Where the money went — a report in minutes, with the route explained by AI
Spoorlight follows a scam victim's payments on Ethereum and Tron and finds the exchange where the funds probably arrived. It then prepares a request to the exchange's compliance team and materials for the police.
Request an invitationSpoorlight never asks for seed phrases or private keys.
Three parts of one report
From a public case: 707,291.01 USDT sent on Ethereum on 19 January 2026. The report was not edited by hand. Select the diagram or the letter to enlarge it.
Route in brief
The route covers 707,291.01 USDT (ERC-20) on Ethereum. It starts with a transfer of 707,291.01 USDT from A to B on 2026-01-19 at 18:08:59 UTC T1. The trace contains 15 addresses and 19 transfers. It spans 7 hours, and its longest path has 4 transfers.
B sent the funds onward in several parts. The first was 1,000.00 USDT to C T2. Four transfers of 100,000.00 USDT each went to D, E, F and G T3 T5 T7 T9. A fifth went to H T11. Then 103,000.00 USDT went to I T15, and 103,291.01 USDT went to J on 2026-01-20 T17.
…three more paragraphs in the report
Scroll sideways · select to open in full
Before you start
- Ethereum and Tron only, mostly USDT. The route stops at bridges and DEX swaps.
- We don't promise recovery. The exchange may be able to identify the account holder; whether funds can be returned depends on the exchange, the police and the courts.
- A name is not a fact. Every label shows its source, for example "tagged KuCoin in public Etherscan labels".
Request an invitation
Access is by invitation. During the pilot the service is free, with no quotas and no payment.
We reply within two working days. If your case fits, we run the first trace together on a 20-minute call.
Spoorlight is a service of Opentech OÜ, Tallinn, Estonia.
Thank you
We'll reply within two working days from hello@spoorlight.com.