DigitalSafeX
Home About Services Reviews FAQ Contact Start Case Assessment
Telegram
Analyst reviewing recovery work on dual monitors

Account · Funds · Device recovery

You got scammed once.
It doesn't have to happen twice.

Hacked accounts, drained wallets, fake brokers, compromised devices. We assess your case free, tell you honestly what's recoverable, and go get it.

3,400+cases assessed
94%recovery rate
41countries served
6 yrsin operation

Clients and teams we've worked alongside have accounts at

GoogleMetaAmazonShopify DeloitteSalesforceHSBCSiemens

Start here

What happened to you?

Tap the one that fits. You'll see exactly what we do about it — and how long it usually takes.

My account was hacked

Instagram, Facebook, Gmail, TikTok, WhatsApp — locked out, or someone else is inside.

We start with a session and device audit, identify the entry point, then run the platform's recovery route with the right evidence pack attached. Business pages and verified accounts get a priority lane.

Typical window: 2–9 days

Assess my case →

Crypto or funds are gone

Fake broker, rug pull, wrong-address transfer, or a wallet drained overnight.

We trace the movement on-chain, build a transaction map, flag the receiving wallets, and pursue every available route: exchange liaison, chain-level tracing, and where it applies, a formal dispute pack.

Typical window: 5–30 days

Assess my case →

A fake investment platform took me

Deposits went in, withdrawals never came, then they asked for "tax" to release it.

We profile the platform against known operators, map the payment rails used, and assemble a filing-ready case file. Then we stop the second wave — the "recovery agent" that comes for you after.

Typical window: 7–21 days

Assess my case →

Something's on my device

Pop-ups, spyware, a remote-access tool, or a "tech support" login you didn't expect.

Full sweep: remote-access tools, persistence entries, browser extensions, credential stores. We remove, harden, and hand you a plain-English report of what was on there and how it got in.

Typical window: 1–4 days

Assess my case →

I paid a scammer

Bank transfer, card, PayPal, gift card or open banking — and it's recent.

Speed matters. We build the dispute and chargeback pack, walk you through the bank's escalation ladder, and keep the paper trail in one file so nothing gets lost between departments.

Typical window: 3–14 days

Assess my case →

My business was hit

Page takeover, cloned storefront, domain hijack, or staff credentials leaked.

Containment first, then recovery: admin access restored, the clone reported and delisted, domain records corrected, and every staff credential rotated in the right order.

Typical window: 2–10 days

Assess my case →

How it runs

Four steps. No mystery.

  1. 01

    Assess

    You submit the form or message us. We read it and come back with a straight read on what's recoverable.

  2. 02

    Quote

    One figure for your case type. No rate card, no sliding tiers, no surprise additions halfway through.

  3. 03

    Work

    We run the recovery and keep you updated at agreed checkpoints — not silence followed by an invoice.

  4. 04

    Harden

    You get the account or funds back, plus the fix that stops the second wave landing on you.

Who we are

We know how to get it back.

Founded in 2020 and operating out of London, working cases across four continents. Small team, deliberately — you speak to the person working your file.

0Cases assessed
0Recovery rate
0Countries
0In operation

Reviews

What clients say afterwards.

★★★★★

"Lost my Instagram and the linked business page. Back in six days, and they found the exact device that got in."

Chidinma A.Houston, USA · Account recovery
★★★★★

"£14k into a fake broker. They traced it, built the file, and my bank actually moved once it was laid out properly."

Marcus T.Manchester, UK · Fund tracing
★★★★★

"Two years of pop-ups and a remote tool I never agreed to. Gone in an afternoon. Report was genuinely readable."

Sofia R.Madrid, Spain · Device security

Assessment is free. So is the honest answer.

Tell us what happened. If it isn't recoverable, we'll say so.

About us

Who we are

A small London team that took the recovery job seriously when most of the market was still guessing.

Built after watching the second wave land

DigitalSafeX started in 2020 out of a simple frustration: people who had already been scammed were being hit again, often within weeks, by the next set of hands out. The first loss was the bait. The "recovery agent" was the hook.

