Karma Labs

Investigations · Intelligence · Recovery support

We were defrauded first. Then we built the firm.

Karma Labs investigates fraud, traces value across banks and blockchains, and turns what it finds into evidence a police force, a regulator, a liquidator or a court can actually use.

We post as @KarmaLabsHQ on X.

About us

Founded by someone the fraud happened to.

Karma Labs was started by an investor who was defrauded, and who then spent a long time discovering how little of the recovery process is built for the person who lost the money. Exchanges answer law enforcement, not victims. Police forces want a file in a format nobody tells you how to produce. Lawyers want the tracing done before they will look at it. The work of assembling that file falls to the one person least equipped, at the worst moment, to do it.

So the firm does that work. It reconstructs what happened from primary records rather than recollection, follows the value wherever it moved, and hands over a file that holds up when somebody hostile reads it closely. The same discipline applies whether the counterparty is a fake exchange, a forged approval, a compromised system or a collapsed company.

  • Primary sourceEvery figure, date and address is read from the underlying record or the chain itself, at the moment it is used. Nothing is carried forward on trust.
  • Plain findingsWe separate what is proven from what is inferred, and we say so in the document. An investigation that overstates its own certainty is worthless the first time it is challenged.
  • Built to be filedDeliverables are prepared to go to a police force, a regulator, an exchange compliance desk or an office-holder, with the exhibits and references they will ask for.
  • No theatreWe do not promise recovery. We tell you what can be established, what it would take, and when the honest answer is that the money is gone.
An investigator reviewing a transaction graph and ledger records across two screens
Reconstruction work: ledger records, counterparty clustering, timeline.

Services

Four lines of work, one method.

Each engagement starts with an assessment: what the record actually shows, what it would take to establish the rest, and whether the result is worth what it costs to get.

Cyber Security

Incident investigation and the hardening that follows it. We establish how access was obtained, what was reached and what left, preserve the artefacts before they age out, and set out the controls that would have stopped it. Where an incident becomes a claim or a police matter, the same evidence is prepared to carry.

incident reconstructionartefact preservationaccess & exfiltrationcontrol review
Secured data centre racks with layered access controls

Transaction Investigation

Following value through bank statements, exchange records, payment processors and wallets until the picture closes. We reconcile every leg against the source document, resolve counterparties to real entities where the record allows it, and mark the points where the trail stops rather than papering over them.

fund flow reconstructioncounterparty resolutionexchange & processor recordsexhibit preparation
Transaction flows traced across jurisdictions on a world map

Liquidation Support

Investigative support to office-holders, creditors and their advisers. We reconstruct balances and related-party movements across the period before collapse, identify assets and recipients the estate has not yet reached, and produce the tracing work that underpins recovery actions. We support the appointed office-holder; we do not take appointments ourselves.

estate asset tracingrelated-party mappingbalance reconstructioncreditor support
Scales weighing corporate records against digital assets

Blockchain Intelligence

On-chain analysis read from the raw values, not from a dashboard's summary of them. Wallet clustering and attribution, token and contract review, counterparty due diligence before you commit funds, and monitoring of addresses that matter to a live matter. Every figure is recomputed at its own decimal basis and checked a second way before it goes into anything that gets filed.

wallet clusteringattributiontoken & contract reviewcounterparty due diligence
Blockchain intelligence dashboard showing a transaction network graph and risk breakdown

How an engagement runs

Assessment first. Always.

Nobody should spend money on an investigation before knowing whether there is anything at the end of it. The first stage exists to answer that question honestly, including when the answer is no.

STAGE 01

Intake

You send what you have: statements, correspondence, screenshots, addresses, reference numbers. Nothing is too fragmentary to start with, and nothing is dismissed because it looks unremarkable.

STAGE 02

Assessment

We read the primary records and establish what they support. You get a written view of what happened, what can be proven, what is missing, and what the realistic routes are, before any larger commitment.

STAGE 03

Investigation

The full reconstruction: fund flows, counterparties, entities, timeline. Findings are separated into proven and inferred, and every exhibit is traceable back to the document or the chain it came from.

STAGE 04

Filing and follow-through

The file is packaged for whoever needs it next: police, regulator, exchange compliance, office-holder, counsel. We deal with the follow-up correspondence rather than leaving it with you.

Contact

Tell us what happened.

Send a short account of the matter — dates, amounts, counterparties, reference numbers, whatever you have. We will come back to you on whether it is something we can help with. Enquiries are treated as confidential.

Contact us

Please do not send passwords, seed phrases or private keys. No legitimate investigator will ever ask you for them.