Lost crypto?
Inherited bitcoin?
We can help.

Lost access to your own wallet? A relative died and left a device you can't open? Settling an estate and not sure if crypto exists? We investigate, recover, and report. Financial investigator. Free consultation, with an honest assessment before you commit to anything.

~$400B
Estimated bitcoin and crypto lost or inaccessible worldwide
1 in 5
American adults own cryptocurrency — meaning most estates now have potential digital asset exposure
17%
Of crypto holders have any documented inheritance plan for their digital assets
SCOPE We restore access to wallets you own or are legally authorized to recover. We cannot recover funds lost to scams, theft, hacks, or transfers sent to the wrong address — those transactions are irreversible. We will only ever contact you from matthew@forensicarecovery.com; anyone messaging you on Telegram, WhatsApp, or social media claiming to be Forensica is an impersonator.

Which situation
is yours?

Some people contact us because they bought bitcoin years ago and can't get back in. A forgotten password. An old laptop that won't boot. A seed phrase lost in a move. The coins are still there — they just can't reach them.

Others contact us because a relative died and they found something — an old laptop, a USB drive, a handwritten note, a hardware wallet — and no probate has been opened yet. No lawyer or legal proceeding required. If you have a device and a suspicion, that's enough to start.

Executors and administrators contact us — with or without an attorney — because their fiduciary duty requires them to identify all estate assets. A written findings report from a professional investigator is the strongest evidence that duty was fulfilled. No attorney required to engage us directly.

In every case, the first step is the same: a free, confidential 15-minute consultation where we assess the situation and tell you honestly whether investigation is likely to help — and what it would cost if it is.

An experienced investigator — not just software.

👤
Photo coming soon
Matthew Snyder
EC Council Certified Digital Forensics
Certified Crypto Investigator
Blockchain Intelligence Group

Matthew Snyder is a financial investigator with 15+ years of experience in asset recovery, financial investigation, and OSINT research. He brings the same discipline used in tracing hidden financial assets to bitcoin and crypto recovery — combining forensic device examination, digital footprint investigation, and GPU-accelerated password recovery in a single engagement.

Most recovery services do one thing: run password cracking software and hope for a match. Forensica goes further. If a wallet file isn't immediately accessible, device forensics can recover deleted files and examine unallocated drive space. If a password is unknown, OSINT research builds a targeted list from the person's life — far more effective than generic wordlists against a slow hash like Bitcoin Core's. If assets might exist but haven't been located, digital footprint investigation can find exchange registrations, forum activity, and transaction history that no software scan will surface.

Every engagement is conducted personally by Matthew. No junior staff, no outsourcing. You'll know exactly what was examined, how, and what was found — whether or not assets are recovered.

One service for each situation.

If you're not sure which applies, the free consultation will sort it out — most people aren't sure when they first call.

01
Is there anything there?
Digital Asset Investigation
We examine devices and review the individual's digital footprint — exchange registrations, browser history, financial records, and email accounts — to determine whether bitcoin, crypto, or other digital assets exist and where they're held. For estates, families, and executors. No probate proceeding needs to be open. No attorney required. If you have a device and a suspicion, we can start there.
02
We know it's there — we just can't get in.
Wallet Recovery
The bitcoin or crypto has been located — or you know it exists. The problem is access: a forgotten password, lost seed phrase, locked device, or encrypted wallet file. We gather everything you remember, build a targeted recovery approach, and give you an honest probability assessment before we begin. Covers both estate wallets and wallets you own personally. No generic wordlists. Recovery is built from what we learn about how the password was created.

A clear process. No surprises.

Every engagement follows the same five steps. You'll know exactly where things stand at each stage.

01
Free Consultation — 15 minutes
We review your situation, assess whether investigation is likely to help, and recommend the appropriate service. If we don't think the engagement is worth pursuing, we'll tell you — and explain why. No obligation, no pressure.
02
Engagement & Device Submission
We provide a straightforward engagement letter outlining scope, fees, and process. Devices or files are submitted one of three ways:

Path A — Secure file transfer. If you have a wallet file (for example a wallet.dat), we provide an encrypted upload link after the consultation — never plain email. Don't send your seed phrase to us or anyone else; a legitimate recovery never needs it to begin, and if it's ever required we'll explain exactly how it's handled. Fastest path.

Path B — Drive shipment. If the hard drive can be removed, ship the drive only. We confirm receipt and condition on arrival.

