Official Wallsec emails only ever come from an @wallsec.co.uk address.

Tracing

Clustering

In one sentence

Grouping addresses likely under common control, using patterns such as shared spending or funding.

Common-input analysis, change identification and gas sponsorship all suggest that separate addresses belong to one operator. Applied carefully this collapses a sprawling graph into a handful of actors.

Applied carelessly — across coinjoins, batched exchange payouts or shared infrastructure — it produces confident nonsense. Good practice records the reasoning behind each grouping rather than presenting it as fact.

Trying to work out what happened to your funds?

The first review is free and we set out scope and price in writing before any paid work.

Request a case review