Questions, answered honestly.

No honest investigator can guarantee that, and you should be cautious of anyone who does. Recovery depends on factors outside any investigator's control: whether funds are still held at an identifiable exchange or bank, how quickly action is taken, and decisions made by those institutions, law enforcement and courts.

What GFIR does is establish where your funds went, identify the services that may hold them, and document the evidence in a form that you, your lawyer, the police or a financial institution can act on. In many cases that evidence is what makes a freeze request, a police investigation or a legal claim possible.

It's the right question to ask. Fraud victims are often targeted a second time by fake “recovery” services. Warning signs include guaranteed results, pressure to pay quickly, requests for crypto payments, and anyone asking for your passwords or seed phrase.

GFIR never guarantees recovery, never asks for passwords or seed phrases, and agrees scope and cost in writing before any paid work begins. You are always free to have your lawyer review our engagement terms first.

An investigator — not a sales team — reads your submission and reviews the information you've shared. We may ask a few follow-up questions or request transaction IDs, screenshots or messages.

We then give you an honest assessment of whether an investigation is likely to produce useful results. If it isn't, we'll tell you, so you don't spend money on work that won't help. Initial responses are typically sent within [Owner input required: response time].

Every case is different, so cost depends on the scope: how many transactions, blockchains, platforms or devices are involved, and what kind of report you need.

After the initial review, you receive a written scope and quote before any paid work starts. There are no hidden fees and no surprise invoices. [Owner input required: pricing model, e.g. fixed fee, hourly or staged.]

Anything you have helps: dates and amounts of payments, transaction IDs or wallet addresses, bank transfer confirmations, screenshots of the platform or website, usernames, email addresses and chat conversations with the people involved.

Don't delete anything, even if it's painful to look at. And never share passwords, private keys or seed phrases with anyone — including us. We will never ask for them.

Yes. Our reports are written to be shared with legal counsel, law enforcement and financial institutions. Each finding is sourced, timestamped and explained, so others can verify the same trail we followed.

With your permission, we can also coordinate directly with your lawyer or the investigating officer to make sure they have what they need.

Yes. We collect only what the investigation needs, store it securely, and limit access to the people working on your case. Your information is never shared without your consent, except where the law requires it.

Many of our clients feel embarrassed about what happened. There's no judgement here — fraud is designed to deceive intelligent, careful people.

Yes. GFIR works with clients worldwide, and online fraud rarely stays within one country anyway. Funds often move across several jurisdictions and blockchains before they reach an exchange.

Where local legal action is needed, we prepare our findings so they can be used by lawyers and authorities in your jurisdiction.