So we built the thing the market was missing — a recovery operation that starts with an honest assessment instead of a sales pitch, quotes one figure for the case, and then hands you a device that's actually hardened afterwards.

How we work

Every case is read by a human before it's quoted. Nothing is outsourced to a call centre, and nothing is sold to you that your case doesn't need. If a cheaper route exists, we'll tell you and point you at it.

We work across account recovery, on-chain and off-chain tracing, device forensics, and formal dispute work. Four disciplines, one file, one point of contact.

DigitalSafeX workspace

Vision

To be the name people are pointed to when something goes wrong digitally — and the one that actually answers.

Mission

Recover what was taken, protect what's left, and never let the second wave land on the same person twice.

Meet the team

Four people. One file each.

You'll deal with the person working your case — not a rotating queue.

Marisol Vega

Marisol Vega

Head of Case Assessment

Marisol reads every case before it's quoted. Nine years in SOC and incident-response work before joining, and the person who decides what's realistic and what isn't.

She built our triage model — the reason you get a straight answer instead of a pitch.

Austine Rodriquez

Austine Rodriquez

Cybersecurity & Client Communications

Austine is the voice on most of our WhatsApp and Telegram threads. Background in network security and a decade of frontline client work, which is an unusual combination and the reason clients actually relax mid-conversation.

He runs the initial technical read on new cases and translates it into plain English.

Daniel Osei

Daniel Osei

Device & Data Security

Daniel handles the forensics: what got onto the device, how it got there, and what has to be rotated before you're safe again.

Eight years across endpoint security and mobile forensics. If a remote-access tool is hiding somewhere, he'll find it.

Ana Ferreira

Ana Ferreira

Fraud Reporting & Disputes

Ana builds the paperwork that makes banks and platforms move — chargeback packs, escalation letters, regulator complaints.

Former disputes analyst, and the reason our filings don't bounce back with a template rejection.

Standards

What we hold ourselves to

Fixed quote, per case

One figure for your case type, agreed before work starts.

Written updates

Checkpoints agreed up front. You always know where the file stands.

Data minimisation

We take what the case needs and nothing else.

30-day support window

Post-recovery cover while everything settles.

Named handler

One person owns your file end to end.

No second-wave upsell

Nothing added to your invoice mid-case.

Want the honest read on your case?

It takes two minutes and costs nothing.

Services

What we recover, and how

Seven services across four disciplines. Every one starts with the same free assessment.

🔓

Account Recovery

Locked-out or hijacked social, email and business accounts, restored to your control.

  • Session and device audit to find the entry point
  • Evidence pack built for the platform's recovery route
  • Priority lane for verified and business accounts
  • Re-hijack protection after handover
Assess my case →
🪙

Crypto & Wallet Tracing

Follow the money on-chain and apply pressure where it lands.

  • Full transaction map from your first deposit
  • Receiving-wallet and exchange identification
  • Liaison pack for custodial endpoints
  • Ongoing monitoring of flagged addresses
Assess my case →
📉

Fake Broker & Platform Cases

Deposits in, withdrawals blocked, and the "release fee" demand.

  • Operator profiling against known platform clusters
  • Payment-rail mapping — where your money actually went
  • Filing-ready case file
  • Second-wave screening on any new "agent"
Assess my case →
🛡️

Malware & Spyware Removal

Remote-access tools, persistence entries, rogue extensions, credential stealers.

  • Full sweep of PC, Mac and mobile
  • Entry-point reconstruction
  • Clean removal plus configuration hardening
  • Plain-English report of what was found
Assess my case →
⚖️

Chargebacks & Disputes

Card, bank transfer, PayPal and open-banking recovery routes.

  • Dispute pack assembled to the scheme's own criteria
  • Bank escalation ladder, step by step
  • Regulator complaint drafted where warranted
  • One consolidated evidence file
Assess my case →
🏢

Business & Brand Protection

Page takeovers, cloned storefronts, domain hijacks, staff credential leaks.

