Cyber investigations
Executive and Celebrity Threat Investigations: Find Who Is Targeting You
Our executive threat investigators help founders, executives and public figures facing impersonation, defamation, extortion and coordinated harassment. We find who is behind it, document the evidence, and support your response.
- Who we helpCEOs, founders, family offices, public figures and their security and legal teams
- What you getThe source identified where the evidence allows, and a defensible evidence report
- How we startFree, confidential consultation
- ExperienceWorking cybercrime cases since 2008
Can you find who is targeting an executive online?
Often, yes. We trace impersonation accounts, smear campaigns, extortion messages and harassment back to the people behind them, using open-source research and technical analysis. We can identify anonymous attackers even when they hide behind a VPN, as long as there is a suspect. We state how confident each finding is, and we tell you plainly when the evidence cannot get to a name.
Speed matters. The earlier we start, the more evidence we can preserve.
Case study
Proven on a very public case: BrewDog co-founder James Watt
James Watt was the target of an online smear campaign, and the person behind it hid behind VPN cloaking services. Rexxfield identified them anyway. Mr. Watt chose to go public with the case, and it was covered by the press.
Threats we investigate
Executive threat investigators for targeted attacks on public figures
These attacks are rarely random. They are deliberate, often coordinated, and designed to disrupt, manipulate or harm.
Executive and CEO impersonation
Fake accounts, spoofed emails and cloned profiles that use an executive’s name and face.
Defamation and smear campaigns
Coordinated campaigns that spread false claims about a person or a company.
Online defamation investigations →Blackmail and extortion
Threats to release information, or demands for payment, from someone hiding behind an anonymous account.
Harassment and stalking
Persistent harassment across several platforms, including cyberstalking of public figures.
Fraud using an executive’s identity
Fake requests in an executive’s name that push staff into urgent payments or data transfers.
Business email compromise →Family members and associates
Attacks that reach the family or close associates of an executive.
What we do
Find the source, watch for the next move, support your response
Threat intelligence
We uncover impersonation attempts, track the people responsible and analyse the patterns that point to a coordinated campaign. We look at who is behind an attack and how it may develop, so you can act early.
Continuous monitoring
Threats do not keep business hours. We watch the relevant online spaces for fake accounts and impersonation, emerging narratives, signs of extortion and escalating harassment.
Response support
When something happens, speed and precision matter. We help coordinate the response, assist with takedown requests and mitigation, advise on communication, and keep your risk assessment up to date.
- Impersonation accounts and fake profiles traced to their source
- Threat actors identified, with a confidence level for each finding
- Evidence preserved with a clear chain of custody
- A written report for your attorney, security team and law enforcement
- Ongoing risk assessments as the situation changes
Working with attorneys
Litigation assistance when it gets serious
- Evidence for your case. We find and document the evidence that helps build a case in court.
- Legal process. We can ghostwrite subpoenas if needed. Rexxfield is not a law firm, so your attorney issues them.
- Reports, affidavits and expert testimony. We write findings in plain language and can provide expert testimony.
- Lawful methods only. We do not hack accounts or devices. Evidence gained that way would harm your case.
Who we work with
Built for people with a lot to lose
CEOs and senior executives
Leaders targeted because of their role or their company.
Founders and public-facing leaders
People whose name and reputation are part of the business.
Family offices and principals
Families and advisers protecting high-profile individuals.
Corporate security and risk teams
In-house teams that need a specialist to investigate and document.
People facing harassment, defamation or blackmail
Individuals who need to know who is behind it.
Legal teams
Attorneys and litigation support professionals building a case.
Common questions
Executive threat investigation FAQ
What should I do first if an executive is being impersonated or blackmailed?
Do not pay and do not reply. Keep everything: screenshots, URLs, email headers and messages, and do not delete anything. Report it to the platform, to IC3 (ic3.gov) and local law enforcement, and tell your attorney. Then contact us for a confidential consultation.
Can you identify an anonymous attacker?
Often, yes. We link usernames, accounts, domains and public records, and we score each suspect on the evidence. We can identify attackers even when they hide behind a VPN, as long as there is a suspect. When only a platform holds the answer, we use a lawful, controlled engagement and support your attorney if the case goes to court.
Can you get defamatory content removed?
We help with takedown requests and mitigation, and we document who is behind the content so your attorney can act. Platforms and courts decide what is removed, so we cannot guarantee removal.
Do you work with our attorneys and security team?
Yes. We work as your attorney’s technical team, and we also work directly with security teams. We can support litigation with evidence, reports, ghostwritten subpoenas where needed, and expert testimony.
How much does an investigation cost?
Digital investigations start at USD 5,000 and corporate investigations start at USD 10,000. After a free, confidential consultation we send a clear scope and fixed fee.
Who investigates your case
Rexxfield’s team includes Stephen Dougherty, a former U.S. Secret Service investigator with more than 15 years in cybercrime and wire fraud; Ronnie Tokazowski, our CTO and a threat-intelligence researcher with more than 15 years of experience; and Anna Hulst, a licensed private investigator with more than 10 years of experience specializing in OSINT and social engineering. Meet the full team.
Related: Online defamation · Identify anonymous accounts · Litigation support
Being targeted? Speak with an investigator.
The consultation is free and confidential.
Contact Our TeamLast updated: October 19, 2026. Rexxfield is a cyber-investigations firm, not a law firm. This page is general information, not legal advice.