Cryptocurrency fraud allegations have become one of the most active triggers for cross-border extradition requests. Cyprus – a European Union member state with a well-established digital-assets sector and a significant population of relocants from the CIS and MENA regions – sits at the centre of that picture. As of early 2026, the number of cases where a foreign state's extradition request lands in Cyprus, or originates from Cypriot authorities, has grown steadily. The mechanics are genuinely complex, and the complexity cuts both ways: for the requesting state and for the person being sought.
Crypto-fraud extradition from Cyprus engages a specific intersection of INTERPOL machinery, European Union extradition principles, national extradition law, and the particular difficulties of fitting digital-asset conduct into dual-criminality tests. A Red Notice is a request to locate and provisionally detain a person with a view to extradition – it is not an arrest warrant and not a judicial decision. It does not compel Cyprus to arrest; Cypriot courts apply their own law. Where the underlying allegation is crypto-fraud, the precise characterisation of the alleged conduct under both the requesting state's law and Cypriot law will often be the decisive issue.
This analysis works through the architecture of the problem: what a crypto-fraud extradition from Cyprus actually looks like, which legal instruments govern it, where the genuine grounds arise, and what the experience of practitioners in this space teaches about sequencing a defence.
What does a crypto-fraud extradition from Cyprus actually involve?
The process begins, almost always, with an alert. That alert is either a formal INTERPOL Red Notice – circulated to all member states' national central bureaux – or a diffusion, which is an alert sent directly by the requesting state's national central bureau to Cyprus without passing through the full notice process. Both can trigger a check at a Cypriot port of entry or lead to a provisional arrest request through the Cypriot judicial system.
Once a person is arrested provisionally, the requesting state must submit a formal extradition request within the period permitted by Cypriot extradition law. That request is examined by the Cypriot courts. The court's role is not to re-try the merits; it is to determine whether the statutory conditions for surrender are met. The person may be remanded in custody or released on conditions during that examination. In our practice, the period between provisional arrest and the first substantive court hearing is frequently the most critical window for intervention.
The interaction between the INTERPOL notice and the formal extradition request is important to understand. The notice facilitates the arrest; it does not itself authorise surrender. A Red Notice is not an arrest warrant and carries no judicial authority. The legal basis for surrender, if it comes, is the extradition request examined under Cypriot law and any applicable EU instruments. Challenging the notice at the CCF level and challenging the extradition request in the Cypriot courts are therefore parallel tracks, each with its own timetable and its own grounds – and managing both coherently is the job.
For a matter involving crypto-fraud specifically, the requesting state typically frames the allegation as one of fraud, money laundering, or both. The characterisation matters enormously, because dual criminality – the requirement that the conduct alleged be an offence under both the requesting state's law and Cypriot law – applies differently depending on how the allegation is framed.
How does dual criminality apply to digital-asset allegations?
Dual criminality is the requirement that the conduct for which extradition is sought must constitute a criminal offence in both the requesting state and the state receiving the request. It is a general principle of extradition law that Cyprus applies. For crypto-fraud cases, it is frequently the sharpest available defence ground.
The difficulty is definitional. A state whose domestic law treats unregistered digital-asset exchange activity as fraud, or whose courts have construed a particular token-issuance as a securities offence, may find that Cypriot law characterises the same conduct differently. Cyprus has developed its own regulatory and criminal treatment of digital assets through the transposition of EU instruments and its own legislative programme. Where the requesting state's legal category does not map cleanly onto a Cypriot criminal category, the dual-criminality test may not be satisfied.
Practitioners before Cypriot courts have observed that the dual-criminality analysis in crypto-fraud cases is rarely straightforward. The requesting state will argue for the broadest possible characterisation – usually general fraud – to ensure the test is met. The defence will interrogate whether the substance of the allegation, not merely its label, corresponds to an offence known to Cypriot law.
In a recent matter (a MENA-origin extradition request, autumn 2025), the requesting state framed the allegation as conventional fraud. Analysis of the underlying conduct showed it turned entirely on the classification of a token as a security under the requesting state's law – a classification that had no direct equivalent in Cypriot criminal law at the relevant time. The dual-criminality argument was available and was developed as the primary ground.