  • Containment before anything else
  • Admin access and domain records restored
  • Clone reported and delisted
  • Company-wide credential rotation, in order
Assess my case →
🧭

Digital Life Audit

The full sweep — every account, device and recovery route you've got.

  • Account inventory and exposure check
  • Recovery-route hardening on every critical login
  • Device baseline and backup review
  • Written action list, prioritised
Assess my case →

Not sure which one you need?

That's what the assessment is for. Describe it badly — we'll work it out.

Get assessed free
Recovery work in progress

Timelines

What a case looks like from the inside

Day 0

Assessment read, straight answer back. Usually same day.

Day 1–2

Quote agreed, evidence collected, work begins.

Day 2–21

Active recovery with written checkpoints at agreed intervals.

After

Handover, hardening, 30-day support window.

Tell us which one is yours.

Free assessment, fixed quote, no obligation.

Reviews

What clients say afterwards

Real cases, real outcomes, told the way they told us.

0Cases assessed
4.9/5Average rating
0Recovery rate
0Countries
★★★★★

"Lost my Instagram and the linked business page. Back in six days, and they found the exact device that got in. I'd been round the houses with platform support for three weeks."

Chidinma A.Houston, USA · Account recovery
★★★★★

"£14k into a fake broker. They traced it, built the file, and my bank actually moved once it was laid out properly. Worth every penny of the fee."

Marcus T.Manchester, UK · Fund tracing
★★★★★

"Two years of pop-ups and a remote tool I never agreed to. Gone in an afternoon. The report was genuinely readable, which I did not expect."

Sofia R.Madrid, Spain · Device security
★★★★★

"Our Shopify store got cloned and started taking orders. Ana had it reported and delisted fast, then walked the whole team through rotating credentials."

Daniel K.Toronto, Canada · Business protection
★★★★★

"I'd already been hit by one 'recovery agent' before these guys. Austine spotted the second attempt coming and talked me out of it. That alone paid for the case."

Priya N.Singapore · Platform case
★★★★★

"Honest quote, honest timeline, and when one route dead-ended they told me straight away instead of stringing it out. Rare."

Lukas B.Berlin, Germany · Chargeback
★★★★★

"My mother's laptop had a 'tech support' login running for months. Daniel cleaned it, hardened it, and set up a simple routine she can actually follow."

Grace O.Dublin, Ireland · Device security
★★★★★

"Wallet drained at 2am. They mapped every hop and had a pack to the exchange by the next afternoon. Recovered most of it."

Ahmed S.Dubai, UAE · Wallet tracing
★★★★★

"Email, banking and two socials were gone in one hit. They worked it in the right order so nothing else fell over. Calm, clear, fast."

Renata C.São Paulo, Brazil · Account recovery
Client case review

Your case could be the next one on this page.

Free assessment, no obligation.

FAQ

Questions we get every week

If yours isn't here, message us — you'll get a real answer, not a brochure.

Yes. You send the details, we read them, and we come back with a straight read on whether your case is worth pursuing. No card, no deposit, no obligation.

It varies by case type and complexity, so we don't run a rate card. You get one figure for your case, agreed before any work starts, and it doesn't move afterwards.

We tell you, and we tell you early. Sometimes that's on the first read, sometimes it's a fortnight in when a route closes. Either way you hear it from us before it becomes a surprise.

Device work is usually 1–4 days. Account recovery is typically 2–9 days. Fund tracing is the long one — 5 to 30 days depending on how far the money travelled and how cooperative the endpoints are.

You often can't, which is the whole problem. Send us the conversation and the details of the first scam — we'll screen the second one for free as part of the assessment.

For most cases, yes — temporarily. If we're inside an account we need access. Where it's avoidable we'll walk you through granting access without handing credentials over. Anything sensitive gets rotated once we're done.

Sometimes. If the receiving address belongs to an exchange, there's a real route. If it's a self-custody wallet with an uncooperative owner, it's harder — but the tracing still gives you something to work with.

