Guided report

Tell us what happened,
one question at a time.

You do not need to know any of the words. Answer what you can, skip what you cannot, and leave anything blank that does not apply. Every field except the first is optional — a partial answer produces a report that says plainly which parts are partial, which is more use to you than a confident answer we cannot support.

Never type your recovery phrase, seed words, private key, or a password into this form, or into anything else. We do not need them, we cannot use them, and no legitimate service will ever ask you for them. Anyone who does is taking your wallet, whatever they say they are doing.

1 · Where are you right now?

This decides the order of everything we tell you to do, so it is the one question worth getting right.

I have not sent anything yetSomeone is asking me to send money, or I am deciding whether to. Nothing has left my account. They are asking for a fee before I can withdrawThere is a balance I am being shown, and a tax, fee, or unlock payment standing between me and it. I sent something in the last few daysThe payment has gone. This is the window where the mechanisms that can actually freeze money still reach it. I sent something a while agoMore than about a week has passed since the last payment. Someone may have my recovery phrase or wallet accessI entered my twelve or twenty-four words somewhere, approved a signature I did not understand, or installed something they sent. Someone has contacted me offering to get my money backI already lost money, and now a firm, an agent, or a person says they can recover it. None of these — I am just checking somethingAn address, a website, a company name, or an offer.

2 · What happened, in your own words

Tell us the story Start wherever it starts. Who contacted you, what they said, what you were shown, what you were asked to do. If you still have the messages, paste them in — the actual wording is often the most useful thing in the whole submission.

Please write at least a sentence or two. There is no wrong way to say it.

3 · The technical details, if you have them

Any of these that you have. If you have none of them, that is fine — skip this whole section. We will check whatever you give us and say clearly what we could not check.

Wallet addresses you were given The long string of letters and numbers you were told to send to. One per line. It usually begins with 0x, a T, a 1, a 3, or bc1. Copy and paste it rather than typing it — one wrong character changes everything, including whether we can tell you it is fake.

Websites, links, or apps involved The trading platform, the exchange they sent you to, the recovery firm's website, the link in the message. One per line. Paste the whole link if you have it.

Transaction numbers, if you have them Sometimes called a transaction hash, a TXID, or a transaction ID. A long string of letters and numbers your wallet or exchange shows after a payment goes out. One per line. These are what let an investigator follow the money, so they are worth digging out of your transaction history.

4 · The money

Roughly how much, in total A number is fine. An estimate is fine.

In what

When did it start Approximate is fine.

When was the last payment This one matters more than the others — several of the things that can still be done are measured in hours from here.

How did the money leave you For example: bank wire, Zelle, a card, cash at a crypto ATM, or from an account at an exchange such as Coinbase or Binance. If a bank or a named exchange was involved anywhere, say which — that is very often the single most important fact in the whole case, because it is the one place the money can still be compelled.

5 · How they reached you

How did this begin

What are they asking for now? Tick everything that applies. A fee, tax, or commission before I can withdraw More money, to unlock a bigger return My recovery phrase, seed words, or private key To install something, or to let them onto my computer To move to a different app, or to download one from a link To act today, because the offer closes or the account will be lost To keep it to myself, or not to tell my bank or family Nothing yet — I am checking before anything happens

Any names you were given The company, the platform, the person, the account manager, the recovery firm. Whatever you were told. Anything you put here is recorded as your account of what you were told, not as a finding by us. We do not investigate or contact the people you name, and your report will say so on the page where the names appear — both so it is accurate and so it cannot be used against you.

6 · Anything else

Anything that felt wrong, or that you have not been asked about

Nothing is sent until you have seen it.

What happens to what you type here

It is used to produce your report, stored for thirty days so you can come back to it, and then deleted. The report link is unguessable and carries a noindex instruction. This site loads no third-party script, font, image or analytics, so nobody else is told that you visited — which matters when the thing you are researching may be watching for it.

Your report will be downloadable as a PDF you can hand to a bank, a lawyer, or an officer taking your report, and as a plain text file you can paste into any AI assistant to ask it questions in your own words. Both are free and neither requires an account.

Technical analysis, not legal advice. No recovery is guaranteed, and we will not quote you odds we cannot source. See the disclaimers.

Tell us what happened,one question at a time.

This is exactly what will be checked

What happens to what you type here

Tell us what happened,
one question at a time.