Part 11 of our "Crypto Explained Well" series. You've seen the phrase in every crypto news story: "investigators traced the funds to…" Here's what that actually involves — it's less hacking and more accounting.
"Tracing a wallet" sounds like something out of a thriller. It's closer to following a paper trail, except the paper is public, permanent, and never lies about where money went. The skill is in reading it.
Following the Flows
At its core, tracing is following value from address to address. Funds arrive at a wallet; they leave to one or more others; you follow each. Do it repeatedly and you build a map of where money came from and where it went — upstream toward the source and downstream toward the destination. Because every transaction is on the public ledger, this is, in principle, something anyone can do with a block explorer. The difference between a curious amateur and an investigator is everything that turns a maze of addresses into a story.
The Part That Takes Expertise
- Labels — knowing that this address is a Binance deposit address, that one is a sanctioned entity, this cluster is a mixer. A bare address is meaningless; a labelled one is a lead. Building and maintaining those labels at scale is the hard, valuable part.
- Clustering — recognising that hundreds of addresses are controlled by one actor, so you trace the entity, not the individual address.
- Seeing through obfuscation — following funds through mixers, bridges, and peel chains (the techniques from our typologies series) using timing, amounts, and patterns.
- Finding the edges — the real prize is where the money touches the regulated world: a KYC'd exchange deposit that links the pseudonym to a name. That's where a trace becomes an identification.
Tracing turns "an address" into "a person and a story"
The magic isn't breaking encryption — nothing is decrypted. It's patient, structured reading of a public record, supercharged by a library of labels that says who owns what. That's why crypto crime gets solved years later: the trail never disappears, the labels only improve, and an address that looked anonymous today can be connected to a name tomorrow. The ledger remembers everything; tracing is the craft of reading its memory.
Who Does This, and Why
Exchanges trace to screen incoming funds, investigators to recover stolen assets, tax authorities and divorce lawyers to find hidden holdings, and compliance teams to file the reports in part 6 of our Tools series. The capability is the same; only the goal differs. Underneath all of them is one library of address labels — the bigger and better-maintained it is, the more a trace can see.
Next in the series — the close: How a Prosecutor Seizes Bitcoin: The Real Workflow.
Follow the money — trace any wallet across 80+ chains
Screen wallets, monitor entities, and generate compliance reports with 1B+ labeled addresses and 305+ data sources.
See Investigation Solutions