Notes from the
investigation desk.
What we're learning from active cases. Scam patterns explained. Honest advice for fraud victims. Investigation craft from the inside.
Pig-Butchering Recovery Playbook: The First 30 Days After a Romance-Investment Scam
Pig-butchering (romance-investment) scams steal billions annually. The first 30 days determine recovery odds. This playbook walks through what to do hour-by-hour, what NOT to do, and which exchanges and regulators move the needle.
The First Hour After a Wallet Drain: MetaMask, Phantom, Trust Wallet
A drained MetaMask, Phantom, or Trust Wallet usually means a malicious approval transaction. What you do in the first hour determines whether you can save what is left in connected accounts and what your recovery options are.
Why Most "Crypto Recovery Firms" Are Scams (And How to Spot the Real Ones)
The "crypto recovery" market is dominated by second-stage scams targeting fraud victims. Six red flags that separate legitimate investigators from recovery scams — and the questions to ask before sending anyone a retainer.
What to do in the first 24 hours after a crypto scam
The first 24 hours after a crypto scam matter more than any later window. A senior CryptoLeek analyst walks through the exact sequence: stop the bleeding, document everything, file the reports that unlock recovery channels, and avoid the second-wave recovery scams that target victims next.