The victim — or their legal counsel — initiates contact with StarCompliance. Intake receives the incident summary, wallet addresses, TXIDs, and amount at loss. Reviewed within two hours during business.
Analysts perform a preliminary on-chain sweep to gauge recovery potential. Flow traced, mixers and bridges identified, reachability confirmed — before any contract is signed.
Identity, KYC, and case documents are verified. A formal recovery contract is executed with explicit success-fee terms, refund policy, and defined scope.
A detailed on-chain forensic report — clustering, heuristics, risk scoring — is prepared in a format operationally useful for law enforcement. Advisory begins immediately to initiate asset freezing.
Law Enforcement Agents analyze the Investigation Report and prepare jurisdictionally-appropriate Freeze Requests targeted at specific Virtual Asset Service Providers.
Requests are sent in parallel to VASPs and stablecoin issuers across the applicable jurisdictions — minimizing the window in which funds can be moved or liquidated.
Receiving VASPs verify the authenticity of the Freeze Request and cross-reference the flagged addresses against their internal ledger and sanction lists.
The VASP responds to the request and provides KYC/KYT data to Law Enforcement — establishing custody, beneficial ownership, and transaction history.
Law Enforcement receives formal confirmation that the targeted assets have been frozen on-exchange, halting any further movement or liquidation.
Legal counsel obtains a Court Order authorizing the transfer of the seized assets from VASP custody back to the rightful owner.
Seized funds are transferred to the victim.