01
We prepare an initial overview of the flow of funds and assess the chances of / possibility of / probability of returning the funds.
Cryptoscams, ransomware, internal fraud.
Whether you’ve been scammed, attacked by a ransomware virus or are facing internal fraud, you lost access to your funds.
In order to regain your funds, you need a forensic analysis of the flow of funds to figure out where the funds moved and what happened to them.
Once they’re traced to a centralised exchange, legal pressure is needed to force the exchange to seize the illegally acquired funds. Once the exchange seizes the funds, you can take legal action and regain access to your funds by proving ownership over them.
Start your case
Our process
How we investigate crypto-related cases
From crypto scams and ransomware payments to internal fraud, we trace digital asset flows, identify key entities, preserve evidence and prepare structured forensic findings.
02
Forensic analysis helps you understand what happened, which wallets were involved and where the funds went.
03
When stolen assets reach a centralised exchange, we help apply the necessary legal pressure to request a freeze.
04
We cooperate with relevant authorities and help contain the damage.
05
You receive continuous support and clear guidance throughout the process.
Confidential consultation
Start with a confidential consultation.
Before any forensic work begins, we review the situation, available information and potential next steps. Your case is first assessed by a senior member of the Bloctopus Intelligence team with experience across crypto investigations, legal strategy and recovery-related matters.
To protect clients and ongoing investigations, we keep parts of our investigative team confidential. The people involved are assigned based on the type of case, the required expertise and the sensitivity of the matter.
START INVESTIGATIONResolved cases
Some of the cases we helped resolve
From fake support teams to wallet-draining apps, these cases show how fast forensic action can help trace stolen assets, freeze funds, and support recovery.
RENSOMWARE-STYLE SEXTORTION CASE TRACED TO EXCHANGE ACCOUNT
Case overview
A cyber criminal broke into a personal email account of a female business owner. The attacker was able to acquire her personal information and her private photos.
Situation
The stolen material was used in a sextortion attack against the owner of the email account. The attacker demanded payment in crypto in exchange for not misusing or publishing the material.
Our work
The victim contacted us and we discussed several possible options on how to proceed. As part of the strategy, we made an extremely small payment to the attacker’s crypto address — nowhere near the amount demanded.
Outcome
Several months later, the funds started moving. We traced the transaction flow to an individual account at a known crypto exchange. The exchange cooperated with the process, and the case resulted in a criminal charge filed by the victim’s local law enforcement agency.
INTERNAL FRAUD CASE INVOLVING COMPANY FUNDS CONVERTED INTO CRYPTO
Case overview
A European logistics company contacted us after discovering that its lead accountant had issued fraudulent receipts to his own company.
Situation
The misappropriated funds were then exchanged into crypto and used to invest in multiple altcoins. The company needed to understand what happened to the funds, where the crypto was held, and how the activity could be documented.
Our work
We conducted a forensic investigation into the accountant’s crypto activity. This included tracing the relevant transactions, reviewing the on-chain movements, and identifying the flow of funds across the assets involved.
Outcome
We prepared a forensic report containing the relevant on-chain evidence. The report was then used in criminal and civil proceedings against the accountant.
CRYPTO SCAM CASE INVOLVING FAKE BRIDGE ON DISCORD
Case overview
An individual experienced issues while trying to move crypto from one blockchain to another through a designated bridge.
Situation
When he asked for help on the bridge’s official Discord server, he was contacted by scammers pretending to be the official support team. They directed him to a fraudulent website where he connected his wallet, after which the wallet was emptied.
Our work
The victim contacted us immediately. We set up alerts to monitor the stolen assets in real time and traced the funds as they moved from wallet to wallet. When the assets reached a known crypto exchange, we used our contacts at the exchange to request urgent action.
Outcome
The exchange took immediate steps to freeze the assets. As a result, most of the stolen funds were frozen and later recovered by the victim.
CRYPTO SCAM CASE INVOLVING A FRAUDALENT WALLET-DRAINING APP
Case overview
A person downloaded a fraudulent app, believing it was a legitimate crypto price prediction tool. fraudulent receipts to his own company.
Situation
The app established an external connection with the perpetrator’s server and sent the victim’s wallet private keys to it. The perpetrator then drained the wallet of its assets.
Our work
We traced the stolen funds across several different blockchains. During the investigation, we identified funds that could be acted upon through a known crypto exchange and through an OTC trader who cooperated with us.
Outcome
Part of the funds were frozen through the crypto exchange and part through the OTC trader. The victim was then able to recover those funds through legal means, supported by the documentation we prepared throughout the case. In total, approximately $60,000 of $80,000 was recovered.
How we approach your case