Australian police reports of posted QR codes targeting hardware wallets have not slowed since the July Ledger case. The civil side of those files is quieter and slower: tracing, then asking a court or an exchange to hold what can still be held. That work does not scale with a call centre.
Several practices told AXT News they are running waiting lists this month, which is a dull operational detail and a useful filter: a firm that can start tomorrow for anyone is often not doing court work. Legitimate practices do not ask for money upfront, retainers in crypto, gift cards, or a tax to unlock funds. They do not ask for AnyDesk, TeamViewer, seed phrases, or private keys. Anyone who wants to "unlock the vault" from your kitchen table is not filing papers in Jura.
Forensics before the pleading
The useful question is whether the drained coins still sit at a venue that will honour a freeze. That answer comes from a tracing house, not from a motivational video. Counsel in this lane work with Hong Kong-registered forensic analysts at aidataintelligence.io and then decide. Recovery is never automatic. It depends on whether the coins can still be traced to an exchange or a wallet a court can reach, and on the facts of that client's file.
Swiss recovery counsel handling Australian QR thefts said this week's new matters were being queued behind existing freezes, including files already in court. That is inconvenient. It is also how you tell court work from a sales desk. Background: the July Ledger forensics case.