Active Incident? 24/7 Response →
SleuthX

New service

Romance Scam and Catfish Investigation

Forensic investigation for romance scam and catfish victims. Document the deception, trace funds, prepare evidence for police and counsel.

What this service does

We investigate who is really behind the relationship and document what happened:

If you have not sent money yet, we verify an online partner's real identity before you meet or pay.

An honest word on getting money back.Most online "recovery" promises are fiction — and the firms that guarantee it are often a second scam aimed at people already hurt once.

What forensics can actually do is document the loss and the persona well enough that banks, card networks, and law enforcement can act, and identify crypto off-ramps for law-enforcement seizure. See our guide to romance-scam recovery for what is and is not realistic.

Engagements are confidential and structured to begin within 48 hours of the consultation.

Some service tracks are offered at a fixed fee; complex investigations are billed hourlywith a clear scope, milestone updates, and a cap agreed up front.

Quinn (Founder and CEO) oversees every engagement and reviews every case before findings leave the practice; the practitioner team executes the technical work under her methodology.

What this means for you

How an engagement begins

  1. Confidential consultation. NDA-protected. 30-60 minutes. Direct conversation, no sales process.
  2. Scoped engagement. Written proposal with defined deliverables and pricing — fixed fee where it applies, hourly with milestone caps for open-ended investigations.
  3. Investigation and findings. Court-admissible standards. Written report you can act on.

If your case involved a crypto investment platform

Romance scams that escalate into crypto deposits on a fake trading platform are a distinct operational pattern called pig butchering (sha zhu pan).

The forensic methodology integrates the romance-scam communication forensics documented on this page with the wallet attribution, transaction-hash documentation, and IRS theft-loss evidence package required for the crypto-loss layer.

If you sent crypto, the pig butchering page is the more specific fit for your case. Standalone crypto scam recovery covers fake-exchange and investment-token losses without the romance pretext, and when the target is an older family member the elder fraud investigation track applies — romance-to-elder overlap is common in both directions.

Why this work matters

Quinn holds 9 active certifications across GIAC — methodology trusted by Fortune 50 enterprises,defense contractors, and the attorneys who refer to us. This is one track of our private digital forensics for individuals and families.

Meet Your Practitioner

Quinnlan Varcoe

Founder & CEO

GIAC-certified · 9 industry certifications

With operational experience across Fortune 50 security programs and the defense industrial base, Quinnlan founded SleuthX in 2022 to provide clients with the caliber of expertise typically reserved for the largest enterprises. Her work in threat intelligence and digital forensics has earned the trust of 26,000+ cybersecurity professionals who follow her analysis.

“26,000 professionals follow my work because I say what others won't — and I can back it up technically.”

Fortune 50 BackgroundDefense IndustryThreat IntelligenceDigital PrivacyIncident Response
Quinnlan Varcoe, Founder & CEO

How We Work

A confidential, structured engagement.

01

Confidential Consultation

A direct conversation with Quinn, the founder and CEO who oversees every engagement. NDA-protected. No sales process.

02

Scoped Engagement

A clear written proposal with defined deliverables, timeline, and pricing. No hidden costs.

03

Investigation and Findings

Forensic work conducted to court-admissible standards, with regular communication and a written summary you can act on.

Certified Expertise

GIAC

Frequently asked about romance scam investigation

What does a romance scam investigation look like?
Forensic analysis of the communications you have (chat logs, photos, voice notes, video calls, payment instructions), digital identity tracing of the persona (reverse-image analysis on photos, account-creation timeline, infrastructure links across the persona's accounts and others, voice/text linguistic patterns), wallet and payment-rail tracing where funds were sent (cryptocurrency tracing, wire-transfer documentation, gift-card chain reconstruction), and a written report formatted for bank fraud disputes, IC3 / FBI filings, and civil litigation. The investigation does not pursue the scammer to recover money directly — but it produces the documentation that makes recovery and prosecution materially harder for the scammer to evade.
Can you identify the actual person behind the scam?
Sometimes — depending on operational security on the scammer's side. Many romance-scam operations are mid-tier OPSEC (recycled photos, infrastructure reuse, predictable language patterns), and these can be traced to a country and often to an organized criminal group. Identification of a specific named individual typically requires either law-enforcement subpoena power or international cooperation, which is outside what a private investigation can deliver — but our findings are often the basis on which law enforcement opens or extends a case.
Can you help recover funds I sent?
Indirectly. The investigation produces a documented evidentiary record that materially improves your odds with: bank fraud disputes (especially under Reg E for unauthorized transfers), credit-card chargebacks where the scam involved card payments, civil claims if you can identify a defendant, and insurance claims where applicable. Cryptocurrency funds are usually unrecoverable but tracing can identify exchange off-ramps for law-enforcement seizure pursuit. We do not directly recover funds; we produce the case file that institutions and counsel use to pursue recovery.
How is this different from a chargeback dispute?
A chargeback dispute is your bank's process for reversing a single transaction. A forensic investigation is the broader case file — what happened, how, by whom (to the extent identifiable), what artifacts support the claim, and what other recourse exists beyond the chargeback. A bank's chargeback team typically has 60-90 seconds of attention per claim; a forensic investigation gives them a documented record that elevates the dispute beyond a templated rejection.
How much does a romance scam investigation cost?
You have two ways to work with us. Run the investigation yourself in the SleuthX tool for $995 once — lifetime access, with usage metered from a prepaid balance you top up anytime. Or have our team do it for you in a done-for-you device package: $3,000 for one device, $7,000 for three, $12,000 for five, each including the $995 lifetime license. Multi-persona or longstanding scams beyond a package (multiple victims, complex crypto tracing, organized-crime-attached patterns) are scoped per case at a flat $400/hour, with no multipliers. Sliding-scale pricing for elder-fraud survivors and clients with significant financial loss is available — discussed on the first call without paperwork drama.
I'm embarrassed about how this happened. Will I be judged?
No. Romance scams are professional operations run by experienced criminals with scripted social-engineering frameworks. The shame is the scammer's, not yours, and the practice doesn't moralize. The first call is a clinical conversation about facts: what happened, when, how. Confidentiality is real (NDA-protected), and we don't share case details with anyone outside the engagement without your written consent.
Quinnlan Varcoe, Founder & CEO
Quinnlan Varcoe
GIAC-certified · Founder & CEO

Schedule Your Session

Schedule a confidential consultation

A direct conversation with Quinn, the founder and CEO who oversees every engagement. NDA-protected. No sales process. Most engagements begin within 48 hours.

Free, confidential · NDA-protected · no obligation.

  1. 1. Book a 15-minute call — we scope your situation, no charge.
  2. 2. You get a written scope — deliverables, timeline, and price — before any work begins.
  3. 3. Approve it and we start; most engagements begin within 48 hours.

Transparent pricing

Trusted by partners across the practice

DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management
DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management