Case Intake · Open 24/7
Established 2018

We follow the money
where most stop looking.

A private investigations firm specialising in cryptocurrency fraud. We trace stolen assets on-chain, document evidence to legal standard, and coordinate recovery through exchanges, payment processors, and counsel in 40+ jurisdictions. Scoped investigation retainers quoted in writing. No false guarantees.

Case File · Live Sample
№ 2026-049
In Recovery
Claimant
M. R█████
Jurisdiction
GBR · SGP · MLT
Asset
4.218 BTC · ≈ $284,400
Platform
[Redacted Pending Discovery]
Trace Confidence
78% · High
Wallet Trail · On-chain Excerpt
bc1q...7f3a → bc1q...e2b1 [mixer]
bc1q...e2b1 → 0x4f...92cd [bridge: ETH]
0x4f...92cd → 0xd1...a4c8 [CEX deposit, flagged]
§ 01 · Methodology

Real recovery work isn't a script.

It's evidence, jurisdictional patience, and the rare honesty to say "this won't work" when it won't.

Most firms in this category sell hope. They send the same templated "demand letter" to an offshore shell, charge a deposit, and disappear once the money clears. We exist because the people we work with, fraud victims, often in shock, deserve better than that.

Our analysts come from blockchain forensics, compliance, and dispute resolution. We charge nothing to assess your case. If the on-chain trail is cold, we will tell you plainly. If it isn't, you'll get a documented investigation that holds up to a regulator, a court, or an exchange's risk team.

§ 03 · Why CryptoLeek

Six commitments we put
in writing.

The crypto-recovery industry is full of operators who target the already-defrauded. These are the lines we won't cross, and you can hold us to every one of them.

Why CryptoLeek 01

Pricing you see before you commit.

The 24-hour case assessment is free. If we accept the case, you receive a written quote for a flat investigation retainer — scoped to the work — before any engagement begins.

Why CryptoLeek 02

Victim-side only.

We never represent brokers, platforms, or payment processors. No conflicts. No quiet retainers from the people who took your money.

Why CryptoLeek 03

On-chain evidence, not claims.

Every assertion in our reports is anchored to a transaction hash, block height, or signed disclosure. No "trust me" forensics.

Why CryptoLeek 04

Honest case triage.

If we can't help, funds in a privacy mixer with no off-ramp, expired statute, anonymous counterparty, we'll tell you. Within 48 hours.

Why CryptoLeek 05

Counsel in 40+ jurisdictions.

Recovery is local. We work with licensed law firms in every region where action might land, not a single offshore PO box.

Why CryptoLeek 06

End-to-end confidentiality.

Case files are encrypted at rest and in transit. Access is logged. You can request your full record, or its deletion, at any time.

§ 07 · Public Registry

763 platforms documented.
Search before you send.

Every entry is sourced from a real victim report and cross-referenced against on-chain activity. Add a broker to your watch list, or submit a platform we haven't catalogued yet.

Confirmed Scam 2026-06-12

CREST TAG CAPITAL

www.cresttagcapital.com

Crest Tag Capital (cresttagcapital.com) is flagged as a confirmed fraudulent operation by BrokersView, exhibiting patterns consistent with an unregulated investment scheme targeting retail users.

Confirmed Scam 2026-06-12

Crest Option FX Trading

crestoptionfxtrade.com

Crest Option FX Trading (crestoptionfxtrade.com) is a confirmed-fraudulent forex and options platform with no verified regulatory authorisation, flagged by BrokersView for predatory conduct against retail investors.

Confirmed Scam 2026-06-12

myetherwallet.baseball

myetherwallet.baseball

myetherwallet.baseball is a confirmed-fraudulent domain on the CryptoScamDB blacklist, constructed to impersonate a well-known Ethereum wallet interface in a credential-harvesting operation.

Confirmed Scam 2026-06-12

myetherwallet.bargains

myetherwallet.bargains

myetherwallet.bargains is a confirmed-fraudulent domain, blacklisted by CryptoScamDB, that mimics a well-known Ethereum wallet brand through typosquatting to harvest private keys or seed phrases from cryptocurrency users.

Confirmed Scam 2026-06-12

myetherwallet.barefoot

myetherwallet.barefoot

Domain flagged on CryptoScamDB's blacklist using a name that closely mimics a well-known Ethereum wallet service; consistent with credential-harvesting impersonation operations targeting crypto wallet users.

Confirmed Scam 2026-06-12

myetherwallet.barclays

myetherwallet.barclays

A confirmed-fraudulent domain combining the name of a recognised Ethereum wallet platform with a banking-affiliated TLD, designed to harvest private keys or seed phrases from crypto users.

Confirmed Scam 2026-06-12

myetherwallet.barclaycard

myetherwallet.barclaycard

A confirmed-fraud domain combining two distinct financial brand identities, listed on the CryptoScamDB blacklist, consistent with credential-harvesting phishing operations targeting cryptocurrency wallet users.

Confirmed Scam 2026-06-12

myetherwallet.barcelona

myetherwallet.barcelona

myetherwallet.barcelona is a confirmed phishing site impersonating a well-known Ethereum wallet interface, blacklisted by CryptoScamDB, designed to harvest private keys or seed phrases from unsuspecting users.

Confirmed Scam 2026-06-12

myetherwallet.bank

myetherwallet.bank

A confirmed-malicious domain impersonating a recognised Ethereum wallet brand via the .bank TLD to project false financial legitimacy; listed on the CryptoScamDB blacklist as an active threat.

Confirmed Scam 2026-06-12

Crest Gas

app.crestgas.org

Crest Gas (app.crestgas.org) is a confirmed fraudulent trading platform flagged by BrokersView, operating without credible regulatory authorisation and consistent with patterns associated with investment-fraud operations targeting retail users.

Confirmed Scam 2026-06-12

CP Group

cp-group.cc

CP Group (cp-group.cc) is classified as a confirmed fraudulent operation by BrokersView, exhibiting patterns consistent with unregulated online investment fraud targeting retail participants.

Confirmed Scam 2026-06-12

Cosmos Capital

cosmos-capital.com

Cosmos Capital, operating at cosmos-capital.com, is flagged as a confirmed fraudulent brokerage by BrokersView, exhibiting patterns common to unregulated crypto investment platforms that obstruct client withdrawals.

Showing 12 of 763 platforms documented.
§ 08 · Open a Case

Tell us what
happened.

Free 24-hour case assessment. If we accept the case, the investigation retainer is quoted in writing before any work begins. No pressure. If we cannot help, we will say so, and tell you who can.

By Email · 24h Response
cases@cryptoleek.com
Case Intake
Quick Start
Encrypted

For the full intake form with file upload, head to the contact page. Or send us a quick line right here and we'll get back within 24 hours.

Open the Full Intake Form