Submit Case →
§ — Verify us

How to verify a crypto recovery company — and tell a legit firm from a scam.

StarCompliance is a Dubai-licensed blockchain forensics firm (licence No. 1135542) that traces stolen crypto, files freeze requests with exchanges and stablecoin issuers, and runs recovery cases through partner lawyers in the relevant jurisdiction. This page exists because the recovery market is full of advance-fee fraud, and you should not take our word for anything. Below is the checklist investigators and journalists run when someone asks “is this crypto recovery company legit” — the questions to ask a crypto recovery firm before paying it anything — with our answer to every point. Everything here is written so you can verify crypto recovery company claims, ours included, without contacting anyone.

Last updated: Figures as of: 30 July 2026Reviewed by: reviewer to be named — see the end of this page
§ 01 — The numbers

Crypto recovery success rate, and the rest of the numbers with the date they were measured.

Everything below is a primary figure from our own case register. Where a figure covers a period, the period is stated — a number without a period is not evidence.

117+
closed cases since 2022
$35M+
recovered to date, of which $10M in 2025
$500M+
in assets traced in 2025
68%
success rate on accepted cases · measured over the past 24 months
30+
investigators and analysts
12
jurisdictions we work across
$200K
published case threshold; smaller cases reviewed individually
$30M+
currently in recovery, closing 2025–2026

Two more things you should know before reading further: a freeze is not a return — assets can be frozen within days, while getting them back to you takes months (the real ranges are in the timeline table below); and we do not accept every case — the 68% figure is measured on cases we accepted after assessment, not on everyone who wrote to us.

§ 02 — The check

Crypto recovery scam red flags: the 10-point check. Run it on us — and on anyone else.

These are the questions to ask crypto recovery firm by firm — what an experienced investigator looks for, how you can check it yourself in a few minutes, and what you find when you check it on us. Run the same ten on anyone else you are considering; the difference between a legitimate crypto recovery vs scam operation shows up in minutes.

01

A named legal entity with a licence number you can look up

How to check: A legitimate firm publishes the exact registered name, licence or registration number and the issuing registry — not just a brand and a city. If a site names only a trading brand, or the entity is registered in a jurisdiction with no public registry, treat everything else on the site as unverified.

StarCompliance

Registered as STAR COMPLIANCE CYBER RISK MANAGEMENT SERVICES L.L.C, Dubai, UAE. Commercial licence No. 1135542 (register No. 1876962, DCCI No. 439332), issued 12 January 2023, valid to 11 January 2027. Sole owner and manager: Taras Podhorodetskyi. Registered address: One Central, Dubai World Trade Centre, Dubai, UAE. The company has been operating since 2022 and has been licensed in Dubai since January 2023 — we state both dates rather than the more flattering one.

02

Real people, with names, faces and qualifications

How to check: Open the team page and search each name outside the site — LinkedIn, conference programmes, media interviews. Stock photos, first-names-only, or a team that exists nowhere else on the internet is the single most common tell of a fake recovery firm.

StarCompliance · partially answered today

Our founder and CEO, Taras Podhorodetskyi, is public and verifiable: interviewed by ForkLog (July 2024), speaker at WOW Summit 2024, LinkedIn and X profiles linked from this site. Additional investigator and reviewer profiles are being published in the next update of this page — until they are, this point is only partially answered, and we say so rather than filling the page with stock photos.

03

A physical address and a phone that a human answers

How to check: Call the number and look up the address. Messenger-only contact — a Telegram handle and nothing else — is how recovery scams stay unreachable after payment.

StarCompliance

Office: One Central, Dubai World Trade Centre, Dubai, UAE. Phone: +971 56 182 9077. Email: [email protected]. There is a Google Business Profile for the Dubai office, and the licence above ties the company to that address in a public registry.

04

No promise of recovery — from anyone, at any stage

How to check: Search the site for the words "guaranteed return", "100% recovery", "we will get your money back". Whether funds come back is decided by a court, an exchange or a token issuer — never by the firm you hire. Any promise of an outcome is a red flag on its own, and it is the promise that regulators and the FBI point to when they describe recovery fraud.

StarCompliance

We never promise an outcome, and we do not use the word "guaranteed" anywhere on this site or in a contract. What we can say factually: once a freeze is officially confirmed, the odds improve sharply, and our measured figure on accepted cases is 68% over the past 24 months. If your case has no realistic path to recovery, we say so at the assessment stage and decline it.

