CRYPTOCURRENCY FLOW ANALYSIS

Follow the money. Make the evidence clear.

We trace where your cryptocurrency went and prepare a technical analysis report for exchanges, the token issuer, police and lawyers.

We do not recover funds. We prepare the evidence for those who can act.

Money flow

EXAMPLE-01 / USDT · TRON

FICTIONAL EXAMPLE / 01

40 example addresses · 7 stages. Select an address; zoom or pan to explore.

Three payments reach two scammer-supplied addresses. Ten smaller branches, six forwarding wallets, a collection wallet and a peel chain lead to four exchanges, two held balances, an intermediary, fees and a mixer entry. Three dashed mixer exits are candidates, not confirmed. Separate exchange funding is excluded.

Given by the scammerObserved transferInferred linkSeparate fundingCandidate, not confirmed

Ring: role · curve width: amount · red flag: address given by the scammer, according to the applicant’s statement in this fictional example.

Counters ease after each transfer lands. Zero unaccounted means arithmetic balance under the inferred pairing, not a confirmed link.

Fictional data · example addresses are invalid
Sent by the applicant48 620.000000USDT
Transfers shown493 payments · 2 receiving addresses
Applicant funds held13 996.543211Applicant allocation, conditional
Unaccounted for0.000000Applicant allocation, conditional

Available now USDT / TRON

Other chains in development

Reports in EN · LT · RU

THE EXAMPLE / BY THE NUMBERS

See the movement. Check the balance.

The same fictional transfers, read through time, destinations and holding periods.

Transfer timeline

USDT

Chronological order, equally spaced events. Colour shows the receiving role; the separate withdrawal is marked F. Transfers reuse funds, so their sum is not the amount sent.

Read chart values

Where the money ended

USDT
48 620.000000Sent by the applicant
Unaccounted for0.000000

The pairing allocates the intermediary branch onwards. Its unresolved allocation is zero only under that assumption.

Applicant funds only. Deposits are historical endpoints. The trace stops at the mixer entry; candidates never enter these totals.

How long before the next move?

min

* Conditional pairing

Minutes from first receipt to first onward transfer. Partial balances may remain. The intermediary timing does not confirm the pairing.

Read chart values

PRODUCT / EXAMPLE-01

One case. Four ways to examine it.

Explore the wallet, the requests, the report and the limits of each indicator. Every view uses the same fictional transfers.

01 / FOCUS

Wallet focus

W-01 / USDT

The collection wallet and its immediate neighbours.

Exact reconciliation · USDT

Inflows19 299.876544
=
Outflows10 179.876544
+
Funds held9 120.000000

EXAMPLE · W-01 / Inflows = outflows + held

02 / REQUESTS

Request table

07

7 recipients · linked example references

Evidence with a next step.
Whom to contactAddress / transactionWhat to ask
BinanceEXAMPLE · E-01TWPTFg65yrwojhxtrohdkEBT3eT8RnLqk3EX-TX-35 · EX-TX-41Preserve deposit records; identify the associated account and subsequent movements through the appropriate request channel.
KrakenEXAMPLE · E-02TRWNT1YzZMG7MbZVCoPTr2rmzWmu4p22B6EXAMPLE · F-01TJQcbWPJwnA88BUV4LHwQ5mJHsjqkxXqUhEX-TX-43 · EX-TX-47 · EX-TX-48Preserve records for the deposit and the separate withdrawal; request the associated accounts and movement history, keeping the two flows distinct.
OKXEXAMPLE · E-03TL4kNvC1FqtaozPdDZowm6wrEzHpHeMYzdEX-TX-32 · EX-TX-45Preserve deposit records; identify the associated account and subsequent movements through the appropriate request channel.
CoinbaseEXAMPLE · E-04TYmBtJ5VzkckKmUX86LcP2yT5eJ8HhQ6JvEX-TX-49Preserve deposit records; identify the associated account and subsequent movements through the appropriate request channel.
USDT issuer · TetherEXAMPLE · W-01TLDRtNEBQbaPuzqE4p89rPVAEV5xUw2ZkqEXAMPLE · W-02TBifNH5m23DtusyM5ZvXRzN9UFnMR3SZ1sEX-TX-23 · EX-TX-24 · EX-TX-25 · EX-TX-26 · EX-TX-27 · EX-TX-28 · EX-TX-34 · EX-TX-38 · EX-TX-39 · EX-TX-40 · EX-TX-47 · EX-TX-48Ask for consideration of a freeze at the identified wallets, with the evidence and distinction between applicant allocation and full balance.
Payment intermediaryEXAMPLE · I-01TBL4YtQBysS3XaihvJBTDYxWsH3GzsxNebEXAMPLE · W-02TBifNH5m23DtusyM5ZvXRzN9UFnMR3SZ1sEX-TX-37 · EX-TX-38 · EX-TX-47 · EX-TX-48Request settlement records connecting the incoming payment to the payout, the recipient and the fee charged.
Mixer · privacy boundaryEXAMPLE · M-01TTQZLbYU5622AWs2NC4YsmpqEXjdx96sxtEX-TX-29 · EX-TX-31 · EX-TX-36Preserve records for the documented entry through the appropriate request channel. Exit candidates are unconfirmed and must not be presented as traced funds.

