Skip to content
cftrace will never ask you to pay upfront via WhatsApp, Telegram or crypto. • We only contact you from verified @cftrace.com and @cf-trace.com email addresses. • We never demand a payment. Only a fully refundable recovery deposit may be required. • Your recovered assets stay under your name until released to your wallet. • Scammers impersonate recovery firms so book calls only through this website. • Need proof? Read our case results and verified client testimonials. • All meetings are recorded and case files are encrypted end-to-end.cftrace will never ask you to pay upfront via WhatsApp, Telegram or crypto. • We only contact you from verified @cftrace.com and @cf-trace.com email addresses. • We never demand a payment. Only a fully refundable recovery deposit may be required. • Your recovered assets stay under your name until released to your wallet. • Scammers impersonate recovery firms so book calls only through this website. • Need proof? Read our case results and verified client testimonials. • All meetings are recorded and case files are encrypted end-to-end.
Security and compliance

Your money, your name, your control.

This page is maintained by TRACE AI INVESTIGATIONS LTD to answer the security and compliance questions clients ask most. It describes the controls we operate today. It is not an independent certification.

Why a wallet top up is required before a release

Before any disbursement is made, the receiving wallet has to be proven to belong to you. A compliance deposit into that wallet does exactly that: it creates a verified, traceable link between you and the destination address, and it satisfies anti money laundering checks that apply to the release of recovered funds.

  • It is not a fee paid to cftrace and it is not commission.
  • It is held in your own wallet, under your own name, inside your dashboard.
  • It is returned to you as part of the final disbursement.
  • If the recovery cannot be completed, the deposit is returned and the file is closed with a written summary.

Data protection

Case files, identity documents and statements are encrypted in transit and at rest. Access is restricted to the team assigned to your case and every action against a file is logged.

Access control

Staff accounts are individually issued and role restricted. Nobody outside your assigned specialist, their manager and compliance can open your file.

Identity and source of funds

We verify identity and supporting documentation before a case moves forward, so a recovery holds up under scrutiny from banks, exchanges and legal partners.

Segregated balances

Recovered amounts are recorded against your account only. Balances, movements and pending releases are visible to you at any time in your dashboard.

Registered UK company

Operated by TRACE AI INVESTIGATIONS LTD, company number 16828440, registered in England and Wales. The record is public and free to check.

Refund position

Compliance deposits are refundable. They are returned as part of your final settlement, or returned in full if the case is closed without a recovery.

Why your bank or exchange may block the transfer

Revolut, Coinbase, Crypto.com, Kraken, Binance and most high street banks run automated controls on outbound transfers. Those systems look for words such as recovery, scam, fraud, investigation, hack, stolen and compromised. When one is picked up, the transfer is cancelled and the account can be frozen while it is reviewed. This is a filter reacting to language, not a judgement about your case.

Keep your answers simple and factual. You are transferring funds to your own personal crypto wallet, the recipient is your own wallet address, and the purpose is moving your own funds between your own accounts. All of that is true, and it keeps the transaction straightforward.

See the full process, step by step

Shared responsibility

We are responsible for the security of the platform, the handling of your case file and the accuracy of what we tell you. You are responsible for keeping your login details private, for confirming wallet addresses carefully, and for telling us immediately if anyone contacts you claiming to be cftrace outside this website or our verified email addresses. Statements about certification, regulatory status or audit outcomes will only ever appear here once we can evidence them.

How your data is protected

In transit
TLS 1.2 or higher on every connection to this site and to your dashboard.
At rest
Case files, identity documents and statements are stored encrypted on managed EU/UK infrastructure.
Uploads
Bank statements and ID documents go into a private store. There are no public links and no directory listing.
Passwords
Hashed, never stored in readable form, and never visible to staff. Staff cannot see or recover your password.
Sessions
Time limited and revoked on password change. You can change your password from your dashboard at any time.
Logging
Every read or change against a case file is written to an audit trail with the staff member's identity.

Who can see your file

Assigned specialist
Your named case handler and nobody else by default.
Their manager
For supervision, quality checks and escalation.
Compliance
For identity verification and anti money laundering checks.
Not shared
We do not sell, rent or share client data with marketing partners or lead generators. Ever.
Third parties
Only where a recovery requires it, for example an exchange compliance desk, a legal partner or law enforcement, and only with the relevant case material.
Offboarding
Staff access is revoked the day a person leaves.

What we will never ask you to do

  • We will never ask you to send crypto to a wallet address owned by cftrace or by a member of staff.
  • We will never ask for your seed phrase, private keys or your dashboard password.
  • We will never ask for remote access to your computer or phone.
  • We will never ask you to describe a transfer as anything other than what it is.
  • We will never pressure you to act the same day. If someone rushes you, it is not us.

If you receive a message claiming to be from cftrace that does any of the above, stop and contact us through this website. Genuine contact only ever comes from this domain, from our published WhatsApp number, or from an email address ending in cf-trace.com.

Data retention

Open cases
Held for the duration of the engagement and kept current.
Closed cases
Retained for six years to meet UK anti money laundering and record keeping obligations, then deleted.
Identity documents
Retained only as long as the verification obligation requires.
Marketing contact
Removed immediately on request. Every email includes an unsubscribe link.

Your rights under UK GDPR

Access
You can request a copy of the personal data we hold about you.
Correction
You can ask us to correct anything inaccurate.
Erasure
You can ask for deletion, subject to legal retention obligations.
Complaint
You can complain to the Information Commissioner's Office if you are not satisfied with our response.
How
Send the request from the email address on your file, or ask your specialist. We respond within 30 days.

People and process

Vetting
Staff are identity checked and reference checked before they are given access to client files.
Least privilege
Accounts are role restricted. Analysts cannot access billing, and support cannot alter balances.
Named accountability
Every case has a named specialist and a named manager. Nothing is handled anonymously.
Training
The team is briefed on impersonation and social engineering, because it is the most common attack on our clients.

If something goes wrong

Detection
Unusual access patterns and failed sign in attempts are monitored.
Containment
Affected accounts are locked and sessions revoked immediately.
Notification
If a breach affects your personal data, we will tell you and, where required, the Information Commissioner's Office within 72 hours.
Reporting an issue
If you believe you have found a vulnerability in this site, contact us through the contact page and we will respond. Please do not test against live client accounts.

Corporate record

Legal entity
TRACE AI INVESTIGATIONS LTD
Company number
16828440
Jurisdiction
England and Wales
Registered office
4 Sawmill Close, Ridgewood, Uckfield, England, TN22 5RF
Director
Gordon Thomas Buckland
Nature of business
80300 · Investigation activities
Check the public register