Five stages. What happens at each, what you will receive, and how long it typically takes.
You submit a report through the secure portal with whatever evidence you have. A specialist reviews the transaction data, identifies which chains and services are involved, and establishes whether the funds are traceable to a point where anyone could act.
What you receive: A written assessment stating what is traceable, what is not, and what a realistic best outcome looks like — including when that outcome is "nothing recoverable".
If there is a path worth pursuing, we set out the scope of work and the fee structure in writing. Nothing starts until you have agreed. You are free to take the agreement away and have it reviewed — we would rather you did.
What you receive: A written engagement agreement covering scope, fees, timescales, and what happens if the investigation produces no recovery.
Blockchain tracing follows the funds through consolidation, layering and bridges to the point they left the chain. Digital forensics establishes how the compromise occurred. Open-source intelligence links wallets, domains and personas to the operation behind them.
What you receive: A documented flow-of-funds analysis citing every transaction hash, identified off-ramps, and an attribution assessment with its confidence stated.
The evidence goes to the parties who can act: exchange compliance teams holding the deposits, the relevant financial regulators, and law enforcement in the appropriate jurisdictions. Where civil proceedings are viable, we support your solicitor with the material needed.
What you receive: Copies of every submission made on your behalf, plus reference numbers, and updates as third parties respond.
We report the outcome plainly. Where funds are returned, that happens through the exchange, court or authority holding them — not through us. Where they are not, you still hold a complete evidence package that has value for insurance, tax loss claims, and any future investigation into the same operators.
What you receive: A closing report and the full case file, retained securely for the period set out in our privacy policy.
Stolen crypto is typically consolidated and moved within hours. A freeze at a receiving exchange is only possible while the funds are still sitting in that account — which is usually a window of days, not months.
Tracing an old case is technically no harder. The difference is that the trace arrives at an account that emptied long ago. That is why we triage recent, high-value reports ahead of the queue, and why we would rather receive an incomplete report today than a perfect one next month.
Send nothing further — no fee, tax, or verification deposit. Every additional payment is the same fraud continuing.
Screenshot and export every conversation before accounts are closed or the platform disappears.
IC3 or the FTC, Action Fraud, the Canadian Anti-Fraud Centre, Scamwatch, or your national cybercrime unit. Keep the reference.
If you can identify where the funds landed, contact their compliance team directly with the hashes and your report reference.
New passwords, app-based two-factor authentication, and a fresh wallet if a seed phrase may have been exposed.
Broadly in five stages:
The recovery process page covers each stage in detail.
The initial assessment is usually returned within one to three business days. A full tracing analysis typically takes one to four weeks depending on complexity and the number of transactions.
What follows is largely outside our control. Exchange compliance responses take days to months, and legal or law enforcement processes can run considerably longer. We keep your case record updated at every stage.
No. Nobody can — that is a property of how blockchains work, not a limitation of our tooling. Any firm implying otherwise is misrepresenting the technology.
Recovery happens through intermediaries: an exchange freezing an account holding the funds, a court order, or a law enforcement seizure. Our work is to trace the funds, identify who holds them, and produce evidence to a standard those parties will act on.
Yes. We prepare evidence packages formatted for law enforcement use and support clients in engaging the relevant agencies. We also encourage every client to file their own report with their national authority — it creates an official record and is often required before an exchange will act.
We are a private investigation firm, not a law enforcement agency, and we have no powers of seizure or arrest.
Cryptocurrency investment fraud, relationship investment fraud ("pig butchering"), fake exchanges and trading platforms, Ponzi and pyramid schemes, wallet compromise and drainer signatures, rug pulls and token fraud, romance fraud with a financial element, business email compromise involving digital assets, and advance-fee fraud including recovery scams.
If you are unsure whether your situation fits, submit a report and we will tell you.
Tell us what happened and attach whatever evidence you have. A specialist will review it and give you an honest assessment of what can realistically be done. If the answer is that recovery is unlikely, we will say so.
No obligation. We never ask for seed phrases, private keys, or remote access.
