Illustrative scenario
Fake trading broker
Crypto deposits appear on an interface, but withdrawal remains blocked.
- Validate the supplied hashes, addresses and statements.
- Reconstruct movements between wallets.
- Identify receiving services and separate observed facts from assumptions.
Possible deliverable: Timeline, flow graph and transaction annexes.
Illustrative scenario
Malicious wallet approval
Tokens leave a wallet after a signature on a deceptive website.
- Identify the approval transaction and relevant contract.
- Document outgoing transfers and collection addresses.
- List immediate security actions without accessing the wallet.
Possible deliverable: Contract analysis, asset trail and documented urgent actions.
Illustrative scenario
Fake wallet support
A person posing as support obtains a signature or transfer.
- Compare the communication and transaction timelines.
- Preserve the contact details, domains and profiles used.
- Follow funds towards identifiable services.
Possible deliverable: A technical file for legal counsel or the relevant authority.
Illustrative scenario
CEO fraud with payment in crypto-assets
A company sends funds after receiving an impersonated instruction.
- Audit outgoing flows and beneficiary accounts.
- Compare payments with available internal evidence.
- Document the facts for legal counsel or the insurer.
Possible deliverable: Factual report and recommendations to strengthen controls.