
METHODOLOGY
Forensic cartography, fast.
This page exists because most recovery firms will not show their work — and because they take too long. Cointiverse will show our work, and we move quickly. The seven phases below are how we get from “my crypto is gone” to “the funds are back in your wallet” in days, not months.
SEVEN PHASES, ONE METHOD
Intake & Triage · Within 24 hours
A senior cartographer reviews the case under NDA within 24 hours of submission — nights and weekends included. We collect transaction hashes, platform names, dates, communications, KYC documents you submitted to the perpetrator (if any), and wallet addresses involved.
Triage produces one of three verdicts — not eight, not twenty. Just three:
The trail is reachable, handles are present. Engagement proceeds the same day.
Some handles present; recovery posture is constrained but real. Scope and timeline set accordingly.
The on-chain evidence does not support a recovery path. We say so within 24 hours — and refund.
Chain Mapping · 24–72 hours
Cartographers run the loss event through clustering analysis, peel-chain detection, and mixer-output identification. Each hop is logged with timestamp, value, and protocol context. The output — ready in one to three days — is a node-link graph annotated with entity classifications: known exchanges, sanctioned addresses, custodial wallets, mixer outputs, and bridge contracts. Most maps are complete in under 48 hours.
Handle Identification · Same day
A handle is anywhere on the map where leverage exists: a regulated exchange that received the funds, a US-jurisdictional KYC point, a centralized custody touch, a known counterparty. We catalog every handle the same day the map closes, classify each by jurisdiction and likely cooperation profile, and rank by recovery probability.
Engagement Activation · 24–48 hours
The map and handle catalog drive the engagement decision — made within 24 to 48 hours of map completion. With chartable handles, we proceed to investigation and recovery immediately. Without, we deliver the map (which still has evidentiary and tax-loss value) and refund the engagement fee.
The map either creates a path or it does not. We do not invent paths, and we do not stretch timelines.
— Cointiverse cartographer’s principle
Investigation · 3–7 days
Each handle is worked in parallel, not in sequence: compliance freeze requests filed at exchanges, KYC unmasking pursued through compliant subpoena and court-order channels, witness statements collected, regulator reports filed simultaneously to maximize lever pressure. Cointiverse coordinates the timeline so every request lands inside the same business week. Most investigations resolve in three to seven days.
Recovery · 1–2 weeks (typical)
Once handles are activated and freeze orders are in place, recovery negotiation begins — and usually closes inside one to two weeks. Most cases settle. Some go to civil litigation. A small number become criminal referrals where authorities take over. Cointiverse stays active across every track until funds are physically returned, and only then are contingency fees collected.
The exception: when fiat-rail counterparties are involved (bank wires, prepaid networks, FX intermediaries), recovery slows to traditional banking timelines. Our longest case on record was sixty days, and it was a fiat case. Pure crypto recoveries close inside two weeks — the on-chain evidence does not allow defendants to stall.
Restitution Documentation · Same day on settle
On recovery, Cointiverse delivers full documentation the same day funds settle: tax-loss / tax-gain papers, victim impact statements where applicable, and a sealed case file archived in our forensic library — anonymized — for use in pattern analysis on future cases. Your case becomes one more star on the map.

START THE MAP