01
Treasury mapping
Identify collection wallets repeated across victims.
Investment fraud
Investment scams blend credible branding with unregistered offerings—often settling victims into crypto rails that complicate tracing.
Operators present regulated-sounding vehicles—funds, mining pools, or AI trading—with no legitimate operation behind claimed returns.
Victims may send fiat via bank wire or crypto directly to treasury wallets controlled by the scheme.
Fake licenses, celebrity deepfakes, and polished pitch decks.
KYC-like forms that harvest identity while legitimizing transfers.
Tax pretexts, withdrawal fees, or silent ghosting once inflows slow.
Inflows often split across mule accounts before consolidation into master wallets.
01
Identify collection wallets repeated across victims.
02
Domains and payment processors linked to operators.
03
Match stated returns to actual on-chain inactivity.
Never provide a seed phrase, private key, or authentication code to anyone claiming they can recover funds—including parties who contact you unsolicited. Legitimate investigators do not need wallet secrets to begin a case review.
Reporting matters; recovery still requires tracing and legal process.
Share transfer records and platform names—never seed phrases.