published-by-ofac",[1339],{"type":30,"value":1340},"1. An exact match to an address published by OFAC",{"type":25,"tag":26,"props":1342,"children":1343},{},[1344,1346,1353],{"type":30,"value":1345},"OFAC may add digital currency addresses to an SDN List entry as identifiers associated with a blocked person, although ",{"type":25,"tag":43,"props":1347,"children":1350},{"href":1348,"rel":1349},"https:\u002F\u002Fofac.treasury.gov\u002Ffaqs\u002F562",[47],[1351],{"type":30,"value":1352},"OFAC FAQ 562",{"type":30,"value":1354}," warns that published addresses are not likely to be exhaustive. The absence of an address from an entry does not prove that the listed person has no interest in it.",{"type":25,"tag":26,"props":1356,"children":1357},{},[1358,1365],{"type":25,"tag":43,"props":1359,"children":1362},{"href":1360,"rel":1361},"https:\u002F\u002Fofac.treasury.gov\u002Ffaqs\u002F594",[47],[1363],{"type":30,"value":1364},"OFAC FAQ 594",{"type":30,"value":1366}," directs users to enter a digital currency address in the Sanctions List Search tool's ID # field. That field does not use fuzzy logic, so it returns only exact matches. The search result should still be validated under the relevant network's parsing and canonicalization rules.",{"type":25,"tag":26,"props":1368,"children":1369},{},[1370,1372,1379],{"type":30,"value":1371},"Ethereum is an important example. An Ethereum address represents a 20-byte value, while mixed capitalization can encode an ",{"type":25,"tag":43,"props":1373,"children":1376},{"href":1374,"rel":1375},"https:\u002F\u002Feips.ethereum.org\u002FEIPS\u002Feip-55",[47],[1377],{"type":30,"value":1378},"ERC-55 checksum",{"type":30,"value":1380},". A casing correction can therefore identify the same underlying address. A report should not claim that every visible character difference necessarily creates a different Ethereum address without first applying the network's rules.",{"type":25,"tag":26,"props":1382,"children":1383},{},[1384],{"type":30,"value":1385},"A network-validated exact match supports the statement that OFAC publicly associated the identifier with the listed person as of the applicable entry. It does not independently establish who controlled the address on every earlier date, who authorized a transaction, or what another party knew.",{"type":25,"tag":64,"props":1387,"children":1389},{"id":1388},"_2-a-third-party-attribution-to-a-listed-person-or-entity",[1390],{"type":30,"value":1391},"2. A third-party attribution to a listed person or entity",{"type":25,"tag":26,"props":1393,"children":1394},{},[1395],{"type":30,"value":1396},"A commercial analytics provider may attribute addresses that OFAC has not published. The report should identify the provider, product, query date, label, confidence or category, and disclosed basis. “The provider attributed this address to BitBank” accurately describes the evidence. “OFAC listed this address” does not, unless the official entry contains it.",{"type":25,"tag":26,"props":1398,"children":1399},{},[1400,1402,1408],{"type":30,"value":1401},"Attribution also does not necessarily resolve ownership. Exchange records, account data, device evidence, corporate records, signed messages, and testimony may be needed to connect an address to a person or entity. ",{"type":25,"tag":43,"props":1403,"children":1405},{"href":1404},"\u002Fresources\u002Funderstanding-wallet-ownership-evidence",[1406],{"type":30,"value":1407},"Understanding wallet ownership evidence",{"type":30,"value":1409}," explains why control of keys, account ownership, and ownership of the assets are separate questions.",{"type":25,"tag":64,"props":1411,"children":1413},{"id":1412},"_3-an-unlisted-entity-blocked-under-the-50-percent-rule",[1414],{"type":30,"value":1415},"3. An unlisted entity blocked under the 50 Percent Rule",{"type":25,"tag":26,"props":1417,"children":1418},{},[1419,1421,1428,1430,1437],{"type":30,"value":1420},"An entity need not appear by name on the SDN List to be blocked. ",{"type":25,"tag":43,"props":1422,"children":1425},{"href":1423,"rel":1424},"https:\u002F\u002Fofac.treasury.gov\u002Ffaqs\u002F401",[47],[1426],{"type":30,"value":1427},"OFAC FAQ 401",{"type":30,"value":1429}," states that an entity directly or indirectly owned 50 percent or more in the aggregate by one or more blocked persons is considered blocked. OFAC's ",{"type":25,"tag":43,"props":1431,"children":1434},{"href":1432,"rel":1433},"https:\u002F\u002Fofac.treasury.gov\u002Fmedia\u002F6186\u002Fdownload?inline",[47],[1435],{"type":30,"value":1436},"50 Percent Rule guidance",{"type":30,"value":1438}," explains that qualifying interests held by multiple blocked persons are aggregated.",{"type":25,"tag":26,"props":1440,"children":1441},{},[1442,1444,1451],{"type":30,"value":1443},"Control is a separate issue. ",{"type":25,"tag":43,"props":1445,"children":1448},{"href":1446,"rel":1447},"https:\u002F\u002Fofac.treasury.gov\u002Ffaqs\u002F398",[47],[1449],{"type":30,"value":1450},"OFAC FAQ 398",{"type":30,"value":1452}," states that an entity controlled by blocked persons, but not owned 50 percent or more in the aggregate, is not automatically blocked under the rule. OFAC may separately designate the entity and urges caution when blocked persons hold significant minority interests or exercise control.",{"type":25,"tag":26,"props":1454,"children":1455},{},[1456],{"type":30,"value":1457},"Blockchain activity rarely proves corporate ownership percentages by itself. Counsel may need shareholder records, beneficial-ownership information, formation documents, agreements, governance records, and testimony. Operational control of a wallet is not a substitute for the ownership analysis.",{"type":25,"tag":64,"props":1459,"children":1461},{"id":1460},"_4-an-indirect-transaction-path",[1462],{"type":30,"value":1463},"4. An indirect transaction path",{"type":25,"tag":26,"props":1465,"children":1466},{},[1467],{"type":30,"value":1468},"A transaction graph may show funds moving from a listed or attributed address through intermediaries to the wallet under review. That path is transaction history. It is not automatic proof that each downstream wallet is blocked, owned by the sanctioned party, or involved in evasion.",{"type":25,"tag":26,"props":1470,"children":1471},{},[1472,1474,1481],{"type":30,"value":1473},"OFAC's ",{"type":25,"tag":43,"props":1475,"children":1478},{"href":1476,"rel":1477},"https:\u002F\u002Fofac.treasury.gov\u002Fsystem\u002Ffiles\u002F126\u002Fvirtual_currency_guidance_brochure.pdf",[47],[1479],{"type":30,"value":1480},"Sanctions Compliance Guidance for the Virtual Currency Industry",{"type":30,"value":1482}," recommends a risk-based compliance program that may include address screening, transaction monitoring, investigation, and blockchain analytics. It does not establish a universal rule under which every wallet within a fixed number of hops acquires the legal status of the original listed