Crypto scam forensic report: what's inside and why it matters

What a forensic report is (and why it's worth it)

When you're scammed in crypto, the money isn't the only problem: you also have no way to prove what happened or where it went. A forensic report turns scattered transactions and loose screenshots into an ordered, technical, verifiable document that any third party — an exchange, a lawyer, a prosecutor — can read and take seriously.

It's not a promise of recovery. It's evidence: it reconstructs the movement of the money and the context of the scam with the traceability you need to act on your own, without depending on anyone who asks for an upfront fee.

The on-chain trace: where the money went

The core of the report is the reconstruction of the fund flow. We start from your transaction and follow the money hop by hop through each wallet, all the way to its final destination, with a fund-flow diagram that shows the whole route at a glance.

The destination is what defines your options: if the funds reached an exchange with identity verification (KYC), there's a counterparty to claim against; if they entered a mixer or crossed a bridge to another chain, we document it and honestly explain the limit.

What the report includes

Every report is delivered as a PDF and brings together, at a minimum:

• Hop-by-hop on-chain trace with a fund-flow diagram, from your transaction to the final destination.
• The receiving wallets and the destination of the funds: KYC exchange, mixer, bridge or private addresses, identified where possible.
• Infrastructure forensics of the scam site: WHOIS, DNS, SSL certificate, hosting and domain registration date.
• Technology fingerprinting and OSINT/IOC correlation with already-known scam campaigns.
• Transaction hashes, screenshots, methodology, confidence levels and a chain of custody for the evidence.

Infrastructure forensics and OSINT correlation

The money is only half the story. The report also analyzes the infrastructure of the site that scammed you: who registered the domain and when (WHOIS), its DNS configuration and SSL certificate, where it's hosted and what technologies the page uses.

With those indicators (IOCs) we cross-reference your case against already-documented scam campaigns. Often the same operation is behind dozens of victims: correlating the infrastructure helps show it wasn't an isolated incident and strengthens the weight of the evidence.

Built for you to submit it yourself

The report is built to what exchanges' fraud desks and complaint forms require: verifiable hashes, explicit methodology, confidence levels and a clear chain of custody. That means you don't need intermediaries — you submit it yourself, directly, to whoever it concerns.

We work only with public blockchain data and OSINT: we never ask for your seed phrase, your private keys or your ID. Fixed, public price, delivered as a PDF. Before you pay, you can check for free whether your case is traceable.