01
Drained by a malicious approval
You signed something on a phishing site and tokens left the wallet. We trace the route and prepare an exchange-ready report.
Wallet recovery
MetaMask
Trace and respond to MetaMask incidents — drained wallets, malicious approvals, or lost access to a seed phrase.
How MetaMask works at a glance
MetaMask is the most-used browser wallet on Ethereum and EVM chains. The wallet itself is non-custodial, so most incidents involve either a lost 12 or 24 word seed phrase, a forgotten password on a local install, or a malicious smart-contract approval that drained funds. Each path needs a different response.
Situations we commonly help with
If any of these sound like your case, we've handled it before.
02
Forgotten local password, seed available
You have your 12 or 24 word seed but cannot remember the password set on the local extension.
03
Partial seed phrase
You wrote down most of the words but one or two are missing or unreadable.
04
Compromised seed from a fake support agent
The seed was shared with someone posing as MetaMask support and the wallet is being actively monitored.
Our process
How does it work?
A transparent five-step process so you always know what's happening next.
Step 1
Case assessment
Our process begins with a careful evaluation of your case. We gather the essentials — the nature of the issue, transaction IDs, wallet addresses, dates, and any supporting evidence you can share.
This intake helps us understand the scope of the investigation and decide together whether an investigation makes sense and what shape it would take.
Step 2
Blockchain analysis
Using advanced forensic tools, we trace transactions across chains, cluster addresses, and identify exchange touchpoints and intermediaries.
We work meticulously to surface the insights that can lead to fund recovery or provide actionable evidence for legal action.
Step 3
Evidence compilation
Findings are turned into a clear, court-ready report — transaction histories, identified addresses, and the connections that link them to fraud or theft.
This document serves as a vital resource for legal action, exchange compliance teams, and law enforcement agencies.
Step 4
Authority coordination
Where needed, we work alongside legal experts, law enforcement, and exchange compliance teams to act on what the investigation uncovered.
We provide the documentation and support needed to keep that handoff smooth, and we stay engaged as the case moves.
Step 5
Resolution & reporting
The starting kit
What we'll need from you
The faster we have these, the sooner you get a clear assessment.
- 1Your MetaMask wallet address (read-only)
- 2Transaction hashes from the incident if relevant
- 3Whatever you have of the seed phrase, if recovery is the goal
- 4A timeline of what happened
What clients say
Honest reflections from people we've worked with.
Christian Castrellon
Jul 7, 2026
As long as you have all evidence related to the scam case, including chat logs, transaction records, screenshots, and any other relevant documentation. This evidence will be crucial when seeking assistance from this crypto expert just like they were able to assist me and get back my stolen assets.
Colorado, USAOther wallets & situations
Korin Geraroud
Jun 17, 2026
I was scammed of $40k on Telegram investment institution three weeks ago and I got back my money from the scammer through the intervention of The ReclaimPath recovery expert.
Arizona USA
Kimberly Love
Jun 5, 2026
My case was a bit complicated because it involved multiple transactions. At first, I wasn't sure if anything could be done. The team explained the risks and possible outcomes, which i appreciated. It took longer than expected, but they managed to recover part of my funds and i'm glad.
CanadaCoinbase Wallet
48-hour response
Start your MetaMask case
Share the basics. We'll come back with an honest assessment of whether an investigation can help. No pressure, no upsell.