In response to a valid law enforcement or regulatory request, AllSwap can, in principle, provide only data that it actually controls, still retains at the time, and is within the lawful scope of the request. This may include certain swap order fields, status information, technical logs, or support records. What can be produced depends on the applicable legal process and the records that still exist. AllSwap cannot provide KYC identity documents it never collected, and it does not exclusively control public blockchain data.
Four boundaries define what data may be available
“No account” and “no KYC” do not mean that no order or technical records exist. Nor do they mean that a legal request will necessarily identify a natural person. To understand what AllSwap may be able to provide, separate the information into four categories: data the platform may control, data it does not normally collect, public on-chain data anyone can retrieve independently, and internal data-linking methods that have not been publicly disclosed.
1. Data that may be provided within a valid request
If relevant records can be located, remain within their retention period, and are required by valid legal process, they may include:
- Swap request and order fields: the source and destination assets, source and destination chains, amount, slippage preference,
orderId, the deposit address generated for the order, the destination address entered by the user, and an optional refund address if the user supplied one; - Execution and status information: order creation or status-update times, recorded processing states, and any source-chain TxID, destination settlement TxID, refund TxID, or corresponding on-chain status that exists in the record;
- Website technical data: standard server-log fields still retained at the relevant time, such as an IP address, User-Agent—the device and software identifier sent by a browser—requested URL, and timestamp; and
- Support communications: emails, order descriptions, proof of payment, or redacted screenshots that a user voluntarily sent to official support. Whether such material exists, how long it is kept, and whether it can be associated with a particular order depend on the actual records.
This is a description of possible categories, not a fixed list that AllSwap will return for every request. The legal basis, applicable jurisdiction, time range, identified order or address, and proportionality to the stated investigative purpose may all affect the response. This article does not promise who will conduct an internal review, whether a user will be notified, whether every request will be accepted or rejected, what export format will be used, or whether AllSwap will respond within a fixed period.
2. Data AllSwap does not normally hold
According to the AllSwap Privacy Policy, the standard consumer swap process does not collect private keys, seed phrases, wallet passwords, or other credentials that control assets. It also does not normally collect passports or other KYC documents, selfies or biometric information, bank-card or fiat-account details, legal names, identity document numbers, residential addresses, or telephone numbers. If a user never submitted such information separately, AllSwap cannot produce data that was never present in its systems.
AllSwap also does not require a named user account. A wallet address or order field alone does not necessarily establish a natural person's identity. Determining whether an address has been linked to an individual through a regulated exchange, public materials, or another service may require an agency to obtain evidence lawfully from other sources. No KYC reduces the amount of conventional identity information the platform holds; it does not create absolute anonymity or immunity from a lawful investigation.
3. Public blockchain data available independently
After a transaction is broadcast and confirmed on a public blockchain, its addresses, asset, amount, time, and transaction hash will generally remain publicly recorded by the network ledger. Law enforcement agencies, regulators, and other parties can retrieve this information independently through block explorers and blockchain analysis tools; they do not have to rely exclusively on AllSwap. AllSwap cannot delete or rewrite confirmed blockchain history or cause other network nodes to stop retaining it.
An apparent on-chain “source address” is not always the end user's address. A withdrawal from a centralized exchange may show the exchange's hot wallet, for example. On UTXO-based networks such as Bitcoin, one transaction may also contain multiple inputs. Correctly attributing an address to a person or organization requires supporting evidence and should not be inferred from a TxID alone.
4. Data relationships not confirmed by public policies
AllSwap's published consumer privacy position states that swap requests and status records may be retained for up to 12 months for support verification, dispute resolution, and legal compliance, after which they are periodically deleted or de-identified. The AllSwap no-KYC swap guide says standard server logs are typically retained for 7–30 days. “Typically” describes ordinary operations; it is not a hard maximum promised by the Privacy Policy. No specific retention period for support materials has been published.
Public information also does not state whether every IP address is linked to every wallet or order field, which database keys associate records, which fields can be reconstructed by combining logs with support materials, who has internal access, or how complete a search for a particular request would be. It would therefore be inaccurate either to claim that AllSwap can always link an IP address, wallet, and natural person, or to guarantee that these records always remain technically separate. The actual result depends on the data still present when a lawful request is received and on AllSwap's formal response.
How can users recognize an impersonated “investigation” scam?
Lawful production requests normally occur between an authority and a service provider. A user should not disclose sensitive information merely because a private message appears to come from law enforcement, a regulator, or an AllSwap investigator and includes a case number, uniform photograph, or order screenshot.
- Verify the sender independently. Do not call a number or open a short link supplied in the message. Find contact details in the authority's independently published directory, and type
allswap.iomanually to locate AllSwap's official support entry. - Never surrender control of assets. No legitimate investigation requires a private key, seed phrase, wallet password, one-time code, or remote-access permission. Do not transfer funds to a purported “safe” or “verification” address.
- Provide only necessary material. If verification of your own order is legitimately required, preserve and provide the order ID, deposit address, relevant TxID, assets, networks, amount, and time as requested. Redact unrelated balances, email addresses, telephone numbers, and other orders from screenshots.
- Preserve original evidence. Keep message headers, usernames, links, payment addresses, and timestamps, but do not publish complete order credentials. To verify an AllSwap contact channel, return through the AllSwap Help Center.
This page explains the boundaries of AllSwap's publicly described data handling. It is not legal advice and does not offer methods for evading regulation, concealing on-chain activity, or obstructing a lawful investigation. Law enforcement agencies, regulators, and affected users should consult a qualified professional in the applicable jurisdiction to determine their specific rights and obligations.