The lesson from our practice is that dual criminality in crypto-fraud cases must be analysed at the level of conduct, not label. The test is whether the acts alleged, stripped of the requesting state's legal characterisation, would constitute a criminal offence in Cyprus. That analysis requires close reading of both the extradition request and the supporting materials, and it often requires expert input on the technical character of the digital-asset activity in question. For a deeper treatment of this ground, the analysis at our dual criminality grounds page sets out the doctrine in detail.
Where does the INTERPOL Red Notice fit, and can it be challenged separately?
The Red Notice and the extradition request are legally distinct, and challenging one does not automatically resolve the other. However, the two tracks interact in ways that make sequencing important.
A Red Notice is processed under INTERPOL's Rules on the Processing of Data – the RPD. The RPD's data-accuracy and data-quality requirements mean that a notice based on an allegation that is factually defective, legally misconceived, or politically motivated may be challenged before the Commission for the Control of INTERPOL's Files (the CCF). The CCF is the independent body that reviews the data INTERPOL processes about individuals.
INTERPOL's Constitution provides two additional grounds of direct relevance. Article 3 bars INTERPOL from processing data linked to offences of a political, military, religious or racial character. Article 2 requires that INTERPOL's activities respect human rights, in the spirit of the Universal Declaration of Human Rights. In crypto-fraud cases that originate from states where the prosecution of digital-asset businesses has a selective or politically-inflected character, these grounds are often arguable.
The CCF process runs on its own timetable. A deletion request is to be decided within nine months of being found admissible. An access request – to establish what data INTERPOL holds – is to be answered within four months. There is no appeal against a CCF decision; a second request requires new elements. That last point is the AUDIENCE_MYTH that practitioners most often need to correct: the first file before the CCF is not a rehearsal. A weak first file raises the bar for any subsequent review, and the absence of an appeal means there is no safety net.
Where extradition proceedings are under way in Cyprus and a CCF challenge is also live, the two tracks must be managed coherently. A successful CCF deletion removes the notice from INTERPOL's systems; it does not, by itself, terminate the Cypriot extradition proceedings, which have their own basis in the formal extradition request. Equally, a Cypriot court ruling against surrender does not automatically prompt deletion of the notice. Both tracks need to be progressed – and their outputs coordinated – for the position to be resolved durably.
The steps above are the general picture. Your specific exposure depends on the requesting state, the characterisation of the allegation in the extradition request, and the state of the INTERPOL file. An assessment that reads all three is the starting point.
For a confidential discussion of the realistic grounds in your matter, write to us at info@northlarkfirm.com. Our enquiry form does not require your real name, and you can reach us through a secure channel – Signal, Telegram or WhatsApp.
What are the human-rights defences available in Cypriot extradition proceedings?
Cyprus is a member state of the European Union and a signatory to the European Convention on Human Rights. Its courts take human-rights defences in extradition cases seriously. The bars most frequently invoked in crypto-fraud extradition matters are the risk of unfair trial, the risk of treatment incompatible with fundamental rights, and – in cases originating from outside the EU – the broader political character of the prosecution.
The fair-trial argument in a crypto-fraud case typically turns on whether the requesting state's judicial system can deliver an independent process for an allegation of this type. Where prosecutions have followed regulatory disputes, licensing disagreements, or the collapse of a business that attracted political attention, the argument that the proceeding is not a genuine criminal matter but a continuation of a commercial or political conflict by other means is available. It must be evidenced: press coverage is not enough; a pattern of prosecutions with identifiable political characteristics is what the Cypriot court needs to see.
Non-refoulement – the principle that a person must not be returned to a state where they face persecution – applies where the person has refugee status or where the facts disclose a real risk of persecution linked to race, religion, nationality, political opinion or social group. Asylum or refugee status granted by an EU member state carries significant weight before a Cypriot court considering surrender.