Yes. Page takeovers, cloned storefronts, domain hijacks and staff credential leaks. Business cases get a containment-first approach because the clock matters more than the paperwork.

Whatever you've got: screenshots, transaction hashes, emails, platform tickets, the original scam conversation. Messy is fine. We'll tell you what's missing.

No. We're a recovery and security operation. We prepare filings and dispute packs to the standard a bank or regulator expects, and we'll tell you when a solicitor is genuinely the better route.

We've worked cases in 41 countries. The UK, EU, US and Canada are routine. Most other jurisdictions are workable — the constraints are usually the local bank's process, not us.

We take what the case needs and nothing else, keep it in your file, and delete on request once the support window closes. Full detail is in our privacy policy.

Handover, then hardening: two-factor on every critical login, recovery routes locked down, sessions cleared, and a written routine so the same door isn't left open. Then a 30-day support window.

Always. WhatsApp or Telegram, whichever you prefer — links are on the contact page and in the chat button bottom-right.

Still not sure?

Describe it badly. We'll work out what you're dealing with.

Ask us

Contact

Start your case assessment

Two minutes to fill in. Free to submit. You'll get a case reference straight away.

Case assessment form

Fields marked * are required. Everything else helps but isn't essential.

By submitting you agree to be contacted about your case. We don't sell your details.

Legal

Privacy Policy

Last updated: October 2026

What we collect

Only what your case needs: the details you submit in the assessment form, the contact method you choose, and any evidence you send us afterwards (screenshots, transaction hashes, platform tickets).

Why we hold it

To assess, quote and work your case, and to keep a record of what was done in case something needs revisiting inside the 30-day support window.

Where it lives

Form submissions are delivered to our case inbox by our form processor. Case files are held by the team member handling your case.

How long

Case records are kept while the file is open plus a reasonable period afterwards, then deleted on request.

Sharing

We don't sell your data. Where a case requires it, relevant details are shared with the bank, platform or exchange involved — and only the parts they need.

Cookies

This site uses no tracking cookies. A small amount of local browser storage is used to remember your case reference so the form doesn't lose your place.

Your rights

Ask us for a copy of your file, ask us to correct it, or ask us to delete it. Email digitalsafex@gmail.com.

Legal

Terms of Service

Last updated: October 2026

What we do

DigitalSafeX provides recovery, tracing, device-security and dispute-support services for individuals and businesses who have been affected by fraud or account compromise.

Assessment

Assessment is free and carries no obligation. It is an opinion based on the information you supply, not a guarantee of outcome.

Fees

Fees vary by case type and are quoted per case. The quoted figure is fixed for the scope agreed and is confirmed in writing before work begins.

Your side

You agree to supply accurate information and any evidence reasonably requested. Cases where material facts are withheld can change scope mid-file.

Outcomes

Recovery depends on third parties — banks, platforms, exchanges, counterparties. We pursue every available route; the decision-maker is usually not us.

Refunds

Covered by our Refund Policy.

Liability

Our liability is limited to the fees paid for the case in question.

Contact

digitalsafex@gmail.com · Second Floor, 145–157 St John Street, London EC1V 4PY.

Legal

Refund Policy

Last updated: October 2026

Before work starts

Change your mind before we begin active work and you're refunded in full, minus any third-party cost already incurred on your behalf.

Once work has started

Work is quoted per case, not per hour, so there's no running clock. If a case closes early because a route dead-ends, we refund the unused portion pro rata.

If we get nothing back

Where no recovery is achieved, the outcome depends on the stage reached. Device work that completes is chargeable; tracing that produces a usable file is chargeable. Full detail is confirmed in your written quote.

Scope changes

If your case turns out to be materially different from what was described, we re-quote before continuing. Nothing is added to your invoice without your agreement.

How refunds are paid

Back to the original payment method, within 5–10 working days of agreement.

Asking

Email digitalsafex@gmail.com with your case reference.