In one of the largest romance scam takedowns of 2025, Maple Recoveries's forensic intelligence played a crucial role in dismantling an international criminal network responsible for defrauding over 200 victims across 12 countries, totaling $8 million in stolen cryptocurrency.
The Network
The criminal organization operated from three countries, with:
- •A call center of 40+ operatives managing fake personas
- •A technical team handling cryptocurrency wallets and laundering
- •A social media team creating and maintaining fake profiles
- •Supervisors who trained new recruits on manipulation techniques
How We Got Involved
Maple Recoveries was initially engaged by six individual victims who had independently lost between $50,000 and $500,000 each. As our forensic investigation progressed, we realized their cases were connected — the stolen funds were flowing to overlapping wallet clusters.
The Investigation
Wallet Cluster Analysis
Our analysts identified 340+ wallets controlled by the network. By mapping fund flows and analyzing timing patterns, we clustered these wallets into 12 operational groups, each corresponding to a different "persona" used by the scammers.
Exchange Endpoint Identification
Despite efforts to obscure fund flows through mixers and chain-hopping, 73% of funds ultimately reached four centralized exchanges. We prepared comprehensive forensic reports for each exchange, facilitating KYC record requests.
Intelligence Package Preparation
We compiled a 200+ page intelligence package containing:
- •Complete fund flow diagrams with transaction hashes
- •Wallet attribution analysis
- •Exchange endpoint identification
- •Timeline correlation between victim interactions and fund movements
- •Network topology mapping
Law Enforcement Collaboration
We shared our intelligence with:
- •Europol's European Cybercrime Centre (EC3)
- •National cybercrime units in 3 countries
- •FBI's Internet Crime unit for US-based victims
Our pre-qualified intelligence package allowed agencies to fast-track the investigation, bypassing months of preliminary analysis.
Results
- •12 arrests across 3 countries in coordinated operations
- •$5.2M frozen at exchanges pending legal proceedings
- •$1.8M recovered and returned to victims
- •Additional recovery proceedings ongoing for remaining frozen assets
- •Criminal prosecutions underway in multiple jurisdictions
Lessons Learned
- 1.Individual cases often connect to larger criminal operations
- 2.Blockchain forensics can map entire criminal networks from a single case
- 3.Pre-qualified intelligence packages dramatically accelerate law enforcement response
- 4.International cooperation is essential — and increasingly effective
Specific details have been modified to protect victim identities and ongoing legal proceedings. This case demonstrates the power of combining blockchain forensics with law enforcement collaboration.
