Skip to content

Investigationsby ZachXBT

Cases Services Donors About Submit a tip

Cases
Services
Donors
About

Loading

Community-driven investigations into theft, fraud, and money laundering. Built on five years of public goods work.

Work

Cases
Services
About
Methodology

Get involved

Submit a tip
Donors
RSS

© 2026 ZachXBT. Independent by design.

███████╗ █████╗  ██████╗██╗  ██╗██╗  ██╗██████╗ ████████╗
╚══███╔╝██╔══██╗██╔════╝██║  ██║╚██╗██╔╝██╔══██╗╚══██╔══╝
  ███╔╝ ███████║██║     ███████║ ╚███╔╝ ██████╔╝   ██║   
 ███╔╝  ██╔══██║██║     ██╔══██║ ██╔██╗ ██╔══██╗   ██║   
███████╗██║  ██║╚██████╗██║  ██║██╔╝ ██╗██████╔╝   ██║   
╚══════╝╚═╝  ╚═╝ ╚═════╝╚═╝  ╚═╝╚═╝  ╚═╝╚═════╝    ╚═╝

Home Cases Services Donors Notify

Loading

Investigations

The flagship casework: exchange freezes, fund recoveries, and exploit attributions, documented in public from the first tip to the final outcome.

Tagged “Scattered Spider”Clear tag

Recovered: $350M+
Flagship cases: 19
Investigations: 150+
Legal outcomes: 25+

Search investigations

All19 Freeze2 Recovery3 Investigation13 Research1

North Korea4 United States4 France2 Brazil1 Canada1 United Kingdom1

2024

$12M Caesars ransomware recovery (Scattered Spider)

Tracing a $15M portion of the Caesars ransomware payment attributed to Scattered Spider led to the recovery of $12M.

Recovery$12Mrecovered