Investment fraud
Fake trading platforms, forged dashboards, and manipulated withdrawals designed to extract deposits and fees.
Report this case type
Aegis produces defensible blockchain forensic reports used by law firms, compliance teams, and victims of cryptocurrency fraud — including investment scams, romance ("pig-butchering") schemes, job & task tax fraud, online purchase fraud, and wallet compromise. We map on-chain activity, attribute counterparties, and preserve the record you need for lawful recovery.
No upfront promises of recovery. Every engagement begins with a written scope, fixed-fee assessment, and a plain-English explanation of what on-chain evidence can and cannot prove.
Feedback reflects individual experiences and does not guarantee a recovery outcome.
Verified feedback from law firms, corporate clients and individuals across the United States. Case details are always paraphrased and identifying information removed to protect client confidentiality.

“We instructed Aegis on a cross-chain matter after two other firms produced screenshots we could not use. Their report was structured, sourced and defensible — exactly what our filing required.”

“They never once promised to get my money back, and that is why I trusted them. They explained every step, traced the transfers to two exchanges, and gave me something my attorney could act on.”

“Clear scoping, fixed fee, delivered on schedule. The attribution work on the counterparty wallets held up under our internal review without a single correction.”

“After the scam I was targeted by three fake recovery agents. Aegis was the first that treated me like a client and not a target — patient, discreet, and honest about the odds.”

“Thorough evidence package with a clean chain of custody. Turnaround was slightly longer than quoted on a complex file, but the quality justified the wait.”

“They walked me through containment within hours of my first call, then documented the drain transactions properly for my police report and my exchange dispute.”

“The methodology section alone answered every question opposing counsel raised. Assumptions were labelled as assumptions, which is rare in this field.”

“I lost eleven months of savings to a fake trading app. Aegis mapped where it went and told me plainly what was realistic. No pressure, no false hope.”

“We use their reports to support account freezes. The cluster attribution is conservative and well sourced, which is exactly what our legal team needs.”

“Professional from the first call. Written scope before any invoice, and a clear statement of what on-chain evidence can and cannot prove.”

“Straightforward and honest. My case was smaller than most of their work and they still gave it a proper report I could take to my bank.”

“Our organisation was hit by a business email compromise routed through stablecoins. Their timeline reconstruction was meticulous and easy for our board to follow.”

“I have reviewed a lot of blockchain analysis. This was the first that clearly separated verified transactions from inference. Very credible expert work.”

“They responded the same evening and told me exactly which accounts to secure first. The report to my carrier and my exchange was ready in days.”

“Rigorous work. I would have liked a shorter executive summary, but the substance was excellent and the pricing was transparent throughout.”

“At seventy-one I did not understand any of this. They explained it in plain English, twice, without ever making me feel foolish.”

“Treasury wallet was compromised by a malicious approval. Their containment guidance and post-incident report shaped our entire new key policy.”

“The fake task platform demanded more and more deposits. Aegis documented every transfer and helped me file a proper report with IC3.”

“Reliable partner for the on-chain half of our investigations. Their work maps cleanly onto our internal case file standards.”

“Discreet and calm at a moment when I was anything but. The final report gave my insurer everything they asked for on the first submission.”

“Solid tracing and clear sourcing. A couple of exhibits needed reformatting for our system, which they turned around quickly.”

“They found the deployer wallet and followed the proceeds through two bridges. I finally understand what actually happened to my funds.”

“Deposition-ready. The analyst could defend every conclusion and, more importantly, knew where to stop.”

“One signature drained my wallet. Within a week I had a documented record of the drainer contract and the receiving addresses.”

“Counterparty screening we can actually rely on. Conservative language, no exaggerated certainty, delivered inside the agreed window.”

“Helped establish what digital assets existed and where they moved after my brother's passing. Sensitive handling of a difficult matter.”

“Chargeback fraud paid out in crypto. Their evidence package convinced our processor to reverse the decision against us.”

“I refer victims to Aegis because they never promise recovery. In this industry that honesty is the whole test.”

“Coordinated tightly with our security team during an active incident. Documentation was immaculate from hour one.”