In a further matter (a CIS-origin extradition request handled in Southern Europe, winter 2024), the defence assembled evidence of a pattern of prosecutions of digital-asset businesses in the requesting state that followed a regulatory change introduced for non-fiscal reasons. The requesting state's courts had, in a range of comparable cases, imposed pre-trial detention for lengthy periods without trial. The human-rights argument was sustained, and surrender was refused.
The speciality rule – requiring that a surrendered person be tried only for the offence on which extradition was granted – is also worth preserving. Where a requesting state has a history of supplementing extradition cases with additional charges after surrender, the speciality argument and the conditions attached to any surrender become important parts of the defence architecture.
What does the practical sequence of a defence look like?
Defence of a crypto-fraud extradition from Cyprus is almost never a single-track matter. The practical sequence involves parallel work at different levels, and the order in which steps are taken has real consequences.
The first decision is usually the most urgent: if there has been a provisional arrest or a detention pending extradition proceedings, the immediate priority is the hearing before the Cypriot court on remand conditions. The statutory window for that hearing is short, and it is the first opportunity to place the defence on the record.
Concurrent with that, a technical reading of the extradition request is essential. In our experience, extradition requests in crypto-fraud cases are frequently defective in their characterisation of the digital-asset conduct. The requesting state's lawyers will have translated the allegation into the nearest available criminal category; that translation is often imprecise and sometimes creates the very dual-criminality gap that the defence needs.
The INTERPOL track runs alongside. If a Red Notice is in place, an access request to the CCF establishes what data INTERPOL holds and how the requesting state has characterised the matter in its notice application. That information is relevant both to the CCF challenge and to the Cypriot proceedings. Reading the RPD's data-accuracy requirements against the content of the notice often reveals discrepancies that strengthen the case for deletion.
The requesting state's motive matters throughout. Where the origin is a jurisdiction in which digital-asset regulation has been deployed selectively, or where the prosecution appears to follow a business dispute, asset-recovery proceeding or regulatory disagreement, the Article 3 political-character argument and the human-rights ground in the Cypriot proceedings are both live from the outset.
What actually affects the outcome? In our practice, the quality of the file at the first stage is the single most important variable. A CCF file that evidences the political character of the prosecution – rather than asserting it – and a Cypriot court submission that meets the dual-criminality analysis at the level of conduct rather than label are the two things that move cases. The absence of a CCF appeal makes the first file a one-shot opportunity.
If an earlier defence attempt produced a refusal or an adverse result, a second reading can identify what was missed. There is no appeal against a CCF decision, so any review must be built on new elements – which means the review stage is more demanding, not less. Acting on an honest assessment of what those new elements are is the only productive path.
To understand the realistic prospects before you act, write to us at info@northlarkfirm.com or reach us through a secure channel. We read every matter before advising on whether there are genuine grounds to proceed.
A common misunderstanding: can the extradition simply be ignored?
In our experience, the most dangerous response to a crypto-fraud extradition proceeding is inaction. The AUDIENCE_MYTH is sometimes the reverse: that extradition proceedings in a foreign jurisdiction will simply stall or collapse without engagement. They very often do not.
A person who fails to respond to a Cypriot extradition request, or who leaves Cyprus while proceedings are pending without having obtained proper legal advice, risks default proceedings and the issue of a further alert. The Red Notice, if in place, continues to circulate. The extradition request remains active before the Cypriot court. Banks and financial institutions that have flagged the notice continue to apply their own measures. Travel on any passport that is checked against INTERPOL data remains impossible.
Relocation does not resolve the underlying position. A Red Notice circulates globally. A diffusion – an alert sent directly between national central bureaux – may follow the person to the new jurisdiction. Where a state has issued a Red Notice and the person relocates, the requesting state can, in principle, issue a fresh extradition request to the new state of residence. The notice must be challenged at its source – before the CCF – and the extradition request must be contested in the jurisdiction where the person is located.
