Every stage of a recovery, explained in order.
From the first phone call to the money landing back in your account, there are eight stages. Below is exactly what happens at each one, how long it usually takes, and what we need from you. Nothing is left out and nothing is charged before you know what you are getting.
The eight stages of a cftrace recovery
- 01
Free consultation
Day 0 · 20–30 minutesYou speak to a case specialist by phone or video. You explain what happened, we tell you honestly whether the case is traceable and what the realistic outcome looks like. Nothing is charged for this and nothing is committed.
- No cost and no obligation
- An honest view, including when we think a recovery is unlikely
- You are told who your specialist is and how to reach them
- 02
Case intake and evidence
Day 1–3We open your file and collect everything that establishes what happened: transaction hashes, wallet addresses, bank statements, exchange correspondence, screenshots and chat logs. Your documents are encrypted and only visible to the team assigned to your case.
- Secure upload from your dashboard
- Identity verification so a recovery holds up with banks and exchanges
- A written scope of what we will and will not pursue
- 03
Blockchain tracing
Week 1–3Analysts follow the funds hop by hop across chains, through mixers, bridges and swap services. Addresses are clustered, scored for risk, and matched against known scam infrastructure and exchange deposit wallets.
- Multi-chain tracing with wallet clustering
- Risk scoring on every address in the path
- Identification of the custodian holding the funds
- 04
Evidence dossier
Week 3–4The trace becomes a structured report: executive summary, chronological event log, cluster maps, exchange attribution and a chain of custody statement. It is written so that a compliance officer, a solicitor or an investigator can act on it without further explanation.
- Court-ready formatting
- Shared with you in full, not summarised
- Reported to Action Fraud and the relevant authorities
- 05
Exchange and legal action
Week 4 onwardsWe serve the dossier on the exchange or custodian holding the funds and work with legal partners where a freezing order or civil claim is the right route. Most recoveries are resolved at the compliance-desk stage without litigation.
- Formal notice to the receiving exchange
- Freezing requests where the balance is still on-platform
- Legal escalation only when it improves the outcome
- 06
Recovery confirmed
On release by the custodianWhen funds are released, the recovered amount is recorded against your account and appears in your dashboard. You can see the balance, the movements and the pending release at any time.
- Balance visible in your dashboard
- Written confirmation of the recovered amount
- Your specialist walks you through the next step
- 07
Wallet verification
1–2 daysBefore a disbursement can be made, the receiving wallet has to be proven to belong to you. You make a refundable compliance deposit into your own wallet, which creates a verified, traceable link between you and the destination address.
- It is not a fee and it is not commission
- It stays in your own wallet, in your own name
- It is returned to you as part of the final disbursement
- 08
Funds released
Same weekOnce verification clears, the full balance, including your deposit, is disbursed to your bank account or wallet. Your file is closed with a written summary of everything that was done.
- Full balance plus your returned deposit
- Written closing summary for your records
- Ongoing monitoring available if you want it
What the compliance deposit is, and what it is not
- A compliance deposit that verifies wallet ownership
- A requirement that satisfies anti money laundering checks
- Held in your own wallet, under your own name
- Fully refundable as part of the final disbursement
- A fee paid to cftrace
- A commission or a profit for us
- A payment that disappears
- A cost you will never see again
You are moving money from one of your pockets into another pocket of yours. The only reason we need you to do this is to prove that the wallet belongs to you, so that the system can release your recovered funds.
Not sure? We can show you before you commit.
We understand that trust is earned. That is why we offer a simple demonstration. A small deposit, even just £30, will appear in your wallet immediately. You can then withdraw it straight back to your bank account and watch the system work both ways. Once you have seen it with your own eyes, you will know we are who we say we are.
Blocked transfers, frozen accounts and other obstacles
Banks and exchanges sometimes stop a transfer because their automated systems pick up words like recovery, fraud or scam. It is a language filter, not a judgement about your case. We keep the full explanation, the exact wording to use and the rest of our situation guides on one page.
Go to SolutionsCommon questions, answered directly
How long does the whole process take?
Most files reach the evidence stage inside four weeks. How long the recovery itself takes depends on the exchange or custodian holding the funds and on whether legal steps are needed. Your specialist gives you a realistic timeline at intake and updates it as the case moves.
Why can I not find cftrace on Companies House?
cftrace is a trading name of TRACE AI INVESTIGATIONS LTD, company number 16828440, registered in England and Wales. Search that number on Companies House and the full record comes up.
