Investment fraud
Fake trading platforms, forged dashboards, and manipulated withdrawals designed to extract deposits and fees.
Report this case type
Independent blockchain investigations
Evidence-grade tracing for digital asset disputes.
Aegis produces defensible blockchain forensic reports used by law firms, compliance teams, and victims of cryptocurrency fraud — including investment scams, romance ("pig-butchering") schemes, job & task tax fraud, online purchase fraud, and wallet compromise. We map on-chain activity, attribute counterparties, and preserve the record you need for lawful recovery.
No upfront promises of recovery. Every engagement begins with a written scope, fixed-fee assessment, and a plain-English explanation of what on-chain evidence can and cannot prove.
Investment fraudRomance / pig-butchering scamsJob & task tax fraudOnline purchase fraudWallet drainer attacksFake exchange withdrawalsRug pulls & exit scamsImpersonation & phishingBusiness email compromiseSIM-swap crypto theftOTC & P2P deposit fraudRansomware paymentsInvestment fraudRomance / pig-butchering scamsJob & task tax fraudOnline purchase fraudWallet drainer attacksFake exchange withdrawalsRug pulls & exit scamsImpersonation & phishingBusiness email compromiseSIM-swap crypto theftOTC & P2P deposit fraudRansomware payments
Chain coverage
Bitcoin, Ethereum, Tron, Solana, BNB, L2s
Report format
Court-ready PDF with cited transaction hashes
Turnaround
Preliminary assessment within 3 business days
Independence
No affiliation with exchanges we investigate
Fraud we investigate
If it moved on-chain, we can trace it.
Most matters we take on fall into one of these categories. If yours isn't listed, tell us the essentials — we'll say honestly whether on-chain evidence can help.
Romance & pig-butchering
Long-form relationship-based scams that funnel victims into fraudulent crypto investments, often via Telegram, WhatsApp, or dating apps.
Report this case typeJob & task tax fraud
Fake remote-work and task platforms that demand crypto "tax", "unlock", or "commission" payments before withheld earnings can be released.
Report this case typeOnline purchase fraud
Non-delivery, counterfeit-goods, and marketplace scams where the buyer or seller was paid in cryptocurrency.
Report this case typeWallet drainer attacks
Malicious approvals, drainer signatures, seed-phrase phishing, and compromised browser extensions.
Report this case typeBusiness & treasury fraud
Vendor-impersonation payments, insider misappropriation, and DAO treasury exploits routed through mixers or bridges.
Report this case typeServices
What we actually do.
Every engagement is scoped in writing before work begins. We take on cases where on-chain data can materially advance a legal, regulatory, or insurance outcome.
On-chain forensics
01
Cryptocurrency tracing
Address clustering, transaction graph reconstruction, and cross-chain follow-through across mixers, bridges, and centralized exchanges.
Explore service
Scam analysis
02
Investment fraud investigations
Documented analysis of pig-butchering, fake trading platforms, and rug-pull schemes with counterparty attribution where possible.
Explore service
Incident forensics
03
Wallet compromise forensics
Post-incident review of drainer signatures, malicious approvals, and private-key exposure, with prioritized remediation steps.
Explore service
Enterprise response
04
Business & DAO incident response
Contained triage for treasury breaches, coordination with exchange compliance teams, and preservation of on-chain evidence.
Explore service
Regulatory
05
AML & compliance support
Source-of-funds analysis, sanctions screening context, and risk narratives for regulated institutions and their counsel.
Explore service
Litigation support
06
Expert reports & testimony
Written expert reports, affidavits, and — where appropriate — expert witness testimony for civil proceedings.
Explore service12+
Blockchains covered end-to-end
3 days
Median preliminary assessment
2 analysts
Independent review on every report
100%
Fixed-fee, no contingency work
Global coverage
Cross-border tracing, jurisdiction-aware reporting.
Digital assets don't respect borders — investigations shouldn't either. We follow funds across chains, exchanges, and jurisdictions, and structure our reports so they remain admissible under the evidentiary rules of the venue your matter is heading to.
- United States (federal & state)
- Canada & North America
- United Kingdom & EU
- UAE & GCC
- Singapore & APAC
- LATAM & offshore centers
Methodology
Reproducible, cited, defensible.
Our reports are structured so that a second analyst — or opposing counsel — can reproduce every finding from the raw ledger. We cite transaction hashes, disclose attribution confidence, and separate observed facts from analytical inferences.
Read our methodology →Chain-of-custody logging for every artifact
Explicit confidence tiers on attributions
Independent second-analyst review
Reports built for reproduction by opposing counsel
Deliverables
A report your counsel can file, not a slide deck.
Every engagement produces a signed, second-analyst-reviewed PDF built to be read by judges, opposing experts, and regulators. Transaction hashes are cited, tools are declared, and every attribution carries an explicit confidence tier.
- Executive summary in plain English
- Annotated on-chain transaction graph
- Counterparty attribution with confidence tiers
- Tooling manifest and reproducibility notes
- Signed analyst declarations
Engagement
A five-stage engagement built for legal outcomes.
01
Intake
Submit wallet addresses, transaction hashes, and a short narrative.
02
Scoped assessment
Fixed-fee preliminary assessment and written scope.
03
Investigation
Deep tracing across chains, services, and counterparties.
04
Reporting
Second-analyst reviewed report your counsel can act on.
05
Legal handoff
Support your attorney, insurer, or investigator.
Who we work with
We work when on-chain evidence can change the outcome.
Standards
Held to the standards courts, regulators, and insurers expect.
Evidentiary rigor
Reports authored to withstand Daubert-style challenges and CPR Part 35 expert duties.
Data governance
Encrypted intake channels, hashed artifacts, and retention aligned to counsel's litigation hold.
Independence
No referral fees. No contingency work. No affiliation with exchanges under investigation.
Confidentiality
Written NDAs on every engagement; client identities never used in marketing.
FAQ
Straight answers.
The questions we're asked most often — answered with the same candor we bring to client engagements.
Read the full FAQ →Can you guarantee my funds will be recovered?+
No — and any firm that says otherwise is not being truthful. On-chain forensics identifies where funds moved and who may control them; recovery itself depends on legal process.
What do you need to start?+
A wallet address or transaction hash, a short written timeline, and any communications with the counterparty. More context accelerates the assessment.
Do you work with law enforcement?+
Yes, where victims choose to file. We prepare evidence packages agencies can act on. We are an independent private firm.
How is pricing structured?+
A fixed fee for the initial assessment, and a written scope for further work. We do not accept 'no recovery, no fee' arrangements.
Editorial · Updated daily
Crypto recovery insights & forensic playbooks.
Practical writing for victims of investment scams, romance fraud, job-task fraud, wallet compromise, and business impersonation — plus the legal machinery behind each recovery attempt. New articles publish every morning.
First articles are being prepared. The daily editorial calendar publishes fresh coverage every morning.
Case intake
Start with a confidential case review.
Share the essentials — wallet, transaction, timeline. We respond within one business day with a candid view of what on-chain evidence can and cannot do for your situation.