Path C — Device shipment. Ship the full device. We handle extraction, imaging, and return it per your instructions.
03
Investigation or Recovery Work
We conduct the agreed work. Investigation engagements combine forensic device examination with targeted review of the individual's digital footprint. Recovery engagements work directly on the identified asset using targeted methods built from intake information. All device work uses hardware write blockers from the moment devices arrive — nothing on the original drive is ever modified.
04
Findings Report
Every engagement concludes with a written findings report — whether or not assets are found. The report documents the complete device inventory, methodology used, and findings summary. For estate matters, the report is formatted for the estate file and can be delivered directly to your attorney.
05
Recovery & Handover
If access is achieved, you regain control of the wallet — the recovered credentials are delivered to you securely, and the assets are yours to move to any account or wallet you choose. The success fee applies only on a successful recovery, as a percentage of what's recovered; if access can't be restored, nothing is owed. Private keys are only ever handled on an air-gapped machine — never one connected to the internet. Devices are returned to you, and all forensic working copies are securely destroyed on close.

Flat fees to investigate.
Success fees to recover.

Digital Asset Investigation — flat fee
Device investigation (laptop or drive)Forensic image, full scan, written findings report — you get a documented answer even if no assets are found
$300–$500
Hardware wallet investigationSeed-phrase search, device documentation, balance check if a seed is found
$350
Exchange account identificationOSINT to document accounts and the claim process to follow
$250
Multiple devices (3+)Reduced rate for families sending a full device inventory
$150/device after first
Wallet Recovery — success fee only
Recovery success feeKnown wallet that just needs access · agreed in writing before any work begins
15–20%
If access can't be restoredNo success fee. You owe nothing for recovery work that doesn't get you back in.
$0
All Engagements
Initial consultation15-minute case assessment · honest probability assessment · no obligation
Free
Why investigation is billed, but recovery isn't
They're two different kinds of work. Investigation answers a question — is there anything there, and where? — and produces a written findings report whether or not assets turn up. That's professional work with a defined deliverable, so it carries a flat fee. Recovery is different: when a wallet is known and just needs access, you pay only if access is actually restored. No access, no fee.
How the success fee works
The recovery success fee is 15–20% of the recovered value, agreed in writing before any work begins. When access is restored, you regain control of the wallet and the assets stay yours throughout. If access can't be restored, nothing is owed for the recovery work.
Exchange balances
If a relative held crypto on an exchange like Coinbase or Kraken, those balances are claimed through the exchange's own estate or account process — not through technical recovery work. Investigation can identify the accounts (the $250 line above) and point you to the right process. No success fee applies to exchange balances.

What makes us different from everyone else claiming to do this.

Financial investigator
15+ years of asset recovery and financial investigation experience. Not a programmer running software — a trained investigator who knows how to find things people have hidden, lost, or forgotten.
Real device forensics
We can physically examine hardware — laptops, hard drives, USB drives. We use forensic write blockers and industry-standard imaging tools. Nothing on your device is ever modified.
Written findings report
Every engagement delivers a written report — not a verbal summary. For estates, it documents methodology and findings in a format suitable for the estate file and attorney review.
Honest before we start
We tell you the probability of success before taking your money. If we don't think investigation will help, we'll say so in the free consultation — and explain why.

Not sure where to start?
That's what the call is for.

Consultations are free, confidential, and take approximately 15 minutes. We'll review your situation, assess whether investigation is likely to help, and explain exactly what the engagement would involve — with no obligation to proceed.

We work with clients nationwide. No attorney or legal proceeding required to engage us. Devices are shipped to us for forensic analysis; once access is restored, you regain control of the wallet and the assets are yours to move as you choose. Local clients in Greater Cincinnati and Northern Kentucky can arrange in-person meetings.

You do not need an attorney or an open probate proceeding to contact us. If you have a device and a suspicion that a relative held crypto, that's enough to start. For estate matters where probate is open, we can work directly with you as executor or administrator — or alongside your attorney if one is involved. We can help you understand your options during the free consultation regardless of where you are in the process.

Address
2345 Ashland Avenue, Suite 241
Cincinnati, Ohio 45206
Hours
Monday–Friday, 9am–5pm ET
Same-day response to email inquiries

Book your free 15-minute consultation

Tell us about your situation. We'll tell you honestly whether we can help — and if so, exactly what that looks like.

Free, confidential, no obligation
Flat fee to investigate · success fee only to recover
Plain language — no technical knowledge required
Honest assessment of probability before we take any money
Same-day response to email inquiries
Call (513) 204-9844 or email matthew@forensicarecovery.com