After a Theft or Fraud
The first days after a theft are the highest-leverage window you'll ever have. These articles cover exactly what to do, in what order, and what evidence to preserve.
The first 72 hours after a crypto theft
The exact sequence of actions that preserve evidence, trigger exchange freezes, and keep recovery options open — before trails go cold.
Stages of a blockchain forensic investigation
Intake, evidence review, on-chain analysis, attribution, report delivery, and follow-through. What each phase actually involves and how long it takes.
How to gather blockchain transaction data for an investigation
The specific files, screenshots, and exports investigators need. What to pull from MetaMask, Ledger Live, Trust Wallet, and centralized exchanges.
Reporting malicious wallet addresses
Where to report — Chainabuse, exchange compliance teams, Tether, Circle, and law enforcement — and the format each needs for the report to be actionable.
Reversing bank and credit card transfers to a scam platform
Chargebacks, ACH recalls, and wire reversals are sometimes possible — but only within a narrow window. The exact timelines and procedures.
How to communicate on-chain with an unknown attacker
In a small number of cases, an on-chain message can result in partial recovery or negotiation. When it's worth trying and the exact wording that has worked.