Question 1

What to do if crypto stolen?

Accepted Answer

How quickly should you respond to an incident? Reaction speed is the most crucial factor in such situations! Let&rsquo;s go through a specific action plan: 1. Report the incident Immediately after the incident, submit a request through our Telegram bot or website. Provide details on what happened, wallet addresses, transaction data, and attach transaction screenshots, any correspondence with the scammer, and other evidence. This will help us quickly assess the situation and suggest a course of action. 2. Markup the scammer&rsquo;s addresses in analytics systems This will help alert exchanges, swap services, and other platforms that these addresses are linked to illegal activity. If a scammer attempts to deposit stolen funds, the exchange or service will detect the flagged address, freeze the assets, and prevent withdrawals. To request markup &mdash; 3. Locate stolen assets If the assets are on an exchange: We send requests directly to exchanges to freeze the funds, leveraging our contacts with their representatives for rapid processing. This service is free and significantly increases the chances of recovering your assets. Important: Act quickly to prevent the attacker from withdrawing the funds. If the funds are in a cold wallet: Wallet tracking is implemented to monitor the stolen funds. You will receive notifications when funds are moved. It&rsquo;s crucial to respond promptly to seize the opportunity to block and recover the funds when they move into a traceable or recoverable zone. If the assets have been moved to DEX, swap services, or bridges: A deep analysis is required: Identify which assets were obtained after swaps or transfers. Trace the transaction paths through smart contracts, liquidity pools, and bridges. Set up wallet tracking to monitor further fund movements. 4. Order an analytical report An analytical report is generated after a thorough blockchain investigation. It provides a detailed breakdown of the fund flow, key addresses involved in transactions, and potential points for identifying the perpetrators. This report can assist law enforcement in making swift and informed decisions to facilitate fund recovery. Learn more about the analytical report here. 5. Contact the police Bring the prepared set of documents with you: Analytical report on the incident. Police report. Request to cryptocurrency exchange.

Question 2

Markup of criminal addresses in analytical systems

Accepted Answer

Marking addresses associated with criminal activity in analytical systems is a crucial step in preventing the further use of stolen funds and increasing the chances of their recovery. The primary goal of address marking is to alert market participants that a specific address, and any related addresses, are linked to illicit activities. This allows exchanges and payment processors to identify stolen funds, block transactions, and prevent their withdrawal. For example, in our MS Engine service and Telegram bot, flagged addresses are categorized with labels such as &ldquo;scam&rdquo; and &ldquo;stolen funds&rdquo;. The benefits of address marking Enhancing Market Security: We continuously notify exchanges, payment processors, blockchain explorers, AML services, and other platforms about newly identified criminal addresses. This helps all market participants, regardless of their chosen service, avoid interacting with illicit funds. Our address markings are automatically updated across all EVM-compatible blockchain explorers, providing real-time risk insights to users. Preventing Cash-Out Attempts: If a malicious actor attempts to convert stolen cryptocurrency into fiat through an exchange or payment service, risk detection mechanisms can flag the transaction, freeze the funds, and escalate the case to law enforcement. Facilitating Asset Recovery: Once funds are frozen, authorities have a greater chance of confiscating them and returning them to their rightful owners. By marking illicit addresses, we make cybercriminals&rsquo; activities visible to the entire crypto community, significantly complicating their ability to exploit stolen funds. Can a victim create a markup independently? We often hear the question: &ldquo;Why should I pay you when I can just flag the address myself using some AML bot?&rdquo; Yes, in some cases, users can submit a report to public services (e.g., an AML bot). However:🔴 Different exchanges use different AML providers. If the exchange does not use the provider where you created the markup, it simply will not see it. How we solve this problem Match Systems works directly with dozens of cryptocurrency exchanges, OTC platforms, blockchain explorers, and analytics providers. We share information about malicious actors across systems that exchanges actually rely on. This allows us to: Ensure that the address is marked within the ecosystem that the specific exchange sees. Track asset movement in real time. Increase the chances of freezing the stolen funds and preventing their withdrawal.

Question 3

What is an incident analytic report

Accepted Answer

The incident analysis report is the result of a comprehensive blockchain investigation aimed at increasing the chances of recovering stolen cryptocurrency. Our specialists: Conduct in-depth blockchain analysis: They trace the full path of stolen funds, identify key addresses and transaction chains, and track the use of decentralized exchanges, swap services, and cross-chain bridges. Identify freeze points: Determine locations where funds can be frozen and record addresses on centralized exchanges. Work on deanonymization: Uncover potential information about perpetrators through links with VASPs and other services. Provide recommendations: Develop a step-by-step action plan, including ready-made request templates for law enforcement, exchanges, and other involved parties. Benefits of an incident analysis report Time efficiency: Law enforcement receives all the necessary information for quick decision-making. Enhanced investigation effectiveness: The report provides ready-to-use data for asset freezing, perpetrator deanonymization, and legal inquiries. Higher recovery chances: The accuracy and completeness of the information enable swift responses and asset blocking before further transfers occur. How to order an analytical report and how much does it cost? If you need an analytical report, leave a request for your incident. After the initial analysis, our experts will determine the depth of the investigation, estimate the probability of recovery, and provide the cost of the service, which depends on the complexity of the case.

Question 4

What is wallet tracking and why use it?