address.",{"type":25,"tag":26,"props":1484,"children":1485},{},[1486,1488,1494],{"type":30,"value":1487},"Terms such as “direct,” “one hop,” and “indirect” should describe the transaction path. They should not silently substitute for an ownership, attribution, knowledge, or liability conclusion. A sound ",{"type":25,"tag":43,"props":1489,"children":1491},{"href":1490},"\u002Fservices#blockchain-tracing",[1492],{"type":30,"value":1493},"blockchain tracing analysis",{"type":30,"value":1495}," separates ledger facts from the inferences drawn from them.",{"type":25,"tag":64,"props":1497,"children":1499},{"id":1498},"_5-a-vendor-generated-risk-score-or-alert",[1500],{"type":30,"value":1501},"5. A vendor-generated risk score or alert",{"type":25,"tag":26,"props":1503,"children":1504},{},[1505],{"type":30,"value":1506},"A risk score is an analytical output, not an OFAC determination. Counsel should obtain the transactions and attribution evidence behind it, including what triggered the alert, which addresses contributed, the exposure settings and time period, and when the provider applied or changed the label.",{"type":25,"tag":26,"props":1508,"children":1509},{},[1510,1512,1518],{"type":30,"value":1511},"A score may be useful for triage, but its meaning depends on the provider's methodology. ",{"type":25,"tag":43,"props":1513,"children":1515},{"href":1514},"\u002Fresources\u002Fwhy-blockchain-forensic-reports-fail-daubert",[1516],{"type":30,"value":1517},"Why most blockchain forensic reports fail Daubert scrutiny",{"type":30,"value":1519}," addresses the broader problems created when a dispositive conclusion rests on untested commercial labels or opaque rules.",{"type":25,"tag":842,"props":1521,"children":1523},{"id":1522},"how-should-counsel-build-the-sanctions-timeline",[1524],{"type":30,"value":1525},"How should counsel build the sanctions timeline?",{"type":25,"tag":26,"props":1527,"children":1528},{},[1529],{"type":30,"value":1530},"Chronology is often the difference between a useful trace and a misleading conclusion. Record at least:",{"type":25,"tag":1063,"props":1532,"children":1533},{},[1534,1539,1544,1549,1554,1559,1564,1569],{"type":25,"tag":198,"props":1535,"children":1536},{},[1537],{"type":30,"value":1538},"the date and time of each relevant blockchain transaction;",{"type":25,"tag":198,"props":1540,"children":1541},{},[1542],{"type":30,"value":1543},"the block number and transaction hash;",{"type":25,"tag":198,"props":1545,"children":1546},{},[1547],{"type":30,"value":1548},"the date the person, entity, or address was listed;",{"type":25,"tag":198,"props":1550,"children":1551},{},[1552],{"type":30,"value":1553},"any earlier authority under which the person or property may already have been blocked;",{"type":25,"tag":198,"props":1555,"children":1556},{},[1557],{"type":30,"value":1558},"the date the analytics provider created, changed, or withdrew its attribution;",{"type":25,"tag":198,"props":1560,"children":1561},{},[1562],{"type":30,"value":1563},"the date the client or institution received the alert;",{"type":25,"tag":198,"props":1565,"children":1566},{},[1567],{"type":30,"value":1568},"any blocking, rejection, return, unblocking, or transfer date; and",{"type":25,"tag":198,"props":1570,"children":1571},{},[1572],{"type":30,"value":1573},"any report, license request, subpoena response, or OFAC communication date.",{"type":25,"tag":26,"props":1575,"children":1576},{},[1577,1584],{"type":25,"tag":43,"props":1578,"children":1581},{"href":1579,"rel":1580},"https:\u002F\u002Fofac.treasury.gov\u002Ffaqs\u002F5",[47],[1582],{"type":30,"value":1583},"OFAC FAQ 5",{"type":30,"value":1585}," recommends that organizations investigating a potential name match identify the list or sanctions program that generated the alert, review the complete entry, compare available identifiers, obtain additional information where necessary, and follow their sanctions procedures for likely matches. It does not say that every doubtful match must be reported to OFAC. OFAC also explains that it does not confirm potential matches or false positives for organizations and instead expects risk-based determinations.",{"type":25,"tag":26,"props":1587,"children":1588},{},[1589,1591,1598],{"type":30,"value":1590},"As an evidentiary practice, preserve the search result, list data, provider output, and analysis date so the decision can be reconstructed. That preservation recommendation is separate from FAQ 5. Questions about whether virtual currency must be blocked may be directed to OFAC's Compliance Hotline under ",{"type":25,"tag":43,"props":1592,"children":1595},{"href":1593,"rel":1594},"https:\u002F\u002Fofac.treasury.gov\u002Ffaqs\u002F646",[47],[1596],{"type":30,"value":1597},"FAQ 646",{"type":30,"value":1009},{"type":25,"tag":842,"props":1600,"children":1602},{"id":1601},"what-should-a-reproducible-evidence-package-contain",[1603],{"type":30,"value":1604},"What should a reproducible evidence package contain?",{"type":25,"tag":26,"props":1606,"children":1607},{},[1608],{"type":30,"value":1609},"Preserve enough material for another qualified analyst to repeat the work:",{"type":25,"tag":194,"props":1611,"children":1612},{},[1613,1618,1623,1628,1633,1638,1643,1648,1653],{"type":25,"tag":198,"props":1614,"children":1615},{},[1616],{"type":30,"value":1617},"the complete address in plain text and the relevant blockchain or network;",{"type":25,"tag":198,"props":1619,"children":1620},{},[1621],{"type":30,"value":1622},"the canonical or checksum-validated form used for comparison;",{"type":25,"tag":198,"props":1624,"children":1625},{},[1626],{"type":30,"value":1627},"transaction hashes, block numbers, timestamps, asset type, and amount;",{"type":25,"tag":198,"props":1629,"children":1630},{},[1631],{"type":30,"value":1632},"raw transaction and receipt data where available;",{"type":25,"tag":198,"props":1634,"children":1635},{},[1636],{"type":30,"value":1637},"the dated OFAC entry or sanctions-list data;",{"type":25,"tag":198,"props":1639,"children":1640},{},[1641],{"type":30,"value":1642},"the provider, product, version, query date, report identifier, and settings;",{"type":25,"tag":198,"props":1644,"children":1645},{},[1646],{"type":30,"value":1647},"labels, confidence levels, exposure thresholds, hop settings, and the relied-upon path;",{"type":25,"tag":198,"props":1649,"children":1650},{},[1651],{"type":30,"value":1652},"analyst notes and any manual changes to automated output; and",{"type":25,"tag":198,"props":1654,"children":1655},{},[1656],{"type":30,"value":1657},"records showing when the alert was received, investigated, and resolved.",{"type":25,"tag":26,"props":1659,"children":1660},{},[1661,1663,1670],{"type":30,"value":1662},"The current recordkeeping rule generally requires full and accurate transaction records for at least ten years. Records of blocked property must be retained while the property remains blocked and for at least ten years after it is