We readthe tracescriminals leave.
Ichnaro follows the money and the infrastructure behind organised crime — crypto, payment rails, sites and channels, and leaks — and turns them into evidence that institutions, courts and authorities can act on.
- #money-on-chain
- #money-off-chain
- #crime-infrastructure
- #leaks
The platform that follows the money and the infrastructure behind organised crime.
EU-hosted · fixed-fee reports · vetted clients only
Four layers the market sells separately, joined in one graph and delivered as evidence.
Money on-chain
Trace funds across Bitcoin, Ethereum and TRON, including USDT, to the services where they can be frozen or disclosed by lawful order.
Money off-chain
Find the IBANs, e-money accounts, merchant accounts and payment pages that illegal betting and investment-scam sites advertise — and tell the institution that holds the account, privately.
Crime infrastructure
Map the domains, sites, Telegram channels and campaigns behind a scheme, including those impersonating your brand, and move them toward takedown.
Leaks
Monitor public criminal forums, Telegram channels and leak sites for claims about your organisation and your suppliers, and verify them quickly.
Money and infrastructure. Not private lives.
Our work follows funds, servers, domains and companies. We do not track people's locations, communications or devices, and we never break into systems. Our findings take an investigation to the point where an exchange, bank, registrar or hosting provider can be required by a competent authority to disclose who is behind an account — through lawful process, not by us.
Read how we workBuilt for scrutiny.
Every item we collect is hashed at the moment of acquisition, stored immutably in the EU, and recorded in a tamper-evident custody log anchored by independent timestamp authorities. Reports state our methods, sources, confidence and limitations, so the other side's expert can check our work.
Trust & SecurityHashed at acquisition
Stored immutably in the EU
Hash-chained custody log
Independent RFC 3161 timestamps
Four kinds of client. One standard of evidence.
Exchanges & fintechs
Stolen-fund tracing, incident response, breach-claim verification.
ExploreLaw firms & insurers
Fixed-fee investigation reports for fraud and asset-recovery matters.
ExploreBrands & enterprises
Leak intelligence, supplier exposure and brand protection.
ExploreBanks, payment & e-money institutions
Intelligence on your own accounts and merchants advertised by illegal betting and investment-scam sites.
ExploreFixed fees. Independent findings.
Our investigation reports are fixed-fee. We never take a share of recovered assets, so our conclusions do not depend on what we find.
How an engagement starts
- [01]
Request
Tell us briefly what happened. No evidence files or third-party personal data at this stage.
- [02]
Vetting
We verify who you are, the purpose of the request, and whether we have a conflict.
- [03]
Engagement
A fixed scope, a named analyst and a secure evidence upload once the engagement is confirmed.
- [04]
Evidence
Sealed findings with methods, sources, confidence and limitations, delivered to authorised recipients only.
Talk to an investigator.
Tell us what happened. We review every request and confirm who we are working with before any engagement begins.