I've been robbed · FORENSA

What happened?

Choose what fits best. You get a short checklist you can tick off as you go.

Wallet emptied · do these in order

Stop signing anything.No approvals, no "claim" buttons, no "verify your wallet" pages. Disconnect the wallet from any site you used today.
If money is still leaving, get live help.Contact SEAL 911, a free volunteer hotline for active incidents. They never ask for your seed phrase, keys or a payment.
Make a NEW wallet on a clean device and move what's left.Use a phone or computer you trust, create a brand-new wallet with a new seed phrase, write it on paper. Do not import the old phrase. If every bit of gas you send gets swept away at once, stop sending and ask SEAL 911.
Revoke token approvals.If the money left through an approval you signed, cancel it in your wallet's approval settings or at revoke.cash. This only helps while your keys are still safe.
Save the evidence before anything else changes.Links to the theft transactions, screenshots of your wallet, any chats, the exact website address you used, dates and times. Do not delete anything.
Report it to the police.Use the official portal for your country in step 4. A police report is what exchanges and stablecoin issuers act on.
Treat every unsolicited "recovery" offer as fraud.Thieves and their partners watch for victims and come back pretending to help. Genuine help is free and never asks for payment first.

Next: follow the money. Paste the theft transaction or the address it went to, and FORENSA shows where it went.

Sent to a scammer · do these in order

Stop sending. Any "fee" to withdraw is part of the scam.Taxes, unlock fees, "verification deposits" and account upgrades only take more. A real platform never asks you to pay to get your own money out.
Screenshot the chats before they disappear.Scammers delete accounts and messages fast. Capture usernames, phone numbers, profile links and the full conversation.
Write down every address and transaction you paid.The receiving addresses, the transaction links, the amounts, the dates, and the website or app they sent you to.
If you paid from an exchange account, tell that exchange.Use the support page inside the exchange's own app or website. Never a support number from a search ad or a DM.
Check what you approved.If their site asked you to connect a wallet, cancel any approvals it got in your wallet's settings or at revoke.cash.
Report it to the police.Step 4 has the official portal for your country. Bring the addresses and screenshots.
Expect a "recovery" offer next, and ignore it.People who lost money get targeted again by fake recovery agents.

Next: follow the money. The address you paid is your starting point. FORENSA follows it hop by hop and names where it went.

Trace the address I paid

Seed phrase exposed · do these in order

Treat that wallet as no longer yours, even if nothing has moved yet.Whoever has the phrase controls every account made from it, on every chain. Some thieves wait days before they take everything.
Make a NEW wallet on a clean device.A new wallet means a new seed phrase, written on paper and never typed into a website or chat. Do not reuse the old one in any app.
Move everything out, most valuable first.Check every account the phrase controls (Account 1, 2, 3…), every chain, NFTs and staked positions. If the gas you send disappears instantly, a sweeper bot is watching: stop and contact SEAL 911.
Save where you typed it.The website address, the app name, the chat or email that sent you there. That is evidence for the police and for blocking the site.
Report it.Even if no money moved, a report helps. Step 4 has the official portals.
Never type a seed phrase anywhere again.No real wallet, exchange, support agent or tool needs it. FORENSA never asks for it.

If something already moved: find the outgoing transaction and trace where it went.

Find the thief's address

Recovery offers · the red flagsMost are scams

They contacted you first.A DM, a reply under your post, an email out of nowhere. Real investigators and police do not cold-message victims.
They want money before anything comes back.An up-front fee, a "gas" or "unlock" payment, a deposit, a percentage paid first. Police and exchanges never charge to freeze stolen funds.
They ask for your seed phrase, keys, a wallet connection or remote access.Or ask you to install AnyDesk, TeamViewer or a "recovery app". That is how they take what is left.
They promise or guarantee results."Hack back the thief", "access to the blockchain back end", "100% recovered". Nobody can promise that.
They pose as police, the FBI, a law firm or an exchange.Official agencies do not ask victims for money or private information in DMs.
They rush you or tell you to keep it secret.Pressure is the tool. Anyone legitimate is fine with you taking a day to check.

Do not reply and do not pay. Block, report the account, and go to the police instead. FORENSA never messages you first and never charges to trace.

Official places to report

Find the thief's address

The theft is a public transaction in your wallet's history. Its "To" address is where your money went, and that is where tracing starts.

Open your wallet's Activity or History tab, or open your address on a block explorer (use the field on the right).
Find the outgoing transfer you did not make, or the payment you sent to the scammer. Look at the time it happened.
Open it. The To address is the first wallet that received your money.
Copy the transaction hash (0x followed by 64 characters) or that To address. Either works in step 3.

INfrom an exchangeearlier

OUTto 0x… you don't recognisethe theft

INa tiny or zero transferignore

Layout example only. Your explorer shows real values.

Paste YOUR wallet address We only build explorer links. We do not trace or store your wallet.

Trace it

Start from the wallet that took your money, or from the transaction hash of the theft. FORENSA follows the money across Robinhood Chain, Ethereum, Base, Optimism, Arbitrum, Polygon and Tron (USDT), right here in your browser. Free, no wallet connection.

You get a case file (PDF) with every hop, its evidence links and the places that can act on it.

Money still sitting in the thief's wallet?

Put the address on watch. You get an alert when it moves or reaches an exchange, which is when a freeze request matters most.

Put it on watch

Report it

File a police report, even if the amount feels small. Every portal below is an official one we checked ourselves, with the page we checked it on.

Loading official portals…

Exchanges & stablecoin issuers

Exchanges and stablecoin issuers act on requests from police. Your FORENSA case file gives them what they need. Freezes are their decision, made case by case.

An exchange that isn't listed

Use the support or law-enforcement page on the exchange's own website. We only list channels we have checked ourselves.

Never use a support number from a search ad, a comment or a DM.

You can still act.Start with the next hour.

What happened?

Find the thief's address

Trace it

Report it

Exchanges & stablecoin issuers

An exchange that isn't listed

You can still act.
Start with the next hour.