unblocked. (",{"type":25,"tag":43,"props":1664,"children":1667},{"href":1665,"rel":1666},"https:\u002F\u002Fwww.ecfr.gov\u002Fcurrent\u002Ftitle-31\u002Fsubtitle-B\u002Fchapter-V\u002Fpart-501\u002Fsubpart-C\u002Fsection-501.601",[47],[1668],{"type":30,"value":1669},"31 C.F.R. § 501.601",{"type":30,"value":1295},{"type":25,"tag":26,"props":1672,"children":1673},{},[1674,1676,1683,1684,1691],{"type":30,"value":1675},"OFAC's 2021 virtual currency guidance PDF still contains a five-year recordkeeping statement. That text predates the amendment that extended the regulatory period from five to ten years, effective in March 2025. The current regulation controls. (",{"type":25,"tag":43,"props":1677,"children":1680},{"href":1678,"rel":1679},"https:\u002F\u002Fwww.federalregister.gov\u002Fdocuments\u002F2024\u002F09\u002F13\u002F2024-20674\u002Freporting-recordkeeping-and-instructions-requirements-extension-of-recordkeeping-requirements",[47],[1681],{"type":30,"value":1682},"2024 interim final rule",{"type":30,"value":1286},{"type":25,"tag":43,"props":1685,"children":1688},{"href":1686,"rel":1687},"https:\u002F\u002Fwww.federalregister.gov\u002Fdocuments\u002F2025\u002F03\u002F21\u002F2025-04864\u002Freporting-recordkeeping-and-instructions-requirements-extension-of-recordkeeping-requirements",[47],[1689],{"type":30,"value":1690},"2025 final rule",{"type":30,"value":1295},{"type":25,"tag":842,"props":1693,"children":1695},{"id":1694},"what-discovery-is-most-useful",[1696],{"type":30,"value":1697},"What discovery is most useful?",{"type":25,"tag":26,"props":1699,"children":1700},{},[1701],{"type":30,"value":1702},"Discovery should connect an address to a person, account, property interest, or business process. For a custodian, requests may seek KYC materials, beneficial owners, assigned deposit addresses, ledgers, internal identifiers, login and device data, withdrawal approvals, communications, sanctions alerts, investigation notes, and OFAC reports.",{"type":25,"tag":26,"props":1704,"children":1705},{},[1706],{"type":30,"value":1707},"For an analytics provider or expert, seek the transaction set, source and date of each attribution, software and ruleset, exposure settings, overrides, validation procedures, limitations, and label history. A protective order may address proprietary material without preventing meaningful testing of a dispositive attribution.",{"type":25,"tag":26,"props":1709,"children":1710},{},[1711,1713,1718],{"type":30,"value":1712},"For a 50 Percent Rule issue, request evidence of direct and indirect equity interests, intermediary entities, nominee arrangements, and ownership changes over time. Do not infer aggregate corporate ownership from wallet activity alone. The same separation of source data, method, and conclusion should appear in the final report and is part of ConsensusIntel's ",{"type":25,"tag":43,"props":1714,"children":1715},{"href":344},[1716],{"type":30,"value":1717},"forensic methodology",{"type":30,"value":1009},{"type":25,"tag":842,"props":1720,"children":1722},{"id":1721},"what-happens-when-property-must-be-blocked",[1723],{"type":30,"value":1724},"What happens when property must be blocked?",{"type":25,"tag":26,"props":1726,"children":1727},{},[1728,1730,1737],{"type":30,"value":1729},"Blocking freezes property; it does not transfer title to the government. ",{"type":25,"tag":43,"props":1731,"children":1734},{"href":1732,"rel":1733},"https:\u002F\u002Fofac.treasury.gov\u002Ffaqs\u002F9",[47],[1735],{"type":30,"value":1736},"OFAC FAQ 9",{"type":30,"value":1738}," states that title remains with the blocked person, while transfers and other exercises of ownership are prohibited without authorization.",{"type":25,"tag":26,"props":1740,"children":1741},{},[1742],{"type":30,"value":1743},"Once a U.S. person determines that it holds virtual currency required to be blocked, FAQ 646 requires denial of access, compliance with holding and reporting requirements, and risk-based controls. OFAC describes blocking each affected wallet or consolidating blocked virtual currency into another controlled wallet as permissible examples for a virtual currency company. It does not require every holder to move every blocked asset into a new wallet. Conversion to fiat currency is not required.",{"type":25,"tag":26,"props":1745,"children":1746},{},[1747,1749,1756],{"type":30,"value":1748},"The initial blocking report is due within ten business days, with annual reports required while the property remains blocked. ",{"type":25,"tag":43,"props":1750,"children":1753},{"href":1751,"rel":1752},"https:\u002F\u002Fwww.ecfr.gov\u002Fcurrent\u002Ftitle-31\u002Fsubtitle-B\u002Fchapter-V\u002Fpart-501\u002Fsubpart-C\u002Fsection-501.603",[47],[1754],{"type":30,"value":1755},"31 C.F.R. § 501.603",{"type":30,"value":1757}," assigns primary responsibility to the holder or other specified person and permits an attorney or agent to file on that person's behalf.",{"type":25,"tag":26,"props":1759,"children":1760},{},[1761,1763,1769],{"type":30,"value":1762},"Regulatory blocking is also different from a stablecoin issuer's technical ability to blacklist tokens at an address. ",{"type":25,"tag":43,"props":1764,"children":1766},{"href":1765},"\u002Fresources\u002Fstablecoins-freeze-option-usdt-usdc",[1767],{"type":30,"value":1768},"Stablecoins and the freeze option",{"type":30,"value":1770}," explains that separate mechanism.",{"type":25,"tag":842,"props":1772,"children":1774},{"id":1773},"how-does-the-framework-apply-to-a-transaction-path",[1775],{"type":30,"value":1776},"How does the framework apply to a transaction path?",{"type":25,"tag":26,"props":1778,"children":1779},{},[1780],{"type":30,"value":1781},"Hypothetical example: A client's wallet receives 12 ETH from Address B in June. In September, a tracing provider reports that Address B received funds two transactions earlier from an address the provider attributes to a newly designated exchange.",{"type":25,"tag":26,"props":1783,"children":1784},{},[1785],{"type":30,"value":1786},"The blockchain may establish the transaction path. The provider's records may establish that it applied the exchange label to the upstream address on a particular date. Neither fact alone establishes that Address B was controlled by the exchange, that the client's June receipt involved property in which the exchange had an interest, that the client knew of the upstream source, or that the September designation was the first restriction applicable to the exchange.",{"type":25,"tag":26,"props":1788,"children":1789},{},[1790],{"type":30,"value":1791},"A defensible analysis would verify the path, timing, any OFAC-published address, the governing authority, any earlier blocking status, ownership or control of Address B, available custodial records, and the client's jurisdictional status. The report should separate on-chain facts, third-party attribution, legal assumptions, and unresolved questions.",{"type":25,"tag":842,"props":1793,"children":1795},{"id":1794},"what-is-the-practical-response-to-an-ofac-related-alert",[1796],{"type":30,"value":1797},"What