05

Terms in writing before you pay anything — and nothing added afterwards

How to check: Finding out whether your case is workable should cost nothing, and everything you would owe should be set out in a written agreement you can read before you commit — not described in a conversation after you have paid. Watch specifically for repeat payments: a scam pattern is a small first fee, then a "court fee", "tax", or "unlock fee" each time you get close to the money.

StarCompliance

The case assessment and the first call are free, and you get an answer within two business hours — including the answer "this cannot be recovered", which is the honest one in a meaningful share of enquiries. Commercial terms are fixed in the engagement agreement before any work begins: you see them in writing, in full, together with the scope of the work and what happens if nothing is recovered. Once a case is open we never add a charge to release funds — there is no "court fee", no "tax" and no "unlock payment" from us at any stage.

06

Timelines that separate freezing from returning

How to check: Look for a site that promises money back "in 48 hours". Fast numbers in this industry describe freezing an asset; returning it to the victim runs through law enforcement, courts or an issuer's payout schedule and takes months. A site that blurs the two is either inexperienced or deliberately misleading.

StarCompliance

Our published timelines keep the two apart — the full table is in the next section. In short: flagging into AML services within 4 hours; a freeze request to an exchange takes 2–4 days; a freeze request to a stablecoin issuer gets a response in 24–62 hours; while an actual return runs 6–9 months from an exchange and 12–24 months through issuer payouts. Complex cases: 6–36 months.

07

Case evidence that exists outside the firm's own website

How to check: Testimonials on a company's own page prove nothing. Look for a case that a third party — the victim company, a court, an exchange, a news outlet — confirmed independently.

StarCompliance

Our reference case is CoinsPaid: 5,000,000 USDT recovered. The case is documented outside this site — it was covered by Bitcoin.com News, and our CEO's work has been the subject of a ForkLog interview (23 July 2024). Individual client cases are confidential; we publish only what the affected party has agreed to make public.

08

Partners who confirm the relationship on their own site

How to check: A logo wall is not a partnership. Open the partner's own website and search for the firm's name. If the relationship is real, it is documented on both sides.

StarCompliance

Two partnerships are confirmed publicly by the partners themselves: Global Ledger (announced on their blog, 22 September 2025, with a quote from our CEO) and BitOK (data exchange and client access to their KYT tooling). We do not claim a "direct channel" to any token issuer: we file freeze requests through the issuer's official procedure, and the response time we publish (24–62 hours) is the observed turnaround of that procedure.

09

A written list of what the firm refuses to do

How to check: A firm that accepts every case is selling hope, not a service. Real constraints — assets, chains, source-of-funds rules — are the clearest sign of an operation that has to answer to a regulator and to partner banks.

StarCompliance

Our limits are published in full further down this page: no Monero, no cases with an unverified source of funds, no cases without a realistic path to recovery, and we stop work if a client misrepresents the facts. We also state plainly which part of the work is ours and which is not: forensics and evidence are done in-house; legal steps are executed by partner lawyers admitted in the relevant jurisdiction, under our case management.

10

They did not contact you first

How to check: This one is about the approach, not the website. The FBI's Internet Crime Complaint Center has warned repeatedly about fake "law firms" and recovery agents who message victims of a previous scam, claim to be working with the FBI or another agency, and ask for an up-front fee. Between February 2023 and February 2024 alone, victims re-targeted this way reported losses of more than $9.9 million.

StarCompliance

We do not cold-message victims, we are not affiliated with any government agency, and no agency refers cases to us. If someone contacts you claiming otherwise — including in our name — it is not us. Report it to the FBI's Internet Crime Complaint Center (IC3); the relevant advisories are PSA240624 and PSA250813.

One check that beats all ten: ask any firm — including us — to put in writing what happens to your money if nothing is recovered. A firm that cannot answer that in one sentence should not be handling your case. Our answer: it is written into the engagement agreement you sign — commercial terms are fixed there before any work begins, alongside the scope of the work and the responsibilities of each side. Nothing about it is left to a conversation after you have paid.

§ 03 — Timelines

Crypto recovery timeline: how long does crypto recovery take, stage by stage.

The left column is how fast an asset can be stopped. The right column is how long it takes for money to reach you. They are different processes, and we never quote one to imply the other.

