Disrupt the scam networks behind victim losses.
Connect individual reports to the wider scam operation, identify people who may still be paying, and help investigators and institutions act before more money is lost.
Problem
Scammers move faster than fragmented investigations.
Complaints pile up. Other victims remain unseen.
Reports are handled separately while other people keep paying into the same scam.
Funds move faster than teams can coordinate.
Manual handoffs delay intervention as scam proceeds move across wallets, services, and jurisdictions.
Individual cases hide the network.
Scattered evidence makes it hard to connect victims to the accounts, infrastructure, and operators behind a scam.
500%
AI scam growth
Rise in AI-enabled scam activity over the past year.
$23B
Investment scam losses
Verified inflows to crypto fraud schemes in 2025. Investment scams accounted for 62%.
What is Ardence?
Ardence is an AI investigation platform built for all-source intelligence. Connect scam reports, identify ongoing victim payments, and investigate the networks behind them.
How it works
Turn scam reports into investigative action.
Identify cases where victims are still paying or funds may still be within reach. Command Center brings victim reports and scam signals into Ardence so you can analyze them more easily.
- Extract wallet addresses, scam domains, and contact details from reports
- Group complaints that share payment addresses or scam infrastructure
- Rank leads for analyst review based on continued payments and the location of funds
Connect separate reports through shared payment destinations, domains, and accounts. Build a picture of the scam operation behind individual losses.
- Compare reports for shared payment destinations and scam infrastructure
- Identify wallets where funds from multiple victims come together
- Connect financial activity with domains, accounts, and other investigative leads
Use a known scam network to find leads to other people who may still be paying, including those who have not reported a loss. Participating institutions can help identify and contact affected customers.
- Identify addresses the network is using to collect victim payments
- Find other payments into those addresses to develop leads for victim outreach
- Share supporting evidence with participating institutions to help identify affected customers
Find opportunities to interrupt payments, refer scam websites for takedown, and locate funds for potential intervention. Give investigators and institutions the evidence to act within their authority.
- Trace deposits through intermediary wallets, bridges, and services toward cash-out points
- Share scam indicators to support provider warnings and website takedown referrals
- Alert participating exchanges through Beacon Network to notify them when flagged funds reach their platform
- Prepare the transaction trail and supporting analysis for freeze or seizure requests
Document how victim payments connect to seized funds. Organize supporting records for victim-claim review and restitution decisions by the relevant authorities.
- Link victim reports and documented deposits to the traced funds
- Preserve the sources, reasoning, and transaction history behind each finding
- Organize evidence to support victim-claim review and restitution processes
Identify cases where victims are still paying or funds may still be within reach. Command Center brings victim reports and scam signals into Ardence so you can analyze them more easily.
- Extract wallet addresses, scam domains, and contact details from reports
- Group complaints that share payment addresses or scam infrastructure
- Rank leads for analyst review based on continued payments and the location of funds
Connect separate reports through shared payment destinations, domains, and accounts. Build a picture of the scam operation behind individual losses.
- Compare reports for shared payment destinations and scam infrastructure
- Identify wallets where funds from multiple victims come together
- Connect financial activity with domains, accounts, and other investigative leads
Use a known scam network to find leads to other people who may still be paying, including those who have not reported a loss. Participating institutions can help identify and contact affected customers.
- Identify addresses the network is using to collect victim payments
- Find other payments into those addresses to develop leads for victim outreach
- Share supporting evidence with participating institutions to help identify affected customers
Find opportunities to interrupt payments, refer scam websites for takedown, and locate funds for potential intervention. Give investigators and institutions the evidence to act within their authority.
- Trace deposits through intermediary wallets, bridges, and services toward cash-out points
- Share scam indicators to support provider warnings and website takedown referrals
- Alert participating exchanges through Beacon Network to notify them when flagged funds reach their platform
- Prepare the transaction trail and supporting analysis for freeze or seizure requests
Document how victim payments connect to seized funds. Organize supporting records for victim-claim review and restitution decisions by the relevant authorities.
- Link victim reports and documented deposits to the traced funds
- Preserve the sources, reasoning, and transaction history behind each finding
- Organize evidence to support victim-claim review and restitution processes
$1.3M
TRM outcome
Average value of scam-linked funds disrupted each week
34×
TRM outcome
Increase in median cluster size using TRM's proprietary clustering
Proof
Fraud and scam investigations.
One complaint exposed a cross-border scam network.
Royal Thai Police expanded a victim report into a wider investigation using TRM. The case resulted in a 28-year sentence, and authorities are working to return about $20 million to victims.
$225.3 million connected to crypto investment fraud.
TRM supported US Secret Service analysis connecting 35 intermediary wallets to seven groups of USDT addresses. The US Department of Justice filed a civil forfeiture complaint covering approximately $225.3 million.
Nearly $9 million seized in a case affecting more than 70 victims.
TRM helped investigators trace funds through 103 addresses across multiple blockchains, connecting activity tied to a pig butchering organization.
Disruption Layer
Beacon Network
Stop scam funds before they're cashed out.
Verified investigators flag scam-linked addresses. Beacon traces the funds in real time and alerts participating institutions so they can act before withdrawals occur.
Intelligence
Threat intelligence built for fraud and scam investigations.
TRM proprietary intelligence
See the network behind the scam.
Connect scams to the wallets, entities, and financial activity behind them with TRM’s proprietary data.
Chainabuse
1.2M+ victim reports
Find related cases through victim-reported wallets, domains, and scam details from around the world.
Explore Chainabuse (opens in a new tab)All-source intelligence
Dozens of data partners. One investigation platform.
Ardence brings intelligence from TRM and specialized data providers into one investigation under a single Ardence contract.¹
Use Ardence to analyse scam domains, online identities and criminal activity alongside victim reports and your team's own evidence. Commercial partner intelligence and open-source information help teams investigate the wider scam operation, subject to each source's permitted-use and disclosure restrictions.
¹ Provider availability varies by customer and jurisdiction. Supplemental terms may apply.
Services
Expert support and training for fraud investigators.
- Learn more
Investigative support
Former law enforcement investigators at TRM work alongside your team on complex crypto fraud cases.
- Learn more
TRM Academy
Training, courses, and certifications to help your team build skills in blockchain investigations, trace scam proceeds, and connect financial activity to the people behind it.
Community
Work alongside others investigating fraud and scams.
Disruption Sprints
Recurring events that bring investigators and partners together to work live cases and carry out coordinated disruptions against scam networks.
- Learn more
Resolve: Fraud & Scams
Get hands-on training and connect with fellow investigators at Resolve: Fraud & Scams, a dedicated mission track focused on the challenges your team faces.
Questions
FAQ
Start with a victim report, account, domain, message, wallet, transaction, or case record. TRM helps connect that signal to related activity.
TRM Wallet Screening can help an institution assess a destination before a transfer. Transaction Monitoring can surface risk as new intelligence appears. The institution sets its controls and decides whether to block, hold, or investigate a payment.
Ardence brings blockchain intelligence from Forensics into a broader investigation alongside other evidence. Forensics provides a dedicated platform for deeper crypto tracing and analysis.
A known scam report can lead to other payments into the same network. Those connections give investigators and participating institutions leads for identifying and contacting people who may still be paying. A wallet address alone does not establish someone's identity.
TRM helps teams identify, trace, and document the movement of funds and can support alerts to relevant institutions. Exchanges, stablecoin issuers, courts, and law enforcement make freezing, seizure, and recovery decisions.