Police and lawyers can use the table to prepare requests. Disclosure, freezing and any return of funds depend on the recipient, its procedures and the applicable process.

03 / REPORT

Report page preview

PDF / 01
Trail Forensics EXAMPLE-01

Technical analysis report

Scope: fictional USDT transfers on TRON

01
Many branches, one exact account

The ten-way split re-merges in part at W-01. Four exchange deposits, two held wallets, fees and the mixer entry reconcile to 48 620 USDT under the conditional intermediary pairing.

Every unit has a place.
EndpointBasisAmount · USDT
Binance depositEXAMPLE · E-01Observed transferObserved transfer3 750.000000
Kraken depositEXAMPLE · E-02Observed transferObserved transfer650.000000
Kraken deposit · conditional branchEXAMPLE · E-02Conditional on inferred linkConditional on inferred link7 000.000000
OKX depositEXAMPLE · E-03Observed transferObserved transfer3 750.000000
Coinbase depositEXAMPLE · E-04Observed transferObserved transfer8 200.000000
Held at W-01EXAMPLE · W-01Observed transferObserved transfer9 120.000000
Held at W-02EXAMPLE · W-02Conditional on inferred linkConditional on inferred link4 876.543211
Intermediary fee allocationEXAMPLE · I-01Conditional on inferred linkConditional on inferred link123.456789
Fee relayerEXAMPLE · FEE-01Observed transferObserved transfer50.000000
Mixer entry (privacy boundary)EXAMPLE · M-01Observed transferObserved transfer11 100.000000
Total accounted forUSDT48 620.000000
Difference from payments0.000000

Exact arithmetic does not confirm the intermediary pairing. Of the Kraken deposits, 7 000 USDT, the W-02 applicant balance and the intermediary fee depend on that pairing. Without confirmation, that 12 000 USDT branch remains unresolved at the intermediary. The 11 100 USDT mixer entry is counted once; exit candidates are excluded.

04 / INDICATORS

Indicators, not proof of ownership

The observed route and the points that need further records are shown below.

EXAMPLE / W-01Observed · indicator

Collection wallet

Seven incoming branches converge at W-01, which holds part of the applicant’s money.

EXAMPLE / I-01 → W-02Unconfirmed · indicator

Possible intermediary pairing

The incoming payment and payout are separate observed events. Applicant attribution remains conditional until settlement records confirm their connection.

12 000.000000 → 11 876.543211
EXAMPLE / F-01 → W-02Excluded from applicant totals

A second source of funds

A separate 2 300 USDT exchange withdrawal reaches W-02 and is excluded from the applicant allocation.

EXAMPLE / B-01Observed · indicator

Structuring

B-01 sends ten smaller transfers to distinct example wallets.

EXAMPLE / P-02 → P-03 → P-04 → P-05Observed · indicator

Peel chain

Four wallets forward the remainder while depositing smaller parts at exchanges.

EXAMPLE / M-01Unconfirmed · indicator

Mixer privacy boundary

11 100 USDT is traced to the mixer entry. The trail stops there. Three dashed exit candidates are not confirmed and carry no applicant allocation.

What is missing

Exchange account records and intermediary settlement records. Mixer exit candidates are not confirmed; a public address alone does not identify a person.

01 / THE PROBLEM

A wallet address is only the beginning.

You made a payment. Then the platform stopped responding, or asked for another fee before you could withdraw. A transaction number tells you that money moved. It does not tell you who can help next.

We turn the trail into a clear record: where the funds went, what the evidence supports and which information still needs to be requested.

02 / THE PROCESS

A clear next step, at every stage.

WATCH THE PROCESS

Fictional example · follow-up by agreement

An honest answer before a full report

The initial assessment is a consultation. We look at your case and explain how far we can trace the money and whether an exchange, the token issuer or a payment service could act. The trail may instead end in a private wallet, a mixer or another limit where a full report would not help.

If we see no realistic path, we say so and do not offer a full report.

You receive a short written answer and action sheet: where the trail leads as far as we can see, what is possible, the full report price under the published rule, and what to do next — whom to contact and what records to keep. It includes a warning about recovery scams. The 99 € is credited towards the full report.

