← All examples Full example — Forensic Report + Formal Statement

Fake Crypto Investment Platform

Fictitious case for demonstration purposes. Victim invested £12,000 into a fraudulent trading platform promising guaranteed 300% returns. Funds traced through multiple wallets to a centralised exchange where the perpetrators cashed out.

1
Forensic Investigation Report
9 pages • On-chain tracing + OSINT + Exchange identification
2
Formal Statement
7 pages • Ready to submit to Action Fraud / Police
Document 1 — Forensic Investigation Report
🔎
Forensic Report — Fake Crypto Investment
TraceProof_Forensic_Report.pdf • 9 pages • Classification TLP:RED
Risk 92/100
TP-2026-4291 Method: Crypto investment fraud Amount: £12,000 Vector: Instagram ads + WhatsApp Funds traced to Binance

Fraudulent trading platform “CryptoVault Pro” — Instagram recruitment & WhatsApp manipulation

Victim recruited via Instagram advertisement showing fake testimonials. Directed to WhatsApp “account manager” who guided deposits to a platform showing fabricated profits. When withdrawal requested, victim told to pay “tax” and “insurance fees”.

⚙ Investigation methodology
1. Platform analysis: WHOIS, hosting, SSL cert, domain age (registered 3 weeks prior) • 2. Blockchain tracing: Follow BTC/ETH from deposit address through mixer to exchange • 3. OSINT: Social media profiles, phone numbers, Telegram groups • 4. Exchange identification: Cluster analysis identifying Binance hot wallet as final destination • 5. Pattern matching: Cross-reference with known fraud networks

Detailed timeline of events

12 March 2026 — 19:45
Victim sees Instagram ad for “CryptoVault Pro” showing screenshots of £50,000+ profits. Ad uses deepfake video of a well-known UK financial commentator endorsing the platform.
12 March 2026 — 20:10
Victim clicks link, lands on professional-looking website (cryptovaultpro.io, registered 18 days prior via Namecheap, privacy-protected WHOIS). Signs up with email and phone number.
13 March 2026 — 09:30
WhatsApp message from “James Mitchell, Senior Account Manager” (+44 7XXX XXXXXX, later identified as VoIP number). Offers “starter package” of £250 with “guaranteed 50% return in 48 hours”.
13 March 2026 — 14:00
Victim deposits £250 via bank transfer to “CryptoVault Trading Ltd” (Revolut business account). Platform dashboard immediately shows “profit” of £127.
15 March 2026 — 11:20
Platform shows £412 balance. “Account manager” encourages larger deposit for “VIP tier”. Victim deposits £2,000 via crypto (BTC to address bc1q7ek...4f2m).
22 March – 5 April 2026
Multiple additional deposits totalling £9,750 in BTC and ETH. Platform shows fabricated balance of £38,400. Victim attempts first withdrawal of £5,000.
6 April 2026 — 16:45
Withdrawal “pending”. Account manager claims “HMRC tax clearance fee” of £3,800 required before release. Victim refuses. All contact ceases. Platform goes offline 48 hours later.

Blockchain tracing results

▶ ON-CHAIN TRACE — BTC FLOW
Deposit address: bc1q7ek...4f2m → £9,750 in BTC (0.142 BTC)
Hop 1: bc1qr9t...8k2p → Consolidation wallet (12 inputs from other victims)
Hop 2: bc1qm4z...7w1n → Wasabi CoinJoin (3 rounds)
Hop 3: bc1qp8f...2d9v → Binance Hot Wallet (identified via cluster analysis)
⚠ RISK: Funds reached centralised exchange — law enforcement can request account freeze via Binance compliance

OSINT findings

ElementFindingRisk
Domain cryptovaultpro.ioRegistered 18 days before first contact. Namecheap privacy. Hosted on Cloudflare → backend on OVH (FR)HIGH
WhatsApp +44 7XXXVoIP number (Lycamobile PAYG). Same number linked to 3 other reported scams on ScamAdviserHIGH
Instagram ad accountCreated 2 weeks prior, 4,200 followers (purchased). Deepfake video reported and removedMEDIUM
Revolut business account“CryptoVault Trading Ltd” — Companies House shows incorporation 1 month prior, registered agent addressHIGH
Document 2 — Formal Statement (extract)
⚖
Formal Statement — Crypto Investment Fraud
TraceProof_Statement.pdf • 7 pages • Ready for Action Fraud submission

Statement of facts

I, REDACTED, residing at REDACTED, hereby report that between 12 March 2026 and 6 April 2026, I was the victim of investment fraud perpetrated through a fraudulent cryptocurrency trading platform operating under the name “CryptoVault Pro” (website: cryptovaultpro.io, now offline).

The total financial loss amounts to £12,000, comprising £250 via bank transfer to a Revolut business account and £11,750 in cryptocurrency (Bitcoin and Ethereum) sent to wallet addresses controlled by the perpetrators.

Evidence summary

The following evidence is attached to this statement: (1) Screenshots of all WhatsApp conversations with the fraudulent “account manager”; (2) Bank statements showing the initial £250 transfer; (3) Blockchain transaction records for all cryptocurrency deposits; (4) Screenshots of the fraudulent platform dashboard; (5) Instagram advertisement screenshots; (6) TraceProof forensic blockchain tracing report identifying fund flow to Binance exchange.

Request to authorities

I respectfully request that Action Fraud and the relevant police force investigate this matter, and that a request be made to Binance Holdings Ltd for the freezing and disclosure of account details associated with the receiving wallet addresses identified in the attached forensic report.

Generation time: ~58 seconds from submission • Format: Print-ready PDFs • Ready to submit: Documents are complete and ready to file with Action Fraud or your local police • Updates: If new evidence emerges, the report can be regenerated free of charge

Have you been a victim of a similar scam?

Start your free report: within minutes you will receive a forensic investigation report and a formal statement ready to submit to the authorities.

Start your report →

No obligation. You only pay if you decide to download the documents.