Investigations
Case types we document and investigate
Each guide explains mechanics, fund flows, and evidence priorities—so victims and professionals can align on what happened before commissioning analysis.
Structured reference, not generic advice
These pages describe how specific fraud archetypes operate, how assets typically move afterward, and which investigative methods apply. They do not promise recovery outcomes.
Social engineering & relationship fraud
- 01View page
Pig butchering
Long-trust grooming that migrates victims into controlled crypto transfers and fake investment apps.
- 02View page
Romance scam
Emotional manipulation paired with urgent money requests, often routed through crypto or mule accounts.
- 03View page
Job scam
Fake hiring flows that demand upfront fees or crypto deposits under the guise of onboarding.
- 04View page
Task scam
Micro-task platforms that require escalating deposits before fabricated balances unlock.
Investment & trading deception
- 01View page
Investment scam
Fabricated funds, ICOs, or advisors promising returns without legitimate operations behind them.
- 02View page
Fake trading platform
Simulated dashboards, manual price feeds, and withdrawal blocks that mimic licensed brokers.
- 03View page
Forex scam
Unregulated FX brands using MetaTrader clones and bonus traps to delay exits.
- 04View page
Binary options fraud
Short-expiry products stacked against users with rigged outcomes and payout denials.
Crypto-native loss events
- 01View page
General crypto recovery
Cross-cutting crypto loss matters where tracing and platform correlation are central.
- 02View page
Wallet hack
Unauthorized signing, malware, or seed compromise leading to rapid outbound sweeps.
- 03View page
Phishing
Credential or approval phishing that drains wallets or exchange accounts.
- 04View page
DeFi exploit
Smart-contract abuse, flash-loan sequences, or bridge attacks affecting user funds.
- 05View page
NFT scam
Forged collections, malicious mint sites, or marketplace impersonation.
- 06View page
Stablecoin fraud
Fake redemption desks, de-pegged issuer claims, or counterfeit stable tokens.
Enterprise & cyber extortion
- 01View page
Ransomware
Extortion following encryption, sometimes paired with double-extortion data leaks.
- 02View page
Business email compromise
Payment instruction fraud targeting treasury teams, including crypto wire swaps.
Supporting services
Identify your case type
If several patterns overlap, start with a confidential assessment rather than self-diagnosing from checklists alone.

