01
We prepare an initial overview of the flow of funds and assess the chances of / possibility of / probability of returning the funds.
Cryptoscams and internal fraud.
Whether you’ve been scammed or are facing internal fraud, you lost access to your funds.
In order to regain your funds, you need a forensic analysis of the flow of funds to figure out where the funds moved and what happened to them.
Once they’re traced to a centralised exchange, legal pressure is needed to force the exchange to seize the illegally acquired funds. Once the exchange seizes the funds, you can take legal action and regain access to your funds by proving ownership over them.
Our process
How we investigate crypto-related cases
From crypto scams to internal fraud, we trace digital asset flows, identify key entities, preserve evidence and prepare structured forensic findings.
02
Forensic analysis helps you understand what happened, which wallets were involved and where the funds went.
03
When stolen assets reach a centralised exchange, we help apply the necessary legal pressure to request a freeze.
04
We cooperate with relevant authorities and help contain the damage.
05
You receive continuous support and clear guidance throughout the process.
Confidential consultation
Start with a confidential consultation.
Before any forensic work begins, we review the situation, available information and potential next steps. Your case is first assessed by a senior member of the Bloctopus Intelligence team with experience across crypto investigations, legal strategy and recovery-related matters.
To protect clients and ongoing investigations, we keep parts of our investigative team confidential. The people involved are assigned based on the type of case, the required expertise and the sensitivity of the matter.
START INVESTIGATIONResolved cases
Some of the cases we helped resolve
From fake support teams to wallet-draining apps, these cases show how fast forensic action can help trace stolen assets, freeze funds, and support recovery.
RaNSOMWARE-STYLE SEXTORTION CASE TRACED TO EXCHANGE ACCOUNT
Case overview
A cyber criminal broke into a personal email account of a female business owner. The attacker was able to acquire her personal information and her private photos.
Situation
The stolen material was used in a sextortion attack against the owner of the email account. The attacker demanded payment in crypto in exchange for not misusing or publishing the material.
Our work
The victim contacted us and we discussed several possible options on how to proceed. As part of the strategy, we made an extremely small payment to the attacker’s crypto address — nowhere near the amount demanded.
Outcome
Several months later, the funds started moving. We traced the transaction flow to an individual account at a known crypto exchange. The exchange cooperated with the process, and the case resulted in a criminal charge filed by the victim’s local law enforcement agency.
INTERNAL FRAUD CASE INVOLVING COMPANY FUNDS CONVERTED INTO CRYPTO
Case overview
A European logistics company contacted us after discovering that its lead accountant had issued fraudulent receipts to his own company.
Situation
The misappropriated funds were then exchanged into crypto and used to invest in multiple altcoins. The company needed to understand what happened to the funds, where the crypto was held, and how the activity could be documented.
Our work
We conducted a forensic investigation into the accountant’s crypto activity. This included tracing the relevant transactions, reviewing the on-chain movements, and identifying the flow of funds across the assets involved.
Outcome
We prepared a forensic report containing the relevant on-chain evidence. The report was then used in criminal and civil proceedings against the accountant.
CRYPTO SCAM CASE INVOLVING FAKE BRIDGE ON DISCORD
Case overview
An individual experienced issues while trying to move crypto from one blockchain to another through a designated bridge.
Situation
When he asked for help on the bridge’s official Discord server, he was contacted by scammers pretending to be the official support team. They directed him to a fraudulent website where he connected his wallet, after which the wallet was emptied.
Our work
The victim contacted us immediately. We set up alerts to monitor the stolen assets in real time and traced the funds as they moved from wallet to wallet. When the assets reached a known crypto exchange, we used our contacts at the exchange to request urgent action.
Outcome
The exchange took immediate steps to freeze the assets. As a result, most of the stolen funds were frozen and later recovered by the victim.
CRYPTO SCAM CASE INVOLVING A FRAUDALENT WALLET-DRAINING APP
Case overview
A person downloaded a fraudulent app, believing it was a legitimate crypto price prediction tool. fraudulent receipts to his own company.
Situation
The app established an external connection with the perpetrator’s server and sent the victim’s wallet private keys to it. The perpetrator then drained the wallet of its assets.
Our work
We traced the stolen funds across several different blockchains. During the investigation, we identified funds that could be acted upon through a known crypto exchange and through an OTC trader who cooperated with us.
Outcome
Part of the funds were frozen through the crypto exchange and part through the OTC trader. The victim was then able to recover those funds through legal means, supported by the documentation we prepared throughout the case. In total, approximately $60,000 of $80,000 was recovered.
FAQ
Frequently asked questions about crypto scams and internal fraud
Q
What should I do first if I have been targeted by a crypto scam?
