# Introduction The aim of this document is to act like a guide book for victims of scams. All of this information will change over time as we build the materials ### Who are IOC? Intelligence On Chain, or IOC for short are an online community aimed at educating and supporting general members of the public. IOC is a brand of a UK-based private company. ### What Services do IOC Provide? IOC primarily focuses on supporting victims of crypto-related crime by delivering professional investigations and reports that can be used by law enforcement or lawyers to prosecute. We also deliver in-depth research at the request of our members. ### This Guide and How to Contact Us Within this document you will find general guidance on what to do in certain circumstances. Please note, that without reviewing your personal case, some of these points may differ. If this is the case, please contact us immediately. {% hint style="danger" %} If you need **URGENT** support please [Contact Us](/contact-us). {% endhint %} # Protect Yourself Whilst no tool provides a 100% guarantee, these tools give you a much better shot of being able to spot a scam before you send any money (more so on phishing scams than a fake trading platform) Here are some tools we recommend you arm your devices with ### Pocket Universe Pocket Universe is a browser extension that keeps your assets safe when you sign web3 transactions. {% embed url="" %} ### MalwareBytes Secure your devices with the #1 malware removal and protection software\* {% embed url="" %} ### Nord VPN VPN stands for “virtual private network.” It’s a service that gives you safe and private access to the internet. By encrypting your connection, a VPN hides your IP and online activity from spying eyes and keeps your data safe from cybercriminals. {% embed url="" %} ### VirusTotal Analyse suspicious files, domains, IPs and URLs to detect malware and other breaches, automatically share them with the security community. {% embed url="" %} # Victim Guide - What to do next! It is important to know what to do in certain situations! This is a guide to help you take the best course of action when you are scammed We have attempted to cover some of the more common types of scams in this section. The information in this document may change over time as we learn more and obtain better resources/tools. {% hint style="info" %} You can [open a case](https://intelligenceonchain.com) on our website {% endhint %} # Guide - Seed Phrase Compromised This guide will help people who have fallen victim to their wallet being drained. The aim is to minimise damage and then prepare to work with Centralised Exchanges (CEXs). {% hint style="info" %} **NEED URGENT SUPPORT NOW** If your matter is urgent you can reach out to us today - See the ['Contact Us'](/contact-us) Section {% endhint %} {% hint style="warning" %} **For the purposes of writing below, we'll assume that your seed phrase is compromised**. These actions will minimise the damage immediately, regardless of how your wallet was compromised. {% endhint %} ## Is my Seed Phrase or Private Key Compromised? To determine what has been compromised check for the following signs ### Seed Phrase Compromise Assets from multiple wallets on the same seed phrase are being transferred. ### Private Key Compromise Assets from a single wallet on the same seed phrase are being transferred. See this [Section](#private-key-compromise) ### Many Wallet Types/Seed Phrases Are Compromised There are rare cases where multiple wallets types are compromised e.g. MetaMask and Trust Wallet are both compromised. There are many reasons why your accounts may be compromised, from email or cloud storage unauthorised access through to malware. ### **If this happens to you do the following:** 1. Route all remaining assets into a brand new wallet on a separate device. 2. **DO NOT** store the seedphrase on a device, write it down on paper and store it somewhere safe ## Quick Guide - Seed Phrase Compromise 1. **Move ALL remaining assets, from the compromised wallet to a brand new seed phrase. DO NOT create a new wallet in the same seed phrase.** Follow these steps: * Using a new device if possible (if not, then use the same device) * Create a brand new seed phrase * Copy the address of the new wallet on the new seed phrase * Send all remaining assets from the compromised wallets to this new wallet address * Take your time * Always check the first, last and middle 4 digits *(NOTE: If you only check the first and last digits, you might be exposing yourself to a different attack vector -* [*Address poisoning*](https://x.com/Intell_On_Chain/status/1732192720171520205?s=20)*)* * Start with the most valuable assets first 2. **Follow the assets using the relevant blockchain scanners.** If you see that your funds have headed out to an exchange, then contact them immediately requesting a freeze. Provide them with the following: * Provide the CEX deposit address * Provide the transaction into the exchange (inc. time & date) * The transaction hashes from the theft * Any approvals (transaction hashes) * Any other evidence they request (for example, a chart visualising where the funds went) 3. **Report the matter to your local police force** 4. **Report the matter to your national police force - See** [**'Reporting Crime to Authorities'**](/reporting-crime-to-authorities) 5. If required, seek assistance from a Lawyer. Lawyers can sometime subpoena an exchange quicker than the police. *Please note that some exchanges will only work with law enforcement* {% hint style="danger" %} If you're in urgent need of assistance, contact {% endhint %} ## Why do I need to report to the Police? Assuming that your stolen assets end up on a centralised exchange (CEX), most of the time you're going to need an email from law enforcement, requesting the freezing of the suspected perpetrators account The police have the powers to request the freezing of accounts or information from accounts. ## Why would I need a lawyer then? In our experience, some exchanges will work with lawyers (but not all). Assuming your stolen assets end up in a Centralised Exchange (CEX) and the police are slow to react (which is sometimes the case) Lawyers might be able to offer a letter of demand (for information/freezing) or a subpoena. ## Will I get my money back without either a lawyer or law enforcement? Nothing is impossible but the degree of difficulty becomes much higher. Use law enforcement and/or lawyers to give yourself the best possible chance. {% hint style="danger" %} **Beware of scammers:** *If you have publicly shared that your wallet was drained or you have an ENS address (like a .eth address) that is connected with your social profiles, you may be targeted for a follow up scam.* \ \ **If someone approached you and guarantees a return of stolen assets, with an up front cost - this is a scam!** {% endhint %} # Guide - The Recovery Scam During this section of the document, we describe the recovery scam. {% hint style="info" %} **NEED URGENT SUPPORT NOW** If your matter is urgent you can reach out to us today - See the ['Contact Us'](/contact-us) Section {% endhint %} ### What to look out for Recovery scams are prevalent in web 3.0 especially! According to the NCA, these crimes are often committed by the same people who planned the initial crime, yet appear to be completely unrelated. {% hint style="warning" %} Recovery of assets is highly unlikely without lawyers or law enforcement being involved. {% endhint %} ### Here is a list of things to look out for; * Guaranteed success * Really high percentage success * Technical jargon * Large payment upfront * Not a registered business * Claims to be able to hack wallets * Urgency The problem with these scams, are that the victim is already vulnerable at this stage after a rather large loss, mixed with an opportunity that sounds too good to be true, it’s actually really effective and people end up losing even more money. {% hint style="success" %} If you’re unsure as to whether it is a scam, then ask for an explanation about how the process works, then send the response to , and we’ll decipher it for you {% endhint %} # Guide - Private Key Compromised This guide will help people who have fallen victim to their wallet being drained. The aim is to minimise damage and then prepare to work with Centralised Exchanges (CEXs). {% hint style="info" %} **NEED URGENT SUPPORT NOW** If your matter is urgent you can reach out to us today - See the ['Contact Us'](/contact-us) Section {% endhint %} {% hint style="danger" %} **If you spot assets being transferred from multiple wallets (on the same seed phrase) then go to this** [**section**](/victim-guide-what-to-do-next/guide-seed-phrase-compromised) {% endhint %} ## Is my Seed Phrase or Private Key Compromised? To determine what has been compromised check for the following signs ### Seed Phrase Compromise Assets from multiple wallets on the same seed phrase are being transferred. See this [Section](#seed-phrase-compromise) ### Private Key Compromise Assets from a single wallet on the same seed phrase are being transferred. ### Many Wallet Types/Seed Phrases Are Compromised There are rare cases where multiple wallets types are compromised e.g. MetaMask and Trust Wallet are both compromised. There are many reasons why your accounts may be compromised, from email or cloud storage unauthorised access through to malware. #### **If this happens to you do the following:** 1. Route all remaining assets into a brand new wallet on a separate device. 