Incident Response

Incident Response

Stolen Cryptocurrency Recovery

Do you need to recover cryptocurrency funds (Bitcoin, Ethereum, or other) lost due to theft, fraud or scam?

We have assisted in the recovery of millions of dollars’ worth of stolen cryptocurrencies. Our investigations can help to uncover who the perpetrators are, monitor crypto movements in real-time,and ultimately help with seizing and recovering stolen funds.

Due to overwhelming demand for our services, we work only on cases involving financial loss of $100,000 or more.

We require full cooperation from victims, as reckless action on their part (for example, tipping off the perpetrator directly or indirectly) can significantly hamper our work and threaten its success.

We have helped the influencer Ian Balina recover his funds from the widely medialized $2M hack that happened during his live stream.

Full life-cycle approach

Our services include investigation and blockchain forensics, writing of highly actionable police reports optimized for accelerated funds recovery, liaising with exchanges and law enforcement, expert witness testimony, and more… all the way to the end goal of the successful return of funds.

There are many different shapes a case can take. We have had criminal matters range from days to over a year, and some of those matters involved us as expert witnesses for asset recovery towards the end.

In a prominent example, we investigated and socially engineered criminals, revealed their identity and location, and provided crucial evidence that led to their arrest and prosecution. We were involved from the start of the incident all the way to sentencing and distribution of recovered assets to affected parties.


You prepared a comprehensive report of your findings and I’ve found this really useful.

I have served a UK request for a data on most of the service providers you have detailed in your report and I have been receiving responses. Binance and [REDACTED] were particularly helpful and responded quickly with some useful information.

– Police Cyber Crime Unit, Warks & West Mercia

In your own interest, do not take any action before consulting us, with the exception of collecting data that might otherwise be lost.

Taking matters into your own hands as a crime victim often means that you will unwittingly take counterproductive steps which delay a successful resolution and may even expose you to liability.

Our suite of capabilities and resources includes Chainalysis certification, CipherTrace expertise, Crypto Defenders Alliance membership, an extensive network of law enforcement, legal and exchange contacts, and most importantly, deep experience with dozens of cases.

All our services are available based on an hourly retainer model. When we onboard you as a new client, we charge an initial retainer, which is almost always sufficient for a successful resolution of the case.

In addition to a retainer, we charge a percentage contingency fee on funds recovered.


SIM Swapping

If you have been the victim of SIM-swapping, we provide urgent emergency assistance to help secure your assets, privacy, identity and any sensitive information.

Additionally, we provide, and assist you in implementing, proactive security measures and training that will prevent you and/or your company from being affected by SIM-swapping in the future.

CipherBlade is the no. 1 company globally with deep expertise on SIM-swapping.

We are seen as subject-matter experts on SIM-swapping and cryptocurrency-related cybercrime by the FBI and other law enforcement agencies.

We have worked on major SIM-swapping cases, where our involvementled to multiple arrests and recovery of the victims’ funds.

We authored and published The SIM Swapping Bible in collaboration with MyCrypto.

Richard Sanders, CipherBlade lead investigator, was featured on Vice TV documentary as a SIM swapping expert.


Data Breaches

If you have experienced a breach of personal or corporate data, we provide urgent emergency assistance with securing your data and infrastructure, as well as taking all necessary steps to legally protect yourself and your family, clients, or business.



If your organization has been victimized in a ransomware attack, or you represent a cyber insurance company that has insured an organization that has been attacked, and attackers are demanding a Bitcoin ransom, we can assist in dealing with the situation.

Before a decision is made regarding whether or not to pay the ransom, it’s critical to first discuss available options with us to minimize damages and costs to your organization.


Exchange Hacks

If your cryptocurrency exchange has been hacked, and customer funds have been lost as a result, we can assist. We can investigate the incident and track the cryptocurrency that was stolen by the hackers, and work with law enforcement so those funds can ultimately be recovered for your customers.

We can also assess your security protocols as well as cryptocurrency storage and management practices and can help to implement better security to prevent further breaches.


Online Harassment & Blackmail

Online trolling can easily get out of hand and damage not only your business, but also your psychological well-being.

Some misguided individuals with a grudge can’t just “let things go” and can turn your life into a waking nightmare.

If cybercriminals are threatening you, your company or your loved ones with sensitive information or have compromised your security and are demanding payment, we’re professionally trained to resolve your situation.

Our past clients include COINOMI, targeted by an ex-customer on a vendetta campaign against the company.

Send Secure Message To Us

    Please review our Frequently Asked Questions prior to submission.

    Our typical response time is 24 hours or faster during working hours.

    We treat all provided information as strictly confidential.


    CipherBlade LLC
    301 Grant Street, Suite 270
    Pittsburgh, PA 15219