Wallet intelligence
Flagged clusters across chains. Attribution ties addresses to syndicates; actionability scores rank freeze and seize candidates.
| CLUSTER | ADDRESS | CHAIN | VALUE | ATTRIBUTION | SCORE | STATUS |
|---|
Syndicate graph
Organized groups behind the wallets: structure, footprint, and the operations they run. Cross-case attribution links them.
| DESIGNATION | MODEL | FOOTPRINT | LINKED WALLETS | EST. TAKE / MO | STATUS |
|---|
Physical operations
Compounds and call centers where forced-labor fraud runs at industrial scale. Region-level tracking from public reporting.
| REGION | SITE | TYPE | EST. HEADCOUNT | PRIMARY SCHEME | STATUS |
|---|
Digital operations
The infrastructure layer: phishing fleets, drainer deployments, mule networks, laundering rails.
| OPERATION | VECTOR | INFRA | VICTIM REACH | TREND | STATUS |
|---|
Scam-as-a-service tracker
The vendor economy that industrializes fraud: kits, services, and desks sold to operators. Track the suppliers, collapse the market.
| VENDOR CODENAME | CATEGORY | OFFERING | OBSERVED PRICE | LINKED GROUPS | STATUS |
|---|
The Nexus Coalition
Contribution buys access. Members feed the graph and get actionable views back: attribution, freeze targets, program rails.
| TIER | WHO | CONTRIBUTES | RECEIVES |
|---|---|---|---|
| Internal | Kinetic products | Every case, scan, and matter | FULL GRAPH |
| Coalition | Investigators, firms, exchanges | Case data, indicators, wallets | ACTIONABLE VIEWS |
| Program | Government, institutional | Mandates, jurisdiction | IDENTIFY · FREEZE · SEIZE |
The graph is never sold raw. Products and applications are collection mechanisms. Programs are the monetization: a Dragonfly-shaped program is the SKU.