2. **DO NOT** store the seedphrase on a device, write it down on paper and store it somewhere safe ## Quick Guide - Private Key Compromise 1. **Move ALL remaining assets, from the compromised wallet to a new wallet.** Follow these steps: * Create a brand new wallet * Copy the address of the new wallet on the new seed phrase * Send all remaining assets from the compromised wallets to this new wallet address * Take your time * Always check the first, last and middle 4 digits *(NOTE: If you only check the first and last digits, you might be exposing yourself to a different attack vector -* [*Address poisoning*](https://x.com/Intell_On_Chain/status/1732192720171520205?s=20)*)* * Start with the most valuable assets first 2. **Follow the assets using the relevant blockchain scanners.** If you see that your funds have headed out to an exchange, then contact them immediately requesting a freeze. Provide them with the following: * Provide the CEX deposit address * Provide the transaction into the exchange (inc. time & date) * The transaction hashes from the theft * Any approvals (transaction hashes) * Any other evidence they request (for example, a chart visualising where the funds went) 3. **Report the matter to your local police force** 4. **Report the matter to your national police force - See** [**'Reporting Crime to Authorities'**](/reporting-crime-to-authorities) 5. If required, seek assistance from a Lawyer. Lawyers can sometime subpoena an exchange quicker than the police. *Please note that some exchanges will only work with law enforcement* {% hint style="danger" %} If you're in urgent need of assistance, contact {% endhint %} ## Why do I need to report to the Police? Assuming that your stolen assets end up on a centralised exchange (CEX), most of the time you're going to need an email from law enforcement, requesting the freezing of the suspected perpetrators account The police have the powers to request the freezing of accounts or information from accounts. ## Why would I need a lawyer then? In our experience, some exchanges will work with lawyers (but not all). Assuming your stolen assets end up in a Centralised Exchange (CEX) and the police are slow to react (which is sometimes the case) Lawyers might be able to offer a letter of demand (for information/freezing) or a subpoena. ## Will I get my money back without either a lawyer or law enforcement? Nothing is impossible but the degree of difficulty becomes much higher. Use law enforcement and/or lawyers to give yourself the best possible chance. {% hint style="danger" %} **Beware of scammers:** *If you have publicly shared that your wallet was drained or you have an ENS address (like a .eth address) that is connected with your social profiles, you may be targeted for a follow up scam.* \ \ **If someone approached you and guarantees a return of stolen assets, with an up front cost - this is a scam!** {% endhint %} Need Help? If your matter is urgent you can reach out to us today - See the ['Contact Us'](/contact-us) Section # Guide - I Signed a Malicious Smart Contract This guide will help people who have fallen victim to their wallet being drained. The aim is to minimise damage and then prepare to work with Centralised Exchanges (CEXs). {% hint style="info" %} **NEED URGENT SUPPORT NOW** If your matter is urgent you can reach out to us today - See the ['Contact Us'](/contact-us) Section {% endhint %} {% hint style="danger" %} **If you spot assets being transferred from multiple wallets (on the same seed phrase) then go to this** [**section**](/victim-guide-what-to-do-next/guide-seed-phrase-compromised) {% endhint %} ### Quick Guide 1. Go to [Revoke Cash](https://revoke.cash) to revoke all permissions on the compromised wallet. Start with your most valuable assets. Make sure you check across all of the blockchains that you have used. The example below shows Avalanche.

A screenshot of Revoke.Cash

2. Once you have revoked access to any malicious contracts, you technically be fine. 3. If you wanted to be extra careful, you can always send your assets to a brand new wallet. 4. If you see that your funds have headed out to an exchange, then contact them immediately requesting a freeze. Provide them with the following: * Provide the CEX deposit address * Provide the transaction into the exchange (inc. time & date) * The transaction hashes from the theft * Any approvals (transaction hashes) * any other evidence they request (for example, a chart visualising where the funds went) 2. Report the matter to your local police force 3. Report the matter to your national police force 4. If required, seek assistance from a Lawyer. Lawyers can sometime subpoena an exchange quicker than the police. *Please note that some exchanges will only work with law enforcement* {% hint style="danger" %} If you're in urgent need of assistance, contact {% endhint %} ### Why do I need to report to the Police? Assuming that your stolen assets end up on a centralised exchange (CEX), most of the time you're going to need an email from law enforcement, requesting the freezing of the suspected perpetrators account The police have the powers to request the freezing of accounts or information from accounts. ### Why would I need a lawyer then? In our experience, some exchanges will work with lawyers (but not all). Assuming your stolen assets end up in a Centralised Exchange (CEX) and the police are slow to react (which is sometimes the case) Lawyers might be able to offer a letter of demand (for information/freezing) or a subpoena. ### Will I get my money back without either a lawyer or law enforcement? Nothing is impossible but the degree of difficulty becomes much higher. {% hint style="danger" %} **Beware of scammers:** *If you have publicly shared that your wallet was drained or you have an ENS address (like a .eth address) that is connected with your social profiles, you may be targeted for a follow up scam.* \ \ **If someone approached you and guarantees a return of stolen assets, with an up front cost - this is a scam!** {% endhint %} # Guide - When a Project Rugpulls This guide will help people who have fallen victim to their wallet being drained. The aim is to maximise the potential opportunity for a recovery {% hint style="info" %} **NEED URGENT SUPPORT NOW** If your matter is urgent you can reach out to us today - See the ['Contact Us'](/contact-us) Section {% endhint %} **To Request an IOC Investigation into a rugpull, all victims should report it using the Google Form below!** Depending on the value of the rugpull and the number of victims involved we may be able to garner the attention of law firms to support, following a formal investigation. Responding to a rugpull can be a challenging situation, but with a clear plan and the support of the community, you can take steps to address the issue effectively. Here's a simple step-by-step guide on what to do in the event of a rugpull, including rallying support for an investigation: {% hint style="warning" %} Once a rug pull has taken place, it is important to gather as much information about the founders and developers as possible including, emails, numbers usernames, photos, wallet addresses and identifying information like places they live, age, website links, account information {% endhint %} 1. **Stay Calm and Gather Information**: Upon discovering the rugpull, it's essential to remain calm and gather as much information as possible about what has happened. This includes documenting any communications, transactions, or suspicious activities related to the rugpull. 