Overview
All investigation servicesWe start with the incident as you experienced it: how contact was made, what you were told, what the platform or person showed you, and what you sent. Each element is dated and placed in a chronology.
That chronology is then set against the on-chain record and the material you hold — screenshots, chat exports, statements, emails. The result is a case file that separates what is evidenced from what is alleged.
What the investigation covers
The scope is agreed in writing before work starts, so you know exactly what is being examined and what is outside it.
- The platform, domain and any impersonated brand or registered entity
- The contact route: messaging app, social account, dating site, cold call
- Every payment instruction and the address each payment went to
- Withdrawal requests, blocked accounts and any further demands for funds
What the file is for
A documented chronology is the difference between an account that reads as a story and one that reads as a case. It is what makes a report usable by a compliance team, a bank's fraud desk, a regulator or a police unit.
- A dated statement of facts with supporting exhibits
- Transaction detail linked to the representations that induced each payment
- A clear note of the gaps in the evidence, and what would fill them
Questions
Cryptocurrency Scam Investigation — what clients ask first
Other investigation services
All servicesBitcoin Transaction Tracing
Output-by-output tracing of BTC from your first payment onward.
Read moreInvestment Fraud Investigation
Fake brokers, Ponzi structures and blocked withdrawals, documented.
Read moreWallet Transaction Analysis
A structured read of a wallet's inflows, outflows and service exposure.
Read moreBlockchain Forensic Reporting
The written report: chronology, transaction tables and method notes.
Read moreLaw Enforcement Referral Assistance
Guidance on packaging and submitting a report where it can act.
Read more