Digital Assets Investigations

What to Expect if You Hire Us

A Trauma-Informed and Transparent Approach

Michael Roberts, founder of Rexxfield, and co-founder of its parent company Stingbase/Stingforce, has personally counselled hundreds of victims of cybercrime since 2008. While not a licensed therapist, Michael has extensive first-hand experience witnessing the psychological impact and emotional trauma inflicted by online financial crimes.

READ THIS FIRST –  Results Are Not Guaranteed

If you have already been financially wiped out, we strongly recommend that you DO NOT engage our services. We do not accept credit card payments, and only accept clients who still have sufficient financial reserves and can afford to risk the cost of a professional investigation with no guaranteed return. Some clients have fully recovered, others are still waiting, many have walked away without any recovery — only answers. However, those answers have often delivered clarity and peace of mind that helped victims move forward knowing they left no stone unturned.

Warning: Recovery Scams & Rexxfield Impersonators

A disturbing trend has emerged where victims are targeted again by so-called “asset recovery” services — predatory fraudsters who demand up-front fees and deliver nothing. Many impersonate credible organizations to trick victims a second time.

Rexxfield and its founder Michael Roberts are frequently impersonated by these criminals. These fraudsters have forged Rexxfield contracts, spoofed email addresses, and built fake websites and social media accounts that mimic our brand to deceive victims into sending money.

  • Always confirm our identity through official channels – Contact Us
  • Do not send money to anyone claiming to represent Rexxfield unless you have verified them personally.
  • We will NEVER contact you first.

Global Standing & Law Enforcement Trust

Rexxfield, along with its affiliated groups Stingforce and PICDO, has earned a reputation of trust within the global law enforcement community. Our team has supported cybercrime investigations for the US Secret Service, FBI, Homeland Security, UK Police, Israeli cyber units, French Gendarmerie, and South Korean authorities — among many others.

In May 2025, the Rexxfield and Stingforce team was invited to speak at the World Police Summit in Dubai, the largest law enforcement event in the world. Michael Roberts and other team members delivered six official speaking engagements, including keynote presentations and panel moderation sessions focused on cross-border cybercrime, public-private intelligence sharing, and cryptocurrency recovery strategies.

Understanding Our Case Resolution Rate

We frequently report case resolution rates of 80–90% — but this requires context.

Rexxfield either fully resolves the case, or advances it to a point where it can be resolved if law enforcement authorities take the necessary final steps, such as:

  • Issuing subpoenas or warrants to platforms (e.g., crypto exchanges, banks, telecom providers)
  • Acting on the intelligence, targets, or geographic leads we supply

If law enforcement declines to act, or delays indefinitely, the case may stall despite our best efforts. We never promise outcomes — we promise rigorous, ethical, and high-level investigative work.Our Investigation Process

    Next Steps - If You Are Ready to Proceed

    Step 1: Premium Triage Usually Within 24 Hours of Less– $1,000 Fixed Fee

    Nonrefundable | Limited-Scope Engagement

    This is the starting point for all new cases. It is a risk-based diagnostic, not a full investigation.

    What you get:

    • Our team will assess your case materials and digital trails
    • Preliminary blockchain and metadata triage
    • OSINT (Open Source Intelligence) analysis
    • A prompt opinion on your chances of recovery
    • Advice on whether it’s worth pursuing a full case

    What you do not receive:

    Formal deliverables, law enforcement outreach, or document preparation. This phase exists only to determine whether your case is viable enough to justify further investment. The fee is not refundable, regardless of outcome.

    Step 2: Full Investigation (If Mutually Accepted)

    If (a) you wish to proceed after triage and (b) if we accept your case, the next steps involve a multi-part fee structure:

    1. Nonrefundable Case Retainer

    Amount determined after triage, based on complexity. Covers initial forensic escalation, data analysis, and strategy development.

    2. Law Enforcement Success Benchmark Fee

    Due when our case materials are officially accepted by law enforcement (e.g., assigned case number or formal communication from a verified officer).

    3. Law Enforcement Liaison Fee – $1,400

    Required only if we must retain an independent former law enforcement officer to act as a case advocate. Waived if a trusted agency partner is already positioned to accept the case.

    4. Contingent Recovery Fee (Performance-Based)

    45% of recovered funds up to $100,000

    20% of recovered amounts beyond the first $100,000

    Calculated after subtracting all prior fees (triage, retainer, benchmark, liaison). All recovered funds are sent to a regulated attorney trust account. Payments to Rexxfield are deducted transparently according to agreement.

