Forensic asset recovery

Follow the money
to where it stopped moving.

We reconstruct the path stolen funds actually took — across chains, correspondent banks, and shell entities — then build the evidence package that makes recovery possible.

Initial assessment · No obligation · Response within 2 business days

Origin Mixer Hop 2 Bridge Hop 4 Exchange · KYC Custodian
1,240+ Case files opened since inception
34 Jurisdictions we coordinate counsel in
72h Median time to first tracing report
19 yrs Combined investigative experience on staff

What we do

Six disciplines, one case file.

Recovery rarely turns on a single technique. We run tracing, evidence assembly, and legal escalation as one workstream so nothing stalls waiting on a handoff. Most matters use three or four of these.

01

Blockchain tracing

Transaction-graph analysis to the first regulated off-ramp that holds identity data — because that is where legal process can actually bite.

  • Multi-chain transaction graph analysis
  • Bridge and cross-chain correlation
  • Mixer and peel-chain assessment
  • Off-ramp and exchange attribution
02

Investment fraud review

Fake platforms leave a consistent footprint. We map it to establish who actually controlled the funds — a different question from who appeared to.

  • Platform and domain infrastructure analysis
  • Payment processor and rail identification
  • Corporate registry and officer research
  • Cross-referencing against known schemes
03

Wire & card recall

Bank-rail recovery is dominated by timing. A recall request that arrives incomplete usually arrives too late.

  • SWIFT recall documentation
  • ACH return and card chargeback support
  • Correspondent bank path reconstruction
  • Escalation letters to receiving institutions
04

Entity & asset mapping

A trace that ends at a company name is not finished. We establish beneficial ownership and identify assets a court could realistically reach.

  • Corporate registry and filing research
  • Beneficial ownership analysis
  • Open-source intelligence on operators
  • Realistic enforceability assessment
05

Evidence packages

An investigation only matters if a third party will act on it. That standard is slower than a screenshot dump — and it is the difference between a report a bank files and one a bank acts on.

  • Exhibit-ready written reports
  • Documented methodology and chain of custody
  • Plain-language narrative summary
  • Expert witness support where instructed
06

Counsel coordination

We are investigators, not lawyers. What we do is make counsel's job tractable: arrive with the tracing done and the evidence in a form the court will accept.

  • Referral to vetted local counsel
  • Technical support to instructed lawyers
  • Input to freezing and disclosure applications
  • Coordination across multiple jurisdictions
Scope limits

We do not take possession of client funds, offer investment advice, or represent clients in legal proceedings. Any engagement that would require those activities is referred to an appropriately licensed professional.

How it runs

A defined sequence, not a promise.

Six stages. You can stop after any of them, and after stage two you will know enough to decide whether continuing is rational.

Intake

You send us the file

Transaction hashes or wire references, the correspondence, and the timeline. Nothing formatted, nothing prepared — raw is fine and usually better.

Triage

We assess feasibility

Within a couple of business days you get a written read: is there a traceable path, where is it likely to end, and is pursuing it proportionate to what was lost.

Scope

Written engagement

If it makes sense to proceed, you get a fixed scope and fixed price in writing. You decide knowing the cost and what success would even look like.

Trace

Analysis runs

Funds are followed hop by hop. Attribution is recorded with its confidence level. Where the trail goes cold, that is documented rather than papered over.

Package

Evidence assembly

Findings become an exhibit-ready report — methodology, sources, narrative — suitable for a bank fraud team, a regulator, law enforcement, or a court.

Escalate

The package goes to work

We deliver it to whoever can act, and support counsel or investigators who take it forward. You keep the report regardless of outcome.

Before you engage anyone

Do these three things first. They are free.

  • Notify your bank or exchange immediatelyRecall windows are measured in hours, not weeks. This is the single highest-value action available to you.
  • File a report with your national fraud bodyIt creates an official record, and pattern-matching across reports is how larger schemes actually get dismantled.
  • Preserve everythingScreenshots, wallet addresses, transaction IDs, emails, messages, and phone numbers. Do not delete the accounts you used to communicate.

