Back to cases
AF-SCN-1520Ransomware / cryptoEU
Mandate Lockstep
Traced a ransomware payment through a mixer, a bridge and a custodial venue.
Anonymised composite scenarios assembled from recurring matter patterns. They are not promises of outcome.
- Reference
- AF-SCN-1520
- Region
- EU
- Duration
- 3 mo.
- Related case
- €890K
Challenge
The company had already paid. The trail entered a mixer quickly, and the insurance deadline was short.
Approach
AURELINE TRACE rebuilt the graph before and after the mixer, identified the off-ramp and prepared an evidentiary request to the custodian.
Outcome
Part of the funds was held by the venue. The insurer accepted our report as the evidentiary basis.