2. **Initial Shock and Outreach**: As a victim of the rugpull, the initial shock and confusion may be overwhelming. However, reaching out to other affected community members is crucial. Start by posting about the incident in community forums, social media groups, and Telegram channels to connect with other victims. 3. **Creating a Dedicated Communication Channel**: The official channels may shutdown or become overrun with scams. Recognising the limitations of existing communication channels, consider creating a dedicated communication platform specifically for victims of the rugpull. This could be a Discord server, a private Telegram group, or a forum where victims can share information, provide mutual support, and coordinate efforts. #### JOIN OUR DISCORD SERVER AND OPEN A TICKET FOR SUPPORT {% embed url="" %} {% hint style="danger" %} **Proceed with caution** - Scammers will infiltrate your newly formed back channel because they know that many people are vulnerable. They will pose as ethical hackers or even the team (sometimes even through the official communications channels of the project). Project refund efforts are often scams, especially when they require a significant payment up front. {% endhint %} 4. **Establishing Trust and Solidarity**: Building trust among the affected community members is vital. Emphasize solidarity and the shared experience of being victims of the rugpull. Encourage open dialogue and support for one another during this challenging time. 5. **Rallying Support for Investigation**: Within the dedicated communication channel, rally support for a thorough investigation into the rugpull. Encourage victims to share any relevant information, such as transaction details, screenshots, or suspicious activity they observed. Emphasize the importance of collective action in holding the perpetrators accountable. {% hint style="info" %} Investigations take weeks and sometimes months to compile. An official investigation by IOC may require funding through donations, to compensate our investigators for the time they've committed to the cause. {% endhint %} 4. **Seeking Legal Recourse**: If the rugpull involves significant financial loss or criminal activity, consider seeking legal recourse. Encourage affected community members to explore legal options, including collective action or filing complaints with relevant authorities or regulatory agencies. 5. **Fostering Resilience and Recovery**: Despite the challenges posed by the rugpull, emphasize resilience and the potential for recovery. Provide emotional support, resources, and guidance to help community members navigate through the aftermath of the incident. Together, focus on rebuilding trust, learning from the experience, and moving forward stronger than before. Remember that responding to a rugpull requires patience, collaboration, and resilience. By working together as a community and taking proactive steps to address the situation, you can minimise the impact of the rugpull and emerge stronger than before. ## Report a Rugpull to IOC Report a rugpull to IOC by sharing your story and information [here](https://intelligenceonchain.com/report-a-rugpull). Once we've collected enough data to warrant an investigation, we'll announce the next steps # Guide - Malicious Downloads Responding to Malicious Downloads and Malware Infections {% hint style="info" %} **NEED URGENT SUPPORT NOW** If your matter is urgent you can reach out to us today - See the ['Contact Us'](/contact-us) Section {% endhint %} Discovering that you've downloaded a malicious script or malware can be distressing, but taking immediate, strategic action can minimise damage and prepare for forensic analysis and reporting. Below is a comprehensive step-by-step guide: *** ## **1. Secure Your Digital Assets** * **Generate a New Wallet:** Immediately create a new wallet on a completely separate device that has never been connected to the compromised system. {% hint style="success" %} Create a brand new seed phrase from a reputable source {% endhint %} * **Transfer Funds:** Move your digital assets to this new wallet to isolate them from any further attacks originating from the infected device. * **Revoke Permissions:** Use platforms like [Revoke.Cash](https://revoke.cash/) to revoke all permissions on the compromised wallet. Ensure to check all blockchains you’ve interacted with (e.g., Ethereum, Avalanche, Binance Smart Chain). {% embed url="" %} *** ## **2. Secure the Compromised Device** {% hint style="danger" %} **Avoid Further Use:** Stop all activities on the compromised device immediately to avoid spreading the infection or providing further access to sensitive data. {% endhint %} ### **Option A: Preserve the Malware for Analysis** {% hint style="info" %} This option is suitable if you’re working with law enforcement, a cybersecurity expert, or are considering further investigation. {% endhint %} 1. **Disconnect the Device:** Immediately disconnect the device from the internet and any networks (Wi-Fi, Ethernet, etc.) to prevent further communication with the attacker. 2. **Preserve Evidence:** * Do **not** delete or quarantine the malware. * Create a backup or disk image of the compromised system. Use user-friendly tools like Acronis True Image (Windows/Mac) or Disk Utility (Mac). * Label and store the backup securely for analysis. 3. **Seek Professional Help:** Contact a computer forensic specialist or cybersecurity expert to handle and analyse the preserved data. ### **Option B: Wipe the Machine to Secure It** {% hint style="info" %} This option is best if you want to immediately eliminate the threat and are not concerned about analysing the malware. **Note:** Once the machine is wiped, analysis of the malware will no longer be possible. {% endhint %} 1. **Backup Important Files:** * Before wiping the machine, transfer essential personal files (e.g., documents, photos) to an external drive or cloud storage. * **Be cautious:** Scan these files with antivirus software on a different device before reusing them. 2. **Perform a Full System Re-Install:** * Use a trusted source (e.g., official OS installation media) to completely erase and reinstall the operating system. * Update the OS and all software immediately after reinstalling. 3. **Install Security Tools:** Set up a reputable antivirus and anti-malware tool to protect the new system. *** ## **5. Forensic and Technical Analysis** * **Seek Professional Assistance:** Contact a certified computer forensic specialist to analyse the compromised device. This may uncover: * The source and behaviour of the malware. * Any data exfiltrated or compromised. * **Analyse Blockchain Activity:** If digital assets were stolen: * Use blockchain analysis tools (e.g. Etherscan or Arkham) to track stolen funds. * [Open a case](https://intelligenceonchain.com/open-a-case) on our website if you need our support * Create a detailed report with visual charts for law enforcement. *** ## **6. Engage with Exchanges** * **Identify Destination Accounts:** Determine if stolen funds were sent to a cryptocurrency exchange. * **Contact the Exchange:** Provide detailed transaction information (deposit address, transaction ID, etc.) and request a freeze on suspicious accounts. Note: * Exchanges often require law enforcement involvement to process such requests. *** ## **7. Rebuild and Secure** * **Complete System Re-Install:** * After preserving evidence and completing forensic analysis, perform a full system re-install to eliminate any lingering malware. * Use a trusted installation source and update the operating system and all software immediately after reinstalling. * **Install Anti-Malware Tools:** Deploy reputable antivirus and anti-malware software on the rebuilt system to prevent future infections. *** ## **8. Report and Educate** * [**Open a Case**](https://intelligenceonchain.com/open-a-case)**:** Report the incident through relevant platforms like the IOC (Indicators of Compromise) website to share information and receive guidance. * **Beware of Scammers:** Avoid services