StageWhat happensRealistic time
First responseAn investigator reads the case and answers honestly whether there is a pathFree · within 2 business hours
AML flaggingStolen transactions flagged with AML providers and our own alert systemWithin 4 hours
Freeze request — exchangeEvidence pack filed with the receiving exchange's compliance team2–4 days
Freeze request — stablecoin issuerRequest filed through the issuer's official procedure24–62 hours
Official blockAfter a police report is filed, the provisional freeze becomes a formal block+2–3 days
Legal stagePartner lawyers in the relevant jurisdiction file for release of the frozen fundsJurisdiction-dependent
Return — exchangeFunds released to you on a court decision, usually in one payment6–9 months
Return — USDT via issuerFirst payout 12–20 months (includes a 3-month lock), then quarterly instalments~24 months in full
Complex / multi-jurisdictionSeveral hops, mixers, or more than one jurisdiction involved6–36 months
§ 04 — The process

The crypto recovery process, step by step.

Step 01

You send the transaction hashes

A short description of what happened. No payment, no account, no forms beyond what is needed to look at the chain.

Free · first response within two business hours
Step 02

Free assessment call

We tell you where the funds went, whether they are still reachable, and what the realistic outcome is — including "this cannot be recovered", which is the answer in a meaningful share of enquiries.

Free
Step 03

KYC and engagement

Identity verification runs through Sumsub; the engagement letter sets out the scope of work, the responsibilities of each side and what happens if nothing is recovered. Commercial terms are fixed in that agreement before any work begins.

1–3 days
Step 04

Investigation and freeze

Tracing, AML flagging within 4 hours, then freeze requests to the exchanges or issuers holding the funds.

4 hours → 4 days depending on the counterparty
Step 05

Legal stage and return

Partner lawyers in the relevant jurisdiction take the evidence pack forward; funds are released by court decision or issuer payout schedule.

6–36 months, see the table above
§ 05 — Our limits

What we do not do.

This list costs us clients. It stays because a firm without limits is a firm without compliance obligations.

  • We do not work with Monero. Its privacy design means we cannot produce the evidence a court or an exchange would need.
  • We do not take cases with an unverified source of funds. If the origin of the assets cannot be evidenced, we decline — regardless of the amount.
  • Our published threshold is a loss from $200,000. Below it the cost of a full investigation usually exceeds any realistic recovery, so smaller cases are reviewed individually rather than taken by default.
  • We do not take cases with no realistic path to recovery, even when the client is willing to pay for the attempt.
  • We do not work with non-crypto assets, and we do not do reputation cleanup for anyone.
  • We stop work if a client misrepresents the facts. The engagement letter says so before you sign it.
  • We do not practise law. Legal steps are taken by admitted lawyers in the relevant jurisdiction, coordinated by us.
§ 06 — Evidence

The case you can check without asking us.

5,000,000 USDT

CoinsPaid. Recovered for the payment processor after a major theft. The case is documented outside this website — it was covered by Bitcoin.com News, so you can check it without a single document from us. It is also the case we point to when explaining why freezing and returning are quoted separately: the assets were frozen within 48 hours — that figure describes the freeze, and nothing about how long the money took to come back.

It is not the only one on the record. Our case file documents seven engagements with the numbers attached — among them $2.0M USDT drained from a private wallet with 86% of it frozen nine days later, $1.8M stolen from a corporate holder with $1.6M frozen in July 2025 before it could be laundered onward, and a cold-wallet theft where the recoverable part was intercepted on Solana. Everything else stays confidential: a case is published only where the affected party agreed to it in writing, which is why the file lists seven and not seventy.

See the case file
§ 07 — FAQ

Questions people actually ask before hiring us.

§ 08 — Authorship

Who wrote this, and who checked it.

Taras Podhorodetskyi

Founder and CEO, StarCompliance · blockchain investigations since 2022 · speaker, WOW Summit 2024 · interviewed by ForkLog, 23 July 2024

Reviewed by: compliance reviewer — name and role published with the next update of this page.

Disclaimer. This page is informational and is not legal advice. Outcomes in asset recovery depend on courts, exchanges and token issuers, and no outcome is promised. Figures are from our own case register as of 30 July 2026, and each is published with the period it covers. StarCompliance does not practise law; legal steps are executed by admitted lawyers in the relevant jurisdiction.