is the practical response to an OFAC-related alert?",{"type":25,"tag":1063,"props":1799,"children":1800},{},[1801,1811,1821,1831,1841,1851,1861,1871,1881,1891],{"type":25,"tag":198,"props":1802,"children":1803},{},[1804,1809],{"type":25,"tag":392,"props":1805,"children":1806},{},[1807],{"type":30,"value":1808},"Preserve the exact result.",{"type":30,"value":1810}," Save the address, network, list entry, provider output, settings, date, and underlying transactions.",{"type":25,"tag":198,"props":1812,"children":1813},{},[1814,1819],{"type":25,"tag":392,"props":1815,"children":1816},{},[1817],{"type":30,"value":1818},"Validate the address correctly.",{"type":30,"value":1820}," Use the OFAC ID # field and apply the blockchain's canonicalization and checksum rules.",{"type":25,"tag":198,"props":1822,"children":1823},{},[1824,1829],{"type":25,"tag":392,"props":1825,"children":1826},{},[1827],{"type":30,"value":1828},"Identify what matched.",{"type":30,"value":1830}," Distinguish an OFAC-published address from a vendor attribution, ownership conclusion, indirect path, or score.",{"type":25,"tag":198,"props":1832,"children":1833},{},[1834,1839],{"type":25,"tag":392,"props":1835,"children":1836},{},[1837],{"type":30,"value":1838},"Identify the authority.",{"type":30,"value":1840}," Determine the sanctions program, executive order, regulation, and any earlier blocking rule.",{"type":25,"tag":198,"props":1842,"children":1843},{},[1844,1849],{"type":25,"tag":392,"props":1845,"children":1846},{},[1847],{"type":30,"value":1848},"Build the timeline.",{"type":30,"value":1850}," Separate transaction, designation, attribution, discovery, blocking, and reporting dates.",{"type":25,"tag":198,"props":1852,"children":1853},{},[1854,1859],{"type":25,"tag":392,"props":1855,"children":1856},{},[1857],{"type":30,"value":1858},"Determine jurisdiction and actor.",{"type":30,"value":1860}," Identify the relevant person, institution, holder, property, and conduct.",{"type":25,"tag":198,"props":1862,"children":1863},{},[1864,1869],{"type":25,"tag":392,"props":1865,"children":1866},{},[1867],{"type":30,"value":1868},"Investigate ownership and control.",{"type":30,"value":1870}," Apply the 50 Percent Rule to documented ownership, not wallet activity alone.",{"type":25,"tag":198,"props":1872,"children":1873},{},[1874,1879],{"type":25,"tag":392,"props":1875,"children":1876},{},[1877],{"type":30,"value":1878},"Separate fact from inference.",{"type":30,"value":1880}," State what the ledger records, what a provider attributes, and what counsel or the expert concludes.",{"type":25,"tag":198,"props":1882,"children":1883},{},[1884,1889],{"type":25,"tag":392,"props":1885,"children":1886},{},[1887],{"type":30,"value":1888},"Assess blocking and reporting duties promptly.",{"type":30,"value":1890}," Apply the governing authority rather than a generic “sanctions exposure” label.",{"type":25,"tag":198,"props":1892,"children":1893},{},[1894,1899],{"type":25,"tag":392,"props":1895,"children":1896},{},[1897],{"type":30,"value":1898},"Use program-specific legal advice.",{"type":30,"value":1900}," Blockchain expertise reconstructs transactions; it does not replace sanctions counsel.",{"type":25,"tag":842,"props":1902,"children":1903},{"id":378},[1904],{"type":30,"value":381},{"type":25,"tag":64,"props":1906,"children":1908},{"id":1907},"q-does-an-exact-match-to-an-ofac-published-address-prove-who-owned-the-wallet",[1909],{"type":30,"value":1910},"Q: Does an exact match to an OFAC-published address prove who owned the wallet?",{"type":25,"tag":26,"props":1912,"children":1913},{},[1914,1918],{"type":25,"tag":392,"props":1915,"children":1916},{},[1917],{"type":30,"value":396},{"type":30,"value":1919}," No. It proves that OFAC publicly associated that identifier with a listed person as of the relevant entry. Ownership or control on a particular date may require exchange records, account data, device evidence, corporate records, signed messages, or testimony.",{"type":25,"tag":64,"props":1921,"children":1923},{"id":1922},"q-does-a-one-hop-or-indirect-connection-make-the-receiving-wallet-sanctioned",[1924],{"type":30,"value":1925},"Q: Does a one-hop or indirect connection make the receiving wallet sanctioned?",{"type":25,"tag":26,"props":1927,"children":1928},{},[1929,1933],{"type":25,"tag":392,"props":1930,"children":1931},{},[1932],{"type":30,"value":396},{"type":30,"value":1934}," Not automatically. The path establishes transaction history. Counsel must separately analyze attribution, property interests, ownership, jurisdiction, timing, knowledge where relevant, and the governing sanctions authority.",{"type":25,"tag":64,"props":1936,"children":1938},{"id":1937},"q-can-an-entity-be-blocked-even-if-it-is-not-named-on-the-sdn-list",[1939],{"type":30,"value":1940},"Q: Can an entity be blocked even if it is not named on the SDN List?",{"type":25,"tag":26,"props":1942,"children":1943},{},[1944,1948],{"type":25,"tag":392,"props":1945,"children":1946},{},[1947],{"type":30,"value":396},{"type":30,"value":1949}," Yes. An entity directly or indirectly owned 50 percent or more in the aggregate by one or more blocked persons is considered blocked under OFAC's 50 Percent Rule. Control without the required ownership percentage does not automatically produce that result.",{"type":25,"tag":64,"props":1951,"children":1953},{"id":1952},"q-how-long-should-sanctions-related-cryptocurrency-records-be-retained",[1954],{"type":30,"value":1955},"Q: How long should sanctions-related cryptocurrency records be retained?",{"type":25,"tag":26,"props":1957,"children":1958},{},[1959,1963],{"type":25,"tag":392,"props":1960,"children":1961},{},[1962],{"type":30,"value":396},{"type":30,"value":1964}," The current OFAC recordkeeping rule generally requires transaction records for at least ten years. Records of blocked property must be kept while the property remains blocked and for at least ten years after unblocking. Other litigation, regulatory, or contractual preservation duties may require longer retention.",{"type":25,"tag":64,"props":1966,"children":1968},{"id":1967},"q-what-should-counsel-request-from-a-blockchain-analytics-provider",[1969],{"type":30,"value":1970},"Q: What should counsel request from a blockchain analytics provider?",{"type":25,"tag":26,"props":1972,"children":1973},{},[1974,1978],{"type":25,"tag":392,"props":1975,"children":1976},{},[1977],{"type":30,"value":396},{"type":30,"value":1979}," Request the underlying transactions, attribution sources and dates, product and version, ruleset, exposure and hop settings, confidence categories, overrides, validation procedures, limitations, and label history. The goal is to make the reported conclusion testable rather than relying on a score alone.",{"type":25,"tag":26,"props":1981,"children":1982},{},[1983,1985,1989],{"type":30,"value":1984},"Every matter turns on its facts, the applicable sanctions