Wallet & custody practices
How assets are held and moved, how wallet access is managed, and where responsibilities or procedures may be unclear.
Protecting digital assets starts with how your business handles them.
We review your crypto practices through an investigative lens to help identify fraud exposure, operational weaknesses, and opportunities for stronger controls.
Discuss a risk reviewThe way money moves. Who can approve it. The counterparties you trust. Small gaps can have serious consequences.
A review helps you understand those gaps before an incident forces the issue. We agree the scope around your business, the assets you handle, and the questions you need answered.
Each engagement draws from the areas relevant to your operations.
How assets are held and moved, how wallet access is managed, and where responsibilities or procedures may be unclear.
How recipients are verified, transfers are authorised, and unusual or high-value payments receive additional scrutiny.
Where phishing, impersonation, payment diversion, or social engineering could exploit your everyday workflows.
Relevant public information and available blockchain evidence around counterparties, suspicious activity, and transaction relationships.
How permissions are granted, reviewed, and removed, and how your team records decisions and escalates concerns.
Who responds, what evidence is retained, and whether there is a clear route for reporting and investigating a suspected incident.
A useful review gives your team specific findings and practical priorities. The depth of the work and deliverables are agreed before we begin.
Scope your reviewUnderstand your crypto activity, key workflows, current controls, and the concerns that prompted the review.
Review the agreed procedures, records, and relevant blockchain activity to identify potential weaknesses and fraud indicators.
Explain each finding, the supporting evidence, its potential impact, and recommended next steps.
Bring the findings into a written report and walkthrough, with practical actions and areas requiring specialist follow-up.
This is a review of crypto practices and fraud exposure. Penetration testing, smart-contract code audits, and formal security or regulatory certification are separate specialist engagements.
A review can help reduce risk; it cannot guarantee that a business will never be hacked or defrauded. We make the evidence, limitations, and any need for further technical assessment clear.
Tell us how your business uses crypto.
Let’s identify what needs a closer look.
Start with a brief overview;
we’ll discuss the evidence needed next.