On-chain fund tracing for victims, lawyers and investigators

Find out where your stolen crypto actually went.

Give us the address or the transaction hash. The engine follows the money hop by hop across Tron, BSC and Ethereum — through contract calls, DEX swaps and cross-chain bridges — until it lands at an exchange deposit, a known entity, or a dead end. Every edge in the report is a real transaction you can verify yourself.

We are not a recovery service. We will never ask for your private key or seed phrase.

Trace complete · 5 hops · 2 findings
app.chainscout.io/case/8f21/graph
VictimTQ5nR…8vXk−42,800 USDT
Hop 1TW9k2…Lq4f42,800 USDT
BridgeStargate → BSC28,400 USDT
Binance · deposit0x9f3a…c21d26,900 USDT
Hop 2 · splitTKj7m…3pZa14,400 USDT
Mixer · dead end0x4b81…7e0214,400 USDT
Victim addressIntermediaryBridge / DEXExchange endpoint

Live on three chains

TronTRC-20 · USDT

Where most scam payouts land first.

BNB Smart ChainBEP-20

Swap-heavy laundering paths, fully decoded.

EthereumERC-20

Contract calls and internal transfers resolved.

Bitcoin is not supported yet — UTXO clustering is a different discipline and we would rather say no than guess.

The difference

Same theft. Two ways to look at it.

Reading the block explorer yourself

Transfer0x7a1c…
Contract call0x00…dead
Swap???
Transfer0x3f9b…
  • The first hop is easy. The fourth one splits into six.
  • A contract call shows the router, not the person who received the money.
  • Funds enter a bridge and the trail appears to end — on the wrong chain.
  • You reach an exchange address but cannot tell hot wallet from user deposit.
  • Nothing you assembled is in a form a police officer will accept.
VS

A ChainScout case report

  • Every hop weighted by how much of your money it actually carries.
  • Contract calls unwrapped to the real recipient; swaps and bridges followed through.
  • Endpoints labelled: exchange deposit, sanctioned address, known entity, mixer.
  • For each reachable exchange: the evidence-request channel and what it needs.
  • One PDF with a verifiable transaction table, ready to attach to a filing.

How it works

Four steps, about two minutes

No account manager, no call, no upfront invoice.

Submit the case

Stolen address or transaction hash, plus what happened in your own words. The chain is detected automatically.

The engine traces

Weighted hop-by-hop traversal with proportional taint attribution, unwrapping contract calls, swaps and bridges along the way.

Findings are scored

Reachable exchange deposits, known entities, sanctioned addresses, funds still sitting still — each one scored, with evidence attached.

Unlock the report

You see the score and what was found before paying. Nothing worth acting on? The report stays free and we tell you why.

The report

What you actually get

Written to be handed to someone else — a lawyer, an exchange compliance desk, an officer taking your statement.

Hop 3 · swapUSDT → BNB
Hop 4 · bridgeStargate → BSC
Hop 5 · endpointBinance deposit

Verifiable fund-flow graph

Every node is an address, every edge is a transaction with hash, block, timestamp, token and amount. Filter by hop depth or amount, export as an image, and check any line of it on a public explorer.

Loss confirmed42,800 USDT
First movement2026-08-02 14:07
Chains involvedTron · BSC

Incident reconstruction

Your account of what happened, reconciled against what the chain actually records. Where the two disagree, we say so instead of quietly siding with either.

What to do next

How to stop a second loss — wallet hygiene, revoking approvals, and the recovery scams that target people who were just robbed. Then the filing kit: which exchange to contact, through which channel, with which documents, and where jurisdiction likely sits.

Locked · 5 findings inside

Hidden until it is worth paying for

Before payment you see the reconstruction summary, the score and how many findings exist. Addresses, hashes and the full graph stay locked.

Our pricing rule

If the trail is worthless, you pay nothing.

Most people arrive here having already lost money once. Charging them for a report that says “the funds went into a mixer and stopped” would be taking it twice. So the paywall only appears when the trace finds something you can act on.

  • The score and the finding count are shown before you are asked to pay.
  • Below the threshold there is no payment button at all — you get a free short answer explaining where it stopped.
  • Firms and investigators: a trace below the threshold does not consume a credit.
  • If a paid report turns out to be wrong on a key conclusion, tell us within 7 days and we refund in full.

Case value score

72/ 100 · threshold 40
  • Reachable exchange deposithigh
  • Known entity on the pathhigh
  • 26,900 USDT still unmovedmed
  • Last movement 9 days agomed
  • 14,400 USDT into a mixernone

Two high-weight findings — above threshold, so this report can be unlocked.

Pricing

Two lines, one engine

Individuals pay per case. Firms and agencies buy capacity.

For individuals

Single case report

$69per unlocked case
  • Full fund-flow graph, up to 10 hops
  • Exchange and entity endpoints with evidence
  • Incident reconstruction and action plan
  • PDF export with a verifiable transaction table
  • Charged only when the score clears the threshold
Start a free trace

For firms and agencies

Investigation pack

¥20,000100 traces
  • Shared case workspace, multi-seat
  • Rename, group, archive and bulk export cases
  • Priority queue and re-runs at no extra cost
  • Sub-threshold traces do not consume credits
  • Named channel to a human analyst
Talk to us

For platforms and agents

API

Usage-basedprepaid balance
  • Trace and address-label endpoints
  • Key-scoped rate limits and usage reports
  • Same engine, same labels as the web product
  • Built for agents that answer “where did it go?”
Request access

Prices exclude local taxes. Invoices and contracts available for institutional buyers.

FAQ

Straight answers

Can you get my money back?

No. Nobody on-chain can reverse a transaction, and anyone promising to “recover” your funds for an upfront fee is running the second scam. What we do is establish where the money went and hand you evidence in a form that exchanges and law enforcement can act on. That is the part that is actually missing in most cases.

What do I need to provide?

The address the funds left from, or the transaction hash — plus a short account of what happened. Nothing else. We will never ask for your private key, seed phrase, or remote access to your wallet, and you should treat anyone who does as an attacker.

Which chains do you support?

Tron, BNB Smart Chain and Ethereum, covering native assets and the major tokens on each. Bitcoin is not supported yet: tracing UTXO chains needs a different technique, and we would rather decline than hand you a guess.

What if the funds end up in a mixer?

Then the trail stops, we say so plainly, and you are not charged. You still get a free summary of how far the money got and what — if anything — is left to pursue.

How long does a trace take?

Most cases finish in under two minutes. Long cross-chain paths with many splits can take up to ten. You do not have to wait on the page; we email you when the report is ready.

Who sees my case?

Your case narrative and attachments are encrypted at rest and visible only to you and, when you ask for help, the analyst handling your ticket. We never sell case data. Published case studies are de-identified and only go out with the user's consent.

I am a lawyer or an investigator. Is this different?

Same engine, different packaging: a shared workspace, multiple seats, case management, bulk export and a credit pack instead of per-case checkout. Traces that come back below the value threshold do not burn credits.

Start with the address you still have.

One hash is enough. You will see the score and what was found before you are asked for anything.

ChainScout provides on-chain data analysis. We are not a law-enforcement agency, not a law firm, and not an asset-recovery service; nothing here is legal advice and no outcome is promised. Findings are derived from public blockchain records and labelled address data, both of which can be incomplete or wrong — every conclusion in a report cites transactions you can verify independently. Beware of anyone who guarantees to recover stolen funds for an advance payment.