program, and the evidence available. For a case-specific tracing or evidentiary question, ",{"type":25,"tag":43,"props":1986,"children":1987},{"href":451},[1988],{"type":30,"value":1213},{"type":30,"value":1990}," to discuss the record and the scope of analysis needed.",{"title":7,"searchDepth":458,"depth":458,"links":1992},[1993,1994,2001,2002,2003,2004,2005,2006,2007],{"id":1264,"depth":458,"text":1267},{"id":1331,"depth":458,"text":1334,"children":1995},[1996,1997,1998,1999,2000],{"id":1337,"depth":461,"text":1340},{"id":1388,"depth":461,"text":1391},{"id":1412,"depth":461,"text":1415},{"id":1460,"depth":461,"text":1463},{"id":1498,"depth":461,"text":1501},{"id":1522,"depth":458,"text":1525},{"id":1601,"depth":458,"text":1604},{"id":1694,"depth":458,"text":1697},{"id":1721,"depth":458,"text":1724},{"id":1773,"depth":458,"text":1776},{"id":1794,"depth":458,"text":1797},{"id":378,"depth":458,"text":381,"children":2008},[2009,2010,2011,2012,2013],{"id":1907,"depth":461,"text":1910},{"id":1922,"depth":461,"text":1925},{"id":1937,"depth":461,"text":1940},{"id":1952,"depth":461,"text":1955},{"id":1967,"depth":461,"text":1970},"content:articles:23-sanctions-blockchain-tracing-ofac-match-evidence.md","articles\u002F23-sanctions-blockchain-tracing-ofac-match-evidence.md","articles\u002F23-sanctions-blockchain-tracing-ofac-match-evidence",{"_path":2018,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":2019,"description":2020,"slug":2021,"date":2022,"lastUpdated":2022,"author":12,"readingTime":822,"category":14,"tags":2023,"ogImage":2028,"featured":6,"body":2029,"_type":472,"_id":2507,"_source":474,"_file":2508,"_stem":2509,"_extension":477},"\u002Farticles\u002F36-wallet-attribution-rule-104b","Wallet attribution and proposed Rule 104(b): judge vs jury roles","How proposed Rule 104(b) would reshape conditional relevance for wallet attribution evidence: what stays with the judge and what goes to the jury.","wallet-attribution-rule-104b","2026-08-15",[827,2024,2025,2026,2027],"admissibility","federal-rules","conditional-relevance","wallet-attribution","\u002Fog\u002Fwallet-attribution-rule-104b.png",{"type":22,"children":2030,"toc":2476},[2031,2036,2041,2047,2052,2057,2085,2091,2097,2111,2117,2122,2128,2133,2139,2145,2176,2182,2187,2193,2198,2203,2209,2214,2220,2226,2231,2237,2242,2248,2253,2259,2264,2270,2275,2281,2286,2291,2296,2302,2345,2351,2356,2360,2366,2375,2381,2390,2396,2405,2411,2420,2426,2435],{"type":25,"tag":26,"props":2032,"children":2033},{},[2034],{"type":30,"value":2035},"Wallet attribution is rarely a single fact. It is a chain: the address received funds, the address belongs to the defendant, and the defendant controlled the private key on the operative date. The blockchain proves only the first link. The rest rests on off-chain evidence: exchange records, device artifacts, signed messages, or admissions. At every link, the same question arises: is this a preliminary fact the judge decides, or a conditional fact the jury resolves?",{"type":25,"tag":26,"props":2037,"children":2038},{},[2039],{"type":30,"value":2040},"Federal Rule of Evidence 104 governs that line. On August 14, 2026, the Judicial Conference Committee on Rules of Practice and Procedure published proposed amendments to Rule 104 for public comment. The proposal is not law, binds no courtroom, and is projected to take effect December 1, 2028 if adopted and transmitted to Congress, absent congressional action. This article explains the judge-jury allocation under the December 1, 2024 rules in force today, what the proposal alters, and how to build an evidentiary foundation that works under either standard.",{"type":25,"tag":842,"props":2042,"children":2044},{"id":2043},"wallet-attribution-is-a-chain-of-conditional-facts",[2045],{"type":30,"value":2046},"Wallet Attribution Is a Chain of Conditional Facts",{"type":25,"tag":26,"props":2048,"children":2049},{},[2050],{"type":30,"value":2051},"A transaction record confirms that address X transferred value to address Y at a specific block height and timestamp, but does not identify who controlled either address. Attribution maps an address to an individual through external evidence: exchange withdrawal records, seed phrases on seized devices, cryptographic signatures, or party admissions.",{"type":25,"tag":26,"props":2053,"children":2054},{},[2055],{"type":30,"value":2056},"Each supporting fact is conditional. The relevance of an exchange record depends on whether account data connects the address to the defendant. The relevance of a recovery phrase depends on whether it reconstructs the target key. When relevance depends on whether another fact exists, Rule 104(b) governs and the court applies a screening standard rather than a finding standard.",{"type":25,"tag":26,"props":2058,"children":2059},{},[2060,2062,2067,2069,2075,2077,2083],{"type":30,"value":2061},"Related articles address neighboring questions: ",{"type":25,"tag":43,"props":2063,"children":2064},{"href":1404},[2065],{"type":30,"value":2066},"Understanding Wallet Ownership Evidence",{"type":30,"value":2068}," catalogs evidence types, while ",{"type":25,"tag":43,"props":2070,"children":2072},{"href":2071},"\u002Fresources\u002Fblockchain-evidence-admissibility",[2073],{"type":30,"value":2074},"Blockchain Evidence in Litigation",{"type":30,"value":2076}," and ",{"type":25,"tag":43,"props":2078,"children":2080},{"href":2079},"\u002Fresources\u002Fblockchain-evidence-federal-missouri-rules",[2081],{"type":30,"value":2082},"What Makes Blockchain Evidence Admissible Under Federal and Missouri Rules",{"type":30,"value":2084}," examine authentication and expert standards. This article focuses on the division between judge-decided admissibility prerequisites and jury-decided conditional inferences.",{"type":25,"tag":842,"props":2086,"children":2088},{"id":2087},"current-rule-104-the-baseline-you-argue-today",[2089],{"type":30,"value":2090},"Current Rule 104: The Baseline You Argue Today",{"type":25,"tag":64,"props":2092,"children":2094},{"id":2093},"rule-104a-judge-decided-preliminary-questions",[2095],{"type":30,"value":2096},"Rule 104(a): Judge-decided preliminary questions",{"type":25,"tag":26,"props":2098,"children":2099},{},[2100,2102,2109],{"type":30,"value":2101},"Under the ",{"type":25,"tag":43,"props":2103,"children":2106},{"href":2104,"rel":2105},"https:\u002F\u002Fwww.uscourts.gov\u002Fsites\u002Fdefault\u002Ffiles\u002F2025-02\u002Ffederal-rules-of-evidence-dec-1-2024.pdf",[47],[2107],{"type":30,"value":2108},"Federal Rules of Evidence effective December 1, 2024",{"type":30,"value":2110},", Rule 104(a) requires the court to decide preliminary questions of qualification, privilege, or admissibility, unbound by evidence rules except privilege. Bourjaily v. United States, 483 U.S. 171, 175 (1987), established that preliminary facts must be proved by a preponderance of the evidence. In attribution disputes, judge-decided matters include expert qualification, Rule 702 reliability, hearsay, privilege, and Rule 902 certification compliance.",{"type":25,"tag":64,"props":2112,"children":2114},{"id":2113},"rule-104b-conditional-facts-that-go-to-the-jury",[2115],{"type":30,"value":2116},"Rule 104(b): Conditional facts that go to the jury",{"type":25,"tag":26,"props":2118,"children":2119},{},[2120],{"type":30,"value":2121},"Current Rule 104(b) provides: \"When the relevance of evidence depends on whether a fact exists, proof must be introduced sufficient to support a finding that the fact does exist. The court may admit the proposed evidence on the condition that the proof be introduced later.