Services

Blockchain forensics, digital investigation, case management

What we actually do, what each service produces, and where its limits are.

The core question

Where did the money go, and who is still holding it?

Every service below exists to answer that one question. Tracing establishes the route. Forensics establishes how the compromise happened. Intelligence work attributes the infrastructure. And the final stage puts all of it in front of the exchange, regulator or court that can actually act.

Recovery, when it happens, comes from one of those third parties — never from us reaching into a blockchain, which is not something anyone can do.

Funds traced from a victim's wallet through consolidation and a cross-chain bridge to an exchange — Illustrative flow of funds: origin, consolidation, layering, bridge, off-ramp.

Blockchain tracing and fund flow analysis

Following stolen assets from your wallet to the point they left the chain.

Transaction graph analysis across hops, splits and consolidations
Cross-chain bridge reconstruction where funds were moved between networks
Address clustering and heuristic attribution of counterparties
Identification of exchange deposit addresses and other off-ramps
A documented, reproducible flow-of-funds report with every hash cited

Limits: Tracing weakens sharply once funds enter a mixer, are converted to a privacy coin such as Monero, or leave through an unregulated over-the-counter or cash channel.

Digital forensics

Establishing how the compromise happened and preserving what proves it.

Email header analysis to establish true origin and detect spoofing
Examination of phishing pages, malicious signatures and wallet-drainer contracts
Recovery and preservation of deleted or partially retained communications
Device examination where remote-access software or malware was involved
Forensically sound handling with hash verification at every stage

Limits: Forensic value depends on what still exists. Devices that have been reset, and accounts that have been deleted, may hold nothing recoverable.

Open-source intelligence and attribution

Connecting the wallet to the operation behind it.

Infrastructure analysis: domains, hosting, registration records, certificate history
Persona analysis linking profiles, images, phone numbers and handles
Correlation with known fraud clusters and previously reported cases
Corporate registry and regulatory checks on entities named to you
Identification of reused infrastructure across multiple victims

Limits: Attribution is evidenced inference, not proof of identity. It is presented as such, and it is for authorities to take further.

Exchange, regulator and law enforcement engagement

Putting the case in front of the people who can actually act on it.

Formal notices to exchange compliance teams identifying tainted deposits
Evidence packages formatted for law enforcement submission
Complaints to the relevant financial regulators and warning-list submissions
Support for civil proceedings, including material for freezing applications
Coordination with your own solicitor where one is instructed

Limits: We can present a case; we cannot compel any exchange, regulator or authority to act, and many do not. Timing is the largest single factor.

Secure case management

One place where your case, evidence and correspondence live.

Encrypted evidence storage held outside any publicly reachable directory
SHA-256 hash recorded for every file received, shown on your case record
A case reference and online tracker showing status and timeline
Secure two-way messaging with your assigned case team
Defined retention periods, with deletion on request where lawful

Limits: Please do not send seed phrases or private keys through any channel — we do not need them and will never ask for them.

Prevention and advisory

Reducing the chance of a second incident.

Post-incident security review of wallets, exchange accounts and email
Token approval audit and guidance on revoking risky allowances
Verification checks on a platform or offer before you commit funds
Briefings for families and small businesses on impersonation fraud
Guidance on evidence preservation for your own records

Limits: Advisory work is educational. We do not provide investment, tax or legal advice, and we will refer you onward where you need it.

Case types

Fraud we handle

If your situation is not listed, submit a report anyway and we will tell you whether we can help.

Cryptocurrency investment fraud Relationship / "pig butchering" fraud Fake exchange or trading platform Ponzi or pyramid scheme Wallet compromise or drainer signature Rug pull or token fraud Romance fraud Advance-fee fraud Recovery scam (defrauded a second time) Impersonation of an official or institution Fraudulent mining, staking or yield product Task-based or fake job fraud Business email compromise Other / not listed

Fees

How we charge

The initial assessment is free

Submit a report and we will review it and tell you whether a realistic path exists. There is no charge and no obligation. If we think your case is not worth pursuing, that is what you will be told.

Everything else is agreed in writing first

If we take a case on, you receive an engagement agreement setting out the scope of work, the fee structure, and what happens if nothing is recovered — before you commit to anything. You are welcome to have it reviewed independently, and we would encourage it.

What we do not do

We do not accept payment in cryptocurrency or gift cards. We do not invoice to personal accounts. We never charge a fee to "release" or "unlock" recovered funds — that demand is the signature of the fraud itself, and it is covered in our guide on recovery scams.

Report your case — the assessment is free

Tell us what happened and attach whatever evidence you have. A specialist will review it and give you an honest assessment of what can realistically be done. If the answer is that recovery is unlikely, we will say so.

Report fraud now Chat on WhatsApp Send a message

No obligation. We never ask for seed phrases, private keys, or remote access.