Investigations
Cryptocurrency Recovery
The investigative groundwork behind cryptocurrency and digital asset recovery: where value moved, who may hold records and what the findings can support.
Most searches for cryptocurrency recovery begin after a loss: funds sent to a scam, assets moved by a former partner, or value that has disappeared from view. The uncomfortable truth is that recovery is not something an investigator can perform directly. It depends on evidence, and on the legal or regulatory routes that evidence can support.
Evident provides the investigative groundwork that a digital asset recovery effort depends on. We establish where the funds went, identify the exchanges, custodians and services that may hold records, and set out what the findings can realistically support. We do not recover assets and we do not guarantee outcomes. What we produce is a clear, source-referenced account that solicitors, insolvency practitioners and law enforcement can act on without further translation.
How we approach it
01
Establishing what happened
We begin with the facts that can be verified: the transactions, addresses and timeframe that define the loss, confirmed independently on-chain before any conclusion is drawn.
02
Tracing and identifying record holders
We follow the movement of funds to their current identifiable position, recording every point where value interacts with an exchange, custodian or service that may hold account records.
03
Preparing the findings for the next step
We set out where the assets went, who may hold relevant records and how strong each finding is, so that recovery can be pursued through the appropriate legal, regulatory or law-enforcement route.
What to expect
From enquiry to deliverables
A clear, staged process from your first contact to the final report. You will always know what stage the matter is at and what comes next.
Step 01
Initial enquiry
You tell us, in outline, what has happened and what you need to establish. No sensitive account details are needed at this stage.
Step 02
Confidential discussion
We review your summary and arrange an initial confidential discussion to understand the matter and the evidence you already hold.
Step 03
Scope and proposal
We set out what can realistically be investigated, the approach we would take, and the likely cost. If an investigation is not justified, we say so here.
Step 04
Instruction and investigation
Once instructed, we carry out the investigation using our defined framework, keeping you informed at agreed points.
Step 05
Findings and deliverables
You receive a clear written report of the findings, with each conclusion graded as verified fact, supported inference or unknown, ready to share with your advisers.
Step 06
Debrief and next steps
We talk you through the report, answer questions, and outline the options the findings support.
FAQ
Frequently asked questions.
Practical answers about how an Evident investigation works, what it produces and how to begin. If your question is not covered, ask us directly.
- Can stolen or lost cryptocurrency be recovered?
- Sometimes, and it depends on the evidence. Recovery is not something an investigator performs directly. It usually depends on identifying where the funds went, finding an exchange or service that holds account records, and pursuing the appropriate legal route. Evident provides the investigative groundwork that makes those routes possible, and we are upfront when the evidence suggests recovery is unlikely to be worth pursuing.
- What is the first step in a cryptocurrency recovery case?
- A confidential, no-obligation discussion. We ask what happened, look at whatever records you already have, such as transaction hashes, correspondence or screenshots, and give you an honest view of what an investigation could realistically establish before you commit to anything.
- Does Evident recover the assets itself?
- No. Evident is an investigative and intelligence provider. We establish what happened, where value moved and who may hold relevant records, and we prepare findings that solicitors, insolvency practitioners and law enforcement can act on. Any recovery is pursued through legal or regulatory channels.
- How long does an investigation take?
- It depends on the complexity of the matter. A focused trace with clear starting points can often be completed within days to a few weeks, while funds that have passed through mixers, bridges or multiple chains take longer. Once the scope is agreed, we give you an indicative timeline before work begins.
- What information do you need to begin?
- Whatever you already have: wallet addresses, transaction hashes, exchange correspondence, statements or screenshots. Partial information is often enough to assess whether an investigation is worthwhile. Please do not share private keys, seed phrases or passwords; we will confirm a secure channel before any sensitive material is discussed.
Related
Other investigations
Discuss a case
Have a case that needs investigating?
Tell us briefly what you're dealing with. We'll arrange an initial confidential discussion to understand the issue and determine whether Evident can help.
Prefer to write to us directly? Send an enquiry.
Until we confirm a secure channel, please don't share private keys, seed phrases, passwords or detailed evidence. Tell us about the issue in general terms first, and we will arrange a secure route for anything sensitive.