Start with verifiable transactions
Identify the correct network, transaction hash, amount and destination address. Compare the public record with exchange receipts or wallet exports supplied for the review.
Map observable asset movement
Document subsequent transfers visible on the relevant blockchain. Explain where an exchange, bridge, new network or unavailable record limits the continuity of the trail.
Separate addresses from identities
An address is not proof of a person's identity. Findings should show the basis and confidence of any attribution. Tracing does not give control of a wallet or guarantee recovery.