01
Movement reconstruction
Multi-chain graphs from victim-provided anchors.
Investigation guide
Crypto recovery cases beyond a single scam label
When losses span wallets, exchanges, and narratives, investigation prioritizes verifiable movement over marketing promises.
What qualifies as a crypto recovery matter
A crypto recovery matter is any incident where digital assets left victim control and continued on-chain or through platforms requiring correlation.
The term is investigative—not a promise that assets will be returned.
Typical investigative sequence
- 01
Anchor the loss
Fix amounts, chains, and timestamps from exports and explorer data.
- 02
Trace outbound flows
Follow paths to labeled services and document confidence.
- 03
Align off-chain facts
Map chats, KYC platforms, and app usage to chain events.
Situations that need caution
- Third parties guaranteeing full recovery for an upfront fee
- Requests to install remote access after a loss
- Pressure to sign over authority to unknown recovery brokers
- Unsolicited contact referencing your exact transaction hash
How funds typically move
Paths vary by scam type but often converge on exchange deposits or cross-chain swaps within hours of victim transfers.
- — Victim wallet to intermediary mule wallets
- — Rapid swap into stablecoins for off-ramp
- — Consolidation wallets feeding exchange hot clusters
- — Occasional bridge hops to obscure origin on a second chain
Evidence to preserve
- Complete wallet and exchange transaction exports
- Screenshots with underlying TXIDs visible
- Chat logs with payment instructions
- Device backups if malware is suspected
What we investigate
02
Platform correlation
Tie fake apps or exchanges to deposit addresses.
03
Option mapping
Document reporting and legal paths without outcome guarantees.
Immediate steps
- 01Stop sending additional funds to the same addresses
- 02Secure remaining assets with new wallets and hardware if needed
- 03Export transaction histories while accounts remain accessible
- 04File reports with local authorities and relevant platforms
Never provide a seed phrase, private key, or authentication code to anyone claiming they can recover funds—including parties who contact you unsolicited. Legitimate investigators do not need wallet secrets to begin a case review.
Related services
Frequently asked questions
Is recovery guaranteed?
No. Investigation clarifies facts and options; outcomes depend on many external factors.
Scope your crypto recovery case
Provide anchors you already know—hashes, platforms, dates—for a confidential assessment.