What this means in practice
Virtual Asset Investigations in Georgia: Criminal-law guidance for virtual-asset investigations, alleged crypto fraud or laundering, digital evidence and asset restraint in Georgia.
For Virtual Asset Investigations, the early priority is to identify control, attribution and transaction purpose. The first evidence review should include wallet and transaction data and should be completed before assumptions harden into the case narrative.
Issues to assess early
Identify control, attribution and transaction purpose
Separate VASP or registration questions from the alleged offence
Test blockchain analytics against off-chain evidence
Preserve wallet, exchange and device records
Evidence that may matter
Evidence must be examined in context. Existence of a document, transfer, message or device artefact does not answer every question about authorship, knowledge, purpose, legality, completeness or reliability.
- Wallet and transaction data
- Exchange or platform records
- Bank and cash-flow evidence
- Phones, computers and authentication logs
- Communications and source-of-funds documents
Potential Criminal Code provisions
The provisions below are a focused research map for virtual asset investigations, not a statement that any person has committed an offence. Each element, part, threshold and aggravating circumstance must be checked against the current Georgian text and the actual evidence.
Fraud
The investigation must distinguish alleged deceptive appropriation from contractual non-performance, commercial risk or a later inability to pay.
Read full Article 180 text on this pageLegalisation of illegal income (money laundering)
The prosecution must connect property to alleged criminal origin and prove the accused person's conduct and required knowledge or purpose.
Read full Article 194 text on this pageUnauthorised access to a computer system
Ownership of a device or account does not prove unauthorised access; permission, attribution, method and consequence should be tested.
Read full Article 284 text on this pageAn investigation may start under one article and later be narrowed, expanded or reclassified. New evidence, expert conclusions, the legally assessed consequence, a defence application, prosecutorial review or a court ruling may support a different provision, part or aggravating circumstance. The Georgian consolidated text controls; an English translation may lag.
Read the relevant provisions before the external source
The operative English text below is reproduced from the official consolidated Criminal Code of Georgia, publication 296, accessed 9 August 2026. Formatting has been normalised for on-screen reading; the current Georgian-language consolidated text controls if wording or timing differs.
Article 180Fraud+
1. Fraud, i.e. taking property of another person or obtaining of title to the property by deceit for its unlawful appropriation, –
shall be punished by a fine or community service from 170 to 200 hours, or by corrective labour or house arrest for a term of one to two years, or by imprisonment for a term of two to four years.
2. The same act:
a) committed by more than one person with a preliminary agreement;
b) causing substantial damage, –
shall be punished by a fine or by imprisonment for a term of four to seven years.
3. The same act committed:
a) using the official position;
b) in large quantities;
c) repeatedly, –
shall be punished by a fine or by imprisonment for a term of six to nine years.
4. The same act committed:
a) by an organised group;
b) by a person who has two or more previous convictions for unlawful appropriation or extortion of another person’s property, –
shall be punished by imprisonment for a term of seven to ten years.
Open Article 180 in the official consolidated Criminal Code↗︎Article 194Legalisation of illegal income (money laundering)+
1. Legalisation of illegal income, i.e. giving legal form to illicit and/or undocumented property (use, purchase, possession, conversion, transfer or other actions in connection with property) in order to conceal its illegal and/or undocumented origin or to assist another person in evading liability, as well as concealment or disguising of its genuine nature, source of origin, location, dislocation, movement, its title and/or of other rights related to it, –
shall be punished by a fine or by imprisonment for a term of three to six years.
2. The same act:
a) committed jointly by more than one person;
b) committed repeatedly;
c) which was accompanied by receipt of large income, –
shall be punished by imprisonment for a term of six to nine years.
3. The same act:
a) committed by an organised group;
b) committed using one’s official position;
c) accompanied by receipt of particularly large income;
d) committed in order to perform an act related to a political issue concerning Georgia, –
shall be punished by imprisonment for a term of nine to twelve years.
Note:
1. For the purposes of this article, property, as well as income, or shares (interest) gained from this property shall be considered illicit if acquired unlawfully by the person, the person’s family member, close relative or related person.
2. For the purposes of this article, property, as well as income, or shares (interest) gained from this property shall be considered undocumented if the person, the person’s family member, close relative or related person does not have the documents that confirm that it has been acquired by legal means or if it has been obtained by the monetary resources gained from the alienation of the illicit property.
3. Under this article, large income shall mean income from GEL 30 000 to GEL 50 000, and particularly large income shall mean income exceeding GEL 50 000.
4. For the act provided for by this article, a legal person shall be punished by liquidation or by deprivation of the right to carry out activities and a fine.
5. For the purposes of this article, any such activity conducted or to be conducted with the aim of exercising any influence over the Government of Georgia, state institutions or any part of the society, which intends for the development, pursuing or changing of the internal or foreign policy of Georgia, and any such activity stemming from the political or public interests, approaches or relations of a foreign Government or foreign political party shall be considered an act related to a political issue concerning Georgia.
Open Article 194 in the official consolidated Criminal Code↗︎Article 284Unauthorised access to a computer system+
1. Unauthorised access to a computer system, –
shall be punished by a fine or corrective labour for up to two years, or by imprisonment for the same term.
2. The same act:
a) committed by a group of persons with preliminary agreement;
b) committed using an official position;
c) committed repeatedly;
d) that has resulted in substantial damage, –
shall be punished by a fine or corrective labour for up to two years, or by imprisonment for a term of two to five years.
