Financial crime  /   Blockchain  /   Open-source intelligence

Beyond the transaction.
Into the intelligence.

Investigating financial crime through blockchain analysis, digital evidence and open-source intelligence.

01From on-chain signal04to defensible insight
TRACES
CONNECTIONS
PATTERNS
PEOPLE
INTELLIGENCE
A MORE COMPLETE PICTURE

LOCATION NOT SHARED

◇

Blockchain
intelligence

Tracing
Attribution
Risk analysis

⊙

Financial crime
investigations

KYC · KYB · EDD
PEP & sanctions screening
Transaction monitoring

◎

Open-source
intelligence

Digital evidence
Geolocation
Entity analysis

▱

Investigative
methodology

Research
Analysis
Reporting

01 — Fields of inquiry

Follow the signal.
Understand the system.

Investigative work at the intersection of blockchain data, open sources and financial crime typologies.

01

Blockchain intelligence

Transaction-flow analysis, entity exposure assessment and cross-chain movement mapping—translated into decisions, not data dumps.

↗
02

Financial crime investigations

KYC, KYB and enhanced due diligence; PEP and sanctions screening; transaction monitoring; and structured analysis of fraud and laundering indicators.

↗
03

Open-source intelligence

Ethical collection and corroboration of public records, digital traces and contextual evidence to strengthen an investigative hypothesis.

↗

01 — Featured casework

Signals become stories.

Selected public and anonymized case notes
evidence-led, with sensitive details withheld

ANONYMIZED SCAM TRACE01

Scam-flow tracing to Kyrrex

Transaction sequencing · Wallet relationships · OSINT

Investigated smaller transfers followed by much larger transactions, reconstructing the sequence and tracing subsequent movements to activity connected with Kyrrex.

Open case note  →
TRON ↔ ETHEREUM02

Cross-chain USDT tracing

Cryptocurrency intelligence · Complex investigations

Reconstructed USDT movements across Tron and Ethereum, examining intermediary wallets, service hops and mixer exposure while validating every cross-chain link.

Open case note  →
FROM SIGNAL TO NETWORK03

Fraud network & control analysis

Behavioural intelligence · Fraud signals · Rule calibration

Connected recurring indicators across separate investigations, revealing a wider fraud pattern and an inconsistency in how the control logic responded.

Open case note  →

02 — Approach

Connecting the dots
others overlook.

Every engagement is built around a testable question, documented sources and a clear distinction between fact and inference.

Discuss a research question  →
  1. 01
    DISCOVER

    Frame

    Define the question, scope and evidentiary threshold before collecting.

  2. 02
    ANALYSE

    Trace

    Follow on-chain flows and contextual signals across relevant networks.

  3. 03
    VERIFY

    Corroborate

    Test findings against independent public sources and alternative explanations.

  4. 04
    CONNECT

    Communicate

    Deliver a concise, defensible narrative with limitations made explicit.

LC / 03LC+

Evidence before assumption.
Context before conclusion.

03 — Profile

Intelligence with
investigative discipline.

Financial crime investigator specialising in complex cryptocurrency tracing and intelligence-led fraud analysis.

Close to four years across regulated digital-asset environments, spanning KYC, KYB and enhanced due diligence, PEP and sanctions screening, transaction monitoring and blockchain investigations. Transactional, behavioural, on-chain and open-source evidence is connected to reconstruct activity, attribute risk and support defensible escalation.

01

Investigative practice

Reconstruct multi-hop and cross-chain flows, connect wallet and entity relationships, and identify the wider network behind suspicious activity.

02

Evidence standard

Validate sources, distinguish transaction links from actor attribution and state uncertainty, limitations and alternative explanations.

03

Operational impact

Convert recurring investigative patterns into stronger fraud controls, clearer escalation and measurable workflow improvement.