\" Under Huddleston v. United States, 485 U.S. 681, 687-690 (1988), the court does not weigh credibility or find facts; it decides only whether the jury could reasonably find the conditional fact by a preponderance of the evidence. Rule 104(e) preserves the jury's role regarding weight, while Rule 104(d) protects an accused testifying on preliminary matters from broader cross-examination.",{"type":25,"tag":64,"props":2123,"children":2125},{"id":2124},"where-rule-702-gatekeeping-fits",[2126],{"type":30,"value":2127},"Where Rule 702 gatekeeping fits",{"type":25,"tag":26,"props":2129,"children":2130},{},[2131],{"type":30,"value":2132},"Do not confuse Rule 104(b) with Rule 702 gatekeeping. Under Rule 104(a), the judge determines whether an expert's opinion rests on reliable methodology, codified as a preponderance standard in Rule 702 in 2023. Under Rule 104(b), contested predicate facts belong to the jury. An expert may explain transaction flows and clustering heuristics; whether the defendant controlled the wallet is for the jury unless no reasonable jury could so find.",{"type":25,"tag":842,"props":2134,"children":2136},{"id":2135},"what-the-august-2026-proposal-would-change",[2137],{"type":30,"value":2138},"What the August 2026 Proposal Would Change",{"type":25,"tag":64,"props":2140,"children":2142},{"id":2141},"status-proposed-not-law",[2143],{"type":30,"value":2144},"Status: proposed, not law",{"type":25,"tag":26,"props":2146,"children":2147},{},[2148,2150,2157,2158,2165,2167,2174],{"type":30,"value":2149},"The ",{"type":25,"tag":43,"props":2151,"children":2154},{"href":2152,"rel":2153},"https:\u002F\u002Fwww.uscourts.gov\u002Fforms-rules\u002Fproposed-amendments-published-public-comment",[47],[2155],{"type":30,"value":2156},"publication notice",{"type":30,"value":2076},{"type":25,"tag":43,"props":2159,"children":2162},{"href":2160,"rel":2161},"https:\u002F\u002Fwww.uscourts.gov\u002Fsites\u002Fdefault\u002Ffiles\u002Fdocument\u002Fpreliminary_draft_of_proposed_amendments_-_august_2026.pdf",[47],[2163],{"type":30,"value":2164},"Preliminary Draft of Proposed Amendments, dated August 2026",{"type":30,"value":2166},", set the timeline. Following late-2025 discussions, the Advisory Committee voted unanimously on May 7, 2026 to recommend publication, transmitting its ",{"type":25,"tag":43,"props":2168,"children":2171},{"href":2169,"rel":2170},"https:\u002F\u002Fwww.uscourts.gov\u002Fsites\u002Fdefault\u002Ffiles\u002Fdocument\u002Fadvisory_committee_on_evidence_rules_may_2026.pdf",[47],[2172],{"type":30,"value":2173},"May 17, 2026 report",{"type":30,"value":2175}," to the Standing Committee. The preliminary draft appeared on August 14, 2026, with comments due February 15, 2027. The package covers Rule 104 and Rule 902(1) (tribal public records), carrying a projected effective date of December 1, 2028 under the Rules Enabling Act.",{"type":25,"tag":64,"props":2177,"children":2179},{"id":2178},"proposed-104a-preponderance-in-the-text",[2180],{"type":30,"value":2181},"Proposed 104(a): preponderance in the text",{"type":25,"tag":26,"props":2183,"children":2184},{},[2185],{"type":30,"value":2186},"The proposal adds an explicit sentence to Rule 104(a): \"Unless these rules provide otherwise, the proponent must establish the existence of a preliminary fact by a preponderance of the evidence.\" That sentence codifies Bourjaily in the rule text, paralleling the 2023 amendment to Rule 702.",{"type":25,"tag":64,"props":2188,"children":2190},{"id":2189},"proposed-104b-conditional-relevance-goes-away",[2191],{"type":30,"value":2192},"Proposed 104(b): conditional relevance goes away",{"type":25,"tag":26,"props":2194,"children":2195},{},[2196],{"type":30,"value":2197},"The proposal deletes the \"proof sufficient to support a finding\" phrasing. The operative text reads: \"To establish that evidence is relevant, the proponent must demonstrate to the court that the trier of fact could reasonably find that the requirements of Rule 401 have been met.\" The court may consider the evidence itself, other evidence, and common knowledge and experience, and may admit the proposed evidence on the condition that further proof be introduced later.",{"type":25,"tag":26,"props":2199,"children":2200},{},[2201],{"type":30,"value":2202},"The Advisory Committee's May 17, 2026 report explains that the amendment eliminates the unhelpful concept of conditional relevance and the confusing phrase \"proof sufficient to support a finding.\" The committee note emphasizes that the revised standard is substantively identical to \"sufficient to support a finding\" under Huddleston, and that judicial screening may draw on common knowledge, contrasting a rural jury familiar with fertilizer hazards with an urban jury requiring proof. Citing Ronald Allen, The Myth of Conditional Relevance, 25 Loyola L. Rev. 871, 879 (1992), the note observes that because all relevance relies on intermediate premises, separating conditional relevance as a distinct category is analytically unsound.",{"type":25,"tag":64,"props":2204,"children":2206},{"id":2205},"what-does-not-change",[2207],{"type":30,"value":2208},"What does not change",{"type":25,"tag":26,"props":2210,"children":2211},{},[2212],{"type":30,"value":2213},"Conditional admission remains available under Rule 104(a) and (b). The package leaves Rule 901 authentication, Rule 902(13) and (14) electronic certifications, and Rule 702 expert standards intact. The division of responsibility persists: the judge screens threshold relevance, while the jury determines whether the defendant controlled the wallet.",{"type":25,"tag":842,"props":2215,"children":2217},{"id":2216},"the-judge-and-jury-map-for-attribution-evidence",[2218],{"type":30,"value":2219},"The Judge and Jury Map for Attribution Evidence",{"type":25,"tag":64,"props":2221,"children":2223},{"id":2222},"exchange-records",[2224],{"type":30,"value":2225},"Exchange records",{"type":25,"tag":26,"props":2227,"children":2228},{},[2229],{"type":30,"value":2230},"Exchange records connect account holders to addresses. Under Rule 901, the court screens whether evidence is sufficient to support a finding of authenticity, a jury-side standard. A qualifying Rule 902(13) certificate lets the proponent skip live authenticating testimony once the judge finds the certification requirements met