DR Crypto Reconnaissance: Recover, Secure and Monitor Seized Cryptocurrency

An application for Windows, Mac, and Linux that takes whatever key material an investigation produced (a seed phrase of any kind, loose private keys, a decade-old wallet.dat) and finds, secures and tracks every asset it controls.

DR Crypto Reconnaissance is a law enforcement bitcoin wallet and multi-chain crypto reconnaissance tool for seized cryptocurrency recovery, built for digital forensics units, crypto asset forfeiture teams, and prosecutors’ technical staff.

Why it matters to an investigation

Seized key material arrives in every format and era. Consumer wallets import only their own formats. They miss funds sitting on non-default derivation paths. They also leak every lookup to public block explorers, where a subject monitoring their own addresses can see it. DR Crypto Reconnaissance imports everything and scans every known derivation path. It never talks to a public explorer: lookups go to datarecovery.com infrastructure, reserved for law enforcement, or to a server you choose.

What it will do at launch

1. Import anything

• Any seed phrase, from any wallet: BIP39 (12 to 24 words, with optional passphrase), Solana, Electrum, and every other known seed phrase technology.
• Private keys in WIF or raw hex. The coin is detected from the key itself; ambiguous formats import every candidate chain.
• Bitcoin Core wallet.dat recovery: coin auto-detected from the file’s own address book, address discovery without the wallet password, 2014-era uncompressed keys handled correctly.
• HD master keys: an xprv or hdseed alone (no per-address keys) recovers funds on addresses derived after a backup was taken, with examiner-settable scan depth and derivation paths verified against Bitcoin, Litecoin and Dogecoin Core source code.
• Watch-only addresses: track any address with no keys at all.

2. Find funds other wallets miss

• One seed scanned across every known derivation path, not only the standard ones (BIP44 legacy, BIP49 nested segwit, BIP84 native segwit, BIP86 taproot). The path list is compiled from many sources, wallet by wallet, and is the same list behind seedcheck.datarecovery.com, so funds placed on a non-default path by the subject’s software are still found.
• Chains: Bitcoin, Litecoin, Bitcoin Cash, Dogecoin, Dash, Zcash, Ethereum, plus every token those chains support. Token holdings are discovered automatically from the chain itself, whatever the token and however many there are; there is no fixed token list to fall behind.
• Only funded addresses are imported from large scans; the examiner is never buried in empty addresses.

3. Monitor live, secure instantly, act deliberately

• Incoming transactions appear the moment they hit the network, red while unconfirmed and green once confirmed, on balances and per-asset transaction history alike.
• Capture and secure funds as soon as they land: set a custody address and the program auto-sends anything that arrives on a watched address to it the moment it appears, before a subject can move it.
• Watch-only balances tracked separately from spendable funds: nothing custodial during an active investigation.
• Consolidation to a custody address with an explicit fee picker, confirmation-time estimates, and a confirmation dialog listing the exact sources; recipient addresses checksum-validated before anything is signed, fee and gas ceilings enforced in code.

4. Evidence-conscious by design

• Every address the wallet issues is used once, ever; change always goes to a fresh address.
• All key material encrypted at rest (scrypt + AES-256-GCM); the seed never touches disk unencrypted; master keys masked on screen and cleared after import.
• A visible log records every network request the app makes, useful when the process must be explained later.
• Lookups never go to public explorers. They go to datarecovery.com’s own blockchain infrastructure, which is reserved for law enforcement agencies, or to a server of your own choosing, including a local node for fully self-contained examination networks.

5. Built and supported by a recovery lab

• From Datarecovery.com, Inc., the lab agencies already send media to. When there is no key to import yet (damaged drives, lost passwords, partial seeds), our recovery service produces the key material and the same tool takes it from there.
• Ships as a digitally signed executable for Windows, Mac, and Linux, and one license covers all three; single file, no installation. iPhone and Android versions to follow.

Launching soon

Agency inquiries and early-access requests: call 800.237.4200 or email help@datarecovery.com with DR Crypto Reconnaissance in the subject line.