VECTOR 01
Fake investment platforms
Fraudulent brokers, fabricated dashboards and controlled withdrawal processes designed to extract repeated deposits.
Offensive mindset. Defensive mission.
Crypto scams leave traces. We follow them.
zkGUN is an independent cyber investigation group focused on cryptocurrency fraud. We trace blockchain activity, preserve digital evidence and help victims prepare credible recovery and law-enforcement escalation paths.
zkGUN // trace engine
active
networkMulti-chain analysisready
evidenceTransaction path preservedverified
outputTechnical case packagestructured
Threat categories
We investigate the fraud patterns behind crypto losses.
Scammers change identities, domains and wallets. Their infrastructure and transaction activity still create evidence that can be collected, connected and escalated.
VECTOR 02
Phishing and wallet drainers
Malicious links, copied interfaces and deceptive approvals used to redirect or drain digital assets.
VECTOR 03
Impersonation scams
Fraudsters posing as exchanges, investigators, public figures, support agents or trusted contacts.
VECTOR 04
Romance and trust fraud
Long-term social engineering that combines emotional manipulation with fake trading or investment opportunities.
VECTOR 05
Recovery scams
Secondary fraud targeting previous victims with false guarantees, advance-fee demands and fabricated legal authority.
VECTOR 06
Cross-border laundering paths
Layered transfers through multiple wallets, bridges, services and networks intended to obscure the destination of funds.
What zkGUN does
Hacker discipline. Lawful execution.
We think adversarially, investigate methodically and document everything that matters.
Operational boundary
zkGUN does not perform unauthorized access, seize wallets, threaten suspects or guarantee recovery. Our work is based on lawful investigation, evidence preservation and structured escalation.
01 //
Blockchain tracing
We examine transaction history, follow asset movement, identify connected wallet clusters and document the route taken by stolen funds.
02 //
Digital evidence preservation
We organize transaction hashes, wallet addresses, screenshots, communications, domains, account identifiers and event timelines into a usable record.
03 //
Open-source intelligence
We connect publicly available infrastructure, identity indicators and platform activity without relying on unauthorized access.
04 //
Recovery pathway support
Where evidence supports it, we help prepare reports and escalation materials for exchanges, service providers, legal representatives and authorities.
Investigation workflow
From first report to an actionable case file.
Fast action matters, but uncontrolled action can destroy context. Our workflow protects the evidence before moving toward recovery and escalation.
Secure intake
You submit the incident timeline, transaction data, platform details and available communications through the case intake process.
Input // protectedTriage and validation
We verify the basic transaction trail, assess the fraud pattern and determine which investigative paths are technically realistic.
Signal // assessedTrace and correlate
Wallet activity, movement across services and supporting digital evidence are mapped into a structured incident narrative.
Route // mappedEscalate with evidence
Findings are prepared for appropriate platforms, investigators, legal counsel or law-enforcement channels where applicable.
Package // readyPreserve before it disappears
The quality of the evidence can define the outcome.
Do not delete conversations, edit screenshots or send more money to “unlock” a withdrawal. Preserve original records and document the incident while the details are still available.
Transaction hashesComplete identifiers for each relevant transfer.
Wallet addressesSending, receiving and intermediary addresses.
CommunicationsChats, emails, usernames and phone numbers.
Platform recordsDomains, account pages, deposits and withdrawal errors.
TX_HASH // VERIFIED
WALLET_CLUSTER // MAPPED
TIMELINE // PRESERVED
WALLET_CLUSTER // MAPPED
TIMELINE // PRESERVED
Choose the correct channel
Recovery support and scammer accountability are connected—but not identical.
Recover lost crypto funds
Begin with a technical assessment of the transaction trail, the services involved and the evidence currently available. The objective is to identify realistic recovery or escalation routes—not to sell false certainty.
Start recovery assessment →Report and expose a scam operation
Submit wallet addresses, domains, aliases and communications for structured review. Where appropriate, the information can support platform abuse reports, victim warnings and formal complaints.
Report a scammer →Law-enforcement support
Technical findings built for formal action.
Victims often arrive with fragmented screenshots and raw transaction data. We organize technical material into a clearer case narrative that may help authorized investigators, legal representatives and compliance teams understand what happened.
Transaction mapping
Wallet indicators
Incident timeline
Evidence index
Casework categories
Different scams. One evidence standard.
Investment platform fraud
Review of deposits, controlled withdrawal events, wallet destinations and the digital infrastructure used to support a fabricated trading environment.
Wallet drainer incident
Reconstruction of the approval or signing event, outgoing transfers, connected addresses and the timeline surrounding the compromise.
Impersonation network
Correlation of aliases, domains, messaging accounts, payment instructions and wallet activity used across a coordinated scam operation.
Warning: recovery fraud targets people who have already lost money.
Do not trust anyone who guarantees recovery, claims they can remotely reverse a blockchain transaction or demands repeated “release,” “tax” or “verification” payments.
Clear answers
Before you submit a case.
Recovery work begins with facts, not promises.
Can zkGUN guarantee that my funds will be returned?
No. Cryptocurrency recovery depends on the transaction path, the services involved, available evidence, timing, jurisdiction and cooperation from relevant third parties. No legitimate investigator can guarantee recovery.
Does zkGUN hack scammers or access their wallets?
No. We do not perform unauthorized access, steal credentials or seize digital assets. Our work is based on blockchain analysis, lawful open-source research, evidence preservation and formal escalation.
What information should I prepare?
Prepare transaction hashes, wallet addresses, dates, amounts, screenshots, messages, email addresses, usernames, phone numbers, website domains and any reports already filed with platforms or authorities.
Should I keep communicating with the scammer?
Do not send additional funds or disclose sensitive information. Preserve existing communications. Any further contact should be considered carefully and, where appropriate, discussed with qualified legal or law-enforcement professionals.
Can you work with police or legal representatives?
We can prepare and organize technical findings that victims or their authorized representatives may provide to appropriate authorities, legal counsel, exchanges and compliance teams.
Incident response starts now
Stop feeding the scam. Start preserving the trail.
Submit the transaction details and evidence you currently have. We will use the intake to understand the incident, assess the available signals and determine the next technically responsible step.
zkGUN provides technical investigation, blockchain-analysis and evidence-support services. Content on this website is general information and does not constitute legal, financial or law-enforcement advice. Services do not include unauthorized system access, retaliation, threats, asset seizure or guaranteed recovery.