ChainWitness
Investigations Report a scam

ChainWitness / Investigation services

Investigation services

When a lookup is not enough, an expert takes the case.

ChainWitness shows where an address was published. Some cases need more: following the money across wallets, swaps and chains, finding where it reached an exchange, and putting it all in a report a lawyer, a compliance team or a court can use. Every case is handled by a person, not by a script.

Specialized Investigative Report

Fixed scope

Up to 10 wallets in one case, traced and documented by an expert. For victims, lawyers and small businesses who need a clear, citable answer.

From $900per case

Signed by an Expert Witness and Court-Appointed Forensic Expert

Delivery
5–10 business days
Scope
Up to 10 wallets
Follow-up
12 months
  • Manual tracing of the funds, forward and backwardIncluding swaps on DEXs, bridges and instant exchangers where the trail continues
  • Identification of exchanges and services the funds reached
  • OSINT attribution with dated, preserved captures and SHA-256 hashes
  • Flow diagram and transaction table
  • Signed PDF report with methodology and limitations
  • Report in EnglishPortuguese or Spanish on request, at no extra cost
  • Template letter to request a freeze or data from the exchange
  • One review call to walk you through the findings
  • 12 months of monitoring of the addressesAlert by email when funds move or reach an exchange
  • Report kept up to date for 12 monthsNew findings and movements added, with a new signed version
Request a reportFree feasibility review first

Crypto Investigation Consulting

Scope on request

Complex or multi-party cases, ongoing support and expert work for litigation. For law firms, companies, exchanges and public bodies.

Quoted per case

Signed by an Expert Witness and Court-Appointed Forensic Expert

Delivery
Agreed in proposal
Scope
Many wallets
Format
Project or retainer
  • Multi-wallet and cross-chain tracing, clustering and fund-flow analysis
  • Expert reports and technical opinions for litigation, signed by the expert
  • Support to lawyers in drafting requests to exchanges and courts
  • Review of opposing-party reports and evidence
  • Incident response after a hack, drain or insider theft
  • Due diligence of counterparties and wallets before a deal
  • Training for legal, compliance and investigation teams
  • 12 months of monitoring and report updates for every address in the case
  • Reports in EnglishPortuguese or Spanish on request

The case doesn't end at delivery

Funds often move again weeks or months later, sometimes into an exchange where a freeze becomes possible. Both services include 12 months of monitoring of the investigated addresses and a report kept up to date for 12 months: when something relevant happens, you get an alert and, at most once a month, a new signed version of the report, at no extra cost.

Monitoring
12 months
Report updates
12 months
Alerts
Email

How it works

You pay only after we confirm the case can be worked on.

  1. Step 1

    Tell us the case

    Addresses, transaction hashes, dates and what happened. The form takes five minutes.

  2. Step 2

    Feasibility review

    Free, within 2 business days. We say whether the trail can be followed and how far, or tell you honestly that it can't.

  3. Step 3

    Proposal and payment

    Fixed price for the report, or a written proposal for consulting. Invoice from chainwitness.net only.

  4. Step 4

    Report and walkthrough

    Signed PDF, evidence pack with hashes and a walkthrough call. Then 12 months of monitoring and updated versions of the report.

What to expect, honestly

An investigation shows where the money went and who received it. Recovering it depends on what happens next: an exchange agreeing to freeze an account, a lawyer, the police or a court. Our report is built to make those steps faster and stronger.

  • Traceable: funds that stayed on-chain, went through DEXs or bridges, or reached a regulated exchange.
  • Harder: mixers, privacy coins and instant exchangers without identification. We say so in the feasibility review.
  • Confidential: case details are never published on ChainWitness without your written consent.

What we will never do

  • Promise that your funds will be recovered
  • Ask for your recovery phrase, private key or wallet access
  • Charge a "release fee", "tax" or "unlock fee" to return funds
  • Contact you first offering to recover money
  • Ask for payment to anything other than an invoice from chainwitness.net

"Recovery agents" who do any of these are a second scam targeting victims. If someone claims to be ChainWitness, check through the contact page.

Open a case

We reply within 2 business days with the feasibility review. Nothing is charged at this step.

Service
About you
The case
Files (optional)

    We use what you send only to handle your case. See our privacy policy.

    Reply within 2 business days

    Questions

    Can you get my money back?

    No one can promise that honestly. We find where the funds went and document it so an exchange, a lawyer or the authorities can act. Speed matters: the sooner the trail is documented, the better the chance a freeze still works.

    Who signs the report?

    Every report is signed by an Expert Witness and Court-Appointed Forensic Expert in digital forensics, who can explain the findings to lawyers, authorities or a court. Reports are written in English, or in Portuguese or Spanish on request.

    Is the report accepted in court?

    The report describes the methodology, the sources and the limits of each finding, and every capture is preserved with its hash. How it is weighed depends on the jurisdiction and the court; many clients attach it to a lawyer's filing or a police report.

    What if the trail goes cold?

    The feasibility review tells you before you pay. If it stops later, at a mixer or a non-cooperating service, the report says exactly where and why.

    What happens after the report is delivered?

    For 12 months we monitor the investigated addresses. If the funds move, reach an exchange or a new public mention appears, you get an alert, and the report is updated with a new signed version (at most once a month). After 12 months you can renew the monitoring or keep the last version.

    How do I pay?

    By card, bank transfer or crypto (USDT, BTC), always against an invoice issued from chainwitness.net after the feasibility review.

    Start with a free feasibility review

    Tell us the case. We reply in 2 business days with what can be done.