A report your bank or the exchange can act on. We can't promise recovery — but tracing is what gives it a chance.
or tap to call +1 647 848 1426
Most online scams cash out in crypto. Whatever it was called, we follow the funds on-chain.
Fake brokers and platforms that take deposits, then block withdrawals.
Bogus exchanges, "recovery" apps, and approval-phishing that empties wallets.
Long-cons that move you onto a fake investment app and escalate deposits.
Task-job scams, fake marketplaces, and account-takeover fraud.
Unlike a bank wire, on-chain funds don't sit still. Within hours they're split, mixed, and routed to exchanges. The earlier tracing starts, the more of the trail survives — and the better the chance of flagging funds before they're cashed out.
Stolen assets fragment across fresh wallets within minutes — the cleanest picture of the flow.
Layered through mixers and cross-chain bridges. Still very traceable, but attribution takes more work.
Some funds cash out, but many sit dormant for weeks — and the on-chain trail rarely vanishes. There is usually still a path to follow.
Crypto is the payment method of choice in investment fraud — Canada's largest category of fraud loss. The Canadian Anti-Fraud Centre reports $704M lost to scams in 2025 — the worst year on record. Transfers are fast and hard to reverse — we can't promise recovery, but early tracing gives any effort its best chance.
Source: Canadian Anti-Fraud Centre (2025)
A clear, defensible process you can act on.
Share the wallets, hashes, and timeline. We reconstruct the flow of funds across chains.
We link activity to real-world entities and surface the off-ramps where funds can still be flagged.
Auditable reports with documented chain-of-custody, plus expert-witness support where needed.
A clear, plain-English tracing report — built so your bank or the exchange can act on it.
Illustrative sample. Every report is specific to your case.
We thought the funds were gone, but Toronto Refund followed them through a mixer onto a regulated exchange. Their evidence package made our freeze request straightforward — and it landed in time.
From scoping to the final report, everything was clear and coordinated. You feel the depth of experience in tracing and attribution. I'd recommend them to any investigative unit.
They gathered the on-chain evidence, structured it for our regulator, and walked us through every step. A clear attribution chain, delivered fast.
A reliable partner that delivers. No overstated promises — clear methodology, clear reporting, and an attribution report in a short timeframe.
← swipe to read more →
Case details are sensitive. We handle them with the same rigor as the investigations.
Protected in transit and at rest, on infrastructure built for sensitive casework.
Only analysts assigned to your case can access its data — logged and auditable.
Request a copy, correction, or deletion anytime. We keep only what your case requires.
Used solely to assess and progress your case — never sold or repurposed.
Clear standards from first contact to final report — so you always know what to expect.
Investment and forex scams, fake trading platforms and crypto exchanges, romance and "pig-butchering" schemes, job and marketplace scams, and wallet-drainer or approval-phishing attacks. Most move stolen money out through crypto — which is what we trace.
As fast as possible. Crypto can move through mixers and onto exchanges within hours. Early tracing preserves the trail and improves the chance funds can be flagged. We triage every case within one business day.
Yes. Reports meet evidentiary standards with documented methodology and chain-of-custody, and our analysts can provide expert-witness support.
40+ networks and 1,000+ assets including Bitcoin, Ethereum, Tron, Solana, and major stablecoins, with cross-chain tracing through bridges and mixers.
Platform subscriptions for in-house teams, and scoped engagement fees for investigative work. The initial case review is free and carries no obligation.
The wallet addresses or transaction hashes involved, the relevant timeframe, and a short summary of what happened.
The sooner we begin, the more of the trail we preserve. Tell us what happened — we'll review at no cost.
Toronto Refund is a private blockchain intelligence and forensic investigation firm providing software, analytics, and expert services to qualified organizations and individuals. We are not a law enforcement agency and do not provide legal, investment, or financial advice. On-chain analysis cannot guarantee identification or recovery of funds; outcomes vary by case.
We do not accept U.S. citizens or residents as clients.
Not affiliated with any government agency or regulator. Not affiliated with the Canada Revenue Agency (CRA).