About zkGUN // Digital investigations unit
We trace what scammers try to hide.
zkGUN is an independent crypto investigation group helping victims understand where stolen funds moved, preserve digital evidence and pursue responsible recovery and reporting channels.
Our mission
Turn a chaotic loss into a structured investigation.
Crypto fraud moves quickly. Our role is to reduce confusion, organize the facts and identify the most credible next step.
We use technical research to expose the trail behind crypto scams — then convert that trail into usable evidence.
Victims often arrive with fragmented information: a wallet address, screenshots, a fake platform, pressure from a supposed broker or a chain of transfers they do not understand. We reconstruct the event from those fragments.
Our work may include transaction mapping, wallet clustering indicators, open-source intelligence, domain and platform research, timeline reconstruction, evidence preservation and structured reporting for relevant exchanges, compliance teams, legal representatives or authorities.
Recovery is never guaranteed. What we provide is disciplined investigation, a clear record of what happened and support for the lawful channels that may still be available.
Operating doctrine
How we think when the trail gets complicated.
Our approach is built around verifiable facts, realistic expectations and careful treatment of sensitive information.
Evidence before emotion
Scam incidents create urgency and anger. We separate assumptions from records and focus on information that can be checked, mapped and preserved.
Speed without recklessness
Early action can matter, especially when funds reach identifiable services. We move quickly without sacrificing accuracy or lawful procedure.
Technical clarity
Complex blockchain activity is translated into timelines, transaction paths and evidence packages that non-technical stakeholders can understand.
Confidential handling
Case materials may contain identities, messages and financial records. Access should remain limited to people with a legitimate role in the matter.
No fabricated certainty
We do not turn incomplete evidence into dramatic conclusions. Findings are presented with context, limitations and confidence levels.
Lawful pressure points
We look for legitimate escalation routes involving exchanges, service providers, compliance departments, legal counsel and authorities.
Investigation capabilities
One incident. Multiple layers of evidence.
A wallet trail rarely tells the entire story. We connect on-chain activity with the digital infrastructure and communications surrounding the scam.
Transaction tracing
Mapping asset movement across addresses, services, bridges and relevant blockchain networks.
Open-source research
Connecting public domains, profiles, aliases, applications and infrastructure to the incident record.
Evidence preservation
Organizing transaction data, screenshots, messages, URLs and time-sensitive digital records.
Scam pattern analysis
Identifying repeated scripts, payment instructions, wallet behavior and linked digital identities.
Technical reporting
Producing clear timelines, address lists, transaction maps and explanatory case summaries.
Escalation support
Preparing information for exchanges, compliance teams, counsel and appropriate reporting bodies.
Case methodology
From first report to an actionable case file.
Case intake
We collect the initial chronology, wallet addresses, transaction hashes, communications, platform details and other available records.
Evidence validation
Submitted information is checked for completeness, consistency and technical relevance before deeper conclusions are made.
Trace reconstruction
We map the transaction path, identify relevant services and correlate the blockchain record with the broader incident timeline.
Findings and limitations
Confirmed observations, likely links, unanswered questions and technical limitations are separated clearly.
Escalation package
Where appropriate, the evidence is organized for submission to exchanges, platforms, legal representatives or authorities.
Our boundaries
Technical capability must remain under control.
The name zkGUN reflects precision and resistance to fraud — not unlawful retaliation.
What we do
- Analyze public blockchain transactions and address activity.
- Preserve digital evidence supplied by victims or authorized parties.
- Research public websites, domains, profiles and scam infrastructure.
- Prepare technical reports and structured incident timelines.
- Support lawful reporting to exchanges, platforms and authorities.
- Explain technical findings to victims and their representatives.
What we never do
- Break into accounts, wallets, devices, networks or private systems.
- Steal credentials, private keys, seed phrases or digital assets.
- Threaten, harass, extort or organize retaliation against suspects.
- Publish unverified personal information or encourage vigilantism.
- Claim guaranteed recovery or demand invented release payments.
- Impersonate law enforcement, exchanges or government agencies.
Cooperation network
Evidence becomes stronger when the right parties can use it.
We structure technical findings so they can be reviewed by people responsible for compliance, legal action and formal investigation.
Why zkGUN
Built for precision, not theatre.
The crypto recovery space is crowded with anonymous promises, fabricated success stories and people asking victims to pay one more fee. zkGUN takes the opposite position: verify first, document everything and never manufacture certainty.
Our identity combines privacy-aware research, technical discipline and direct opposition to scam infrastructure. We are not interested in looking dangerous. We are interested in producing work that remains credible when examined by a compliance team, lawyer or investigator.
Begin with the evidence you have
Your case does not need to be complete to start.
Send the transaction hashes, wallet addresses, screenshots, messages and platform details currently available. The first step is to preserve the record and determine what can be verified.
zkGUN provides technical investigation, blockchain-analysis and evidence-support services. We do not perform unauthorized access, asset seizure, retaliation or guaranteed recovery. Information on this page is general and does not constitute legal, financial or law-enforcement advice.