By 2023, one of the fastest-growing forms of fraud was not fake trading platforms—it was fake recovery companies. These operations prey specifically on people who have already been scammed once, targeting them at their most vulnerable moment.

Instead of offering real investigative help, these impostors use intimidation, forged documents, and pressure tactics to extract even more money. Some of the common patterns we documented include:

• Impersonating institutions such as “Interpol,” “FBI,” “Europol,” or fabricated groups like “Blockchain Recovery Units”
• Forged legal correspondence, complete with fake seals, staged signatures, and counterfeit case numbers
• Demands for “unlocking taxes,” “clearance fees,” or “legal release payments”, none of which exist in legitimate investigations
• Fear-based messaging, claiming assets will be “frozen forever” unless immediate payment is made

Victims often reach us after they’ve already paid these criminals, unsure who to trust or what steps are still possible. This is why education has become one of our strongest tools—explaining what real investigators do not do, and what legitimate processes look like.

Authentic investigation never begins with upfront fees, threats, or claims of government affiliation. And no legitimate agency asks victims to pay taxes or activation fees to recover their own assets.

If you’re unsure whether a recovery offer is legitimate, you can review how our real investigative work functions through our financial investigations practice.
If you’ve been approached by someone claiming they can retrieve your funds—for a cost—please contact us before taking action. A short conversation can prevent a second, often more damaging loss.

One of the most misunderstood parts of investigative work is the fact that not every case can be accepted. This is not a sign of unwillingness to help—it’s a core professional responsibility.

By 2023, we saw a sharp rise in individuals approaching us after months of dealing with fake brokers, impersonators, and multiple recovery scams. Many arrived with hope, but without the minimum evidence needed to support a formal investigation.

We decline cases when:

• Evidence is insufficient, preventing us from building a verifiable timeline or tracing any actionable transactions
• The situation is outside our jurisdiction, limiting the legal pathways available
• The scam is a known unrecoverable loss, where all funds have been fully mixed, burned, or otherwise irretrievable
• The victim has already been re-targeted by recovery scammers, which often erases or corrupts essential evidence

Rejecting a case is not the same as ignoring a victim.
It is a way to prevent false expectations, protect clients from wasting money, and maintain the integrity of our investigative process. A transparent “no” is far more ethical than the empty promises offered by fraudulent recovery companies.

Even when a case is ineligible for formal work, we still provide clients with guidance on securing documentation, recognizing secondary scams, and understanding what steps—if any—remain available.

To learn more about what an eligible case looks like, you can explore our financial investigations practice.
If you’re unsure whether your situation qualifies for formal investigation, reach out for a confidential review and we’ll assess the details honestly. You can contact us anytime.

For many years, our Colorado Springs office was the center of everything we did. It supported early financial investigations, hundreds of client consultations, and the foundational crypto cases that shaped our modern workflow. But by 2022, it became increasingly clear that the space could no longer meet the technical and operational demands of our work.

Our investigations had grown in scale and complexity, and we needed an environment built specifically for secure analytical operations. The new office requirements included:

• More controlled workspace layouts, ensuring sensitive case materials could be handled without interruption
• Enhanced data-security infrastructure, including dedicated forensic systems and isolated analysis environments
• Sound-isolated rooms for case interviews, allowing clients to communicate openly and privately
• Space for expanded cryptocurrency investigative equipment, cluster-mapping systems, and workstation arrays

Leaving Colorado Springs was not easy—the location represented a major chapter of our firm’s history. But the move was essential. Our current environment supports far more efficient workflows, stronger confidentiality measures, and the infrastructure needed for complex digital investigations.

If you’d like to understand how our investigative process works today, you can explore our financial investigations practice.
For assistance with a case or to schedule a confidential consultation, please contact us.

By 2021, scam networks were no longer operating from a handful of isolated wallet addresses. Instead, they were using large clusters of wallets, automated movement patterns, and chain-hopping sequences designed to conceal ownership and disrupt straightforward tracing.

To stay ahead of these tactics, we developed and implemented a major methodological upgrade: internal wallet cluster-mapping tools.

This advancement allowed us to:

• Associate multiple wallets with a single operator, revealing coordinated activity behind what appeared to be unrelated addresses
• Track flows across chain-hopping sequences, including transitions between Bitcoin, Ethereum, and secondary networks
• Identify centralized exchanges used as exit points, whether for liquidation or mixing attempts

These improvements dramatically increased the clarity and evidentiary strength of our reports. Instead of viewing transactions in isolation, we could present clients—and later, banks and law enforcement—with a structured, high-resolution picture of how stolen assets were moved and where they ultimately landed.

Cluster mapping remains one of the most important components of modern blockchain forensics and is now fully integrated into our financial investigations practice.

If you need help understanding whether multiple wallets are connected, or if you’re facing a scam that involves complex transaction routing, we can review your evidence confidentially. For support or next steps, please contact us.

By 2020, one red flag became so consistent across fraudulent trading platforms that it often allowed us to identify a scam within minutes: the demand for a fee before releasing a withdrawal.

These so-called verification fees appeared under dozens of different names, each designed to sound official while pressuring victims into sending additional money. During this period, our internal case reviews documented the most common variations, including:

• “Anti-money laundering fee” — falsely claiming regulatory requirements
• “Liquidity injection fee” — implying the account lacks internal capital
• “Blockchain activation fee” — pretending blockchain transactions require manual approval
• “Investor tier upgrade fee” — suggesting withdrawal access is tied to membership levels

Not a single one of these fees exists in legitimate banking, crypto exchanges, or regulated financial institutions.

The objective is always the same:
to delay withdrawals, extract more money, and create the illusion that the victim is close to receiving funds—when in reality, no payout is ever intended.

For clients who contact us after encountering these demands, our team focuses on documentation, verification, and tracing to determine exactly how the scam operated. You can learn more about our structured approach through our financial investigations practice.

If you’re being asked to pay any type of “verification fee,” stop immediately and let us review the situation. A confidential consultation is available anytime—simply contact us.