Casework Method

26 notes

Running the investigation: intake, scoping, OPSEC, response priority, freezing, sanctions.

Jump to any note in this section:

Concepts

Note
Freezable vs Non-Freezable Crypto Assets
The Scope Triangle

Principles

Note
Case Tractability: When to Decline
Identify the Predicate Typology First
Manage Both Digital Footprints (OPSEC)

Frameworks

Note
Five Investigation Goal Types
Five Investigation Output Types
Investigation Risk Categories & Mitigations
PI Response Priority: Freeze, Monitor, Predict, OSINT
Six Core Investigation Questions
Types of Due Diligence

Workflows

Note
The 5-Stage Investigation Process

Tactics

Note
Beginner Investigation Approach
Controlled Test Transactions as Ground Truth
Freezing Funds with an Exchange Email
Monitoring Addresses with Alerts
Obsidian Case-Management Workflow
Screening Addresses Against OFAC Sanctions
Translate Stakeholder Wants into Investigable Questions

Checklists

Note
Crypto Crime Typology Catalogue
Five Intake Red Flags
Intake Triage Checklist
Investigator OPSEC Checklist
Pre-Investigation Readiness Checklist
Sanctions Screening a Bitcoin Cluster
Surface-Level Fast Wins

Last updated on July 28, 2026

Time-Decay of Crypto Evidence Freezable vs Non-Freezable Crypto Assets