Cyber security fund recovery & reimbursement claims

Stolen funds leave a trail. We follow it.

We trace stolen assets across chains, bridges and mixers, pursue freezes where funds land, and coordinate civil claims for reimbursement — with a realistic view of what can be recovered.

Free and confidential. No obligation to proceed.

FCA-regulated frameworkAuthorised partners where required · fca.org.uk UK registeredCyber Justice Ltd · Co. no. 16458332
24/7Case intake
Multi-chainForensic tracing
ConfidentialBy default
FCA-regulated framework Blockchain forensics Wallet attribution Exchange liaison Freeze requests & civil claims Law-enforcement reporting Cross-jurisdiction
Who we help

Individuals, funds and businesses

A drained personal wallet and a multi-chain fund loss need different responses. We scope the work to the case in front of us — and tell you early if we don't believe there is a viable path.

Individuals & families

Fake platforms, romance-investment scams, phishing or a wallet drained in a single signature. Straight answers, no judgement, and a realistic view of what can be traced and recovered.

Funds, investors & HNWIs

Complex losses across chains, bridges and counterparties — handled discreetly, with forensic reporting your advisers and counsel can act on.

Businesses & crypto-native teams

Exploits, insider theft and fraudulent counterparties. Evidence packaged for counsel, insurers and authorities, with the technical detail they need to act.

How it happens

The patterns behind most crypto losses

Most fraud follows a script. Recognising the pattern is the fastest way to protect yourself — and the first step in building a trace.

Fake investment platforms

A polished site, professional branding and fake testimonials make the platform look like a real exchange. Small withdrawals work at first to build confidence; larger ones are then blocked behind "tax", "liquidity" or "insurance" demands — a second scam built on the first.

Pig butchering & romance-investment scams

What begins as a friendship or romance moves, patiently, to an "investment opportunity". The returns on screen are fabricated. The relationship is the sales channel — and the reason victims often deposit far more than they intended.

Phishing emails, texts and fake exchange pages

A message that looks like your exchange or wallet asks you to "verify" or "secure" your account. The page behind the link captures your password or seed phrase and empties the wallet. The same trick arrives as fake support chats, giveaways and urgent security alerts.

Impersonation scams on social media

Cloned profiles of exchange staff, founders, celebrities or people you already follow steer you toward fake giveaways, "recovery" services and private investment groups. A familiar face is the fastest way to earn your trust.

Rug pulls & exit scams

A project raises funds or locks liquidity, then the team drains the pool and disappears, leaving holders with worthless tokens. Heavy promotion and paid influencers create the rush that makes the exit possible.

Pump-and-dump & market manipulation

Coordinated hype inflates a token while insiders quietly sell. Wash trading and spoofed orders manufacture the appearance of demand — until the price collapses on everyone who bought the story.

Hacked wallets & wallet drainers

Malicious approvals, fake wallet apps and compromised devices can empty a wallet in one signature. A stolen seed phrase gives a fraudster complete, irreversible access — which is why every hour after a loss matters.

Our approach

Trace. Freeze. Pursue.

Recovery rarely hinges on a single action. We run the forensic, counterparty and legal tracks at the same time, so progress on one doesn't wait on another — and you always know where things stand.

  • Forensic tracing. We follow the money through swaps, bridges and mixers, mapping every hop and preserving the evidence as we go.
  • Freeze and notification. When funds reach an exchange or custodian, we move to request a hold and put the receiving account on notice.
  • Legal escalation. Civil claims, disclosure orders and law-enforcement referrals where the evidence supports them — coordinated with counsel in the relevant jurisdiction.
  • Evidence that holds up. Reports built for exchanges, banks and authorities, with the transaction-level detail they need — not screenshots and guesswork.

What we need to begin

  • Transaction hashes / wallet addressesDay 1
  • Dates and amounts involvedDay 1
  • Contact with the fraudsterDay 1
  • Exchange / platform namesDay 1–2
  • Initial trace report2–5 days
  • Recovery options in writing5–10 days

Timelines vary with the chain, jurisdiction and complexity of the case. Nothing here is legal advice.

How it works

From first message to a plan

Five stages, one point of contact, and a written view of your options before you commit to anything.

1

Free, confidential case review

Tell us what happened. We'll say whether there is a viable path, what it would take and what it would cost — before you commit to anything.

