Fake platforms are designed to look profitable — until you try to withdraw.
Service
Online fraud investigation
Investment platforms, impersonation and payment fraud — we reconstruct what happened and who was behind each step.
Overview
How online fraud investigation works.
Online fraud rarely happens in one place. It might start with an advert on social media, continue in a messaging app, move to a professional-looking website, and end with payments through several banks or crypto wallets.
GFIR pieces that story together. We analyse the websites, domains and hosting behind a scam, the accounts and phone numbers used to contact you, and the payment trail that followed. Connections between scams often reveal that the same group is behind many ‘different’ platforms.
The result is a clear, evidence-based account of what happened — the foundation for a police report, a bank dispute or legal action.
Signs you may need this
- A website or app you used has suddenly disappeared or blocked you
- You were contacted by an ‘account manager’ you never asked for
- Someone impersonated a company, official or person you trust
- You paid for goods, services or investments that never existed
- You suspect several platforms are run by the same people
Small details in domains and websites often reveal the operators.
Accounts, domains and payments are connected into one picture.
How it works
Our approach, step by step.
- 01
Reconstruct the timeline
We organise your messages, payments and screenshots into a single, dated sequence of events.
- 02
Investigate the infrastructure
We examine domains, hosting, apps, phone numbers and social accounts used in the scam.
- 03
Follow the payments
Bank transfers, cards and crypto are traced as far as the evidence allows.
- 04
Connect and report
We link related accounts and platforms, and document findings for police, banks or counsel.
Who it's for
- Victims of fake trading or investment sites
- People targeted by impersonation
- Organisations facing payment fraud
What's included
- 01Platform, domain and hosting analysis
- 02Communication timeline
- 03Identity and infrastructure links
- 04Evidence package for police or counsel
Realistic expectations
Fraudsters often use false identities and offshore infrastructure. We report what the evidence supports, and say clearly where it stops.Before you contact us
What to prepare.
Don't worry if you don't have everything — send what you can and we'll guide you through the rest.
- ✓Website addresses and app names
- ✓Screenshots of the platform and your account
- ✓Chat messages, emails and phone numbers used
- ✓Bank statements or crypto transaction records
- ✓Any names, usernames or profiles the scammers used
- !Never share passwords, private keys or seed phrases — with anyone, including us.
Questions
About online fraud investigation
The website is gone. Can you still investigate?+
Often, yes. Archived copies, domain records and hosting history can survive long after a site goes offline.
Can you identify the real people behind it?+
Sometimes. More often we identify infrastructure, accounts and payment endpoints that police or courts can use to obtain identities.
Should I keep talking to the scammers?+
Generally no. Don't send more money, and don't confront them. Keep everything they sent you and let us advise on next steps.
Is it worth reporting to the police?+
Yes — a report creates an official record and may connect your case to others. Our findings can make that report far more useful.
Guides
Read before you act.
Reporting fraud: police, regulators and your bank — in order
Guide · Online fraud investigation
Related services
Cryptocurrency tracing
We follow stolen or misdirected digital assets across wallets, chains and bridges, and identify where funds reached exchanges or regulated services.
Digital forensics
Forensically sound collection and analysis of phones, computers, email and cloud accounts, preserving evidence so it can be relied upon later.
Investment fraud
Fake brokers, trading apps and ‘guaranteed return’ schemes — we document how the scheme worked and trace where your money went.
Confidential case review
Confidential case review
Tell us what happened.
Your message is read by an investigator, not a sales team. We'll reply with an honest assessment of what can be done.
Have a question first? Read our FAQ →
Prefer email? info@gfirglobal.com