Every hop is mapped and verified on-chain.
Service
Cryptocurrency tracing
We follow stolen or misdirected digital assets across wallets, chains and bridges, and identify where funds reached exchanges or regulated services.
Overview
How cryptocurrency tracing works.
Every cryptocurrency transaction is recorded on a public blockchain. That doesn't make tracing easy — scammers deliberately split funds across many wallets, swap between tokens, move them through cross-chain bridges and mixing services — but it does mean the trail usually exists.
GFIR uses blockchain analytics and manual verification to follow that trail hop by hop. The goal is to identify the point where funds touched a service that knows its customers: a centralised exchange, an OTC desk or a payment provider. Those services can be asked by police, courts or lawyers to freeze funds or disclose account information.
Each trace is documented so that someone else — a detective, a compliance officer, a judge — can follow the same steps and reach the same conclusion.
Signs you may need this
- You sent crypto to a trading or investment platform and can't withdraw
- Your wallet was drained after you connected it to a website or app
- Someone convinced you to move funds to a ‘safe’ wallet
- You were asked to pay ‘fees’ or ‘taxes’ to release your balance
- Your lawyer needs to know where specific funds went
Clusters of wallets are linked to identify who controls them.
The goal: reach an exchange that knows its customers.
How it works
Our approach, step by step.
- 01
Collect transaction IDs
We start from the transactions you made — hashes, wallet addresses, dates and amounts — and confirm them on-chain.
- 02
Map the flow
We follow the funds across wallets, tokens, bridges and chains, separating real movement from noise.
- 03
Attribute endpoints
We identify which addresses belong to exchanges or other identifiable services, and where funds may still be held.
- 04
Document and report
Every hop is evidenced and explained in a report that can support a freeze request or legal action.
Who it's for
- Individuals who lost crypto to a scam platform
- Businesses hit by wallet compromise
- Lawyers who need a documented asset trace
What's included
- 01Multi-chain transaction mapping
- 02Bridge and swap analysis
- 03Exchange and service attribution
- 04Freeze-request support package
- 05Written trace report
Realistic expectations
Tracing shows where funds moved. Recovery depends on exchanges, courts and law enforcement — no one can guarantee it.Before you contact us
What to prepare.
Don't worry if you don't have everything — send what you can and we'll guide you through the rest.
- ✓Transaction IDs (hashes) or screenshots of transfers
- ✓Your own wallet addresses and the addresses you sent to
- ✓Dates, amounts and the coins or tokens involved
- ✓Screenshots of the platform, website or app
- ✓Any messages with the people who directed you
- !Never share passwords, private keys or seed phrases — with anyone, including us.
Questions
About cryptocurrency tracing
Can crypto really be traced?+
In most cases, yes — public blockchains record every transaction. Privacy coins and some mixing techniques make it harder, and we'll tell you honestly if a trace is unlikely to be useful.
How quickly should I act?+
As soon as possible. Funds that reach an exchange can sometimes be frozen, but they may be moved again within hours or days.
Will you need access to my wallet?+
No. We only need public information like transaction IDs and addresses. Never share your seed phrase or private keys with anyone.
What do I do with the report?+
Typically you share it with the police, your lawyer or the exchange involved. We explain the realistic options in the report itself.
Guides
Read before you act.
What a blockchain freeze request is, and when it works
Guide · Cryptocurrency tracing
Related services
Online fraud investigation
Investment platforms, impersonation and payment fraud — we reconstruct what happened and who was behind each step.
Digital forensics
Forensically sound collection and analysis of phones, computers, email and cloud accounts, preserving evidence so it can be relied upon later.
Investment fraud
Fake brokers, trading apps and ‘guaranteed return’ schemes — we document how the scheme worked and trace where your money went.
Confidential case review
Confidential case review
Tell us what happened.
Your message is read by an investigator, not a sales team. We'll reply with an honest assessment of what can be done.
Have a question first? Read our FAQ →
Prefer email? info@gfirglobal.com