Why do I need to make a deposit?
It is not a payment to us. It is a compliance deposit into your own wallet. It is fully refundable and returned to you as part of the final disbursement. It is required to verify that the wallet belongs to you.
What happens if the recovery is unsuccessful?
Your deposit is returned in full and your file is closed with a written summary. You do not lose anything.
Can I speak to previous clients?
Yes. With their consent we can arrange for you to speak with clients who have completed the recovery process.
My bank or exchange is blocking my transfer. What do I do?
That is an automated language filter, not a judgement about your case. We cover exactly why it happens and what to say on the Solutions page.
Why you can trust us
Registered UK company
TRACE AI INVESTIGATIONS LTD, company number 16828440, registered in England and Wales. The record is public and free to check.
Real people
You speak to real people, not bots. Video calls and telephone calls are available at any stage.
Client references
With their consent, we can connect you with past clients who have recovered their funds.
Refundable deposit
Your compliance deposit is fully refundable. If the recovery does not proceed, it comes back to you.
Ready to start?
- Book a free consultation with a case specialist
- Send us the evidence through your secure dashboard
- We trace the funds and build your evidence dossier
- We serve the exchange and pursue the recovery
- Your wallet is verified and the funds are released
The chain does not lie.
We read it.
Every stolen transaction leaves a permanent trail. Our analysts follow that trail through mixers, bridges, and layered wallets, until the funds reach a venue that can act on lawful notice.
Find your situation.
Every case is different, but most fall into one of these. Each one has a route forward. If yours is not listed, speak to a specialist and we will tell you honestly whether it is recoverable.
My bank blocked or cancelled the transfer
An automated fraud filter reacted to wording, not to your case. Keep the description factual and the transfer goes through.
- Do not use the words recovery, scam, fraud, hack or stolen
- State plainly that you are moving your own funds to your own wallet
- If the account is under review, ask for the review reference and send it to your specialist
The exchange froze my withdrawal
Withdrawals are usually held pending source-of-funds or identity checks. We prepare the documentation the compliance desk actually asks for.
- Never pay a 'release fee' or 'withdrawal tax' - legitimate venues do not charge them
- We draft the source-of-funds pack and identity evidence
- If the freeze is unlawful, the dossier goes to the exchange compliance team formally
I invested through a platform that turned out to be fake
Deposits sent to a fake platform still leave a chain trail. We follow the deposit addresses to the venue that ultimately received the funds.
- Preserve every screenshot, chat log and transaction hash
- We cluster the platform's deposit wallets and identify the off-ramp
- Notice is served on the receiving exchange, with law enforcement copied in
I was persuaded to send crypto by someone I trusted
These cases move funds through many hops before cashing out. Tracing works, but speed matters - the sooner we start the better the odds.
- Stop all further payments immediately, including 'one last fee'
- We trace through mixers and bridges to the cash-out point
- The case is reported to Action Fraud and the receiving venue
Someone drained my wallet
We map the drainer's cluster, check whether the funds are still on-chain, and target the exchange where they are cashed out.
- Revoke outstanding token approvals and move any remaining assets
- We monitor the drainer cluster for movement in real time
- Freezing requests are filed the moment funds hit a regulated venue
I was already scammed once by a 'recovery' firm
We treat this as its own case. Fees paid to a fake recovery agent are traceable in exactly the same way as the original theft.
- We verify who you actually paid and where the funds went
- You get an honest assessment before anything is opened
- Nothing is ever requested in crypto to an address we control
Why your bank stopped it.
Banks and exchanges run automated systems that read every transaction. When they see certain words in a payment reference, in a support chat, or in an answer to a security question, the transfer is stopped automatically. It is not aimed at you and it says nothing about your case.
- The transaction is cancelled
- The account may be frozen while it is reviewed
- You are put through a lengthy review process
Keep it simple and true.
“I am transferring funds to my own personal crypto wallet.”
“This is my own wallet address.”
“I am moving my own funds between my own accounts.”
It is truthful, it does not trigger a security alert, and it keeps the transaction straightforward. You are sending funds to a wallet you own.
Six capabilities, one outcome.
From transaction hash to the exchange holding the funds.
We start with the single transaction that moved your funds. From there we map every branch - splits, bridges, mixer entries, and the addresses that eventually deposit at a venue capable of acting.
Every address gets a rating.
We score each wallet on sanctions, mixer exposure, known scam clusters, and behavioural signals. Analysts triage from the highest-risk nodes first.
