A Maltese court has ordered the outright confiscation of a Binance crypto-wallet linked to a Nigerian IP after investigators tied it to an online investment scam. The โฌ8.8k seizure is the islandโs first high-profile use of its 2021 Proceeds of Crime Act to freeze virtual assets without a criminal convictionโan approach that previews coming EU-wide standards.
KEY POINTS
- Jurisdiction & Court: Criminal Court of Malta, Mr Justice Giovanni Grixti
- Legal Tool: Non-Conviction-Based Confiscation (NCBC) under Maltaโs 2021 Proceeds of Crime Act (Source: Asset Recovery Bureau)
- Exchange Involved: Binance, user ID 35650310
- Trigger Event: Binance froze the wallet on 7 June 2022 after flagging irregular flows
- Victim Loss Modus: Classic โhigh-yieldโ crypto investment site (bitpaxosglobal.com) promising 7 % daily returns
- Assets Seized: Crypto worth โฌ8,835 at time of freeze (Source: Times of Malta)
- Beneficial Owner: Sulaiman Boljai Ayoola (Nigeria) failed KYC challenge & refused source-of-funds disclosure
- International Cooperation: Letters rogatory to Nigeria unanswered; Binance supplied KYC data
- Wider Context: Binance facing multi-jurisdictional AML probes (France, US, Australia) (Source: Reuters)
- RegTech Signal: Maltese ARB shows agility ahead of forthcoming EU Asset-Recovery Directive mandating NCBC options across bloc (Source: Migration and Home Affairs)
SHORT NARRATIVE
After a Maltese resident was duped by a slick crypto-investment platform, police traced the stolen bitcoin and ether to a single Binance wallet. Binanceโs compliance desk had already frozen the account for suspicious activity, holding โฌ8.8k in mixed virtual assets.
Investigators linked the wallet to Nigerian national Sulaiman Boljai Ayoola, who produced only partial, heavily redacted chat screenshots as โproof of innocence.โ With Ayoola unreachable and no credible explanation for the funds, the Assets Recovery Bureau (ARB) and Police Commissioner petitioned for civil confiscationโa remedy designed for fugitives or foreign actors. The court agreed, forfeiting the entire wallet to the Maltese government on 10 July 2025.
EXTENDED ANALYSIS
1. Legal & Regulatory Angle
Maltaโs Proceeds of Crime Act 2021 embeds FATF-aligned NCBC mechanisms, letting authorities seize assets when prosecution is impossible (death, flight, or overseas residence). The case demonstrates the statuteโs reach into virtual currencies, signalling that Malta is willing to treat exchange-hosted wallets as seizable โpropertyโโimportant precedent as the EU finalises its Asset-Recovery & Confiscation Directive (May 2022 draft) that explicitly expands NCBC and urgent-freeze powers across Member States (Sources: Asset Recovery Bureau, Migration and Home Affairs).
2. Exchange Compliance & Cooperation
Binanceโs proactive freeze indicates maturing AML/KYC controls, yet the modest balance (โฌ8.8k) underscores how retail-level fraud still slips through onboarding gates. Despite global remediation efforts, Reuters notes Binance remains under active investigation in France for laundering and tax fraud (Source: Reuters).
3. Cross-Border Friction
Letters rogatory to Nigeria produced no responseโhighlighting the persistent gap between EU asset-recovery ambitions and practical mutual legal assistance with non-cooperative jurisdictions. The case therefore leans on private-sector compliance (Binance) to plug evidentiary holes. Expect the EU directiveโs push for faster cross-border freezing orders to pressure third-country cooperation or incentivise more unilateral NCBC actions.
4. Operational Lessons for VASPs
- Early anomaly detection (Binanceโs 2022 flag) curtailed further layering.
- Supplying full KYC files proved decisive; partial or redacted data may be treated as non-cooperation.
- Exchanges should hard-code playbooks for non-response jurisdictionsโMaltaโs move shows courts will not wait indefinitely.
ACTIONABLE INSIGHT
Compliance officers at EU-licensed Virtual Asset Service Providers (VASPs) should back-test their freeze-and-escalate protocols against NCBC scenarios: if a wallet is flagged and the user goes silent offshore, be ready to (i) lock funds indefinitely, (ii) deliver KYC/transaction history in court-ready format, and (iii) map asset paths for potential civil forfeiture. Build these workflows nowโNCBC will soon be an EU-wide baseline.
CALL FOR INFORMATION
FinTelegram seeks further intelligence on cybercrime. Share your information via our whistleblower platform, Whistle42.




