We reconstruct the movement of money after financial and cryptocurrency fraud — where it went, who holds it now, and what it takes to get it frozen.
We work from the records: statements, wallet histories, correspondence. What we find is what goes in the report.
We reconstruct the chain of fund movement — banking and cryptocurrency — from the point of theft through every intermediary hop to the final addresses and accounts holding the balance.
We identify the exchanges, payment providers, and wallet services that handled the funds along the route.
We prepare and submit formal requests to freeze recipient accounts and wallets with the institutions that control them.
We compile a structured report — addresses, timestamps, transaction references, and the reasoning that links them — in a form banks, exchanges, and authorities can act on.
Where litigation follows, we hand the case materials to an independent lawyer engaged by you.
An initial assessment of the situation and a straight answer on what can realistically be pursued.
We don't guarantee recovery, act as your legal representative, or take cases we can't substantiate from records.
Four stages. You know at the end of each one whether the next is worth running.
We review the circumstances of the incident and the materials provided, then assess the case's prospects before any substantive work begins.
We analyse the transaction chain across banking and blockchain records and establish the current location of the funds.
We submit formal requests to the banks, exchanges, and payment providers where the funds have been located, with the supporting analysis attached.
We deliver a structured report setting out the findings, the records behind them, and recommendations for next steps.
Having these ready at intake is the difference between starting this week and starting next month.
Incomplete records don't disqualify a case. Attach what you have to the intake form below — we'll tell you what's missing and whether it matters.
Describe the circumstances. We'll come back to you with an initial assessment of the situation and what can be pursued.
Submitted details are used only to assess and progress your case. No cookies are set by this site and no analytics or advertising trackers are used. See the privacy notice and terms of service.
Your details are with us. We'll review the circumstances and come back to you with an initial assessment.
If you send us an enquiry we collect your name, email address, phone number if you give one, what you tell us about your situation, and any supporting documents you attach. Our hosting provider adds your IP address, browser details and the referring page, which we use to filter spam and keep a basic audit trail. That is the complete list.
It is stored on managed infrastructure in the eastern United States and read by a person — nothing about your case is decided automatically. We don't sell it, don't share it for marketing, and don't buy information about you from anyone else. Enquiries that don't become cases are deleted; you can ask us to delete yours sooner, and we will.
We are the data controller, and you have the right to see what we hold, correct it, have it deleted, or complain to the Information Commissioner's Office.
Read the full privacy noticeWe can't guarantee that you'll get your money back, and we won't pretend otherwise. Whether funds can be traced or frozen depends on where they went, how quickly, which institutions hold them now, and whether those institutions and the relevant authorities co-operate. Almost none of that is ours to control.
What we do undertake is to apply proper skill and care, to be straight with you about what the evidence shows, and to tell you early when a matter can't realistically be progressed — even when saying so ends a paying engagement. We're paid for the investigation, not a share of any recovery.
Sending the form doesn't engage us and doesn't commit you to anything. If we take the work on, you get a written engagement letter first, and you'll never be charged anything you haven't already agreed to in writing.
Read the full terms of servicePeople who have just lost money are the prime target for a second fraud, and some of those operations impersonate legitimate firms. So that you can hold us to it, here is what we will never do.
We will never contact you out of the blue saying we've found your money. We will never ask for a payment to "release" or "unlock" recovered funds — that request is the defining move of an advance-fee fraud. We will never ask for your passwords, seed phrase or private keys, ask you to install remote-access software, ask you to move funds "somewhere safe", take payment in gift cards, or ask you to keep us secret from your bank, your lawyer or the police.
Telephone us on the number published on this site rather than one sent to you in a message, and check the email domain matches this website exactly. If someone claiming to be us does any of the above, it isn't us — don't pay, and please tell us at admin@rapidforensics.org.
More on avoiding recovery scams