Follow the funds to somewhere a letter can reach.
When crypto has been stolen, misapplied or moved out of reach, the ledger still records every step. We follow the funds from the wallet you start with, through swaps, bridges and intermediaries, to the exchanges and services where they came to rest - and write it up so a solicitor, insolvency practitioner or investigator can act on it.
- Scope
- One starting point, up to 3 chains, traced to the first cash-out points
- Typical turnaround
- 5 working days
- Delivered as
- Written report + data file
of the stolen £212,000 reached deposit addresses at three identifiable exchanges within nine days.The rest sits in two dormant wallets and a bridge to a chain outside scope. Four hops, two swaps, one bridge.
"Where did the money go, and where is it now?"
- Solicitors acting for fraud victims
- Insolvency practitioners recovering assets
- Executors locating estate assets
- Investigators and forensic accountants
- Firms whose customer funds were misdirected
- The starting wallet or transaction
- What happened, and when
- Any addresses you already know are involved
- What the report is for: disclosure application, proof of debt, recovery
- The flow of funds mapped hop by hop, with every transaction reference
- Where the funds came to rest: exchange deposit addresses, services, dormant wallets
- Amounts at each step, valued at the time
- Obfuscation identified: swaps, bridges, mixers, splits
- A schedule of transactions ready to exhibit
- What can and cannot be established from the chain
What you will actually read.
Every report opens with a plain-language conclusion and the numbers behind it, then works through the same sections each time, so reports are comparable.
- 00
Conclusion
One page. What we found, how confident we are, and the three things that matter most.
- 01
Starting point and scope
The wallet or transaction the trace begins from, the chains covered, and what you told us happened.
- 02
The flow of funds
Each hop from the origin, with dates, amounts and transaction references, as a diagram and a schedule.
- 03
Where the funds are now
Endpoints: deposit addresses at identifiable exchanges, service contracts, or wallets still holding the funds, with balances at the report date.
- 04
Obfuscation
Swaps, bridges, splits, mixers and chain-hopping used along the way, and how each was followed or where the trail stops.
- 05
Attribution
What the evidence supports about who controls each endpoint, graded by confidence, and what would be needed to go further.
- 06
Schedule of transactions
Every transaction in the trace in a form that can be exhibited or sent with a disclosure request.
- 07
Method and limits
The data used, how each judgment was reached, and what on-chain analysis cannot show. Read our methodology.
Which exchange a deposit address belongs to is established from public labels and stated with a confidence grade. Obtaining account-holder details needs a court order or the exchange's cooperation, which is for your solicitor. Not legal advice.
A report is only final when the evidence is.
The first draft is chain-only: what the ledger shows, with every gap named. It then moves through the client's confirmations and the professional's decisions to a final, reconciled report. Each state is printed on the cover. These are the six things that have to be in place.
- Wallet control
- A signed message or nominated transfer from each wallet. Evidence of control of the key at a point in time, not by itself proof of ownership.
- Exchange records
- The client's own exports, matched row by row to the chain.
- Fiat origin
- Bank deposits into the exchanges, and any withdrawal to a bank, closing the trail at both ends.
- Classification
- Every transaction categorised where the evidence supports it, with exceptions isolated: needs the client, needs the professional, unresolved.
- Reconciliation
- Balances from history agreed to live balances, with any material difference stated in pounds.
- Screening
- Direct contact with sanctioned addresses and mixers checked; the scope of the check is always stated.
Often used alongside.
Find out what the wallets say.
Tell us what you need and the decision it feeds into. You get a fixed quote and a delivery date before any work starts.