under Rule 104(a); the opponent may still contest authenticity to the jury. Whether the verified account holder executed the withdrawal is a further Rule 104(b) question.",{"type":25,"tag":64,"props":2232,"children":2234},{"id":2233},"device-artifacts",[2235],{"type":30,"value":2236},"Device artifacts",{"type":25,"tag":26,"props":2238,"children":2239},{},[2240],{"type":30,"value":2241},"Forensic extractions link seized hardware to individuals. The judge screens extraction authenticity under Rule 901 or evaluates a Rule 902(14) data certificate under Rule 104(a). Whether the defendant possessed the device during operative periods, whether recovery phrases reconstruct target keys, and whether device access equated to control are conditional facts for the jury under Rule 104(b).",{"type":25,"tag":64,"props":2243,"children":2245},{"id":2244},"signed-messages",[2246],{"type":30,"value":2247},"Signed messages",{"type":25,"tag":26,"props":2249,"children":2250},{},[2251],{"type":30,"value":2252},"Cryptographic signatures establish key control. Under Rule 901, the judge screens whether the proof is sufficient to support a finding that the signature was generated by the target key. Genuineness is for the jury. Whether key control at signing also proves control on the contested transfer dates is a further Rule 104(b) question.",{"type":25,"tag":64,"props":2254,"children":2256},{"id":2255},"admissions",[2257],{"type":30,"value":2258},"Admissions",{"type":25,"tag":26,"props":2260,"children":2261},{},[2262],{"type":30,"value":2263},"A party's statements admitting wallet control bypass technical tracing. The judge resolves admissibility under Rule 104(a) by a preponderance of the evidence, including qualification under Rule 801(d)(2). The jury assesses the credibility, weight, and context of the admission.",{"type":25,"tag":64,"props":2265,"children":2267},{"id":2266},"transaction-patterns",[2268],{"type":30,"value":2269},"Transaction patterns",{"type":25,"tag":26,"props":2271,"children":2272},{},[2273],{"type":30,"value":2274},"Clustering heuristics represent circumstantial attribution. The judge evaluates expert methodology under Rule 702 and Rule 104(a) for reliability. Whether clustered addresses share common control, and whether that controller is the defendant, are conditional relevance issues for the jury under Rule 104(b).",{"type":25,"tag":842,"props":2276,"children":2278},{"id":2277},"a-worked-hypothetical-the-withdrawal-that-names-the-defendant",[2279],{"type":30,"value":2280},"A Worked Hypothetical: The Withdrawal That Names the Defendant",{"type":25,"tag":26,"props":2282,"children":2283},{},[2284],{"type":30,"value":2285},"Hypothetical example: Defendant is sued for diverting corporate funds. Plaintiff's expert links address 1A2b...c3 to $250,000 withdrawn from Defendant's verified account at Exchange Co., tracing three transfers to a hardware wallet whose seed phrase was found in a password manager on Defendant's phone. Defendant argues KYC records do not prove who initiated withdrawals, clustering can misattribute addresses, and family members accessed the phone.",{"type":25,"tag":26,"props":2287,"children":2288},{},[2289],{"type":30,"value":2290},"The court admits exchange records without live testimony based on a Rule 902(13) certification, an admissibility question resolved under Rule 104(a). Threshold authenticity of the phone extraction under Rule 901 survives judicial screening because proof supports a reasonable finding of authenticity. The clustering opinion survives Rule 702 scrutiny because the methodology is validated, an issue resolved by a preponderance under Rule 104(a). The attribution links are conditional facts under Rule 104(b): the court admits each because a reasonable jury could find control, instructing under Rule 105: \"You may consider the exchange records and tracing evidence only for the purpose of deciding whether Defendant controlled the addresses. If you find he did not, you must disregard them on that question.\"",{"type":25,"tag":26,"props":2292,"children":2293},{},[2294],{"type":30,"value":2295},"Under the proposed amendment, the substantive result is identical. The revision removes the conditional-relevance label and ties the screening test to Rule 401. Under either version, links no reasonable jury could credit are excluded, making foundation decisive regardless of terminology.",{"type":25,"tag":842,"props":2297,"children":2299},{"id":2298},"foundation-checklist-for-attribution-evidence",[2300],{"type":30,"value":2301},"Foundation Checklist for Attribution Evidence",{"type":25,"tag":1063,"props":2303,"children":2304},{},[2305,2310,2315,2320,2325,2330,2335,2340],{"type":25,"tag":198,"props":2306,"children":2307},{},[2308],{"type":30,"value":2309},"Map the chain: categorize each link as a Rule 104(a) preliminary question, a Rule 104(b) conditional fact, a Rule 901 authenticity screen, or a Rule 702 methodology review.",{"type":25,"tag":198,"props":2311,"children":2312},{},[2313],{"type":30,"value":2314},"Offer conditional links subject to connecting proof under Rule 104(b), identifying evidence supplying the predicate.",{"type":25,"tag":198,"props":2316,"children":2317},{},[2318],{"type":30,"value":2319},"Authenticate electronic records efficiently. Certifications under Rule 902(13) and (14) satisfy threshold authenticity without live testimony once the court confirms compliance under Rule 104(a).",{"type":25,"tag":198,"props":2321,"children":2322},{},[2323],{"type":30,"value":2324},"Restrict expert testimony to forensic observations. Testifying that records associate an address with an account survives scrutiny; whether the defendant controlled the wallet is a Rule 104(b) question for the jury.",{"type":25,"tag":198,"props":2326,"children":2327},{},[2328],{"type":30,"value":2329},"Request limiting instructions under Rule 105 when conditional evidence is received, defining the restricted purpose on the record.",{"type":25,"tag":198,"props":2331,"children":2332},{},[2333],{"type":30,"value":2334},"Anticipate sufficiency challenges on each link, especially temporal gaps between exchange transactions, device seizures, and disputed transfers.",{"type":25,"tag":198,"props":2336,"children":2337},{},[2338],{"type":30,"value":2339},"Protect criminal defendants under Rule 104(d), avoiding cross-examination beyond preliminary matters when testifying on foundation.",{"type":25,"tag":198,"props":2341,"children":2342},{},[2343],{"type":30,"value":2344},"Monitor the rulemaking docket. Argue the December 1, 2024 text in active cases while tracking the proposed amendment toward its projected December 1, 2028 effective date.",{"type":25,"tag":842,"props":2346,"children":2348},{"id":2347},"limitations",[2349],{"type":30,"value":2350},"Limitations",{"type":25,"tag":26,"props":2352,"children":2353},{},[2354],{"type":30,"value":2355},"This article addresses evidentiary screening standards and judge-jury allocations under the Federal