or individuals offering guaranteed asset recovery for upfront fees. These are common scam tactics that could compound your losses. * **Educate Others:** Share your experience and preventive measures with your network to raise awareness about similar threats. *** ## **9. Legal Assistance** * **Consult a Lawyer:** If needed, engage a legal professional to: * Issue letters of demand or subpoenas to expedite freezing of accounts. * Advise on your rights and legal options for recovery. *** ## **10. Prevention for the Future** * **Practice Good Security Hygiene:** * Avoid downloading files or clicking on links from unknown sources. * Use a hardware wallet for storing significant digital assets. * Enable two-factor authentication (2FA) on all accounts. * **Stay Updated:** Keep your operating system, software, and antivirus tools up to date. By following these steps, you can minimise the impact of malicious downloads, enhance your chances of recovery, and contribute to broader efforts to combat cybercrime. # Guide - Fake Trading Platforms This guide will help people who have fallen victim to an online fake trading platform. The aim is to minimise damage, prevent further loss and to gather evidence. {% hint style="info" %} **NEED URGENT SUPPORT NOW** If your matter is urgent you can reach out to us today - See the ['Contact Us'](/contact-us) Section {% endhint %} {% hint style="danger" %} **Before we begin, please note that these types of situations often lead to a second scam - A recovery scam!** This type of scam is targetted specifically at you because bad actors know that you're in a vulnerable position and will part with further cash if given enough hope. It is most likely conducted by the same people and can be devastating in their own right. {% endhint %} Realizing that you've been interacting with a false trading exchange website can be alarming, but prompt action is essential to mitigate any potential losses. Here's a comprehensive guide on what steps you should take: 1. **Cease Transactions**: Immediately stop any transactions or interactions with the false trading exchange website. Cease all deposits, withdrawals, or trades to prevent further exposure to potential risks. 2. **Secure Your Accounts**: If you have provided any sensitive information such as login credentials or personal details to the false trading exchange website, take immediate steps to secure your accounts. Change passwords for all relevant accounts, enable two-factor authentication where available, and monitor your accounts closely for any suspicious activity. {% hint style="danger" %} Seek advice if you have ever shared your screen to the perpetrators or installed a software at their request. Feel free to email \ \ Do not trust any payments from them, including cryptocurrencies. **If they send you money to gain your trust, don't assume it's real without checking with a professional.** Reach out to for help. Remember, cryptocurrencies can be fake. {% endhint %} {% hint style="success" %} Use [Malware Bytes](https://www.malwarebytes.com/?x-clickref=1011lypX66La) (Free) to scan your machine for viruses, or use their premium version for VPNs and ongoing real-time checks - [Malware Bytes Premium](https://prf.hn/click/camref:1101l3y42H/creativeref:1100l115505) {% endhint %} 3. **Verify Legitimacy**: Confirm the legitimacy of the trading exchange website by cross-referencing information with reputable sources such as official announcements, regulatory authorities, or community forums. Look for red flags such as spelling errors, suspicious URLs, or unrealistic promises of returns. 4. **Report the Website**: Report the false trading exchange website to relevant authorities such as financial regulators, consumer protection agencies, or cybersecurity organizations. Provide detailed information about the fraudulent activities and any evidence you have gathered. {% hint style="info" %} Websites like the [FCA](https://www.fca.org.uk/) will often announce when a project is not registered or illegitimate, warning people of a potential scam. You can often see this just by Googling the name of the project.\ \ If you haven't already, report the project to your national authority. {% endhint %} 5. **Notify Others**: Warn others in your network, including friends, family, and online communities, about the false trading exchange website to prevent further victims from falling prey to the scam. Share your experience and advise others to exercise caution when engaging with online trading platforms. 6. **Seek Legal Advice**: Consider seeking legal advice from a qualified attorney specializing in financial fraud or internet law. A legal professional can provide guidance on your rights, potential recourse options, and steps to take to recover any losses incurred. 7. **Preserve Evidence**: Preserve any evidence related to your interactions with the false trading exchange website, including screenshots, emails, transaction records, and communication logs. This evidence may be crucial for any future investigations or legal proceedings. 8. **Monitor Financial Accounts**: Monitor your financial accounts, including bank accounts, credit cards, and cryptocurrency wallets, for any unauthorized transactions or suspicious activity. Report any anomalies to your financial institution immediately and take necessary steps to secure your accounts. {% hint style="info" %} **Blockchain/ Crypto Investigation:** If you need support to track and trace any stolen digital assets like Bitcoin, please head to intelligenceonchain.com/services and open a case, or email {% endhint %} 9. **Educate Yourself**: Use this experience as an opportunity to educate yourself about online security best practices, scam detection techniques, and due diligence when engaging with trading platforms or investment opportunities. Stay informed and vigilant to protect yourself from future scams. 10. **Stay Informed**: Stay informed about developments related to the false trading exchange website, such as regulatory actions, law enforcement investigations, or community responses. Follow trusted sources for updates and continue to advocate for accountability and transparency in the online trading ecosystem. By taking proactive steps and seeking appropriate assistance, you can minimise the impact of encountering a false trading exchange website and protect yourself from further harm. Remember to prioritise your security, stay vigilant, and empower yourself with knowledge to navigate the complex landscape of online trading safely. # Guide - Romance Scams This guide will help people who have fallen victim to an online Romance scam. The aim is to minimise damage, prevent further loss and to gather evidence. {% hint style="info" %} **NEED URGENT SUPPORT NOW** If your matter is urgent you can reach out to us today - See the ['Contact Us'](/contact-us) Section {% endhint %} {% hint style="warning" %} If you've realised that you have fallen victim to this type of scam and still in contact with the perpetrator, please reach out immediately to . {% endhint %} Discovering that you've been involved in a romance scam can be emotionally devastating, as it often involves a significant emotional investment in addition to financial losses. Here's a comprehensive guide on what steps you should take: 1. **Acknowledge Your Feelings**: Recognise and acknowledge the emotions you may be experiencing, such as betrayal, embarrassment, or anger. It's natural to feel a range of emotions when discovering that you've been deceived in a romance scam. {% hint style="info" %} The people behind these types of scams have often been doing it for many years and are professionals, in that they do this everyday. They know human emotion extremely well making them predatory in their actions {% endhint %} 2. **Cease Communication**: Immediately cease all communication with the individual involved in the romance scam. Block their phone number, email address, and any other contact information to prevent further manipulation or attempts to defraud you. 3. **Seek Support**: Reach out to trusted friends, family members, or a support group for emotional support and guidance. Talking to someone you trust can help you process your feelings and regain a sense of control over the situation. 