Bitcoin Fraud: What Investigation Can Establish
3 min read · Last updated
Bitcoin's UTXO model produces an unusually detailed transaction record, which makes structured tracing effective when performed rigorously.
This article explains what that record supports and where it stops.
- 1Origin UTXO
- 2Peeling chain
- 3Cluster
- 4Service deposit
- 5Documented endpoint
The UTXO advantage
Each transaction consumes specific prior outputs, so value has explicit lineage. Investigators can follow individual outputs rather than reasoning only about balances.
Peeling chains
A common laundering pattern splits a large output into a small transfer and a large remainder, repeating across many transactions. The pattern is recognisable and traceable.
- ›Repeated small outputs to service deposits
- ›A persistent large change output
- ›Regular, automated timing
Clustering and services
Common-input and change heuristics group addresses into entities. Where an entity matches a known exchange or custodian, the trace has reached an accountable endpoint.
Coinjoins
Coinjoin transactions deliberately break heuristics. Reports state where a trace passes through one and how confidence is affected.
Outcome framing
A bitcoin trace establishes movement and endpoints. Any action against funds requires an institution or authority — never a promise from an investigator.
Case intake is confidential and handled by email at cybersec@securida.info.
Frequently asked questions
- Is old bitcoin activity still traceable?
- Yes. The ledger is permanent, though attribution data around older services may be weaker.
- Can a bitcoin transaction be cancelled?
- No. Confirmed transactions are final.
- Cyber Intelligence
- Blockchain Investigations
- Digital Forensics
The SEQRIA Research Team is the investigative research unit of SEQRIA, specialising in cyber intelligence, blockchain investigations and digital forensics.
Its work focuses on digital asset investigations, blockchain transaction analysis, cyber incident investigations and technical evidence collection. Published material is reviewed internally before release.
About the research teamRelated briefings
Request Confidential Consultation
SEQRIA provides technical investigation, forensic analysis and recovery assistance. Outcomes are never guaranteed. Case intake is confidential and handled by email.
cybersec@securida.info