Incident Investigations

Every case is scoped to its own facts. We trace the movement of stolen funds, reconstruct the modus operandi of the perpetrators, and identify the on- and off-chain footprints that point to identifiable parties.

Our deliverables are formal investigation reports written to the standard expected by prosecutors, regulators, and courts — with clear recommendations for the next law-enforcement or civil step. Engagement scope is calibrated to the value at stake, so smaller victims receive proportionate work without sacrificing rigour.

Beyond the investigation itself, our 24/7 monitoring infrastructure tracks stolen funds as they move across chains, bridges, and exchanges. Where opportunities arise, we engage our network of compliance contacts at venues and service providers to flag and freeze proceeds of crime.

Recovery cannot be guaranteed in any individual case. Our objective is to maximise the realistic probability of recovery by acting quickly and presenting actionable intelligence to the parties who can intervene.

We act as a bridge between victims and the relevant police and prosecutorial authorities. Many investigators do not have the bandwidth or technical depth to triage a complex on-chain matter on their own — we provide them with a structured brief, suggested next steps, and ongoing technical support throughout the case.

Where appropriate, we work directly with foreign agencies through MLAT-equivalent channels to ensure that requests for data, freezing orders, and seizures are correctly framed and routed.

Clients engage us because we combine senior-level forensic experience with Swiss procedural discipline. Every matter is led by an experienced investigator who owns the case end-to-end and remains your single point of accountability.

If you have suffered a crypto-related loss, contact us. We will review the matter confidentially and tell you honestly whether and how we can help.

Pig-Butchering Scams. Long-form social-engineering frauds in which a victim is groomed over weeks or months and then funnelled into a fake investment platform. We trace the deposit flows, identify the cash-out venues, and produce evidence packages used by police forces across multiple jurisdictions.

Wallet Compromise. Unauthorised access through phishing, malware, seed-phrase leakage, or malicious wallet software. We reconstruct the compromise timeline, map the outbound flows, and identify any mixing or peel-chain patterns used by the attacker.

Investment Fraud. Sham token sales, fake yield platforms, and pump-and-dump schemes. We document the fraudulent structure on-chain and produce expert reports suitable for civil and criminal proceedings.

Romance Scams. Frauds that weaponise personal trust to extract crypto payments. We trace the stolen funds and, where possible, attribute them to known fraud clusters already on file with our team.

SIM-Swapping. Account takeovers that defeat SMS-based 2FA and drain custodial accounts. We combine telecom-record analysis with on-chain tracing to attribute the theft and support criminal complaints.

Corporate Hacks & DeFi Exploits. Large-scale incidents affecting protocols, exchanges, and treasuries. We respond in real time, coordinate with authorities and counterparties, and provide the post-incident evidentiary record.