Stop the bleeding and preserve evidence. The first 24 hours are critical — after that, funds hit mixers or OTC desks.
The address is pushed to Chainalysis, TRM, Crystal, and our own feeds — exchanges auto-block deposits from flagged addresses.
A formalized document for exchanges, law enforcement, and courts. Without it, freeze requests get ignored 9 times out of 10.
The address goes under real-time monitoring. Any movement triggers an alert, so we file a freeze before funds hit a custodial endpoint.
A compliance request with the incident report and police case number. Tier-1 exchanges respond in hours — through our established contacts.
Without a case number, most exchanges won't freeze funds. We provide templates and help with the technical section of the filing.
Once attribution is done, the report is extended to name the person or group. Materials go to the relevant cybercrime unit.
