Dubai, August 2026 — StarCompliance has entered into a partnership with GO28, a Bulgarian crypto trading platform that runs an online exchange alongside a physical OTC desk in Sofia. Under the agreement, GO28 users gain a direct route to our investigation team when digital assets are stolen, and the platform side gains access to wallet screening through AML Officer.
This is our first partnership with an exchange in Southeast Europe, and it follows the same logic as our work with Beosin and Global Ledger: recovery works better when it starts at the platform where the loss was noticed.
Why exchange partnerships matter in crypto recovery
Crypto recovery is not a paperwork problem. It is a timing problem.
Stolen funds move through mixers, cross-chain bridges and off-ramps within hours, and every hop makes attribution more expensive. What decides whether any of it can still be frozen is how quickly an investigator maps the path — and whether the platform that receives the funds is willing to act on that map.
Exchanges sit on both ends of that chain. They are usually the first party a victim tells, and they are frequently the venue where stolen funds surface again. A working relationship with a platform therefore shortens the two slowest steps in a case: getting the incident reported in a usable form, and getting a compliance team on the other side to look at it.
That is what this partnership is for. GO28 users who report a theft are pointed at a structured case review instead of a support ticket that ages.
What GO28 users get
A case review from StarCompliance is free and starts with what is already public: transaction hashes, wallet addresses, and timestamps. From there our team reconstructs the on-chain path, clusters the receiving addresses, and — where funds reach a cooperating exchange or a regulated off-ramp — works with those platforms and with law enforcement toward a freeze.
Two things are worth stating plainly, because this is a field where vagueness is usually deliberate.
The first is our case threshold. We work cases with a minimum loss of $200,000 USD equivalent. Below that figure, a paid investigation rarely returns more than it costs, and the better route is a report to the exchange and to the police — documented, with hashes attached. Reports still matter at that size: investigators cluster addresses across multiple victims, and a small case can become evidence in a larger one.
The second is what we never ask for. A legitimate investigation needs transaction hashes and wallet addresses, which are public information. It does not need your seed phrase or your private keys — not ours, not GO28's, not anyone's. Any party that asks for them, or that requires an upfront "unlock fee", "tax" or "gas deposit" before releasing recovered funds, is running a second scam on top of the first.
For readers who want the mechanics before they get in touch, our recovery process page walks through the stages of a case, and the blockchain investigation service page covers the tracing work itself.
The screening side: AML Officer
The other half of the partnership runs in the opposite direction — before a transfer rather than after it.
AML Officer aggregates four AML data providers into a single interface, with real-time alerts on monitored wallets, role-based access for shared investigations, and an API for embedding checks into an existing workflow. The point of aggregation is disagreement: providers draw on different datasets, and an address one of them calls clean is regularly flagged by another. A single verdict from a single vendor is a weaker signal than most desks assume.
Accounts on the platform are corporate. It is built for businesses that move crypto — exchanges, payment processors, OTC desks — and individual traders benefit indirectly, through the platforms that screen on their behalf.
What this partnership does not promise
No one can guarantee that stolen crypto will be returned, and we do not.
Forensics improves the odds. It does not create them. Whether assets can be frozen depends on where they landed, how quickly the case was opened, and whether the receiving platform cooperates — three variables that no investigator controls. What we can commit to is an honest read of a case at the outset, including when our answer is that the trail is cold and the money is gone.
Equally, a clean AML screening result is not a guarantee of a safe counterparty. It means nothing incriminating is known yet. That is a useful signal, and it is not the same thing as safety.
About the partners
StarCompliance operates as Star Compliance Cyber Risk Management Services L.L.C., registered in Dubai under registry number 1135542 and active since 2022. We report more than $500M traced in 2025 and casework across 12 jurisdictions; our work with the payment provider CoinsPaid was discussed in a Bitcoin.com News interview featuring both companies.
GO28 is operated by "28 Apex" Ltd. and serves the Bulgarian market from Sofia, combining an online trading platform with an in-person OTC desk.
Frequently asked questions
What changes for a GO28 user whose crypto was stolen?
The route, not the forensics. A theft reported through GO28 reaches our investigation team as a structured case review instead of a support ticket that ages. That matters because recovery is a timing problem: stolen funds pass through mixers, bridges and off-ramps within hours, and every hop makes attribution more expensive.
Is there a minimum loss, and what if my case is smaller?
We work cases from $200,000 USD equivalent. Below that a paid investigation rarely returns more than it costs, and the honest route is a report to the exchange and to the police with the transaction hashes attached. Those reports still matter: investigators cluster addresses across multiple victims, so a small case can become evidence in a larger one.
Will anyone ask for my seed phrase or private keys?
No — not us, not GO28. A legitimate investigation works from transaction hashes and wallet addresses, which are public information. Anyone who asks for your seed phrase or keys, or who demands an upfront “unlock fee”, “tax” or “gas deposit” before releasing recovered funds, is running a second scam on top of the first.
What does a case review cost, and how quickly do you answer?
The initial case review is free and the first response comes within two business hours. Send the transaction hashes and the story of the loss — response time matters more than completeness, so do not wait until every document is gathered.
Can you guarantee the stolen crypto comes back?
No, and we do not claim it. Forensics improves the odds; it does not create them. Whether assets can be frozen depends on where they landed, how quickly the case was opened and whether the receiving platform cooperates — three variables no investigator controls. Treat any guarantee of recovery as a scam signal.
Can an individual trader buy AML Officer?
No. Accounts are corporate: the platform is built for businesses that move crypto — exchanges, payment processors, OTC desks. Individual traders benefit indirectly, through the platforms that screen on their behalf. And a clean screening result is not a guarantee of a safe counterparty; it means nothing incriminating is known yet.
If you have lost digital assets to a theft or a scam, request a case review or message @StarCompliance on Telegram — response time matters more than completeness, so do not wait until every document is gathered. If you run a business that moves crypto, the screening side of this partnership lives in AML Officer.