Complex investigationsForward & backward tracing · Multi-hop and cross-chain analysis · Wallet and VASP attribution · Evidence-based escalation
Control impactDetected recurring fraud patterns and control gaps · Improved detection logic with Product and Engineering · Reduced false positives without weakening risk coverage
Project ownershipTook ownership of a fraud-rule remediation affecting approximately 5,000 users · Identified and corrected faulty logic that had incorrectly restricted account access
Operational impactDesigned a 24/7 transaction-incident monitoring workflow · Reduced median resolution from 12 hours to under 30 minutes
CredentialsChainalysis Certified Investigator · Chainalysis compliance & KYT training · ICA Specialist Certificate in CFT

Some messages are not meant
to be seen at first glance.

54 52 55 53 54   42 55 54   56 45 52 49 46 59

04 — Contact

Have a complex trail
that needs clarity?

Share the outline of your enquiry. Please do not include passwords, private keys, seed phrases or highly sensitive evidence.

LinkedIn profile ↗

Enquiries are delivered privately by email. Your contact details are never displayed on this website.

Field note · 0x4c43

Read between
the ledgers.

54 52 55 53 54 20 42 55 54 20 56 45 52 49 46 59

A quiet reminder for every investigation: trust, but verify.

Explore the four-step approach ↗

INVESTIGATIVE QUESTION

WORK PERFORMED

PUBLIC-SAFE TAKEAWAY

Selected details are anonymized or limited to public records. No client identities, wallet addresses, private evidence or confidential findings are disclosed.

Discuss a related enquiry  →

Anonymized analytical workspace · Case 01

From test transfer
to attributed endpoint.

Wallet or clusterAttributed serviceIndependent context
Anonymized scam-flow investigation mapA network diagram showing a small test transfer, connected wallets, larger downstream transactions, an attributed Kyrrex endpoint and a separate public-context layer.SOURCEWALLETTESTTRANSFERWALLETCLUSTER AWALLETCLUSTER BLARGERTRANSFERSKYRREXATTRIBUTED VASPSEPARATE PUBLIC CONTEXTICIJ · HTXCOIN LAUNDRYSMALL-VALUE SIGNALRELATIONSHIP TESTINGSEQUENCE RECONSTRUCTIONATTRIBUTIONNOT A CASE CONCLUSION

Illustrative reconstruction based on the public-safe case narrative. Values, addresses, timestamps and customer details are intentionally omitted or altered.

Cross-chain trace console · Case 02

Two ledgers.
One validated trail.

TronEthereumObfuscation exposure
Anonymized cross-chain USDT traceA split-ledger diagram tracing USDT from Tron through an intermediary service and bridge event to Ethereum, with mixer exposure tested separately.TRON · TRC-20ETHEREUM · ERC-20TRONSOURCESERVICEHOPCROSS-CHAIN EVENTVALUE + TIME ALIGNEDETHRECEIVERDOWNSTREAMENDPOINTMIXEREXPOSUREFORWARD TRACESERVICE ATTRIBUTIONBRIDGE CHECKPOINTLINK VALIDATIONEXPOSURE ≠ OWNERSHIP

Illustrative reconstruction only. It demonstrates the analytical method without exposing wallet addresses, transaction hashes, amounts or customer information.

Pattern intelligence workspace · Case 03

From isolated alerts
to a connected control signal.

Entity or accountShared signalControl response
Anonymized fraud network and control analysisA network of accounts, devices, transactions and identity signals converging on a recurring fraud pattern, then exposing an inconsistency in a control rule.ACCOUNTALPHAACCOUNTBETAACCOUNTGAMMASHAREDDEVICE +BEHAVIOURPAYMENTPATTERNIDENTITYSIGNALRECURRINGTYPOLOGYTRUE RISKESCALATECONTROL CHECKINCONSISTENTOUTCOME→ REMEDIATESEPARATE ALERTSENTITY RESOLUTIONSIGNAL CORROBORATIONPATTERN EMERGESCONTROL HEALTH TEST

Illustrative and fully anonymized. Customer identities, internal thresholds, proprietary rules and case outcomes are deliberately withheld.

Portfolio index

Find a section