- Home
- How it works
Case procedure
How a case works, from your first report to the final evidence
Every case follows the same five-stage procedure. This page explains what happens at each stage, what we need from you, and what you will receive.
The five stages
See each stage in detail- Free case reviewWe read your case and the blockchain record.
- Assessment and quoteAn honest view of what is possible, in writing.
- Trace the fundsWallet by wallet, across swaps and chains.
- Evidence reportDocumented for lawyers, police and exchanges.
- Action and follow-upFreeze requests and ongoing support.
Your case report
What you receive at the end of the investigation
A written report in plain language, backed by blockchain data that anyone can check. Below is a sample page, so you know exactly what to expect.
Investigation reportChain Investigation
Case ref: CI-0000-SAMPLE
Page 1 of 14
Case summary
Transaction trail
- Your wallet4 payments
- Hop wallets7 linked
- BridgeETH to TRON
- ExchangeDeposit address
Wallet register
| Address | Role | Linked by |
|---|---|---|
| 0x7a3f…c91e | Receiving wallet | Your payments |
| 0x19bd…04a7 | Collection wallet | Timing, amounts |
| TQx9…4hLm | Exchange deposit | Bridge transfer |
Key findings
Most traced funds reached one exchange deposit address.
Freeze request possibleRecommended next steps
- Share this report with your lawyer or the police
- Send the evidence pack to the exchange
- Keep watching the linked wallets
Inside the report
Select a part to see it on the sample page.
Who can use your report
-
Your lawyer
To support a civil claim or a formal legal letter.
-
Police and cybercrime units
To support your crime report with facts they can verify.
-
Exchange compliance teams
To show where funds arrived and ask for a review of the account.
-
Banks and insurers
To document your loss when you report it or make a claim.
The report is yours. You decide who receives it. A report supports action by others, but it cannot force an exchange or authority to return funds.
Inside the investigation
How we actually follow the money
What happens behind the scenes while your case is open: the methods our analysts use, what they look for, and why each part matters for your case.
-
Part 1 of 5
Reading the blockchain record
Every crypto transaction is recorded on a public, permanent ledger. Your transaction IDs are our starting point.
What it means
- Every payment is public and permanent
- Nobody can delete or edit the record
- Old transactions can still be traced
What we look for
- The exact transactions you sent
- The receiving wallet addresses
- Dates, amounts and network fees
Why it matters to you
- Even cases from months ago can be reviewed
- Your evidence starts from verifiable facts
-
Part 2 of 5
Following funds across wallets
Scammers move money through many wallets to hide it. We follow each hop and group wallets that belong to the same operator.
What it means
- Funds are split, merged and passed on
- Many wallets can belong to one operator
- Each hop leaves a visible trail
What we look for
- Patterns in timing and amounts
- Wallets that act together
- Where the trail splits or joins
Why it matters to you
- We see the network behind the scam
- Hidden destinations come to light
-
Part 3 of 5
Swaps, bridges and mixers
Funds are often swapped into other coins or moved to other blockchains. We trace through these steps too.
What it means
- Swaps change one coin into another
- Bridges move funds between blockchains
- Mixers try to break the trail
What we look for
- Matching amounts in and out
- The same funds on the next chain
- Exits from mixing services
Why it matters to you
- The trail does not end at a swap or bridge
- You get an honest view of what is traceable
Mixers and privacy tools can make tracing harder. If they stop the trail, we tell you clearly.
-
Part 4 of 5
Identifying exchanges and services
When funds reach an exchange or known service, that is where real-world action becomes possible.
What it means
- Exchanges know who their customers are
- Known services have identifiable wallets
- This is often where funds can be frozen
What we look for
- Deposit addresses of exchanges
- Known service and platform wallets
- How recently the funds arrived
Why it matters to you
- Exchanges can be asked to freeze accounts
- Police and lawyers know who to contact
Exchanges decide on freezes, often together with law enforcement. Speed matters, so contact us early.
-
Part 5 of 5
Building evidence that holds up
Every finding is written so that someone else can check it step by step.
What it means
- Each step is recorded and repeatable
- Findings are linked to real transactions
- Nothing is based on guesswork
What we look for
- A clear chain from your payment to the destination
- Supporting data for every claim
Why it matters to you
- Lawyers and police can rely on the report
- Exchanges have what they need to act
Want us to look at your case?
Send us your transaction IDs and wallet addresses. The first review is free.
Our commitments
The rules we follow on every case
People who have lost crypto are often targeted a second time by fake recovery services. These rules protect you, and make it easy to spot anyone pretending to be us.
We always
5 commitments-
Give you a written quote first
You know the cost before any paid work starts.
-
Tell you honestly what is possible
Including when the trail is weak or the chances are low.
-
Show the evidence behind every finding
Each result links to transactions you can check yourself.
-
Keep your case private
We share details only with people you approve.
-
Use only our official channels
Our website and our company email address.
We never
6 red lines-
Ask for seed phrases, private keys or passwords
No real investigator needs them to trace funds.
-
Ask for 2FA codes or remote access
We never need control of your phone, computer or accounts.
-
Guarantee that funds will come back
Nobody can honestly promise that.
-
Ask for "release fees" or taxes to unlock funds
This is one of the most common recovery scams.
-
Contact you out of the blue on social media
You reach out to us first, through this website.
-
Pressure you to decide or pay quickly
You can take the time you need.
If someone asks you for anything on the "never" list, it is not us. Stop replying and report it to us and to the police.
How to check you are really talking to us
Three quick checks before you share anything about your case.
-
Check the email address
Our emails only come from
@yourdomain.com. Never from Gmail, Telegram or WhatsApp accounts. -
Ask for your case reference
Every message from us includes your case reference. If a message has none, do not reply to it.
-
Start from this website
Do not use links sent to you. Open this website yourself and use the contact form.