Skip to content
Services

Five disciplines, one method

Every matter begins by establishing what happened, then what can be proved. Each page below sets out the method, the deliverables and the limitations of that discipline.

We reconstruct the path your funds took from the moment they left your control, identify where they came to rest, and establish whether that destination is somewhere a court or a compliance team can actually reach.

Initial trace within five to ten business days of engagementRead the method

Suited for

  • Funds sent to a fraudulent platform or wallet
  • Wallet compromise and drainer incidents
  • Business email compromise settled in crypto
  • Misappropriation by an insider or a former partner

Fraudulent trading platforms are the most common matter we handle. The work involves establishing who operates the platform, where deposits were directed, and which route (criminal referral, civil action or intervention at exchange level) merits pursuit.

Assessment within five business days, full report in two to three weeksRead the method

Suited for

  • Fake trading, mining or staking platforms
  • Relationship-led investment fraud, often called pig butchering
  • Fraudulent token or presale offerings
  • Withdrawal blocked behind a demand for a fee, tax or deposit

The least costly investigation is the one carried out before funds move. We verify whether a counterparty, platform or opportunity is what it represents itself to be, and state plainly where verification is not possible.

Standard report in three to five business days, expedited availableRead the method

Suited for

  • Before sending funds to a new platform or counterparty
  • Pre-investment checks on a token, fund or venture
  • Verifying an unsolicited opportunity
  • Verifying a recovery firm that has approached you

Extortion, ransom demands and sustained harassment are handled as investigations rather than negotiations. The immediate priority is containment and evidence preservation. The objective is attribution and a route to enforcement.

Containment advice same day, attribution work in one to two weeksRead the method

Suited for

  • Sextortion and intimate image threats
  • Ransom demands payable in cryptocurrency
  • Sustained targeted harassment or doxxing
  • Impersonation of you or your business

Fraudulent platforms are rarely built only once. We examine a site or application to determine who operates it, where it is hosted, how it is constructed, and which other properties share the same characteristics.

Report in four to seven business daysRead the method

Suited for

  • Identifying the operator of a fraudulent platform
  • Brand and trademark misuse
  • Phishing infrastructure targeting your customers
  • Establishing the scale of an operation before deciding whether to act

Unsure which of these applies?

Describe the matter in plain language. Part of the initial assessment is identifying which discipline applies, or confirming that none does.

Request an assessment

Tell us what happened and we will assess whether it can be pursued.

The initial assessment is provided at no cost and carries no obligation. You receive a written view on whether the matter can be advanced, including when our conclusion is that it cannot.

No obligation. No fee for the initial assessment. No guarantee of recovery.

Services · CoinSentry