Accepted Answer

Wallet tracking is a method that helps track the movement of stolen crypto assets. Think of it as an alarm system that notifies you of any transactions involving marked funds. Wallet tracking is especially important because, unlike a bank account, crypto funds can’t simply be frozen. For example, if stolen assets are stored in a hacker’s cold wallet (offline wallet), they can’t be retrieved or locked. However, once the scammer starts moving the funds, tracking can help: Monitor transactions – If funds are transferred from one wallet to another, you’ll receive an alert and can record the new address. Tag new wallets – Every new wallet receiving the stolen funds gets marked to ensure no transaction is missed. Wait for a vulnerable moment – Scammers often try to cash out through exchanges, swap services, or cross-chain bridges. These points offer a chance to recover funds, as exchanges and services can freeze assets. Wallet tracking enables real-time tracking so you don’t miss the opportunity to intercept and recover stolen assets. You can set up a tracker and track your wallet right in our Telegram bot How to use Match Systems cryptocurrency wallet tracking? 1️⃣ Launch the bot and click “Start”.2️⃣ Click “🚨 Incident report”, then “🚨 Wallet tracking”.3️⃣ Click “❇️ Add new wallet” and enter one or more cryptocurrency addresses you want to track.4️⃣ The bot will now send you push notifications to your device for every transaction on the specified wallets. 🔹 Use Wallet tracking to not miss asset movements and take action in time!

Question 5

How to request an exchange to freeze stolen crypto?

Accepted Answer

Can a user contact an exchange directly to freeze stolen assets? Yes &mdash; a user can contact a cryptocurrency exchange directly and request a temporary freeze of stolen assets if they were transferred to a deposit address associated with that platform. However, it&rsquo;s important to understand the following:🟡 An exchange will not freeze assets based solely on a user&rsquo;s incident description.The exchange must be able to see that the destination address has already been flagged via a markup &mdash; a classification in AML analytics systems that links the address to illicit activity.If the exchange does not use the AML provider where the markup was created, it simply won&rsquo;t detect the risk.That&rsquo;s why it&rsquo;s more effective to initiate markup through Match Systems &mdash; we maintain integrations with dozens of cryptocurrency exchanges, OTC desks, payment services, blockchain explorers, and analytics platforms. Learn more about markup here. What should a request to the exchange include? To ensure that an exchange promptly reacts and freezes stolen assets, it is crucial to craft your request correctly. Your message should include the following details: Exchange contact information. Each exchange has designated contact points for such requests. You can download a list of contact addresses here:Download Exchange Contact List Incident details: Wallet address of the perpetrator Transaction hash Date and time of the transfer (UTC) Brief summary of the incident and a formal request to temporarily freeze the associated funds. Prefer not to handle this on your own? Our team at Match Systems can contact the exchange on your behalf and provide verified markup data, a structured incident report, and supporting analytics &mdash; all of which significantly improve the chances of freezing the stolen funds before withdrawal.

Question 6

How to file a police report on cryptocurrency theft

Accepted Answer

To make sure your report doesn’t just get filed away, but actually leads to a real investigation, you need to provide a clear and complete picture of what happened. Most law enforcement officers don’t have the tools or experience to handle crypto cases — so how well your case is prepared often makes all the difference. We’ve put together three essential documents that give your case a real chance of being taken seriously — and greatly improve your chances of recovering lost funds. Police report Your statement should briefly but clearly include: What happened (date, time, and essence of the incident) From which wallet the funds were stolen and in what amount What cryptocurrency was stolen, its value at the time, and where it was sent (recipient address, transaction hashes) What confirms the theft (wallet screenshots, correspondence, blockchain analysis, etc.) A request to open a criminal case and your willingness to cooperate with the investigation. Important: The more complete and precise the statement, the sooner the police can begin working on the case. Download Template Analytical report This is a document that outlines: The movement of stolen funds Indicators of anonymization techniques Attempts to cash out Attacker behavior and involved addresses 📌 Learn more: What is an incident analysis report → Request to crypto exchange This is a formal document submitted with the case materials and sent to the exchange in order to: Obtain KYC data Request asset freezing Download Template We understand how overwhelming it can be to deal with everything on your own — especially right after your funds have been stolen. That’s why we’re here to help: we can prepare all the documents, run the analysis, and guide the police through what needs to be done. You don’t have to go through this alone.

Question 7

How to report a criminal?

Accepted Answer

Spotted a scam, phishing site, or suspicious crypto address? Report it in our bot &mdash; we&rsquo;ll investigate, add the scammer to our database, and help warn other users. How it works? 1. Open the bot and tap &ldquo;⚠️ Report a Criminal&rdquo; 2. Choose the type of incident: Suspicious cryptocurrency address Phishing website Scam project or fraudulent scheme 3. Provide details: Wallet address, website link, or project name Any additional contacts (screenshots, scammer contacts, etc.) 4. Submit the report &mdash; our team will verify the data and, if confirmed, add it to the database. What happens next? ➖ If the fraud is confirmed, the scammer&rsquo;s information will be flagged in the database. ➖ Your report helps protect others and makes the crypto space safer. 🔔 Your report could save someone&rsquo;s funds.If you spot a scam, don&rsquo;t ignore it! Report it in the bot

We help recover stolen crypto

Don’t wait — hackers are already laundering your funds!

What to do if crypto stolen?

Incident analysis

Tracing the funds

Flag the stolen assets

Preparing documents

Not sure if recovery is possible?

Our Experience

FAQ

Already work with us

How We Can Help With That

AML Compliance

Asset Unblocking

Disputes & Debts with Counterparties

OSINT Investigations

Crypto Asset Tracing

Increasing crime detection in the crypto industry

Reducing risks to the financial system

Better control of digital assets

Improved human resources skills

Featured in media

Submit an application

Leave a request