2

Evidence preservation

We secure wallet addresses, transaction hashes, chats and account records before they are lost, deleted or overwritten.

3

On-chain tracing & attribution

We follow the funds through swaps, bridges and mixers, establish where they landed, and attribute the addresses that control them where possible.

4

Freeze, notify & escalate

We contact exchanges and custodians, request holds where grounds exist, and coordinate law-enforcement or legal action where appropriate.

5

Recovery & resolution

Civil claims, regulatory complaints and negotiated returns, pursued together — with clear updates until the matter closes.

Do this now

If funds moved recently

Speed protects options. Do these six things now — even if you haven't decided whether to instruct anyone.

  • Stop sending money. No legitimate recovery requires an upfront "release fee", "tax" or "insurance" payment.
  • Preserve the evidence: transaction hashes, wallet addresses, chats, emails and screenshots. Don't delete or edit anything.
  • Secure what's left: change passwords, enable two-factor authentication and revoke approvals you don't recognise.
  • Report it to your local police and national fraud reporting service. Keep the reference number.
  • Write down the platform, exchange and counterparty names while the details are fresh.
  • Get a second opinion early. A short, free review costs nothing — and can save months.
Fees

Fees built around the outcome

You shouldn't have to fund a recovery that may never happen. We agree the scope and the fee before any work begins.

Success based

No recovery, no fee

Where the case supports it, our fee comes out of what is recovered. If nothing is recovered, you pay nothing.

Hybrid

Reduced rate + success fee

A lower upfront rate with a success component — suited to larger cases that may run for months.

Fixed scope

Tracing-only engagement

The on-chain trace and evidence report on their own, ready to take to counsel, an exchange or the authorities.

Every engagement is confirmed in writing, with scope, fees and risks set out before work begins.

FAQ

The questions we hear most

Can stolen crypto actually be recovered?

Sometimes. It depends on where the funds went and how quickly action is taken. The blockchain is a public ledger, so assets can often be traced long after they move. If they reach a regulated exchange or custodian, there is often a real opportunity to freeze and reclaim them. We'll tell you honestly what is realistic in your case — including when recovery is unlikely.

Do you handle reimbursement claims?

Where there is a valid claim, yes. Depending on the jurisdiction and how the money moved, that can include civil claims against responsible parties and claims through banks or payment providers. We assess the transaction trail first and tell you honestly whether a reimbursement route exists. No outcome is guaranteed.

How much does it cost to find out if I have a case?

Nothing. The initial review is free and confidential. You only commit to paid work once we have explained the options, the likely outcomes and the terms in writing.

How long does a recovery take?

An initial trace can take a few days. Freeze requests and legal action depend on the jurisdiction and how quickly counterparties respond — weeks for some matters, many months for complex ones. We give you a written plan and keep you updated as it progresses.

What information do you need from me?

Transaction hashes, wallet addresses, dates, amounts and any communication with the person or platform involved. Never send seed phrases or private keys — we will never ask for them.

Should I pay someone who says they can recover my funds?

Be very careful. No legitimate investigator needs a "release fee", "tax" or "insurance" payment to unlock your own assets. Recovery scams often target people who have already been scammed once. If you're unsure about an approach you've received, ask us to check it.

Is my information confidential?

Yes. Case details are shared only with the specialists working on your matter and, where necessary, with counsel or counterparties in order to pursue it. We do not sell or trade client information.

Time is critical

The sooner a trace starts, the more options remain.

Tell us what happened. We'll give you a straight answer — free, confidential and without obligation.

Start a free case review
Get in touch

Tell us what happened

Share as much or as little as you're comfortable with. Even a partial timeline is enough to start.

Prefer email? Write to us directly and we'll route your message to the right specialist. We aim to reply within one business day.

[email protected]

Registered office

Unit A1010, 9 Greatorex Street
London, E5 3NF
United Kingdom

Regulation — FCA

Where a matter requires activity regulated by the Financial Conduct Authority (FCA), that activity is carried out by appropriately authorised firms or counsel.

Please don't send passwords, seed phrases, private keys or full card numbers. We'll tell you a safe way to share what's needed.

By contacting us you agree to be contacted about your enquiry. We treat all case details as confidential.

WhatsApp +44 7429 353736