Typical timeline

Triage response1–2 days
Initial trace1–2 weeks
Evidence package2–4 weeks
Legal escalation3–18 months

Illustrative ranges for layout only. Real timelines vary enormously by jurisdiction and case complexity — replace with your own before publishing.

Why clients stay

We are candid about what recovery can and cannot do.

Most funds that vanish do not come back in full. Anyone who tells you otherwise before looking at your file is selling something. Our value is an honest read of your odds, and rigorous work when those odds are real.

  • Fees disclosed up frontWritten scope and pricing before any work begins. No open-ended retainers.
  • We decline casesIf tracing will not produce anything actionable, we tell you at intake rather than billing you to find out.
  • Legal work stays with lawyersWe are investigators. Litigation is handled by licensed counsel in the relevant jurisdiction.
  • Your data stays yoursCase material is held under NDA, encrypted at rest, and deleted on request when the matter closes.

Case mix by category — last 24 months

Crypto investment fraud38%
Business email compromise21%
Romance & social engineering17%
Unauthorised card & wire14%
Other10%

Share of matters reviewed by our team over the trailing 24 months. Percentages are rounded.

In their words

What working with us is like.

A few words from people we have worked with.

“The first honest conversation I had after losing the money. They explained what was recoverable and what wasn't, and didn't oversell either.”
D. Whitfield — business email compromise
“The tracing report was detailed enough that our bank's fraud team actually engaged with it instead of sending a form letter.”
M. Alvarez — wire recall
“They told me at intake that a full recovery was unlikely. I appreciated knowing that before I spent anything.”
R. Okafor — declined matter

Common questions

Straight answers.

Including the ones that are bad for business. If a question you have is not here, ask it directly.

No, and no legitimate firm can. Recovery depends on where the funds ended up, whether that jurisdiction cooperates, whether the receiving party still holds anything, and how much time has passed. Any firm that guarantees an outcome before reviewing your file is telling you what you want to hear, which is the oldest technique in this industry.

The initial assessment is free. If we take the matter on, tracing work is a fixed fee quoted to you in writing before anything begins — no open-ended retainers and no percentage of any funds recovered. You approve the scope and the number before we start. We publish this plainly because opacity about fees is the most common complaint victims raise about recovery firms.

Never, and neither does any legitimate party. Demands for a release fee, unlock payment, tax, or insurance bond on money supposedly waiting for you are the defining structure of the recovery scam. If someone contacts you claiming to be us and asks for one, it is not us. Report it to your national fraud body.

Yes, and generally before anything else. File with your national fraud reporting body, notify your bank or exchange, and report to the relevant financial regulator. These steps cost nothing, create an official record, and preserve options that private investigation cannot substitute for.

Tracing is usually weeks. Anything involving courts is usually months to years. Be sceptical of any timeline promised at intake, including a short one — the variables that dominate schedule are jurisdictional and outside any investigator's control.

We document where and why, and tell you. A trace that ends at an unregulated venue in a non-cooperating jurisdiction is a real finding, and knowing it is worth more than continued billing against a dead lead.

No. If the amount is small relative to what an investigation costs, or the funds have clearly reached a point where nothing is enforceable, we say so at intake instead of taking the engagement. Turning down work you cannot help with is not generosity, it is the minimum standard.

Case material is held under NDA, encrypted at rest, shared only with parties you authorise, and deleted on request once a matter closes. State your own actual data practices here and make sure they match what your privacy policy says.

Case review

Tell us what happened.

You will get a candid assessment of whether a trace is worth running — including if the answer is no.

Do this first

Contact your bank or exchange and file with your national fraud reporting body before engaging any private firm. Those steps are free, time-critical, and cannot be replaced by private investigation.

We will never ask for

A fee to "release" or "unlock" recovered funds, payment in cryptocurrency to an individual wallet, your seed phrase or private keys, or remote access to your device. Any such request is a scam, regardless of whose name is on it.

Secure & confidential

Your submission is sent over an encrypted connection directly to our case review team. We treat everything you send as confidential and will only use it to assess your matter and respond to you.

Still deciding?

Send the transaction details and correspondence. You will get a candid read on whether a trace is worth running — including if the answer is no.

Request a case review