The AUDIENCE_PAIN is precise: while the notice stands, travel is constrained, banking relationships are at risk, and commercial partners who conduct due-diligence checks on counterparties will see the alert. None of that resolves without addressing the underlying data and the extradition request directly.
Cyprus as a requesting state: when the allegation originates here
Everything above addresses the position of a person sought by a foreign state through Cyprus. The picture is different – but equally complex – where Cyprus is the requesting state and the person is located abroad.
Cypriot authorities do issue Red Notices and diffusions through INTERPOL. They also make formal extradition requests to foreign states. Where the allegation is crypto-fraud originating in Cyprus, the requesting state's file will typically draw on Cypriot financial-crime legislation and any applicable EU instruments transposed into Cypriot law.
For a person abroad who faces a Cypriot-origin extradition request, the dual-criminality analysis runs in the opposite direction: does the conduct alleged under Cypriot law also constitute an offence in the state where the person is located? The answer depends on the law of the state of residence. The CCF challenge, if the INTERPOL notice was issued by Cyprus, proceeds on the same grounds – Article 2, Article 3, and the RPD's data-accuracy requirements – but the political-character argument will usually look different, because Cyprus is an EU member state with a functioning independent judiciary.
The broader picture for extradition from Cyprus – including the bilateral and multilateral treaty architecture that governs formal surrender – is set out at our extradition from Cyprus analysis. For the general architecture of crypto-fraud extradition across jurisdictions, the analysis at our crypto-fraud extradition overview provides the wider comparative picture.
Related
- Extradition from Cyprus – the treaty framework and court procedure in Cypriot extradition cases
- Crypto-fraud extradition – how digital-asset allegations drive cross-border extradition exposure
- Dual criminality – when conduct alleged abroad does not correspond to an offence at home
Frequently asked questions
Does the allegation have to be proven for a notice to issue?
No. A Red Notice is based on a request from a member state's national central bureau, supported by information about the allegation. INTERPOL does not adjudicate guilt; it processes data. The notice issues on the basis of an accusation, not a finding. The RPD's data-accuracy requirements apply, but the standard is not proof of the underlying offence. This is precisely why a notice can be challenged on grounds that do not require disproving the allegation – and why the framing of the request matters as much as the substance.
How does relocation change my exposure?
Relocation changes where you are, not what the data says about you. A Red Notice circulates globally to all INTERPOL member state bureaux. Moving from Cyprus to another jurisdiction means the notice follows you. The new state of residence may also receive a diffusion directly from the requesting state's national bureau. Extradition proceedings in the new state can be initiated afresh. The only durable way to reduce exposure is to address the underlying data through the CCF and to contest the extradition request in the relevant jurisdiction.
Can the notice be challenged before extradition is sought?
Yes, and doing so early is usually preferable. The CCF accepts requests from individuals regardless of whether formal extradition proceedings are under way. An access request – answered within four months – establishes what data INTERPOL holds. A deletion request, if admissible, is decided within nine months. Acting before arrest or extradition proceedings begin reduces pressure, preserves options, and means the first CCF file can be built carefully rather than under urgency. A weak first file cannot be appealed; there is no appeal against a CCF decision.
About NORTHLARK
NORTHLARK is an independent international boutique acting for individuals before the Commission for the Control of INTERPOL's Files and in related extradition proceedings. We work without affiliation to any national firm or network, which matters particularly where the requesting state is one whose independence from those networks clients need to be confident of. We work in the language of the file and of the requesting state, and we coordinate with allied counsel in the country of detention where local court appearances are required.
We act only on lawful mandates. We do not assist anyone in evading legitimate justice, and we take on a matter only where we see genuine grounds. No honest adviser guarantees a CCF or extradition outcome, and we are direct about what is and is not achievable in any given case.
The first assessment is confidential. Our enquiry form does not require your real name, and you can reach us through a secure channel – Signal, Telegram or WhatsApp. To discuss the grounds in your matter honestly and without obligation, write to info@northlarkfirm.com.
Facing an unjustified Red Notice?
Free initial assessment. Challenging Interpol Red Notices and extradition defence.
Request an assessment