Frequently asked questions

We are investigators, not a recovery service. We trace where the money went, identify the exchanges, banks and companies that received it, and prepare the evidence the police, a regulator or your lawyer needs to act. Whether funds are frozen or returned depends on those institutions and the courts. Be wary of anyone who guarantees that your money will come back.

Stop any further payments, including “fees” or “taxes” requested to release a withdrawal. Keep everything: messages, emails, contracts, screenshots, bank statements and transaction records. Tell your bank, or the exchange you paid from, and report the matter to the police. Then contact us for a free initial consultation.

Whatever you have. For crypto: the transaction hashes (TXIDs), your own wallet addresses and the addresses you sent funds to. For bank or card payments: statements showing the transfers, and the beneficiary’s name and account details. In every case: the name and website of the platform or person involved, dates and amounts, and your communication with them. If something is missing, contact us anyway. We can often start from partial information.

The initial consultation is free. The fee for an investigation depends on its scope: the number of transactions, blockchains, banks and parties involved. We agree the scope and the fee with you in writing before any paid work begins.

Before the work starts. Because the fee is set by the agreed scope, you know the full cost in advance and there are no unexpected charges at the end.

It depends on the case. A straightforward trace can be completed quickly; matters with many transactions, blockchains, banks or victims take longer. You receive a realistic estimate once we have assessed your case.

Sometimes it is not, and we will tell you. The decision depends on the amount involved, what the evidence can establish and what it would cost to establish it. The initial consultation is there to help you weigh that up before you spend anything.

Fraud and financial crime, including OSINT investigations into the people and companies behind a scheme; disputes with brokers; cryptocurrency tracing and investigations; due diligence and compliance, including source-of-funds work and crypto exposure assessments; and expert evidence, litigation support and training. See all services.

Public blockchains record every transaction permanently. Using professional blockchain analysis tools, we follow the funds from address to address, including through swaps and cross-chain bridges, until they reach services that can be identified, such as centralised exchanges. Each step is documented and can be checked independently.

Bitcoin, Ethereum and ERC-20 tokens, USDT and USDC, TRON, BNB Chain, Solana, Polygon, Litecoin and many other assets and networks, including funds moved through swaps and cross-chain bridges. Where a token is not covered by an analytics platform, for example a regional stablecoin, we reconstruct its flow from the blockchain record using block explorers and token-level data.

Yes. Many frauds are paid by bank transfer, card or money transfer service. We map the payment trail from your statements: the receiving banks, payment institutions and account holders, the companies behind them and where they are registered. The report lists the requests the authorities can send to those institutions for the information only they hold.

No. Most cases also need investigation off the payment trail: the company behind a platform (registration, ownership, licences and regulatory status, including MiCA in the EU), archived versions of its website and terms, the domains, email addresses and phone numbers used, and the documents you were given. We check each of these against independent sources. See .

Often we can identify the companies, websites, accounts and people connected to it, using public sources and lawfully available platforms. The identity behind an exchange or bank account is held by that institution and is released only to the police or a court. Our report shows the authorities exactly where to ask.

Yes. Genuine USDT and USDC are issued by Tether and Circle at specific official contract addresses; a token with the same name on a different contract is not the genuine stablecoin. We identify the issuer and the contract, compare the issuer’s claims with independent data, and assess control, liquidity and realisable value.

Yes. Send us the wallet address and the blockchain. We analyse its on-chain history: the exchanges and services it has interacted with, where its funds came from and went, and any exposure to scams, sanctioned entities, mixers or other high-risk sources. You receive a clear risk assessment, or a full report if the case needs one.

A summary of the case, the flow of funds, the exchanges and other services that received them, the confidence attached to each attribution, anything we could not establish, and the requests to send and where to send them. For matters going to court, a fuller addendum adds balance reconstruction, quantification, a verification procedure and an exhibit index.

Our reports are written for the police and prosecutors, financial regulators, lawyers and courts, and the compliance teams of exchanges and banks. They are also clear enough for you to understand exactly what happened to your money.

Yes. Every finding is reproducible from public blockchain data or the documents provided, and the method is set out step by step, so another analyst, the police or a court can verify it.

Our tracing is carried out on Crystal Intelligence, together with block explorers and token-level data for assets that analytics platforms do not cover. Our lead investigator holds the Crystal CCRIS and the Chainalysis CISC and CRC certifications.

Yes. We establish who operates the platform, whether and where it is licensed, and how your money moved, and we assess its conduct against local law and its regulator’s rules. For licensed firms we prepare the regulatory complaint and the supporting file, and work with local counsel where the matter goes further. See Broker misconduct and disputes.