Stop all communication with the suspected scammer, do not send additional funds and preserve every piece of evidence. Save wallet addresses, transaction hashes, screenshots, emails, chat messages, website links and exchange records. Early evidence preservation helps investigators reconstruct the flow of funds and assess whether urgent action, such as exchange escalation, may be possible.
Q
Can stolen crypto be recovered after a scam?
Recovery may be possible in some cases, but it is never guaranteed. The chances depend on where the funds moved, whether they reached a centralised exchange or identifiable service, how quickly the case is escalated and whether legal or compliance channels can be used. Blockchain tracing helps establish the evidence needed for recovery-related action.
Q
Can stolen crypto be recovered after ascam?
Recovery may be possible in some cases, but it is never guaranteed. The chances depend on where the funds moved, whether they reached a centralised exchange or identifiable service, how quickly the case is escalated and whether legal or compliance channels can be used. Blockchain tracing helps establish the evidence needed for recovery-related action.
Q
How does Bloctopus Intelligence investigate crypto scam cases?
Bloctopus Intelligence analyses wallet addresses, transaction hashes and fund movements to reconstruct what happened. The investigation can include wallet mapping, transaction timeline analysis, cross-chain tracing, exchange or service identification, evidence preservation and preparation of structured forensic findings for legal, compliance or reporting purposes.
Q
What information do you need to start a crypto scam investigation?
The most useful information includes transaction hashes, receiving wallet addresses, exchange account records, screenshots, emails, chat messages, website links, social media profiles and a short timeline of the event. You should never share seed phrases, private keys, passwords or full wallet access with any investigation or recovery provider.
Q
Can you help if the stolen funds reached a crypto exchange?
Yes. If stolen or misappropriated assets appear to have reached a centralised exchange, Bloctopus can prepare structured evidence to support exchange notifications, freeze requests or legal escalation. The final outcome depends on the exchange, the quality of the evidence, applicable procedures and the involvement of legal or law enforcement channels.
Q
How is a legitimate crypto investigation different from a recovery scam?
A legitimate crypto investigation does not guarantee recovery, does not ask for seed phrases or private keys and does not claim to hack wallets. It focuses on evidence-based blockchain analysis, transaction tracing, reporting and lawful escalation. Be cautious of anyone promising guaranteed recovery or requesting additional payments disguised as taxes, unlock fees or wallet verification fees.
Q
Can Bloctopus Intelligence investigate internal fraud involving company funds converted into crypto?
Yes. Internal fraud cases can involve employees, contractors, accountants, managers or insiders who move company funds into crypto assets. Bloctopus Intelligence can analyse the relevant transactions, map wallet activity, reconstruct fund flows and prepare forensic findings that support internal review, civil proceedings, criminal complaints or legal action.
Q
What is the difference between a crypto scam investigation and an internal fraud investigation?
A crypto scam investigation usually focuses on external fraud, such as fake investment platforms, phishing, wallet-draining apps, fake support teams or social engineering. An internal fraud investigation focuses on misuse of company assets, insider misconduct, unauthorised transfers or misappropriated funds that were converted into crypto. Both require structured blockchain analysis and evidence preservation.
Q
Can a forensic report be used for police, lawyers or court proceedings?
A forensic report can help organise wallet addresses, transaction hashes, fund-flow analysis, timelines, screenshots and supporting evidence into a structured format. Such reports can support police reports, legal teams, civil or criminal proceedings, exchange escalation, internal investigations and compliance reviews. The receiving authority or institution decides how the report is used.
Q
How fast should I act after discovering a crypto scam or internal fraud?
You should act as quickly as possible. Crypto assets can move through multiple wallets, chains and services in a short period of time. Early review improves the chance of preserving evidence, identifying exchange touchpoints and preparing timely escalation materials where a freeze or preservation request may be relevant.
Q
Do you guarantee that funds will be frozen or recovered?
No. No forensic provider can guarantee that funds will be frozen or recovered. Bloctopus Intelligence’s crypto recovery service is success-fee based, meaning we only charge a recovery fee if assets are successfully recovered. Our role is to trace the assets, preserve evidence, prepare structured findings and support lawful escalation where possible. Recovery depends on the facts of the case, timing, asset movement, exchange cooperation and legal or regulatory procedures.
Q
What should I avoid after discovering a crypto scam?
Do not send additional funds, do not pay alleged recovery agents, do not delete conversations and do not interact with suspicious links or wallet requests. Do not share seed phrases, private keys or passwords. Preserve evidence and request a forensic review before taking steps that could compromise the investigation or expose you to additional fraud.
How we approach your case