Five disciplines, one method
We reconstruct the path your funds took from the moment they left your control, identify where they came to rest, and establish whether that destination is somewhere a court or a compliance team can actually reach.
Suited for
- Funds sent to a fraudulent platform or wallet
- Wallet compromise and drainer incidents
- Business email compromise settled in crypto
- Misappropriation by an insider or a former partner
Fraudulent trading platforms are the most common matter we handle. The work involves establishing who operates the platform, where deposits were directed, and which route (criminal referral, civil action or intervention at exchange level) merits pursuit.
Suited for
- Fake trading, mining or staking platforms
- Relationship-led investment fraud, often called pig butchering
- Fraudulent token or presale offerings
- Withdrawal blocked behind a demand for a fee, tax or deposit
The least costly investigation is the one carried out before funds move. We verify whether a counterparty, platform or opportunity is what it represents itself to be, and state plainly where verification is not possible.
Suited for
- Before sending funds to a new platform or counterparty
- Pre-investment checks on a token, fund or venture
- Verifying an unsolicited opportunity
- Verifying a recovery firm that has approached you
Extortion, ransom demands and sustained harassment are handled as investigations rather than negotiations. The immediate priority is containment and evidence preservation. The objective is attribution and a route to enforcement.
Suited for
- Sextortion and intimate image threats
- Ransom demands payable in cryptocurrency
- Sustained targeted harassment or doxxing
- Impersonation of you or your business
Fraudulent platforms are rarely built only once. We examine a site or application to determine who operates it, where it is hosted, how it is constructed, and which other properties share the same characteristics.
Suited for
- Identifying the operator of a fraudulent platform
- Brand and trademark misuse
- Phishing infrastructure targeting your customers
- Establishing the scale of an operation before deciding whether to act
Unsure which of these applies?
Describe the matter in plain language. Part of the initial assessment is identifying which discipline applies, or confirming that none does.
Tell us what happened and we will assess whether it can be pursued.
The initial assessment is provided at no cost and carries no obligation. You receive a written view on whether the matter can be advanced, including when our conclusion is that it cannot.
No obligation. No fee for the initial assessment. No guarantee of recovery.