Case Studies
Real recovery work is rarely clean. These are illustrative case files drawn from the patterns our field investigators see most often — how each scam drew the victim in, where control was lost, and exactly what GEInvestigator was able to trace and return. The outcomes are mixed on purpose, because honest ones are.
New here · Start with the field guideHow a Crypto-Recovery Case Is Built: Five Scam Patterns and What Brings the Money BackA Ported Number, a Drained Exchange: Tracing a SIM-Swap Takeover
A 92-minute carrier port-out emptied an exchange account. We fixed the takeover window and froze the cash-out leg before it cleared.
Read the case file →The Fake Security Update: A Seed Phrase Entered, a Wallet Emptied
A cloned “wallet update” page captured a 24-word recovery phrase, and an automated drainer did the rest. One tranche was recoverable.
Read the case file →Liquidity Gone by Morning: Anatomy of a Presale Rug-Pull
An audited, launchpad-backed presale pulled its liquidity overnight. We read the contract and followed the money across a bridge to its one cash-out point.
Read the case file →The Arbitrage Bot That Asked for Everything: An Approval-Drain Case
A “risk-free” arbitrage bot asked for a single approval — and took everything it unlocked. We revoked it and chased the remainder.
Read the case file →The Profits Were Real Until She Tried to Withdraw: A CFD Fee-Wall Case
Every withdrawal triggered a new fee. We split the card and crypto trails and ran both to settlement.
Read the case file →Each case file is an illustrative, dramatized composite based on real investigative patterns. Firm, platform, and personal names are fictional; figures and outcomes are representative. Recovery is never guaranteed and depends on the facts of each case.