4. **Report the Scam**: Report the romance scam to the appropriate authorities, such as local law enforcement, the Federal Trade Commission (FTC), Financial Conduct Authority (FCA) or the Internet Crime Complaint Center (IC3). Provide as much detail as possible about your interactions with the scammer, including emails, messages, and any financial transactions. 5. **Protect Your Finances**: If you've sent money or provided financial information to the scammer, take immediate steps to protect your finances. Contact your bank or financial institution to report the scam and request assistance with reversing any unauthorized transactions. {% hint style="info" %} **Blockchain/ Crypto Investigation:** If you need support to track and trace any stolen digital assets like Bitcoin, please head to intelligenceonchain.com/services and open a case, or email {% endhint %} {% hint style="danger" %} Do not trust any payments from them, including cryptocurrencies. **If they send you money to gain your trust, don't assume it's real without checking with a professional.** Reach out to for help. Remember, cryptocurrencies can be fake. {% endhint %} 6. **Educate Yourself**: Take this experience as an opportunity to educate yourself about romance scams and online dating safety. Learn about common red flags to watch out for, such as requests for money, inconsistencies in the scammer's story, and reluctance to meet in person. 7. **Practice Self-Care**: Take care of yourself both emotionally and physically during this challenging time. Engage in activities that bring you comfort and relaxation, such as exercise, spending time with loved ones, or practicing mindfulness and meditation. 8. **Stay Vigilant**: Remain vigilant and skeptical when engaging in online relationships in the future. Remember that genuine romantic partners will not ask you for money or pressure you into making financial decisions. 9. **Seek Professional Help**: If you're struggling to cope with the emotional impact of the romance scam, consider seeking support from a therapist or counsellor. A mental health professional can provide you with tools and strategies to process your emotions and move forward with healing. 10. **Stay Hopeful**: While recovering from a romance scam can be challenging, remember that you are not alone, and there is hope for healing and moving forward. With time, support, and self-care, you can overcome the trauma of the scam and emerge stronger and more resilient. By taking these steps and prioritizing your emotional well-being, you can navigate the aftermath of a romance scam and work towards rebuilding trust in yourself and others. Remember to be kind to yourself and allow yourself the time and space needed to heal from the experience.
# Reporting Crime to Authorities Use this page as a guideline for reporting a crypto crime. Most law enforcement departments will need evidence, typically in the form of a report and a visual chart. You should always report every single crime that happens. Around 80% of crimes go unreported. In crypto, this figure is going to be even more because people believe it is useless and won't yield in a result. In actual fact, by reporting these crimes, it will enable the authorities to understand the full scale of the crimes, potentially influencing future decisions based on resources. This section will grow over time and covers some of the main ways in which you can report a cyber crime. # Reporting to Interpol The full name is the International Criminal Police Organization and they are an inter-governmental organization. Interpol has 196 member countries, and help police in all of them. In each country, an INTERPOL [National Central Bureau (NCB)](https://www.interpol.int/en/Who-we-are/Member-countries/National-Central-Bureaus-NCBs) provides the central point of contact for the General Secretariat and other NCBs. An NCB is run by national police officials and usually sits in the government ministry responsible for policing. {% embed url="" %} Report a crime to Interpol {% endembed %} # Canada - Reporting Cyber Crime For reporting crime as a Canadian citizen, please report to your local Police AND use the following links to report the fraud/ cyber crime. First and foremost prepare any information and head down to your local police station. Report the crime and obtain a crime reference number for your keeping. ### Report to the Canadian Centre for Cyber Security Use this link when there has been a deceptive behaviour online, for example, identify theft, viruses or malicious software or deceived you into making a donation {% embed url="" %} ### Report to the Canadian Anti-Fraud Centre The CAFC collect data on frauds and identity thefts in Canada {% embed url="" %} ### Learn about how to protect yourself from Phishing The website below offers important information enabling you to learn more about protecting yourself against scams {% embed url="" %} # Costa Rica - Reporting Cyber Crime If you have been the victim of a scam, financial fraud or cryptocurrency-related crime in **Costa Rica**, you should act as quickly as possible. The most important steps are to: * Report the crime to the **Organismo de Investigación Judicial (OIJ)** or the **Ministerio Público** * Notify your bank, cryptocurrency exchange or payment provider * Preserve all available evidence * Identify any cryptocurrency exchanges or other service providers that received the funds * Avoid sending any further money * Keep your police or case reference number for subsequent enquiries {% hint style="danger" %} If there is an immediate threat to your safety or an emergency is taking place, call **911**. {% endhint %} ## Report the Crime to the OIJ The **Organismo de Investigación Judicial (OIJ)** is Costa Rica's judicial investigative police and is one of the main authorities responsible for investigating fraud and other criminal offences. A victim can attend **any OIJ office in Costa Rica** and provide details of what happened. OIJ states that: * Costa Rican nationals and foreign nationals can report crimes * You do not need a lawyer to make a report * There is no charge for filing a complaint * You should provide as much information as possible about the offence and the people involved * A report can be made at any OIJ office, even if the offence occurred elsewhere in Costa Rica * The case can subsequently be transferred internally to the appropriate investigating office The OIJ's San José complaints office and regional delegations provide complaint services **24 hours a day, 365 days a year**. {% hint style="info" %} Once a formal complaint has been filed, the case may be assigned to an investigator. Additional evidence discovered later can be provided to the OIJ as an **extension to the original complaint**. {% endhint %} ### OIJ Confidential Information Line The OIJ also operates the **Centro de Información Confidencial (CICO)**. **Telephone:** 800-8000-645 The line operates 24 hours a day and can be used to provide confidential information concerning criminal activity. {% hint style="danger" %} The confidential information line should not be confused with making a formal criminal complaint. If you are the victim of fraud and require an official case to be opened, attend an OIJ office or report the matter through the appropriate judicial reporting route. {% endhint %} ## Report the Crime to the Ministerio Público A fraud victim can also make a criminal complaint through Costa Rica's **Ministerio Público — Public Prosecutor's Office**. A complaint can be made at the nearest Fiscalía. The Ministerio Público states that a person can approach the nearest Prosecutor's Office even if that office is not ultimately responsible for the case. The matter can then be transferred to the appropriate jurisdiction. Depending on the circumstances and available systems, electronic submission may also be possible through Costa Rica's judicial online services. Victims should confirm the appropriate reporting method with the relevant Fiscalía. For complex fraud and cyber-enabled crime, Costa Rica also has specialist prosecutorial capability, including the **Fiscalía Adjunta contra la Ciberdelincuencia**. ## Contact Your Bank Immediately If money was sent through a: * Costa Rican bank * International bank * Credit or debit card * Payment service * Money transfer provider * Cryptocurrency exchange contact the provider's **fraud or compliance department immediately**. Tell them that the transaction is connected to suspected fraud and