No. Requests for fees, taxes, insurance or “unlocking” payments before a withdrawal are a common sign of fraud. Stop paying and keep the messages.

Look the firm up on the financial regulator’s own register, not on the broker’s website, and check that the website address on the register matches the one you used. Fraudsters often copy the name and licence number of a real firm. If you are unsure, send us the details and we will check them.

We handle disputes involving brokers regulated in Cyprus (CySEC), Canada (CIRO and the provincial securities regulators), South Africa (FSCA) and Australia (ASIC), and by offshore authorities including Mauritius (FSC), Belize (IFSC), the Seychelles (FSA) and Vanuatu (VFSC).

A virtual asset service provider (VASP, the FATF term) or crypto-asset service provider (CASP, the EU term under MiCA): for example a centralised exchange, a custodial wallet or a crypto broker. They verify their customers’ identities, which is why identifying them is often the key to moving a case forward.

Exchanges can restrict accounts that hold stolen funds, and stablecoin issuers such as Tether (USDT) and Circle (USDC) can freeze tokens at specific addresses. They usually act on requests from the police or a court, supported by clear evidence, which is what our reports provide. The sooner the funds are located, the better.

Yes. A police report is usually needed before exchanges or issuers will act, and it creates an official record of the crime. Our report can be attached to your complaint or provided to the investigating officer.

The investigating officer decides which requests to send to exchanges, banks and other institutions, often using the drafts and contact details in our report. We stay available to answer questions and update the report as disclosures come back. See .

Yes. We have consulted the police on clients’ cases in Ireland, Hungary, Iceland, Spain, Australia, the United States and other jurisdictions, and our lead investigator has been heard as a witness. We work independently of the police and do not act on their behalf.

We trace the assets, identify the exchanges, banks and companies involved, and deliver evidence for your claim, complaint or disclosure request. We work alongside your team and explain the findings in plain language to you, your client and the court. See .

Yes, in the form the jurisdiction allows. Where a party may instruct its own expert, our lead investigator gives expert evidence. Where expert opinion is reserved to court-appointed or registered experts, she can be heard as a witness of fact, and we support the court’s own expert with data and exhibits. See .

No. T&H Consulting is not a law firm and does not provide legal advice or legal opinions. For any matter requiring legal judgment, clients should seek guidance from a licensed legal professional in the relevant jurisdiction.

Only in specific situations. With your written authority, we can act for you before authorities such as financial ombudsmen and regulators, for example in a complaint against a licensed firm. We do not represent clients in court; that is for a licensed lawyer.

Yes. Crypto Assets for Legal Professionals is a practical six-hour live course in three two-hour sessions, taught in Spanish, available as a group cohort, one-to-one or in-house for a firm. See .

Yes. Tracing is not only for fraud. If you transferred funds to a person, company or platform, for a loan, an investment, an OTC deal or a business arrangement, we can follow them from your transaction and show where they went and which exchanges or banks received them.

Yes. We trace crypto and money from known starting points, such as bank transfers to exchanges, wallet addresses or transactions, and document where the assets went and where they are held. Our findings are prepared for your lawyer and the court.

Yes. We trace crypto funds back to their origin and set out each step, so a bank or exchange can assess them. We report what the evidence shows, including anything missing or inconsistent. See .

Yes. Our due diligence covers a company’s registration, ownership, licences, litigation and adverse media, and the people behind it. See Due diligence and compliance.

T&H Consulting International Kft. is a financial crime investigations firm based in Budapest, operating since 2019. Cointrace (cointrace.io) is our cryptocurrency investigations department. More about T&H.

Investigations are carried out and signed off by our lead investigator, Hanna Adynets, who has personally conducted more than 700 cryptocurrency investigations.

Yes. Our cases have come from 125 jurisdictions, and we work with partner law firms in several countries, including Argentina, Chile, Italy, Spain and the United Arab Emirates. We do not provide services to residents of England and Wales.

Warning signs include unsolicited contact after your loss, guaranteed results, upfront fees paid in crypto, requests for your seed phrase or remote access to your device, and pressure to act quickly. Legitimate investigators do not guarantee outcomes and never need your private keys.

Our website is thsiteconsl.top and we only correspond from @thsiteconsl.top addresses; tandhconsult.net is not us. Our phone number is +36 1 700 7177. We never ask for passwords, seed phrases or card numbers, and we never guarantee that money will come back. If in doubt, contact us using the details on this website. See .

Yes. What you share is used only to assess and investigate your case, and is not passed to third parties without your consent. See the Privacy Policy.

Never with your name. Where we describe past matters on this website, names, amounts, dates and other identifying details are removed.