Three possible outcomes

A point where someone can act

The trail reaches an exchange or another point where funds could be frozen. We recommend a full report to support the request; the institution decides whether to act.

No realistic point for action

The trail ends where no one can act, for example at a private wallet or a mixer boundary. We say so plainly and do not offer a full report.

A mixed trail

A full report covers the traceable part. Its price follows that traced amount: 1 %, minimum 400 €, maximum 8 000 €; complex cases by separate offer.

03 / A WORKED EXAMPLE

Three payments. Seven stages. Every unit accounted for.

Entirely invented. All addresses, transaction references, amounts and events below are examples. Exchange names illustrate service types; they do not describe an actual case.

01

The client's story

A client sent 48 620 USDT in three payments to an investment platform that showed a growing balance. When they tried to withdraw, the platform demanded an extra release fee and stopped responding.

02

What the client sends

Three transaction references, two receiving addresses, payment receipts and screenshots of the conversation and withdrawal demand. No passwords or wallet access.

03

The initial assessment

99 € / ACTION SHEET

A first reading identifies the points where further records are needed. It gives the client a practical next step before the full analysis.

Where the trail ends

Four exchange deposits, two held balances, a payment intermediary and a mixer entry. The trace stops at the mixer privacy boundary.

What is missing

Exchange account records and intermediary settlement records. Mixer exit candidates are not confirmed; a public address alone does not identify a person.

Whom to ask

Prepare requests for the four exchanges and intermediary, document the mixer entry, and identify the held wallets for a possible request to the USDT issuer through the appropriate channel.

04

The full technical analysis report

The report accounts for all seven stages, keeps unrelated funding separate and stops the traced branch at the mixer entry. The intermediary continuation is conditional; mixer exit candidates are never confirmed allocations.

Exchange withdrawal — not the applicant's money

A separate 2 300 USDT withdrawal also funds wallet W-02. Its total balance is 7 176.543211 USDT; only 4 876.543211 USDT is allocated to this applicant. The extra funding is excluded from reconciliation.

View the example transaction register
ReferenceRouteAmount · USDTBasis
EX-TX-01Day 1A-01 → R-01 Given by the scammerBasis: the applicant’s statement.12 620.000000Observed transfer
EX-TX-02Day 2A-01 → R-01 Given by the scammerBasis: the applicant’s statement.16 000.000000Observed transfer
EX-TX-03Day 3A-01 → R-02 Given by the scammerBasis: the applicant’s statement.20 000.000000Observed transfer
EX-TX-04Day 3R-01 Given by the scammerBasis: the applicant’s statement. → T-0128 620.000000Observed transfer
EX-TX-05Day 3T-01 → B-0128 620.000000Observed transfer
EX-TX-06Day 3R-02 Given by the scammerBasis: the applicant’s statement. → T-0220 000.000000Observed transfer
EX-TX-07Day 3B-01 → S-012 400.000000Observed transfer
EX-TX-08Day 3B-01 → S-022 500.000000Observed transfer
EX-TX-09Day 3B-01 → S-032 600.000000Observed transfer
EX-TX-10Day 3B-01 → S-042 700.000000Observed transfer
EX-TX-11Day 3B-01 → S-052 800.000000Observed transfer
EX-TX-12Day 3B-01 → S-062 900.000000Observed transfer
EX-TX-13Day 3B-01 → S-073 000.000000Observed transfer
EX-TX-14Day 3B-01 → S-083 100.000000Observed transfer
EX-TX-15Day 3B-01 → S-093 200.000000Observed transfer
EX-TX-16Day 3B-01 → S-103 420.000000Observed transfer
EX-TX-17Day 3S-01 → T-042 400.000000Observed transfer
EX-TX-18Day 3S-02 → T-052 500.000000Observed transfer
EX-TX-19Day 3S-03 → T-062 600.000000Observed transfer
EX-TX-20Day 3S-04 → T-072 700.000000Observed transfer
EX-TX-21Day 3S-05 → T-082 800.000000Observed transfer
EX-TX-22Day 3S-06 → T-092 900.000000Observed transfer
EX-TX-23Day 3T-04 → W-012 400.000000Observed transfer
EX-TX-24Day 3T-05 → W-012 500.000000Observed transfer
EX-TX-25Day 3T-06 → W-012 600.000000Observed transfer
EX-TX-26Day 3T-07 → W-012 700.000000Observed transfer
EX-TX-27Day 3T-08 → W-012 800.000000Observed transfer
EX-TX-28Day 3T-09 → W-012 900.000000Observed transfer
EX-TX-29Day 3S-07 → M-013 000.000000Observed transfer
EX-TX-30Day 3S-08 → T-033 100.000000Observed transfer
EX-TX-31Day 3T-03 → M-013 100.000000Observed transfer
EX-TX-32Day 3S-09 → E-033 200.000000Observed transfer
EX-TX-33Day 3S-10 → FEE-0120.123456Observed transfer
EX-TX-34Day 3S-10 → W-013 399.876544Observed transfer
EX-TX-35Day 3T-02 → E-013 000.000000Observed transfer
EX-TX-36Day 3T-02 → M-015 000.000000Observed transfer
EX-TX-37Day 3T-02 → I-0112 000.000000Observed transfer
EX-TX-38Day 3I-01 → W-0211 876.543211The payout itself is an observed example event; its association with the incoming payment is inferred.
EX-TX-39Day 3W-01 → FEE-0129.876544Observed transfer
EX-TX-40Day 3W-01 → P-0210 150.000000Observed transfer
EX-TX-41Day 3P-02 → E-01750.000000Observed transfer
EX-TX-42Day 3P-02 → P-039 400.000000Observed transfer
EX-TX-43Day 3P-03 → E-02650.000000Observed transfer
EX-TX-44Day 3P-03 → P-048 750.000000Observed transfer
EX-TX-45Day 3P-04 → E-03550.000000Observed transfer
EX-TX-46Day 3P-04 → P-058 200.000000Observed transfer
EX-TX-47Day 4F-01 → W-022 300.000000Separate funding
EX-TX-48Day 4W-02 → E-027 000.000000Observed transfer
EX-TX-49Day 4P-05 → E-048 200.000000Observed transfer

