Exchange froze your funds?
We work with forensics, not promises.
We prove capital integrity with the same tools regulators use (Chainalysis/TRM class), build Source-of-Funds dossiers and handle communication with exchange compliance. Binance, Bybit, OKX, HTX, KuCoin, MEXC, smart-contract USDT restrictions. Sanctions-evasion cases are declined.
This is how an exchange AML engine sees your deposit: risk propagates along the transaction chain even when the "dirty" node is two hops away from you. Our forensic report builds the same graph with Chainalysis/TRM-class tooling — and documents your distance from the risk cluster.
Operational Capabilities
Our methodology is built on four pillars of forensic and legal defense.
Heuristic Blockchain Forensics
We don't just "trace funds." We perform Level-3 Cluster Analysis. We isolate the specific transaction hash (TxID) that triggered the exchange's risk engine and mathematically prove the funds' distance from any illicit entity (Darknet/Mixer/Sanctions), generating an irrefutable "Clean Capital" report.
Source of Wealth (SOW) Reconstruction
The "origin of funds" is where 90% of appeals fail. We architect a 40+ page legal dossier that reconstructs the entire lifecycle of your capital. We integrate fiat banking trails, property sales, and investment history into a cohesive narrative that satisfies the strictest Compliance Officer.
Institutional Liaison & P2P Arbitration
Support tickets are a dead end. We operate via privileged communication channels directly with Legal & Compliance departments. For P2P freezes (Triangulation Fraud), we legally establish your status as a "Bona Fide Purchaser," severing your liability from the illicit counterparty.
Global Status Remediation
For funds restricted at the smart contract level (Tether/Circle). This requires more than compliance; it requires legal affidavits submitted to the token issuers. We prepare the necessary evidentiary packages to petition for address remediation and resolution of restricted capital.
Pick your situation
Typical scenarios — breakdowns
Declassified Case Files
Representative examples of our forensic intervention.
The "Triangulation" Trap.
The Situation: The Client, a high-volume OTC trader, sold 145,000 USDT via Binance P2P. He received fiat currency to his bank account and released the crypto. Three days later, his Binance account was suspended indefinitely under "Risk Control."
The Analysis: The fiat funds the Client received were illicit proceeds from a third-party victim (phishing). The scammers used the Client as a "mule" to wash dirty fiat into clean crypto. Police requested the restriction.
The Onyx AML Intervention
We did not argue "innocence"; we argued Law. We structured a legal defense proving the Client was a "Bona Fide Purchaser for Value without Notice."
- We exported the chat logs proving no collusion with the scammer.
- We provided a forensic trace showing the Client's USDT was clean prior to the trade.
- We submitted a formal legal opinion to the investigating cyber-police unit.
The "Indirect Contamination" Defense.
The Situation: An institutional client's account containing 850k USDT was restricted directly by Tether Limited. The funds were flagged as "High Risk" due to interaction with a DeFi protocol exploited by a sanctioned entity.
The Analysis: Our forensic audit revealed the contamination was "indirect" (Hops > 5). The client had no direct link to the illicit actors, but automated compliance software flagged the account due to volume.
The Onyx AML Intervention
We prepared a sworn affidavit for Tether's Legal Department in the BVI. We proved that the 850k entered the account before the contamination event occurred, validating the funds' integrity.
- Cluster Isolation: Proved funds entered before contamination.
- KYC/KYB Packet: Full corporate due diligence.
- SOW Report: Verified source of wealth from software licensing revenue.
How it works
- Forensic audit. We find the transaction that triggered the exchange's risk engine and mathematically measure your funds' distance from illicit clusters. The result is a report compliance understands.
- Source of Funds dossier. We reconstruct your capital's lifecycle: banking trails, deals, taxes, exchange history — into a single chronological narrative. This is where 90% of self-made appeals fail.
- Compliance communication. One precise, legally verified response instead of a dozen tickets. For USDT restrictions — a legal package addressed to the issuer (Tether Legal).
Interactive case assessment
Pick the parameters — get an honest preliminary read on complexity, timelines and budget. An orientation, not an offer: the free case review gives the precise assessment.
Diagnostics is fixed-fee; representation is staged. The exact price follows the free assessment.
The Onyx Thesis
In the last decade, we witnessed the migration of global capital from fiat rails to the blockchain settlement layer. Bitcoin promised sovereignty. Stablecoins (USDT/USDC) provided utility. But mass adoption brought mass surveillance.
Today, the blockchain is the most transparent financial ledger in history. With the introduction of MiCA in Europe and global FATF compliance, exchanges have become deputized agents of financial control. They use automated heuristics to freeze legitimate capital based on probabilistic risk scores.
We do not "fix" things. We architect legal reality. We utilize the same forensic tools as the regulators (Chainalysis, TRM) to prove the mathematical innocence of your capital. We are the bridge between the code of the blockchain and the code of law.
Why you can trust us
No "guarantees"
The decision is made by exchange compliance. Anyone promising "100% unlock in 24 hours" is a scammer. We sell the quality of forensics and dossiers — and we say honestly when a case is hopeless.
Client screening
Before taking a case we run AML on your addresses ourselves. Sanctioned and knowingly illicit flows are declined — including any sanctions-evasion schemes. This protects us and our bona fide clients.
Regulator-grade tooling
Cluster analysis on Chainalysis/TRM-class data — the same lens the exchange is looking at you through.
Staged payments
Fixed-fee diagnostics first → then you know the plan, the odds and the price before paying for representation.
Research / Breakdowns
MiCA from July 1, 2026: what happens to funds on unlicensed exchanges
July 1, 2026 ends MiCA's transition period: exchanges without CASP authorization must stop serving EU clients. Who gets hit, what …
How exchange AML screening works: what compliance actually sees
Risk score, hops, clusters, retrospective re-scoring — exchange AML engines explained in plain language: why bona fide users get f…
How not to become a money mule: a P2P trading safety checklist
A practical P2P safety checklist: counterparty vetting, third-party payments, deal records, address AML hygiene. Trade P2P without…
USDT "frozen": by the exchange or by Tether's blacklist? Two different problems
An exchange freeze and Tether's smart-contract blacklist are fundamentally different restrictions with different procedures. Diagn…
Exchange froze your funds: the first 24 hours — what to do and what not to
A step-by-step plan for the first 24 hours after a crypto exchange freeze: what to preserve, how to read the compliance letter, wh…
How to check a crypto address before sending funds: 5-minute AML hygiene
Three levels of address checking before a transfer: Tether's contract blacklist, risk scoring, manual explorer analysis — and what…
Video verification at a crypto exchange: what they actually check
Why an exchange requests a video call or additional review, what questions they ask, how to prepare — and why a rehearsed story is…
How to withdraw a large amount from an exchange without a freeze: an honest guide
Why large withdrawals trigger AML reviews, what genuinely lowers the odds of a manual review — and why splitting the amount works …
What Chainalysis actually sees: clusters, heuristics, and where errors come from
How analytics engines cluster addresses, where "mixer" and "scam" labels come from, why false positives happen — and how the same …
Lawyer or blockchain forensics: who to call when an exchange freezes your funds
When a frozen-funds case needs a lawyer, when it needs a forensic analyst, and when both. An honest map of the tools, with no conf…
Free preliminary case assessment
Describe your situation — we will return an honest assessment: what is realistically possible, how long it takes and what it costs. No "guaranteed unlocks" — they do not exist; compliance decides.