Understand
How a Decyfr Investigation Works
When you are dealing with a complex digital incident, you should know what happens after you share your information.
Decyfr follows a clear process from confidential intake and case assessment through investigation, reporting and possible escalation.
Seven Steps.
One Clear Investigative Process.
Every matter is different, but the investigation follows a defined framework.
1. Confidential Intake → 2. Case Assessment → 3. Engagement & Verification → 4. Blockchain Investigation → 5. Intelligence Analysis → 6. Forensic Report → 7. Escalation Options
Not every matter will progress through every stage. What happens next depends on the available evidence, investigative findings and scope of the case.
1.
Confidential Intake
Start With What You Know
The process begins with a confidential preliminary submission.
Tell Decyfr what happened, when it happened and what information you currently have. You don’t need a complete case file before getting started.
The purpose at this stage is to understand the incident and establish context. A submission is not yet a formal investigation.
What we may need from you:
Incident Date · Jurisdiction · Approximate Loss · Payment Details · Transaction Hashes · Wallet Addresses · Supporting Evidence
If the matter has already been reported to a bank, exchange, law-enforcement agency or regulator, include those details where available.
2.
Case Assessment
Is There a Meaningful Investigative Path?
Decyfr reviews the available information, blockchain data and supporting evidence to understand the nature and potential scope of the matter.
If further information is needed before an investigation can proceed, Decyfr will identify what is missing.
Not every matter will have a viable investigative path.
3.
Engagement & Verification
Confirm the Scope Before the Work Begins
Where the matter can move forward, Decyfr confirms the investigative scope, engagement terms and relevant verification requirements.
This establishes what Decyfr will investigate, what information is available and what the engagement is expected to deliver before substantive forensic work starts.
What we may need from you
Supporting documents · Identity or authority verification · Additional case information
4.
Blockchain Investigation
Follow the Transaction Trail
Decyfr examines the relevant blockchain activity to understand how digital assets moved and which relationships may be significant to the investigation.
Trace Transactions
Follow relevant digital asset movements.
Analyse Wallets
Examine connected addresses and transaction relationships.
Map Asset Movement
Build a chronology across wallets and identifiable services.
Develop Leads
Identify points in the trail that may justify deeper investigation.
The aim is to establish what the blockchain data supports, not to assume where funds went or who controls a particular wallet.
5.
Intelligence Analysis
Put the Blockchain Activity Into Context
Transaction data is only one part of an investigation.
Decyfr considers the blockchain findings alongside available case information and relevant intelligence to understand relationships, service interactions and transaction patterns.
Where the evidence supports it, this may include wallet or entity attribution.
Where it doesn’t, the limitation is recorded rather than overstated.
6.
Forensic Report
Turn Findings Into a Clear Record
Once the investigation and intelligence analysis are complete, Decyfr brings the relevant findings together in a structured forensic report.
Scope
What was investigated.
Chronology
The relevant sequence of events and transactions.
Findings
Wallet, transaction and asset-movement analysis.
Intelligence
Relevant contextual or attribution findings.
Limitations
What cannot be concluded from the available evidence.
Next Steps
Further investigation or potential escalation where relevant.
The goal is a report that can be understood and referenced beyond the investigation itself.
7.
Escalation Options
Decide What the Findings Can Support Next
Depending on the findings, the report may support further engagement with legal representatives, regulators, law enforcement, financial institutions, cryptocurrency platforms or other professional teams.
Decyfr can help organise and explain the technical findings and continue investigative support where new information emerges.
Decyfr does not act as a law firm, conduct litigation or independently recover assets.
Investigations Can Change Direction
The seven steps provide structure, but investigations aren’t always perfectly linear.
New transaction information, documentation or external responses may create additional investigative questions.
Where that happens, Decyfr can review the scope and determine whether further analysis is required.
Know Where the Investigation Stands
Throughout the process, Decyfr aims to keep the investigation structured and understandable.
Stage
Where the investigation currently sits.
Evidence
What information is being examined.
Findings
What has been established and where uncertainty remains.
Next Step
What further work or options may reasonably follow.
Clear communication is part of the investigative process, not something added at the end.
Start With the Information You Have
You don’t need to have a complete case file before contacting Decyfr.
If you have experienced suspected cryptocurrency fraud, theft or suspicious digital asset activity, submit the information currently available for preliminary assessment.
Decyfr will review the matter and determine whether there is a meaningful investigative path.