Rules of Evidence; it does not evaluate ultimate burdens of proof or displace comprehensive hearsay, authentication, and Daubert analyses. Proposed amendments remain subject to revision during public comment. State courts, including Missouri courts applying rules modeled on federal practice, are not bound by federal amendments and must be analyzed under local authority. Case outcomes turn on specific records and judicial practices. Nothing here constitutes legal advice.",{"type":25,"tag":842,"props":2357,"children":2358},{"id":378},[2359],{"type":30,"value":381},{"type":25,"tag":64,"props":2361,"children":2363},{"id":2362},"q-if-rule-104b-is-amended-will-the-jury-decide-wallet-ownership",[2364],{"type":30,"value":2365},"Q: If Rule 104(b) is amended, will the jury decide wallet ownership?",{"type":25,"tag":26,"props":2367,"children":2368},{},[2369,2373],{"type":25,"tag":392,"props":2370,"children":2371},{},[2372],{"type":30,"value":396},{"type":30,"value":2374}," Yes. Under both current Rule 104(b) and the proposed revision, the judge decides only whether a reasonable jury could find the conditional fact, such as key control. The proposal eliminates conditional-relevance terminology, but the Advisory Committee note confirms the revised standard is substantively identical under Huddleston. The judge-jury allocation remains unchanged.",{"type":25,"tag":64,"props":2376,"children":2378},{"id":2377},"q-what-is-the-difference-between-rule-104a-and-rule-702-for-blockchain-experts",[2379],{"type":30,"value":2380},"Q: What is the difference between Rule 104(a) and Rule 702 for blockchain experts?",{"type":25,"tag":26,"props":2382,"children":2383},{},[2384,2388],{"type":25,"tag":392,"props":2385,"children":2386},{},[2387],{"type":30,"value":396},{"type":30,"value":2389}," Rule 104(a) provides the general standard for preliminary questions of admissibility, qualification, and privilege under a preponderance standard. Rule 702 governs expert testimony specifically, requiring proof of reliability by a preponderance. Expert qualifications and methodology are judge questions under Rules 104(a) and 702; whether the defendant controlled the wallet is a conditional fact for the jury under Rule 104(b).",{"type":25,"tag":64,"props":2391,"children":2393},{"id":2392},"q-when-will-the-proposed-rule-104-amendment-take-effect",[2394],{"type":30,"value":2395},"Q: When will the proposed Rule 104 amendment take effect?",{"type":25,"tag":26,"props":2397,"children":2398},{},[2399,2403],{"type":25,"tag":392,"props":2400,"children":2401},{},[2402],{"type":30,"value":396},{"type":30,"value":2404}," The amendment remains a proposal open for comment through February 15, 2027. If the Standing Committee, the Judicial Conference, and the Supreme Court approve it and it is transmitted to Congress by May 1, 2028, it is projected to take effect December 1, 2028, absent congressional action. Federal practice remains governed by the December 1, 2024 rules.",{"type":25,"tag":64,"props":2406,"children":2408},{"id":2407},"q-does-the-proposal-change-how-blockchain-records-are-authenticated",[2409],{"type":30,"value":2410},"Q: Does the proposal change how blockchain records are authenticated?",{"type":25,"tag":26,"props":2412,"children":2413},{},[2414,2418],{"type":25,"tag":392,"props":2415,"children":2416},{},[2417],{"type":30,"value":396},{"type":30,"value":2419}," No. The August 2026 preliminary draft addresses Rule 104 and Rule 902(1). It leaves Rule 901 authentication, Rule 902(13) and (14) electronic certifications, and Rule 702 intact. Rule 901 continues to require evidence sufficient to support a finding of authenticity, which the judge screens under the 104(b) standard before the jury evaluates genuineness.",{"type":25,"tag":64,"props":2421,"children":2423},{"id":2422},"q-what-should-litigators-do-now-when-preparing-wallet-attribution-evidence",[2424],{"type":30,"value":2425},"Q: What should litigators do now when preparing wallet attribution evidence?",{"type":25,"tag":26,"props":2427,"children":2428},{},[2429,2433],{"type":25,"tag":392,"props":2430,"children":2431},{},[2432],{"type":30,"value":396},{"type":30,"value":2434}," Litigators should build foundations under current rules while structuring chains to satisfy either standard: map each link, separate Rule 104(a) legal determinations from Rule 104(b) jury questions, secure Rule 902(13) and (14) certifications for digital records, and confine expert opinions to forensic findings rather than ownership conclusions.",{"type":25,"tag":26,"props":2436,"children":2437},{},[2438,2440,2445,2447,2452,2454,2460,2462,2467,2469,2474],{"type":30,"value":2439},"Every case turns on its own evidentiary chain, and consultation on specific records is essential. We provide ",{"type":25,"tag":43,"props":2441,"children":2442},{"href":1490},[2443],{"type":30,"value":2444},"blockchain tracing",{"type":30,"value":2446},", ",{"type":25,"tag":43,"props":2448,"children":2449},{"href":336},[2450],{"type":30,"value":2451},"evidence review",{"type":30,"value":2453},", and ",{"type":25,"tag":43,"props":2455,"children":2457},{"href":2456},"\u002Fservices#expert-witness",[2458],{"type":30,"value":2459},"expert witness services",{"type":30,"value":2461}," for complex digital asset litigation. Review ",{"type":25,"tag":43,"props":2463,"children":2464},{"href":344},[2465],{"type":30,"value":2466},"our methodology",{"type":30,"value":2468}," to learn how analyses are documented for courtroom presentation, or ",{"type":25,"tag":43,"props":2470,"children":2471},{"href":451},[2472],{"type":30,"value":2473},"contact us",{"type":30,"value":2475}," to discuss a pending matter.",{"title":7,"searchDepth":458,"depth":458,"links":2477},[2478,2479,2484,2490,2497,2498,2499,2500],{"id":2043,"depth":458,"text":2046},{"id":2087,"depth":458,"text":2090,"children":2480},[2481,2482,2483],{"id":2093,"depth":461,"text":2096},{"id":2113,"depth":461,"text":2116},{"id":2124,"depth":461,"text":2127},{"id":2135,"depth":458,"text":2138,"children":2485},[2486,2487,2488,2489],{"id":2141,"depth":461,"text":2144},{"id":2178,"depth":461,"text":2181},{"id":2189,"depth":461,"text":2192},{"id":2205,"depth":461,"text":2208},{"id":2216,"depth":458,"text":2219,"children":2491},[2492,2493,2494,2495,2496],{"id":2222,"depth":461,"text":2225},{"id":2233,"depth":461,"text":2236},{"id":2244,"depth":461,"text":2247},{"id":2255,"depth":461,"text":2258},{"id":2266,"depth":461,"text":2269},{"id":2277,"depth":458,"text":2280},{"id":2298,"depth":458,"text":2301},{"id":2347,"depth":458,"text":2350},{"id":378,"depth":458,"text":381,"children":2501},[2502,2503,2504,2505,2506],{"id":2362,"depth":461,"text":2365},{"id":2377,"depth":461,"text":2380},{"id":2392,"depth":461,"text":2395},{"id":2407,"depth":461,"text":2410},{"id":2422,"depth":461,"text":2425},"content:articles:36-wallet-attribution-rule-104b.md","articles\u002F36-wallet-attribution-rule-104b.md","articles\u002F36-wallet-attribution-rule-104b",1790289956998]