“The fake broker had a beautiful dashboard and none of it was real. Aegis proved the deposits never reached any exchange venue.”

“Methodologically sound and appropriately cautious. Good partner for matters that may end up in front of a regulator.”

“Eighteen months of my life and most of my savings. They handled my file with more dignity than the people I reported it to.”

“I subcontract the on-chain component to Aegis now. Consistent quality and they never overstate what the data supports.”

“Our vendor payment was diverted to a stablecoin address. The trace and report were finished before our insurer's deadline.”

“Realistic assessment from the first call. They told me two of my three objectives were not achievable, then delivered on the third.”

“Same-day containment call, then a full forensic report. Calm, competent people at the worst moment I have had with money.”

“We have reviewed dozens of their reports against claims. Consistent structure, consistent evidentiary discipline.”

“Explained the difference between tracing and recovery before I even asked. That single conversation saved me from another scam.”

“Detailed, referenced, and readable. I could follow the entire path of my funds across four hops without a technical background.”

“Fair fixed fee for a small case. Communication was excellent, and they were upfront that outcomes were uncertain.”

“We have retained Aegis on four matters. Their exhibits require almost no reworking before filing, which saves us real hours.”

“My exchange ignored me until I sent their report. Two days later my case was reopened with a named investigator.”

“Genuinely technical people. They caught a proxy contract detail that three other analyses missed entirely.”

“Kind, patient, and completely straight with me about what could and could not be done. I would recommend them to anyone.”
Testimonials reflect individual client experiences and are not a prediction or guarantee of any outcome. Aegis Financial Forensics provides investigative and evidentiary services only; we do not promise the recovery of funds.
These communications are displayed with client authorization. Personal details, wallet addresses, and other sensitive information remain protected.
These anonymized wallet views were supplied by clients after individual engagements. Wallet addresses and other sensitive account information remain withheld.
This client-authorized screen recording shows the final stage of a completed engagement: once the transaction hash has been assigned to the settled funds, the client withdraws them from their own wallet — with each step captured for the case record.
Once a matter concludes, the transaction hash is assigned and verified against the case record before any movement of funds.
Funds are withdrawn by the client, from the client’s own wallet, to a destination the client alone specifies.
Every step is preserved in the chain-of-custody file so the withdrawal can be evidenced to counsel, courts, or counterparties.
Most matters we take on fall into one of these categories. If yours isn't listed, tell us the essentials — we'll say honestly whether on-chain evidence can help.
Fake trading platforms, forged dashboards, and manipulated withdrawals designed to extract deposits and fees.
Report this case typeLong-form relationship-based scams that funnel victims into fraudulent crypto investments, often via Telegram, WhatsApp, or dating apps.
Report this case typeFake remote-work and task platforms that demand crypto "tax", "unlock", or "commission" payments before withheld earnings can be released.
Report this case typeNon-delivery, counterfeit-goods, and marketplace scams where the buyer or seller was paid in cryptocurrency.
Report this case typeMalicious approvals, drainer signatures, seed-phrase phishing, and compromised browser extensions.
Report this case typeVendor-impersonation payments, insider misappropriation, and DAO treasury exploits routed through mixers or bridges.
Report this case typeMost people who contact Aegis have never dealt with a forensic firm before. You do not need technical knowledge, and you do not need to understand the blockchain — you only need the records you already have. We tell you plainly, in writing, what the on-chain evidence shows and what realistically can be pursued from there.
Investment or task-based platforms that show a growing balance but block withdrawals behind tax, clearance or upgrade fees. The deposits you already made are real, on-chain, and traceable.
Romance and long-conversation ("pig butchering") schemes routed through a fake trading app. We reconstruct every deposit and follow the consolidation wallets behind it.
Approval-based drainers, malicious signatures, compromised seed phrases and SIM-swap takeovers leave a distinct on-chain signature we can document.
Online purchase fraud, escrow impersonation and fake OTC brokers — including business email compromise where an invoice was redirected to a crypto address.
Internal misappropriation, vendor impersonation and exchange-account compromise, documented to the standard your board, auditor and insurer will expect.
You already have counsel or a claim open and need an independent, citable tracing report and, where needed, expert testimony.
Do not send further funds, and do not pay anyone promising to "release" your balance. Read our intake FAQ and engagement process first.
A continuous view of the blockchain analytics stack our investigators use to follow stolen digital assets across wallets, bridges, mixers and exchanges. Addresses and hashes below are anonymised samples of monitored flow patterns — never client data.
Every engagement is scoped in writing before work begins. We take on cases where on-chain data can materially advance a legal, regulatory, or insurance outcome.

