Course Outline
Foundations of Blockchain Technology
Decentralization, openness, and transparency as core architectural properties
Cryptographic primitives securing the chain: hashing, digital signatures, and Merkle trees
Consensus mechanisms: Proof of Work, Proof of Stake, and emerging alternatives
Network topology comprising nodes, miners, and validators in a live environment
Cryptocurrency Landscape
Bitcoin and the original ledger architecture
Ethereum and account-based smart contract execution models
Privacy-centric chains: Monero, Zcash, and their distinctions from transparent ledgers
Stablecoins, alternative blockchains (altchains), and their involvement in illicit flows
Hands-On Lab - Reading the Blockchain
Connecting to Bitcoin and Ethereum nodes for real-time data access
Navigating block explorers and querying live transactions
Analyzing raw transactions, scripts, and smart contract calls
Mapping wallet histories on transparent chains
Wallets, Keys, and Transaction Mechanics
Wallet classification: web, desktop, mobile, hardware, and custodial versus non-custodial models
Seed phrases, key derivation processes, and recovery mechanisms
UTXO versus account-based transaction models compared
Addresses, change outputs, and transaction graph analysis from an investigator's viewpoint
Mining and Trading as Investigative Context
Mining mechanics, pool structures, hash rate dynamics, and exploitation for fund laundering or generation
Centralized exchanges, decentralized exchanges (DEXs), and over-the-counter (OTC) desks
KYC and AML controls at exchanges and their potential failure points
How trading patterns can obscure underlying corruption flows
Smart Contracts and DeFi Surface
Understanding smart contracts and their observable on-chain state
DeFi primitives: swaps, lending protocols, liquidity pools, and yield farming mechanisms
Cross-chain bridges and wrapped assets utilized as obfuscation tools
Analyzing contract interactions for investigative intelligence signals
Hands-On Lab - Wallet and Transaction Forensics
Inspecting hardware and software wallets within a controlled environment
Recovering and analyzing artifacts from seized devices
Reconstructing transaction graphs across UTXO and account-based blockchains
Address Clustering and Attribution
Common-input clustering and other industry-standard heuristic techniques
Detection of change outputs and behavioral fingerprinting
Linking on-chain entities to off-chain identities via OSINT methodologies
Integrating web crawling, social media data, and leaked information sources for attribution
Dark Web, Marketplaces, and Criminal Cryptocurrency Flows
Mapping criminal economies across dark web marketplaces
Common typologies: scams, fraud, contraband trade, and sanctions evasion strategies
Tracking proceeds from initial deposit through final cash-out points
Identifying indicators of corruption-linked cryptocurrency activity
Privacy-Enhancing Tools and Counter-Forensics
Mixers, tumblers, and CoinJoin implementations
Privacy coins and the limitations of public-chain tracing capabilities
Cross-chain bridges and asset wrapping as layers of obfuscation
Evaluating what tracing methods can and cannot recover for each technique
Hands-On Lab - Tracing a Suspect Wallet
Utilizing open-source tools to navigate complex transaction graphs
Clustering wallet networks and assigning confidence levels to attribution hypotheses
Documenting findings as a structured intelligence package
Money Laundering Typologies in Crypto
Placement, layering, and integration stages adapted for digital assets
Layering techniques via decentralized exchanges, bridges, and mixers
DeFi protocols as laundering surfaces and methods for their analysis
Cash-out vectors: peer-to-peer markets, OTC desks, and prepaid instruments
Ransomware, Theft, and Scam Response
Ransomware payment patterns and immediate response protocols
Negotiation and recovery practices, including associated limits and risks
Analyzing exchange hacks, rug pulls, phishing attacks, and large-scale theft incidents
Collaborating with victims to preserve evidence without compromising the investigation
Cross-Chain Investigation
Tracing assets across Bitcoin, Ethereum, and EVM-compatible blockchains
Following funds through bridges and wrapped token transfers
Reconciling on-chain evidence with exchange records and off-chain data
Hands-On Simulation - Corruption Investigation Lab
Simulating bribery flows across multiple chains and mixers
Constructing a coherent narrative from fragmented on-chain evidence
Generating chain-of-custody documentation for digital evidence
AML Compliance and the Legal Landscape
FATF guidance, the Travel Rule, and jurisdictional variances
AML and KYC obligations for virtual asset service providers (VASPs)
Sanctions regimes, politically exposed persons (PEPs), and corruption-relevant typologies
Integrating cryptocurrency findings into existing compliance frameworks
Working with Exchanges and Cross-Border Partners
Utilizing subpoenas, Mutual Legal Assistance Treaties (MLATs), and information-sharing channels
Executing freezing orders, asset preservation measures, and seizure procedures
Coordinating cryptocurrency tracing with traditional financial investigation lines
Digital Evidence and Courtroom Readiness
Maintaining chain of custody for cryptocurrency artifacts and on-chain evidence
Presenting blockchain evidence effectively to non-technical decision-makers and juries
Addressing common challenges to digital evidence and defending investigative findings
Collaborating with expert witnesses and external technical advisors
Capstone - End-to-End Corruption Inquiry Simulation
Executing an investigation from the initial intelligence tip through to completion
Constructing wallet networks, attribution analysis, and timelines
Engaging exchanges and cross-border law enforcement partners
Producing a courtroom-ready report and delivering an oral briefing
Summary and Next Steps
Requirements
- Intermediate technical proficiency, including networking knowledge and basic Linux command-line operations
- Practical understanding of cryptographic principles such as hashing and public-key encryption
- Professional background in financial investigation, cybersecurity, digital forensics, or regulatory compliance
- Familiarity with at least one scripting language is advantageous but not mandatory
- General comprehension of financial transaction mechanisms and AML principles
Targeted Audience
Investigators and forensic analysts within anti-corruption agencies, financial crime units, and law enforcement bodies. Cybersecurity specialists supporting fraud prevention, AML initiatives, and digital evidence functions. Compliance and risk professionals operating in regulated sectors where exposure to cryptocurrency is escalating.
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 6500 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (1)
- like the blockchain introduction. For a blockchain newbie like me, its englighten me. - Like the technical workshop, also interesting
