Skip to content
cftrace
cftrace will never ask you to pay upfront via WhatsApp, Telegram or crypto. • We only contact you from verified @cftrace.com and @cf-trace.com email addresses. • We never demand a payment. Only a fully refundable recovery deposit may be required. • Your recovered assets stay under your name until released to your wallet. • Scammers impersonate recovery firms so book calls only through this website. • Need proof? Read our case results and verified client testimonials. • All meetings are recorded and case files are encrypted end-to-end.cftrace will never ask you to pay upfront via WhatsApp, Telegram or crypto. • We only contact you from verified @cftrace.com and @cf-trace.com email addresses. • We never demand a payment. Only a fully refundable recovery deposit may be required. • Your recovered assets stay under your name until released to your wallet. • Scammers impersonate recovery firms so book calls only through this website. • Need proof? Read our case results and verified client testimonials. • All meetings are recorded and case files are encrypted end-to-end.
Forensics

The chain does not lie.
We read it.

Every stolen transaction leaves a permanent trail. Our analysts follow that trail through mixers, bridges, and layered wallets, until the funds reach a venue that can act on lawful notice.

Open a caseBack to overview
What we do

Six capabilities, one outcome.

Transaction tracing
Follow every hop from source to destination across chains and layer 2s.
Wallet clustering
Group related addresses using heuristics, timing, and shared behaviours.
Cross-chain analysis
Track funds through bridges, wrapped assets, and swap protocols without losing continuity.
Risk scoring
Rate every address against sanctions, mixer exposure, and known scam clusters.
Exchange identification
Attribute receiving addresses to regulated venues capable of freezing balances.
Evidence dossiers
Compile exhibit-ready reports with chain of custody suitable for counsel.
Tracing

From transaction hash to the exchange holding the funds.

We start with the single transaction that moved your funds. From there we map every branch — splits, bridges, mixer entries, and the addresses that eventually deposit at a venue capable of acting.

Direct transfers
Straightforward on-chain hops between wallets
Mixer exposure
Tornado, Wasabi, ChipMixer patterns identified by entry and exit heuristics
Cross-chain bridges
Wormhole, LayerZero, cBridge routes tracked with matched deposits and receipts
Terminal deposits
Final addresses attributed to their custodian
Trace graph
live
VictimSplit AMixerSplit BBridgeWalletWalletExchange
Risk scoring

Every address gets a rating.

We score each wallet on sanctions, mixer exposure, known scam clusters, and behavioural signals. Analysts triage from the highest-risk nodes first.

Address risk
5 addresses
Victim
0x8a…f21c
4
Split A
0x91…22ae
32
Mixer exit
0x37…c1d9
78
Bridge deposit
0xbb…0f4a
62
Binance hot
TP9…7Xn3
12
Evidence

Reports that hold up in court.

Each investigation ends with a structured dossier — chain of custody, cluster maps, exchange attribution, and legal exhibits. Ready to hand to counsel or law enforcement.

Executive summary
Chronological event log
Wallet cluster maps
Exchange attribution letter
Chain of custody statement
Case CF-2049Confidential
Executive summary

Traced $186,420 across 4 hops to Binance hot wallet.

Filed
09 Jul 2026
Chain
Ethereum → Tron
Custodian
Binance BAM
Status
Notice served
Signed by lead analystv1.4 · sealed
Every case reviewed by a senior analyst

Send us a transaction. We'll take it from there.

Open a caseRead closed cases