3. The act provided for by paragraphs 1 and/or 2 of this article, committed against a critical information system subject, –
shall be punished by imprisonment for a term of three to six years.
Note:
1. A computer system is any equipment/mechanism or a group of inter-connected equipment/mechanisms that automatically processes data (including personal computers, any equipment with a microprocessor, or a mobile phone) by means of software.
2. Computer data are any information displayed in any form that can be processed in the computer system, including software that ensures the operation of the computer system.
3. Unauthorised shall mean illegal, also those cases when the holder of the right has not, directly or indirectly, transferred the right to the person committing the act.
4. For the purposes of this Chapter, ‘substantial damage’ shall be considered damage exceeding GEL 2 000, except in cases provided for by Article 2861 of this Code.
5. A crime provided for by this Chapter shall be deemed as having been committed repeatedly if it has been preceded by any of the crimes provided for by this Chapter.
6. A critical information system subject shall be a critical information system subject as provided for by the Law of Georgia on Information Security.
7. For the act provided for by this article, a legal person shall be punished by a fine, with deprivation of the right to carry out activities, or by liquidation and a fine.
Open Article 284 in the official consolidated Criminal Code↗︎How Georgian criminal law frames Virtual Asset Investigations
A useful legal analysis does not begin and end with the name of an offence. It identifies what must be proved, what remains disputed and which neighbouring legal route may better fit the established facts.
What must the evidence establish?
The case should be tested for wallet attribution, transaction purpose, off-chain participants and the link to any alleged predicate offence. A complaint, financial loss, injury, seized object or digital trace may justify investigation, but does not by itself prove every element.
Where is the legal boundary?
The material must distinguish blockchain movement from proof of control, identity, criminal origin and knowledge. Attempt, assistance, group activity, repetition and legally defined consequences may also alter the applicable article or part.
What evidence needs independent testing?
Priority material commonly includes wallet records, exchange KYC, device artefacts, authentication logs, bank flows and source-of-funds material. Reliability depends on lawful collection, completeness, provenance, authorship, chain of custody and a method capable of being challenged.
In a Virtual Asset Investigations matter, blockchain tracing may identify a transaction path without proving who controlled a wallet, why the transfer occurred or what each participant knew at the relevant time.
The immediate decision is how to protect the record and prepare for asset map without prejudicing the client’s procedural position. This is a fictional example for orientation, not a report of a client matter or an assumption of guilt.
How the process may develop
Not every matter reaches every stage, and several steps can overlap. Arrest, search, seizure, charging, restraint measures and court review each have their own legal basis. Current deadlines should be verified against the consolidated Criminal Procedure Code and the specific decision served in the case.
How defence counsel can assist
Criminal defence counsel can clarify status and rights, attend permitted investigative actions, review prosecution evidence, obtain lawful defence evidence, prepare motions and submissions, represent the client at restraint and trial hearings, negotiate only where instructed and appropriate, and coordinate appeals or international work.
An investigation or charge is not a conviction. Only a court may find a person guilty, and defence rights must remain practical and effective throughout the proceedings.
Frequently asked questions
Does Article 180 — Fraud — automatically apply to Virtual Asset Investigations?+
For Virtual Asset Investigations, Article 180, Article 194, Article 284 may provide a starting point, but a page title is not a legal qualification. Investigators and prosecutors must match proved facts to every element, part and aggravating circumstance. The qualification may be narrowed, expanded or changed after expert results, new evidence, a defence motion, prosecutorial review or a court decision. The investigation must distinguish alleged deceptive appropriation from contractual non-performance, commercial risk or a later inability to pay.
Which factual boundary is decisive in a Virtual Asset Investigations case?+
In a Virtual Asset Investigations case, the evidence must distinguish blockchain movement from proof of control, identity, criminal origin and knowledge. That boundary is tested through the person's individual conduct, knowledge or intent, the legally classified consequence and every circumstance relied upon to move the allegation into a different article or aggravated part.
What evidence can prove—or undermine—the allegation of Virtual Asset Investigations?+
The focused record for Virtual Asset Investigations is not the same as for every offence. Priority material includes wallet records, exchange KYC, device artefacts, authentication logs, bank flows and source-of-funds material. The defence should test provenance, completeness, authorship, lawful collection, chain of custody and whether each item proves the disputed element rather than merely repeating the accusation.
Can the article or charge for Virtual Asset Investigations change after the investigation starts?+
Yes. For Virtual Asset Investigations, Article 180, Article 194, Article 284 may be a starting map, but expert results, quantity or value, injury classification, individual role, attempt or participation, a defence application, prosecutorial review or a court decision may support a different article, part or legal outcome.
What should be preserved immediately in a Virtual Asset Investigations matter?+
In a Virtual Asset Investigations matter, preserve the original chronology, procedural records and the topic-specific material before routine loss or alteration. Early advice is important because accounts and assets may be frozen while volatile access evidence is lost; preservation must be lawful and must not involve hiding, changing or coordinating evidence.
Primary sources for this guide
Legislation can change and official English translations may lag the Georgian text. Check the current consolidated version and obtain advice before relying on a deadline, offence classification or remedy.
Criminal Procedure Code of Georgia↗︎Criminal Code of Georgia↗︎Ministry of Finance Investigation Service↗︎