The operational window

In most crypto theft cases, the first 72 hours are decisive. After that window, funds are typically moved through mixers (Tornado Cash, Railgun, Wasabi) or uncooperative exchanges, making recovery exponentially harder — but not impossible.

Our emergency procedure starts within 4 hours of case opening: parallel notifications to every exchange along the path, with requests for preventive freeze pending court order.

Case types we handle

Wallet hacks and compromises — exposed private key, smart contract exploits, SIM swap.
Investment fraud (rug pulls, Ponzi) — fraudulent DeFi projects, fake trading platforms.
Phishing and social engineering — cloned wallet UIs, fake "MetaMask support", romance scams.
Insider theft — employees or ex-partners with access to seed phrases or corporate exchange accounts.
Ransomware — Bitcoin/Monero ransom, structured negotiation, and post-payment tracing.
Exchange failure — funds locked in insolvent or sanctioned platforms.

Cooperative exchange network

40+ VASPs in direct channel

We maintain open compliance channels with 40+ global exchanges and VASPs. This allows us to secure responses to freeze requests in hours, not weeks — provided the documentation is solid and the funds are still on the platform.

Our process

Emergency Call

Preliminary assessment within 4 hours. Event identification and document collection.

Flash Trace

Accelerated on-chain analysis to locate current position of funds.

Freeze Request

Parallel notifications to relevant VASPs with evidence dossier.

Criminal Filing

Assistance drafting the criminal complaint with competent Italian authorities.

Coordination

Interface between client, attorney, exchange, and international law enforcement.

Return

Coordination of fund release once the court order is obtained.

What we do not do

We are honest with clients, even when it is uncomfortable:

We do not "hack" lost wallets. If the seed phrase is gone, no one can recover it. Do not trust anyone who claims otherwise.
We do not promise outcomes. We assess recovery probability and communicate it transparently.
We do not work with funds of suspicious origin. Every client undergoes preliminary due diligence.
We never ask for the seed phrase. No legitimate recovery requires it.

Beware of "recovery scams"

Unfortunately the crypto recovery sector is preyed on by scammers who promise miracles to those who have already lost funds. Never pay upfront fees to "unlock" recovery actions. Our model involves a free preliminary consultation, a written quote, and a contract before any payment.

Fees

We use a retainer + success fee model. The base retainer covers analysis and coordination hours; a success fee (typically 10-20%) applies only upon actual recovery. For cases under €10,000 we apply reduced flat fees.

Cryptocurrency Recovery