Address clustering, transaction graph reconstruction, and cross-chain follow-through across mixers, bridges, and centralized exchanges.
Explore service
Documented analysis of pig-butchering, fake trading platforms, and rug-pull schemes with counterparty attribution where possible.
Explore service
Post-incident review of drainer signatures, malicious approvals, and private-key exposure, with prioritized remediation steps.
Explore service
Contained triage for treasury breaches, coordination with exchange compliance teams, and preservation of on-chain evidence.
Explore service
Source-of-funds analysis, sanctions screening context, and risk narratives for regulated institutions and their counsel.
Explore service
Written expert reports, affidavits, and — where appropriate — expert witness testimony for civil proceedings.
Explore serviceOur analysts work remotely from our New York office at 48 Wall Street, so a client in Anchorage receives the same tracing standard as a client in Manhattan. Each state page explains the reporting agencies, filing routes and civil options that apply where you live.
New York City · Brooklyn · Buffalo
View New York guide →Los Angeles · San Francisco · San Diego
View California guide →Houston · Dallas · Austin
View Texas guide →Miami · Tampa · Orlando
View Florida guide →Chicago · Naperville · Springfield
View Illinois guide →Jersey City · Newark · Princeton
View New Jersey guide →Seattle · Bellevue · Spokane
View Washington guide →Atlanta · Savannah · Augusta
View Georgia guide →
Digital assets don't respect borders — investigations shouldn't either. We follow funds across chains, exchanges, and jurisdictions, and structure our reports so they remain admissible under the evidentiary rules of the venue your matter is heading to.
Our reports are structured so that a second analyst — or opposing counsel — can reproduce every finding from the raw ledger. We cite transaction hashes, disclose attribution confidence, and separate observed facts from analytical inferences.
Read our methodology →Chain-of-custody logging for every artifact
Explicit confidence tiers on attributions
Independent second-analyst review
Reports built for reproduction by opposing counsel
Every engagement produces a signed, second-analyst-reviewed PDF built to be read by judges, opposing experts, and regulators. Transaction hashes are cited, tools are declared, and every attribution carries an explicit confidence tier.

Submit wallet addresses, transaction hashes, and a short narrative.
Fixed-fee preliminary assessment and written scope.
Deep tracing across chains, services, and counterparties.
Second-analyst reviewed report your counsel can act on.
Support your attorney, insurer, or investigator.

Reports authored to withstand Daubert-style challenges and CPR Part 35 expert duties.
Encrypted intake channels, hashed artifacts, and retention aligned to counsel's litigation hold.
No referral fees. No contingency work. No affiliation with exchanges under investigation.
Written NDAs on every engagement; client identities never used in marketing.
Anyone guaranteeing the return of your assets is not telling you the truth. Our value is evidence: a defensible, independently verifiable record of where your assets went, in a form that counsel, exchange compliance teams, insurers and investigators can act on.
Full terms in our legal disclaimer.
The questions we're asked most often — answered with the same candor we bring to client engagements.
Read the full FAQ →No — and any firm that says otherwise is not being truthful. On-chain forensics identifies where funds moved and who may control them; recovery itself depends on legal process.
A wallet address or transaction hash, a short written timeline, and any communications with the counterparty. More context accelerates the assessment.
Yes, where victims choose to file. We prepare evidence packages agencies can act on. We are an independent private firm.
A fixed fee for the initial assessment, and a written scope for further work. We do not accept 'no recovery, no fee' arrangements.
Practical writing for victims of investment scams, romance fraud, job-task fraud, wallet compromise, and business impersonation — plus the legal machinery behind each recovery attempt. New articles publish every morning.
Share the essentials — wallet, transaction, timeline. We respond within one business day with a candid view of what on-chain evidence can and cannot do for your situation.