ask whether they can: * Stop the transaction * Recall the transfer * Flag the receiving account * Preserve transaction records * Preserve account information * Contact the receiving financial institution * Provide a fraud or investigation reference number Do this **even if you have already reported the crime to the OIJ or Ministerio Público**. {% hint style="warning" %} Do not wait for the police investigation to progress before notifying your bank or payment provider. Financial institutions and law enforcement perform different functions and both should be contacted as early as possible. {% endhint %} ## Complaints Involving Costa Rican Financial Institutions The **Superintendencia General de Entidades Financieras (SUGEF)** supervises Costa Rica's regulated financial system. If the issue concerns the conduct of a SUGEF-supervised financial institution, the victim should generally complain to the institution first. SUGEF states that complaints against supervised institutions normally require the institution's own administrative complaint process to have been exhausted before escalation to SUGEF. If no response is received within **10 business days**, a complaint may potentially be submitted to SUGEF. {% hint style="info" %} SUGEF is a financial supervisor. It is **not a criminal investigation authority** and does not replace reporting fraud to the OIJ or Ministerio Público. {% endhint %} ### Suspected Unauthorised Financial Businesses If the scam involves a person or business that appears to be: * Taking deposits without authorisation * Conducting financial intermediation without authorisation * Conducting unauthorised currency exchange * Claiming falsely to be a regulated bank or financial institution the matter can also be reported to SUGEF. SUGEF specifically advises anyone who believes they are the victim of fraud or a scam to notify the **Ministerio Público immediately**. ## Investment Scams If the fraud involves a purported: * Investment platform * Broker * Securities company * Investment adviser * Trading scheme * Public offering consider checking whether the organisation is registered with the **Superintendencia General de Valores (SUGEVAL)**. SUGEVAL accepts complaints relating to entities and participants operating within Costa Rica's regulated securities market. It also publishes warnings concerning organisations claiming to operate in or from Costa Rica without the necessary registration or authorisation. {% hint style="warning" %} A regulatory complaint does not replace a criminal report. If money has been obtained through deception, the matter should still be reported to the OIJ or Ministerio Público. {% endhint %} ## If Cryptocurrency Was Involved If cryptocurrency was sent as part of the scam, preserve the blockchain evidence immediately. Where possible, record: * Transaction hashes / TXIDs * Sending wallet addresses * Receiving wallet addresses * Cryptocurrency used * Blockchain/network used * Amount transferred * Date and time * Exchange deposit addresses * Destination services * Screenshots of withdrawals * Exchange account information * Police or case reference number If the funds reach a centralised cryptocurrency exchange, contact the exchange's: * Fraud team * Compliance team * Investigations team * Legal or law-enforcement response team Provide the relevant transaction information and ask the service to **preserve account and transaction records pending contact from law enforcement**. {% hint style="warning" %} A cryptocurrency exchange may not disclose customer information, freeze an account or return funds solely because a victim asks them to. Formal legal or law-enforcement process may be required. {% endhint %} ## Cryptocurrency Regulation in Costa Rica Costa Rica introduced important changes to its virtual-asset framework in **2026**. Law **10,961**, reforming Law 7786, introduced requirements for **Virtual Asset Service Providers (VASPs)**, including registration with SUGEF and obligations concerning anti-money laundering, customer identification, risk controls and reporting of suspicious transactions. The reform took effect in June 2026. This may be relevant where a scam involves a cryptocurrency business operating from Costa Rica. {% hint style="warning" %} Registration or AML supervision should not be interpreted as a guarantee that a cryptocurrency business is financially safe, that customer funds are protected, or that stolen cryptocurrency can be recovered. {% endhint %} ## Preserve Your Evidence Do not delete messages, emails, accounts or transaction records connected to the scam. Preserve as much of the following as possible: * Bank statements * Payment receipts * SWIFT or international transfer information * Cryptocurrency transaction hashes * Wallet addresses * Exchange deposit and withdrawal records * Emails * WhatsApp messages * Telegram conversations * Full chat exports * Telephone numbers * Email addresses * Social-media profiles * Usernames * Website URLs * Domain names * Screenshots of websites * Investment dashboards * Screenshots showing account balances * Contracts * Invoices * Identity documents supplied by the suspects * Names and aliases used * Company information * Dates and times of communications * Voice messages * Photographs * A chronological timeline of events Where cryptocurrency is involved, provide investigators with a tracing chart if one is available. {% hint style="warning" %} Any preliminary blockchain tracing chart should clearly distinguish confirmed on-chain transactions from assumptions, attribution hypotheses or investigative leads. A preliminary chart should not be represented as a completed forensic blockchain examination unless a full forensic tracing process has actually been performed. {% endhint %} ## Do Not Send Any More Money Once fraud is suspected, do not make further payments. Be particularly cautious if you are told that additional money is required for: * Taxes * Withdrawal fees * AML clearance * Compliance fees * Verification fees * Security deposits * Wallet activation * Account unlocking * Release fees * Gas fees * Legal fees * Recovery fees A scammer may show a large balance on a website or application while refusing to release it until another payment is made. The displayed balance **does not necessarily represent real assets**. ## Be Alert to Recovery Scams Victims of fraud are frequently targeted a second time. Someone may contact you claiming to be: * A cryptocurrency investigator * A recovery company * A blockchain expert * A lawyer * A hacker * A law-enforcement officer * An exchange employee * A regulator * An asset recovery specialist They may claim that your money has already been located and can be released after another payment. {% hint style="danger" %} Be extremely cautious of anyone guaranteeing the recovery of stolen cryptocurrency or money. No legitimate investigator can guarantee that assets will be frozen, seized or returned. {% endhint %} ## The First 24 Hours For cryptocurrency fraud, the first hours following discovery can be particularly important. Where possible, prioritise: **OIJ / police report → Bank or exchange notification → Identify exchange endpoints → Preserve evidence → Provide investigators with wallet addresses, TXIDs and tracing information** If stolen cryptocurrency reaches a centralised exchange, that exchange may hold: * Customer identity information * Email addresses * Telephone numbers * IP address information * Login records * Device information * Deposit records * Withdrawal addresses * Banking information This can potentially turn an anonymous blockchain address into an identifiable investigative lead. However, obtaining this information will normally require cooperation from the exchange and potentially a formal request from law enforcement. ## If You Are Outside Costa Rica If you are outside Costa Rica but the fraud involves: * A person in Costa Rica * A Costa Rican bank account * A Costa Rican company * A Costa Rican investment business * A cryptocurrency business operating from Costa Rica * Infrastructure or accounts located in Costa Rica you should normally report the crime to **your own local law-enforcement agency as well as the appropriate Costa Rican authority**. Provide investigators with: * Costa Rican bank details * Company information * Names * Telephone numbers * Email addresses * Cryptocurrency addresses * Transaction hashes * Exchange information * Payment records * A chronological account of events * Any blockchain tracing information Your domestic law-enforcement agency may then be able to make formal enquiries of Costa Rican authorities or financial institutions through the appropriate international cooperation channels. {% hint style="info" %} If you are outside Costa Rica and cannot attend an OIJ office personally, contact the Ministerio Público or OIJ for guidance on the most appropriate reporting route. The Ministerio Público provides mechanisms for complaints through local Fiscalías and, where supported, electronic judicial services. {% endhint %} # Europe - Reporting Cyber Crime For reporting crime as a European citizen, please report to your local Police AND use the following links to report the fraud/ cyber crime. ### Europol Links for Reporting in Your Country Europol offers you all of the relevant links for you to report the crime in your country. Use the link below to find the correct reporting mechanism. {% embed url="" %} # South Africa - Reporting Cyber Crime To begin with, you'll need to report the crime to the **South African Police Service (SAPS)**. SAPS is the national police service responsible for receiving and investigating reports of crime in South Africa. For significant or complex fraud cases, the matter may also be appropriate for referral to specialist authorities. As a victim in South Africa, we recommend doing all of the following. #### Report to the South African Police Service (SAPS) Every crime should be reported. You can begin by visiting your local police station and formally reporting the fraud. Make sure you provide as much evidence as possible and obtain your **CAS number**, which is your police case reference. ### Report a Crime South African Police Service {% embed url="" %} SAPS is the primary police service responsible for receiving reports of crime in South Africa. #### Report Serious Fraud to the Hawks (DPCI) For significant or complex fraud, you should also consider reporting the matter to the **Directorate for Priority Crime Investigation (DPCI)**, commonly known as **the Hawks**. The Hawks have a dedicated **Serious Commercial Crime Investigation** capability for serious financial and commercial crimes. ### Directorate for Priority Crime Investigation South African Police Service The Hawks investigate priority crimes in South Africa, including certain serious commercial crime and fraud cases. {% embed url="" %} #### Report to the Financial Sector Conduct Authority (FSCA) If the fraud involved an investment, trading platform, financial company or someone claiming to provide regulated financial services, you should also consider reporting the organisation or individual to the **Financial Sector Conduct Authority (FSCA)**. ### Report a Scam or Suspicious Financial Activity Financial Sector Conduct Authority {% embed url="" %} The FSCA regulates and supervises financial institutions and financial services in South Africa. #### Contact Your Bank or Cryptocurrency Exchange If money was sent through a bank, cryptocurrency exchange or other financial service, contact their **fraud or compliance team as soon as possible**. If cryptocurrency has been traced to an identifiable exchange, provide this information when reporting the crime to SAPS. Where appropriate, law enforcement may be able to request information or take further action through the relevant legal process. Remember that identifying where funds have gone does **not guarantee that they can be frozen or recovered**, but it can provide an important opportunity for investigators. # Spain - Reporting Cyber Crime For reporting crime as a Spanish citizen, please report to your local Police AND use the following links to report the fraud/ cyber crime. ### Report the crime to the national police Every crime should be reported. You can begin by calling your local police station and using this page to report the crime! {% embed url="" %} ### National Institution of Cyber Crime Here is the direct link to the national institute of cyber crime, please go ahead and report it here. {% embed url="" %} # UAE - Reporting Crypto Related Fraud ## Reporting a Scam or Crypto Fraud in the United Arab Emirates If you have been the victim of a scam or cryptocurrency-related fraud in the **United Arab Emirates**, you should act quickly. The most important steps are to: * Report the crime to the relevant police authority * Notify any bank, exchange or payment provider involved * Preserve all available evidence * Identify any cryptocurrency exchanges or other service providers involved * Avoid sending any further money The correct reporting route may depend on the emirate in which the crime occurred. ### Report the Crime to the Police The UAE Government provides several official routes for reporting cybercrime and fraud, including the Ministry of Interior, Dubai Police and local police stations. If there is an immediate threat or emergency, call **999**. #### Dubai If the crime falls within Dubai's jurisdiction, you can report it through the **Dubai Police eCrime portal**. The service can be used by members of the public to report cybercrime occurring within Dubai. [Report an eCrime — Dubai Police](https://ecrimehub.gov.ae/) #### Abu Dhabi If you require an **official criminal report**, consider using the **UAE Ministry of Interior application** or attending your nearest police station. Abu Dhabi Police also operates the **Aman** service for providing security-related information. Aman can be contacted through: * **Telephone:** 800 2626 * **SMS:** 2828 * Abu Dhabi Police online services {% hint style="warning" %} Aman is primarily an intelligence and security information service. If you require a formal criminal complaint or police report, use the Ministry of Interior service or attend a police station. {% endhint %} #### Other Emirates Victims in other Emirates can report cybercrime through the **UAE Ministry of Interior** or by attending their nearest police station. [UAE Government — Cybercrime and Digital Security](https://u.ae/en/information-and-services/justice-safety-and-the-law/cyber-safety-and-digital-security) ### Contact Your Bank or Payment Provider Immediately If money was sent through a: * UAE bank * Credit or debit card * Money transfer company * Payment service * Cryptocurrency exchange contact the organisation's fraud or compliance department immediately. Explain that the transaction is connected to suspected fraud and ask whether they can: * Stop or recall the payment * Flag the receiving account * Preserve relevant transaction information * Provide guidance on their fraud-reporting process You should do this **even if you have already filed a police report**. The sooner a financial institution is notified, the greater the opportunity may be to identify or preserve funds. ### If Cryptocurrency Was Involved If cryptocurrency was sent as part of the scam, preserve the relevant blockchain information. Where possible, record: * Transaction hashes / TXIDs * Sending wallet addresses * Receiving wallet addresses * Cryptocurrency and network used * Amount transferred * Date and time of the transaction * Exchange deposit addresses * Any identified service or exchange * Police crime or reference number If the funds reach a centralised cryptocurrency exchange, contact the exchange's **fraud, compliance or investigations team**. Ask them to preserve relevant account and transaction information pending contact from law enforcement. {% hint style="warning" %} A cryptocurrency exchange may not freeze an account, disclose customer information or return funds based solely on a request from a victim. Formal law-enforcement involvement may be required. {% endhint %} ### Report Relevant Crypto Activity to VARA If the matter involves cryptocurrency activity connected to Dubai, you may also consider reporting it to the **Virtual Assets Regulatory Authority — VARA**. VARA accepts reports concerning licensed Virtual Asset Service Providers and potentially unauthorised or suspicious virtual-asset activity. [Report Virtual Asset Activity to VARA](https://www.vara.ae/en/register-a-complaint/) {% hint style="info" %} Reporting a matter to VARA should be treated as an additional regulatory step. It does not replace reporting the crime to the police. {% endhint %} ### Escalate Financial Complaints