Skip to main content

Cryptocurrency Tracing.

Follow the money across chains, mixers, and exchanges.

On-chain investigations for AML, fraud, sanctions, and ransomware cases — delivered by Chainalysis- and TRM Labs-certified investigators. We trace funds across the major blockchains, navigate mixing and bridging tactics, and produce intelligence reports that satisfy banks, regulators, and law enforcement in formal proceedings.

// WHAT WE DO

What we do.

Cryptocurrency tracing is no longer an exotic capability — it is a core requirement for financial-crime, sanctions-compliance, and ransomware investigations. DataExpert is one of the more established EU practices in this area, with certified investigators using both Chainalysis Reactor and TRM Labs alongside our own internal tradecraft. We can scope and deliver investigations from a single suspicious transaction through to multi-jurisdictional, multi-chain cases.

Tracing real-world flows is more than reading a blockchain explorer. Funds move through exchanges, bridges, mixers, privacy-protocol tools, and decentralised finance protocols. They cross between custodial and non-custodial wallets. Different chains have different transparency properties. Our investigators are trained to follow funds through these patterns and to write up the findings in a way regulators and courts accept.

We support banks and crypto-asset service providers with AML and sanctions-screening investigations, law enforcement with criminal cases, regulators with supervision and enforcement work, and ransomware victims and their insurers with proceeds-of-crime tracing. Our deliverables are designed to feed directly into suspicious-activity reports, mutual-legal-assistance requests, or restraint applications, depending on the matter.

Tracing is most useful when paired with traditional financial-crime tradecraft. Our cryptocurrency analysts work alongside our OSINT practitioners and our digital-forensics team — so the on-chain narrative is connected to off-chain identity work, device evidence, and corporate-structure intelligence. The result is a more complete picture than a tracing-only practice can deliver.

// CAPABILITIES

What we deliver.

  • Investigations across major blockchains using Chainalysis Reactor
  • Investigations across major blockchains using TRM Labs
  • Mixer, bridge, and cross-chain tracing
  • DeFi-protocol and smart-contract movement analysis
  • Sanctions-screening investigations and exposure analysis
  • Ransomware proceeds-of-crime tracing
  • AML investigation support for banks and CASPs
  • Tracing reports written for SARs, MLA requests, and court use
// CONTACT

Talk to an expert.

Tell us what you're working on. A senior DataExpert operator will be in touch within one business day.

We reply from a real inbox — no automated follow-ups.

Protected by Cloudflare Turnstile.

We respond within one business day. For active incidents call +31 (0)318 543173.

// FAQ

Frequently asked questions

Which blockchains can you trace funds across?

We trace across the major public blockchains that Chainalysis Reactor and TRM Labs support — including Bitcoin, Ethereum and the major EVM-compatible chains, Tron, Solana, and many others. Coverage extends across more than seventy chains in practice. Privacy-focused chains and protocols are handled with the analytical techniques appropriate to each — we are direct with clients about what is and is not tractable on chain. [VERIFY: total chain coverage figure to publish]

Are you Chainalysis-certified?

Yes. DataExpert is a Chainalysis partner and our cryptocurrency investigators hold current Chainalysis Reactor certifications. We also hold certifications with TRM Labs. Maintaining both is part of our vendor-agnostic posture — we choose the tool that fits the case rather than the tool that fits the contract. [VERIFY: current certification reference numbers to publish]

How quickly can you start a tracing investigation?

For known clients with active retainers, we can begin tracing within hours of receiving the relevant wallet addresses and case context. For new clients, the gating items are scoping, conflict-checking, and contracting — typically completed within one to three business days. Where speed is critical — for example, an active ransomware payment — we will prioritise scoping accordingly.

Can your reports be used in court?

Yes. Our cryptocurrency tracing reports are written to be admissible as evidence in European courts and are routinely cited in regulatory and law-enforcement proceedings. Our investigators can give expert-witness testimony where required. We follow documentation standards consistent with our wider forensics practice.

Do you support ransomware investigations?

Yes. Ransomware proceeds-of-crime tracing is one of our most active workstreams. We work with victims, their insurers, and law-enforcement partners to trace ransom payments, identify counterparties, and support recovery action where it is realistic. We are direct with clients about what is and is not likely to be recoverable in any given case. We do not facilitate ransom payment itself.

Can you work with regulated financial institutions on AML cases?

Yes. We support EU banks and crypto-asset service providers with AML investigations, sanctions-exposure analyses, and supervisory-engagement work. Engagements typically integrate with the bank's existing AML platform and produce intelligence packages suitable for suspicious-activity reporting to national financial-intelligence units.

How do you handle mixers, privacy protocols, and cross-chain bridges?

Mixers and privacy protocols are handled with the analytical techniques appropriate to each — heuristic clustering, behavioural correlation, off-chain signal pairing — and we are honest with clients about confidence levels. Cross-chain bridges are now well-instrumented in both Reactor and TRM Labs and we trace across them as part of routine practice. The current state of the art on each topic shifts month to month; we keep our team current.

Do you work with law enforcement directly?

Yes. A significant proportion of our cryptocurrency-tracing work is delivered on instruction from European law-enforcement and regulatory bodies. We are practised in the protocols and disclosure regimes these engagements require, and we maintain working relationships with the relevant national agencies and EU-level coordination bodies. [VERIFY: specific agency references that can be publicly cited]

// TALK TO US

Have a matter that needs serious tracing capability?

Get in touch — we’ll route your case to the operators who have done this kind of work before.

or call +31 (0)318 543173