Reports that hold up in court.
Each investigation ends with a structured dossier - chain of custody, cluster maps, exchange attribution, and legal exhibits. Ready to hand to counsel or law enforcement.
Traced $186,420 across 4 hops to Binance hot wallet.
Send us a transaction. We'll take it from there.
What our clients say once the funds are home.
Recorded statements from cftrace clients whose files have been closed and funds released. Identifying details are redacted at each client's request.
Real outcomes, names removed.
Client identities are confidential, so we publish the numbers, the route and the time it took. Recovery is never guaranteed and we say so before you engage us.
Fake trading desk, funds routed through three exchanges. Frozen at the receiving venue and returned through a regulated escrow.
Reported to exchange compliance within 48 hours of the client's first call. Held pending court direction, then released to the client.
Romance-scam matter on the UK pathway. Disclosure order against the receiving bank identified the account holder.
Business email compromise. Coordinated freezing requests filed the same day the wire left the client's bank.
Recovered assets.
Documented results.
Names and identifying details are withheld at each client's request. The videos below are shared with their permission. Outcomes only, no personal stories.
Reviews we did not write.
Every review below is left on a public platform by a client whose case has closed. We cannot edit or remove them, and we never ask a client to change one.
“I lost £61,000 to a fake investment desk. cftrace mapped where it went in four days and told me exactly what to say to my bank. First people who did not disappear after taking my details.”
“They were blunt with me about what was realistic. Part of it was gone for good, the rest was frozen at an exchange. Getting a straight answer was worth more than the promises I got elsewhere.”
“My case officer sent an update every Friday for eleven weeks. Not once did I have to chase them. The report they produced was accepted by my solicitor without changes.”
The files behind the testimony.
Each write-up below is a closed cftrace file: the client's situation, the route the funds took, the step that worked, how long it took and what it cost. Names, wallet addresses and institutions are withheld under our confidentiality terms - the numbers are unchanged.
Cloned trading desk, three exchange hops
The client believed they were funding a managed trading account with a firm that had cloned the branding of a real brokerage. Deposits were made in five tranches over eleven weeks. When a withdrawal was requested, the desk demanded a 'release fee' - the point at which the client contacted us.
- Client loss type
- Fake trading platform
- Jurisdiction
- Singapore
- Time to outcome
- 23 days
- On-chain route
- Bitcoin → stablecoin bridge → centralised exchange
14.2 BTC frozen at the receiving venue in 48 hours
The client transferred a single large amount after months of grooming through a messaging app. The receiving address was a hosted wallet, which meant the venue - not the fraudster - controlled the balance.
- Client loss type
- Investment scam, off-ramp at exchange
- Jurisdiction
- Exchange compliance pathway
- Time to outcome
- 48 hours to freeze
- On-chain route
- Bitcoin → exchange deposit address
Bank disclosure order identified the account holder
Payments began as small bank transfers and escalated into crypto purchases made by the client on the fraudster's instructions. Part of the funds had already been withdrawn to private wallets and were unrecoverable; the remainder sat in a domestic account.
- Client loss type
- Romance / relationship fraud
- Jurisdiction
- United Kingdom
- Time to outcome
- 9 weeks
- On-chain route
- Bank transfer → crypto purchase → withdrawal to private wallet
Same-day freezing requests across three countries
A supplier payment was diverted after an email thread was intercepted and the payment instructions altered. The wire was split across three corporate accounts within hours of arrival.
- Client loss type
- Business email compromise
- Jurisdiction
- United States · UAE · Cyprus
- Time to outcome
- 6 weeks
- On-chain route
- Wire transfer → layered corporate accounts → partial crypto conversion
Want to speak to a past client?
With their consent, we can put you in touch with clients whose files have been closed. Names and identifying details are only shared when the client agrees to it.
No success fee. Only a refundable recovery deposit.
We do not take a percentage of what we recover, and we never ask for payment. The refundable deposit exists only to verify your identity and formally link your case to you. It is held on your behalf and returned in full.
A no-obligation call to understand what happened and assess recovery options.
- Case assessment
- Recovery probability
- Document checklist
- Next-step plan
A refundable deposit used only to verify your identity and link the case to you. Fully returned.
- Blockchain forensics
- Exchange liaison
- Legal dossier
- Dedicated case manager
- Refund of unspent balance
For law firms, exchanges and high-net-worth individuals with complex cases.
- Multi-jurisdiction coordination
- Expert witness support
- Priority response
- Private custody options