Eight steps, from case-slot activation to package delivery. Honest scope on every step.
Not sure where to begin? Start here
Your payment activated one case slot. You'll enter case details, run the trace, and generate one evidence package tied to this case.

PEGTrace records and evidences your case. It does not file with any authority, recover funds, or unmask any person.
Add identifiers (wallets, transaction hashes, URLs, phone numbers), the incident timeline, and victim information. Personal data is segregated from ledger events by design.

Only enter identifiers you personally have. PEGTrace does not solicit or store third-party personal data beyond what you provide.
Use Auto-Expand from your seed identifier. Default budget is 1000 query points; session cap is 5000. Exchange hits and enforcement matches show as terminal reasons.

Trace results are leads, not proof. A match with a labeled address does not identify a person and is not attribution.
Read the trace graph legend, terminal reasons, and cross-case matches. Ask Laura for help interpreting node labels and expansion decisions.

Cross-case matches indicate the same identifier appears in more than one case in PEGTrace. They are not verified affiliations between actors.
Click Generate to seal the package. The package embeds a watermark of your case identifiers, a canonical spec hash, and the ledger sequence for tamper-evident verification.

Refunds are not available after you click Generate. The deliverable has been produced and the ledger event is immutable.
Anyone with your package can visit /verify, paste the verify code, and confirm the artifact matches the sealed ledger entry. Share the code with recipients only.

Verification proves the file was not altered since sealing. It does not validate the underlying claims — recipients must review the content themselves.
Take it to IC3 (ic3.gov), your attorney, or your bank / exchange fraud team. PEGTrace does not file on your behalf.

PEGTrace is not a law firm, financial institution, or law-enforcement agency. It produces the evidence record you deliver.
The free wallet exposure check at /wallet-exposure reads public chain history for standing authority: a permission granted from a wallet that has never been withdrawn. It needs no account, and it never asks a wallet to connect or to sign. It covers EVM allowances, setApprovalForAll, Permit2 and EIP-7702, Solana delegates and token-account authority, and Tron allowances. On Bitcoin it issues no query, because the protocol has no delegation mechanism at all.
It reads grant and revocation history, not live contract state, so it cannot report the amount still available under an authority. It cannot see a compromised key or recovery phrase, cannot see off-chain signatures, and cannot see a permission created after it ran. A result with no finding is not a clearance — on Solana it is what a fully compromised wallet looks like. Never treat any result as a reason to fund a wallet.
Laura, the in-app assistant, can explain any screen, walk you through a step, or clarify the honest scope of a module. She will not offer legal strategy.

Laura will politely decline requests for legal advice, filing decisions, or attribution opinions and redirect you to a qualified attorney.
PEGTrace LLC·Jersey City, NJ