Tracing digital assets,
documented to a standard
that holds up.
An independent forensics practice for individuals and businesses that have lost digital assets. We establish where funds went, record the findings so they can be relied on by counsel and law enforcement, and give you a candid assessment of whether recovery is realistic.
- Initial assessment carried out at no cost
- Findings prepared to an evidential standard
- Case material encrypted and access controlled
Stolen funds are typically dispersed, consolidated, then moved toward an exit point. The work is establishing which exit, and whether it can be reached.
Check an address before you transact
Format validation against a reviewed dataset of reported addresses. No account required.
- Addresses under review
- 0Addresses under review
- Networks covered
- 0Networks covered
- Reports received
- 0Reports received
- Matters assessed
- 0Matters assessed
What we will and will not claim
Asset recovery attracts firms that promise outcomes nobody can promise. We would rather set out the limits of this work at the start than leave you to discover them later.
We will not guarantee recovery
Tracing is largely determinate because public ledgers retain a complete record. Recovery is not: it depends on where funds came to rest and whether a court can reach that point. Any firm promising an outcome before examining a transaction hash is not in a position to know.
We will advise you to stop where appropriate
A significant proportion of enquiries conclude at assessment with our view that the trail is cold or the cost is disproportionate to the sum at issue. That view is provided in writing, at no charge, before any retainer.
We hold no privileged access
No private firm holds a channel into a law enforcement or intelligence agency, and any claim to the contrary warrants scrutiny. We report through the same public channels available to you. What we add is an evidence package the receiving officer can act on.
Fees are charged for work performed
We charge for analyst time against a scope agreed in writing beforehand. We will never request a fee, tax, bond or network payment to release your own assets. No such mechanism exists.
Approached by another recovery firm? Send us what you were told and we will give you our view at no charge, including if that view is that you do not need us.
Request a second opinionFive disciplines, one method
Every matter begins the same way: establish what happened, then establish what can be proved. The discipline that follows depends on where the evidence sits.
Unsure which applies?
Describe the matter in plain language. Part of the initial assessment is identifying which of these applies, or confirming that none does.
How an engagement proceeds
The initial assessment is provided at no cost and carries no obligation. If a matter is not worth pursuing, you should be able to learn that before any fee arises.
Intake and assessment
No chargeWithin one business day
You submit the details you hold. An analyst reviews them and addresses a single question: is there a sufficiently live trail to justify pursuing the matter? You receive that answer in writing, at no cost. A significant proportion of enquiries conclude here, which is the purpose of the stage.
Scoping and engagement
One to two days
Where a matter is viable, we propose a scope covering what will be examined, what you will receive, the analyst hours required and the cost. No work begins until you have signed it. No fee is ever attached to the release of your funds.
Investigation
Typically one to three weeks
On-chain tracing, infrastructure analysis and open-source research proceed in parallel. Progress is visible in the client portal throughout. We will contact you if a finding materially changes our assessment, including where it does so unfavourably.
Reporting and referral
On completion
You receive an evidence package that is cited, structured and formatted for law enforcement or civil counsel. Where a route to recovery exists, we set it out and assist you in pursuing it. Where none exists, we say so and explain the basis for that conclusion.
What is delivered
The output of an investigation is a documented evidence package that a prosecutor, compliance officer or civil litigator can act on without repeating the analysis.
- A flow-of-funds narrative written for a non-technical reader
- Every finding cited to a transaction hash or preserved capture
- An annotated transaction graph
- A schedule of terminal addresses and their associated services
- Infrastructure findings covering domains, hosting, certificates and related properties
- A referral pack formatted for law enforcement
- A written recommendation, including where that is to discontinue
Research and advisories
Fraud typologies, response guidance and advisories, published for general benefit.
Common questions
Can you guarantee recovery of my funds?
No. Tracing is largely determinate, because public ledgers retain a permanent record. Recovery is not. It depends on whether funds came to rest somewhere a court can reach, whether the sum justifies the legal cost, and whether a prosecutor or civil counsel will act. Those factors are outside our control, and we will not represent otherwise.
How do you charge?
The initial assessment is provided at no cost. Beyond that we charge for analyst time against a scope agreed in writing before work begins. We do not charge a fee to release funds, we do not accept payment in cryptocurrency, and we do not take a percentage of sums we have not recovered. Where a firm attaches its fee to unlocking your balance rather than to work performed, that should be treated as a serious warning.
I was contacted by a firm offering to recover my funds. Are they legitimate?
Treat it with caution. Lists of affected parties circulate and are resold, and unsolicited approaches following a loss are frequently fraudulent. Established firms do not approach individuals unprompted. Send us the details and we will give you our view at no charge, including where that view is that you do not require our services.
Do you have contacts within law enforcement or intelligence agencies?
No, and no private firm does. Claims to the contrary warrant scrutiny. We report through the same public channels available to you. What we add is an evidence package structured so that the receiving officer can act on it rather than close it.
How quickly should I act?
Promptly. The interval between a fraudulent transfer and funds reaching an uncooperative exit point is often measured in hours. A cold trail is not necessarily a closed one: consolidation addresses remain visible, and matters have been advanced months later following disruption elsewhere. We would encourage you to ask rather than assume it is too late.
Tell us what happened and we will assess whether it can be pursued.
The initial assessment is provided at no cost and carries no obligation. You receive a written view on whether the matter can be advanced, including when our conclusion is that it cannot.
No obligation. No fee for the initial assessment. No guarantee of recovery.