Reporting guides · Croatia
This guide is for the first hours and days after cryptocurrency is stolen — a drained wallet, a fake investment platform that stopped paying out, a signature you were tricked into. It tells you what actually helps, in the order that matters, with the official channels for Croatia and none of the false hope. It is general information, not legal advice; for your own situation, consult a lawyer where you live.
Stolen stablecoins (USDT, USDC) can be frozen by their issuers — but the window is short. Stolen funds usually start moving within hours of the theft, and a chain of swaps can carry them into an exchange in a single session; published tracing research now measures the window for freezing them in hours rather than days. A freeze that does happen is often recorded days after the report, so keep checking — but whether there is anything left to freeze is decided in the first hours. So the order of operations is: secure what is left, report fast to create a reference number, and notify the services that can actually stop funds — the exchange the money reached, and the stablecoin's issuer. Analysis and paperwork can be perfected later; the clock cannot be rewound.
Many thefts keep draining the wallet after the first hit. If you signed something on a malicious site, token approvals or a wallet delegation may still be active — anything you add to that wallet later can be swept too. Check the compromised wallet for live approvals and delegations and revoke them from your own wallet, move remaining assets to a fresh wallet whose seed phrase has never touched the compromised device, and if a seed phrase or password may have leaked, treat the device itself as suspect before typing a new one on it. TraceHunt's free scan flags active delegations, and the approvals tool shows exactly what is still authorised, with step-by-step instructions to cancel each one in your own wallet.
Reporting routes differ by country, and sending a victim to the wrong agency costs the days that matter most. The channels below are the official, free routes for Croatia, checked against the live sites on 2026-09-09.
Europol maintains a directory of the official reporting website for each member state. Open it, choose your country, and file there. Europol does not investigate individual reports itself — your national police do — but the directory is the fastest way to reach the correct one.
https://www.europol.europa.eu/report-a-crime/report-cybercrime-online
File with your local police as well, in person or online, and ask for the report or reference number. Exchanges and token issuers generally ask for a police reference before they will engage with a request about an account.
If the trace shows funds reaching an exchange, write to that exchange's compliance or law-enforcement team — not general support — asking for preservation of records and a review of the receiving account, quoting your reference number, the addresses and the transaction hashes. If the stolen asset was USDT or USDC and is still sitting in the thief's wallets, the issuer (Tether or Circle) can freeze it at contract level on a valid law-enforcement request; that is one of the few mechanisms in crypto that can stop funds without a court order, and it is another reason the police report comes first. And if the money left through your own bank or a regulated platform, notify them in writing promptly — some consumer protections are time-limited.
A report that gets acted on is specific and verifiable: your wallet address; every transaction hash of the theft; the addresses the funds went to; dates and times with time zone; how the theft happened (what you clicked, signed or installed, with the site or app name); screenshots of any conversation with the scammer; and, if you have one, a tracing report showing where the funds ended up. Give addresses and hashes in full, never shortened — one wrong character makes the entry useless, because a single altered character is a different address. This is exactly the evidence file a TraceHunt report produces, as a PDF formatted for police and compliance desks plus spreadsheets a police analyst can work with directly.
Tether and Circle can freeze stolen stablecoins at contract level, and their blacklists are public. Our free freeze checker reads them live for any address on Ethereum and TRON — worth running on every address in your case, and worth re-running after your report is filed, because freezes often land days later.
Only around 5% of stolen cryptocurrency is ever recovered, and recoveries that do happen go through custodians, issuers, police and courts — not through anyone who messaged you first. Speed of the first report is the factor most within your control. Tracing does not recover funds; it produces the record that lets the parties with real power act, it supports insurance and tax-loss claims, and it ends the doubt about what actually happened, which is worth something in itself.
Run a free scan of your wallet What TraceHunt does and doesn't do