Make sense of crypto fraud before you act.
Clear, evidence-led guidance for people affected by crypto loss and the professionals responsible for investigation, compliance and legal response.
Start with the question you need answered.
The library is organised around real decisions: what to do after a loss, how tracing works, and how professional teams turn on-chain activity into reviewable evidence.
I have lost crypto. What should I do now?
Secure accounts, preserve evidence and avoid common secondary-recovery scams.
See immediate steps → ⇄Understand tracingHow do investigators follow digital assets?
Learn how transactions, services, counterparties and cross-chain movements are examined.
Understand the process → ◇For professionalsWhat makes forensic work defensible?
Explore evidence handling, analytical limits, documentation and human review.
Explore the fundamentals →Practical guidance for informed action.
Read independently or follow the collection from incident response through tracing and recovery-feasibility assessment.
Common crypto scams: patterns, warning signs and evidence clues
Recognise impersonation, investment, phishing and wallet-draining tactics—and understand what information may matter later.
Lost crypto? The first steps to take
A calm checklist for account security, evidence preservation, reporting and avoiding further harm.
How cryptocurrency tracing works
From transaction identifiers and hops to services, bridges and investigative context.
Blockchain forensics 101
How analysts examine on-chain movement, enrich evidence and communicate limitations.
What happens during a tracing assessment?
Inputs, validation, analytical stages and the questions an initial review should answer.
How digital-asset recovery actually works
Tracing is one part of a wider process involving evidence, counterparties, jurisdiction and actionability.
Need help applying this to a real case?
Individuals can begin with guided intake. Firms and institutional teams can discuss recurring investigations, evidence workflows or platform access.