Take the example with you.

The same case, reconciliation, requests and service prices in three languages.

04 / YOUR DELIVERABLES

A record you can hand over. A path you can understand.

01

Technical analysis report

Money path with transaction numbers, exact reconciliation, map, method and limits.

02

Request table

Whom to contact, which address and transaction to refer to, and what to ask.

03

Live money map

An interactive view of the traced path. Select an address to inspect the underlying evidence.

04

Follow-up

When funds move, an agreed update with new addresses, balances and the next requests.

05 / PRICES

Know the scope. Know the cost.

Initial assessment · consultation

99 €

A short written answer and action sheet: where the trail leads, what is possible, the full report price under the published rule, whom to contact, what to keep and a recovery-scam warning. The 99 € is credited towards the full report.

If we see no realistic path, we say so and do not offer a full report.

Read the three assessment outcomes

Full technical analysis report

1 %

of the traced amount

Minimum 400 € · maximum 8 000 €. Complex cases by separate offer.

Monitoring

from 300 € / month

Follow tracked funds and prepare updates when they move. Scope agreed in advance.

The work and price are agreed before we begin.

06 / REVIEW

Analysis. Then a second look.

Technical findings need careful review before someone else can act on them.

Analysis

Traces the transactions, checks amounts and records the basis and limits of each conclusion.

Review by a lawyer

Reviews the wording, the evidence presented and the requests prepared for the intended recipients.

Review by a former pre-trial investigator

Reviews the sequence of events, the gaps in the evidence and the practical next steps.

07 / CLEAR LIMITS

Evidence, without promises we cannot make.

  • No fund recovery promises.

    We show where funds went and prepare information for those who can stop them.

  • No hacking or wallet access.

    We never need your password, private key or recovery phrase.

  • No guaranteed institutional decisions.

    An exchange, the token issuer or the authorities decide how to respond to a request.

08 / QUESTIONS

Before you begin.

Can you get the money back?

We do not recover funds or promise a return. We produce a technical analysis report and prepare information for exchanges, the token issuer, police and lawyers. Any action or outcome is outside our control.

What if I only have a transaction number?

That is a useful starting point. Include the network, amount and any payment or conversation records you have. The assessment identifies what is missing.

Which cryptocurrency can you trace now?

USDT on TRON is supported now. Other chains are in development.

Does an exchange address identify the scammer?

No. It identifies a service in the path. Account information needs to be requested from the service through the appropriate channel; the address alone does not prove who controlled the funds.

How is the report priced?

The assessment is 99 €, credited towards the full report. The full report is 1 % of the traced amount, with a minimum of 400 € and a maximum of 8 000 €. Complex cases receive a separate offer. Monitoring starts from 300 € per month.

What does “live money map” mean?

You can explore the evidence and addresses interactively. Ongoing checks for new movements are part of separately agreed follow-up or monitoring. The map on this page is a fixed fictional example.

09 / CONTACT

Start with what you know.

Briefly describe the payment and what happened afterwards. You can add the transaction references to your email.

This form prepares an email in your mail app. Nothing is sent automatically.