to Sanadak If your complaint involves a UAE-regulated bank, insurer or financial institution and the organisation has not resolved the matter satisfactorily, you may be able to escalate the complaint to **Sanadak**. Sanadak is the UAE's independent financial and insurance ombudsman. Normally, you should make a formal complaint to the financial institution first before escalating the matter. [Sanadak — UAE Financial Ombudsman](https://www.sanadak.gov.ae/en) ### Preserve Your Evidence Do not delete messages, accounts, emails or transaction information connected to the scam. Where possible, preserve: * Bank statements * Payment receipts * Cryptocurrency transaction hashes * Wallet addresses * Exchange deposit and withdrawal records * Emails * WhatsApp and Telegram messages * Full chat exports * Telephone numbers * Email addresses * Social-media accounts and usernames * Website URLs * Domain names * Screenshots of investment platforms * Screenshots of account balances * Contracts and invoices * Names or aliases used by the suspects * Dates and times of communications * A chronological timeline of events For cryptocurrency cases, you may also provide investigators with a blockchain tracing chart. {% hint style="warning" %} Any preliminary tracing chart should clearly distinguish confirmed blockchain transactions from assumptions, attribution hypotheses or investigative leads. {% endhint %} ### Do Not Send Any More Money Do not make further payments to the scammer. Be particularly cautious if you are told that additional money is required for: * Taxes * Withdrawal fees * AML clearance * Verification fees * Security deposits * Account unlocking * Release fees * Legal fees required before funds can be returned Requests for additional payments are commonly used to extract further money from victims. ### Be Alert to Recovery Scams Victims of fraud are sometimes targeted again by people claiming that they can recover stolen funds. They may present themselves as: * Investigators * Lawyers * Cryptocurrency recovery companies * Hackers * Law-enforcement representatives * Regulators * Blockchain specialists They may claim that your funds have already been located but require an upfront payment before they can be released. Always independently verify any organisation before paying for a recovery or investigation service. {% hint style="danger" %} Be extremely cautious of anyone guaranteeing that cryptocurrency or stolen funds can be recovered. No legitimate investigator can guarantee recovery. {% endhint %} ## The First 24 Hours For cryptocurrency fraud, the first 24 hours can be particularly important. Where possible, prioritise the following: **Police report → Bank or exchange notification → Identify exchange endpoints → Preserve evidence → Provide law enforcement with wallet addresses, TXIDs and tracing information** If stolen funds are currently located at a centralised exchange, there may be an opportunity for law enforcement to request preservation or restraint of the relevant account. There is **no guarantee that funds will be frozen or recovered**, but an exchange endpoint can potentially provide investigators with a more actionable lead than funds remaining solely within self-custodied wallets. ## If You Are Outside the UAE If you are located outside the UAE but the scam involves a: * UAE bank account * UAE company * UAE-based individual * UAE cryptocurrency exchange * Dubai-based Virtual Asset Service Provider you should normally consider reporting the crime to **both your local law-enforcement agency and the relevant UAE authority**. Provide your local police with all available UAE-related information, including: * Bank account details * Cryptocurrency addresses * Transaction hashes * Company information * Telephone numbers * Email addresses * Exchange details * Any tracing information available Your domestic law-enforcement agency may then be able to make formal enquiries through the appropriate international channels. {% hint style="info" %} Some UAE reporting systems have geographical jurisdiction requirements. For example, Dubai Police's eCrime service is intended for matters falling within Dubai's jurisdiction. {% endhint %} # UK - Reporting Cyber Crime For reporting crime as a British citizen, please report to your local Police AND use the following links to report the fraud/ cyber crime. To begin with, you'll need to report the crime to Action Fraud. Action Fraud is a reporting body for UK police. Whilst they do not investigate the crime themselves, they will collate all the data and hand it over to the relevant authorities in your local region. As a UK citizen, we recommend doing all of the following. ### Report to Action Fraud Every crime should be reported. You can begin by calling your local police station and using this page to report the crime! {% embed url="" %} Action Fraud is the crime reporting body of the UK. {% endembed %} ### Reporting to the Financial Conduct Authority (FCA) Here is the direct link to reporting a fake company or unregistered financial organisation, please go ahead and report it here. {% embed url="" %} ### Report to the Serious Fraud Office (SFO) For more serious frauds, please report it to the SFO. {% embed url="" %} # US - Reporting Cyber Crime For reporting crime as a US citizen, please report to your local Police AND use the following links to report the fraud/ cyber crime. ### Report Cyber Crimes to the FBI via IC3 The IC3, or Internet Crime Complaint Center, is a unit within the FBI responsible for investigating and addressing cybercrime. #### When should I report to IC3? Submit a report to IC3 as soon as you detect suspicious online activity or become a victim of cybercrime, ensuring you gather relevant information and use their online complaint form for assistance. {% embed url="" %} The Internet Crime Complaint Center {% endembed %} ### Report to the Department of Justice (DOJ) The Department of Justice prosecutes crimes involving cryptocurrencies, ensuring legal action against those who engage in unlawful activities within the digital currency space. #### When should I report to DOJ? You should submit a report to the Department of Justice if you encounter a federal crime, such as terrorism, human trafficking, or organized crime, or if you have information about violations of federal laws or constitutional rights. {% embed url="" %} Report to the DOJ {% endembed %} ### Reporting to the Federal Trade Commission (FTC) The Federal Trade Commission (FTC) is a U.S. government agency that helps victims of cybercrime or fraud by investigating complaints, educating consumers, and providing resources for recovery. #### When should I report to FTC? Submit a report to the Federal Trade Commission (FTC) if you've encountered scams, identity theft, deceptive business practices, or other consumer-related issues, especially those involving online transactions or communications. {% embed url="" %} ### Reporting to the Commodity Futures Trading Commission (CFTC) The Community Futures Trade Commission (CFTC) regulates U.S. derivatives markets to protect investors, ensure market integrity, and prevent fraud and manipulation. #### When should I report to CFTC? You should submit a report to the Commodity Futures Trading Commission (CFTC) if you have encountered fraud or misconduct related to commodities, futures, or options trading, including scams or deceptive practices in the financial markets. {% embed url="" %} ### Reporting to the U.S. Securities and Exchange Commission (SEC) The U.S. Securities and Exchange Commission (SEC) regulates and enforces laws governing securities and investments, including oversight of cryptocurrency offerings and exchanges to safeguard investors and maintain market integrity. #### When should I report to SEC? Submit a report to the Securities and Exchange Commission (SEC) if you have encountered securities fraud, insider trading, Ponzi schemes, or other violations of securities laws, particularly those related to investment scams or misconduct in the financial industry. {% embed url="" %} # Contact Us Only use these contact details when your case is urgent and needs to be attended to today. Otherwise please use our IOC.Support service ### **URGENT SUPPORT ONLY** **Call today on: 0330 133 9852**\ **Head to** [**ioc.support**](https://ioc.support)\ **Email: ** **WEBSITE & SOCIALS:** {% embed url="" %}