    5. Optional Law Enforcement Reward – 10%

    If a police agency in a developing nation plays a critical role in your recovery, you may elect to donate 10% of recovered funds to PICDO — our registered charity partner that supports training and tools for cybercrime units in under-resourced regions. This does not apply to agencies in developed nations and is completely optional.

    Realistic Expectations & Emotional Closure

    Many cases result in no recovery. Some end with partial, full or even double recovery. Others uncover proof that your funds are permanently gone for tax returns — or reveal the identities of those responsible, even if justice is delayed or otherwise denied.

    And once in a while, the outcome exceeds even our expectations — like one client whose $320,000 in stolen crypto was recovered five months later, after the asset had doubled in value. That was an exception. Do not expect it.

    About Us

    Founded in 2008, Rexxfield was the world’s first private investigation firm dedicated exclusively to cybercrime and digital asset recovery. We are a founding member of the Stingforce transnational coalition — a global public-private alliance of police officers, private investigators, and financial crime experts — and our work directly supports PICDO.org, a registered 501(c)(3) nonprofit for training law enforcement in cybercrime disruption.

    Founder Michael Roberts began his investigative career in the 1980s with the Australian Telecommunications Commission. Since then, he’s worked on cases across the US, UK, Europe, Middle East, and Asia — often ghostwriting subpoenas and evidence reports for prosecutors. He also previously founded Mile2, the cyber certification company used by the US military and UN agencies.

    Justice at Scale Podcast Interview with Rexxfield Founder Michael Roberts

    This interview breaks down what we do, how we do it, and why so many cases stall without private-public collaboration.

    Rexxfield's Specialty Investigation Units

    1. Cryptocurrency Blockchain Analysis Unit

    Our Certified Cryptocurrency Scam Investigators use, and are fully trained in using Chainalysis Reactor® blockchain investigation solution. We are able to quickly untangle the crypto scammer’s laundering and obfuscation efforts, inasmuch as that is possible. Our early retention in a crypto crime investigation will often result in the freezing of wallets that have direct exposure to proceeds from crypto crimes and scams. Our wallet freeze successes usually occurred long before law enforcement even returned the victim’s call. When this happens, we can persuade the prosecutor in your jurisdiction to expedite the police action. We will even ghostwrite seizure warrants for prosecutors in smaller jurisdictions that are not familiar with crypto crimes.

    cryptocurrency investigations chainanalysis

    2. Open Source Intelligence Unit (OSINT)

    Our Open Source Intelligence Analysts apply their expertise in making assessments and predictions to support decision-making for each and every cryptocurrency investigation we conduct. They perform a variety of tasks from tactical intelligence functions to strategic reporting on threats and challenges to the other investigators. If our blockchain and social engineering investigators are the bloodhounds, then our OSINT analysts are the scouts who are assessing red herring distractions, footprint erasure, and historical connections.

    3. Forensic Code Analysis Unit

    Many crypto scammers instruct their victims to download and install sophisticated mobile phone applications as part of the scam. Our white-hat hackers reverse engineer these apps to find valuable clues about the app creators and all the services they are using. Our cryptocurrency scam investigators then help detectives and prosecutors prepare warrants for services on these new witnesses that would otherwise go unnoticed.

    4. Counter-Scam Social Engineering Unit

    Our cybercrime investigators will actually engage and communicate with your scammers, pretending to be their next victims. During those engagements, we can capture originating IP addresses and other digital evidence and artifacts associated with your crypto scammers. Not only that, we groom the scammer, just as he or she groomed you, into unmasking his entire criminal hierarchy. Once we have identified the whole gang, we have also found the boss who holds the encryption keys to your stolen crypto.

    5. Police and Prosecution Support Unit

    For the pendency of your case, we will provide evidence, sworn affidavits and instructions for your local prosecutors so that they have the probable cause needed to:

    • Extend and expand our early wallet freeze requests;
    • Issue subpoenas, and
    • Issue arrest warrants.

    When prosecutors and detectives lack the specialty technical knowledge required, we also ghostwrite these documents and orders to expedite the process.

    6. Cross-Border Police Task Force Liaison

    Unfortunately, crypto scammers can usually launder stolen crypto and disappear long before law enforcement is able to process a crime report and act. This is even worse when the scammer is in a different country to the victim (which is almost always). Our cryptocurrency scam investigators, using our proprietary solution, are able to quickly acquire the geographical location of the scammers. We then contact the cyber crime unit in the scammers country and brief them on the case. We then provide that detective’s contact details to the local Detective in the victim’s jurisdiction. This has saved weeks, even months of bureaucratic delays in the past.