Skip to main content

If money is still moving.

What to do first
SASN

Crypto Guidance

When cryptocurrency is involved

Blockchain transfers are public but usually irreversible. Some steps can still reduce further loss and strengthen any report.

Never share a seed phrase, recovery phrase or private key. No legitimate support agent, exchange, investigator or lawyer needs it.

TXID

0x7f3a9c21e4b0d58a6f13c7e2b94d0e1a3f86c25d7b19e04ac8

01Copy each hash from your wallet or exchange history

02Note the date, amount, asset and network

03Record the sending and receiving addresses

04Save block explorer pages as PDF

01

Malicious token approvals

Connecting a wallet to a scam site and signing an approval can allow the site to move tokens later, without asking again. This is how many wallet drainers work.

  • Use a reputable approval checker for your network and review active approvals
  • Revoke approvals to contracts you do not recognise
  • Assume the wallet is compromised if you entered your seed phrase anywhere
  • Create a new wallet and move remaining assets if in doubt

02

Transaction hashes

A transaction hash (TXID) uniquely identifies each transfer. It is the most useful piece of evidence for exchanges and investigators.

  • Copy each hash from your wallet or exchange history
  • Note the date, amount, asset and network
  • Record the sending and receiving addresses
  • Save block explorer pages as PDF

03

Limits of tracing

Funds can often be followed on-chain, but tracing does not identify a person and does not return money. Recovery generally requires an exchange to freeze funds and a legal or law enforcement process.

  • Be cautious of anyone guaranteeing recovery through tracing
  • Report receiving addresses to the exchange involved
  • Give hashes to the police in your report
  • Seek legal advice before paying for private tracing

No one can guarantee the recovery of lost funds. Be cautious of anyone who does.