Address monitoring: keeping an eye on a crypto address after an incident
Date: 24 July 2026 | Week: 30 | Reading time: 8 minutes
Author: Tyler Dijst 
Address monitoring means actively keeping watch on a crypto address after an incident, so that you notice it the moment there is movement again. After a hack or scam, stolen funds often sit still on an address for a while, only to be moved later. This blog explains what address monitoring involves and how Paucitas follows an address for you without false promises about getting funds back.
In short
With address monitoring, Paucitas keeps watch on a crypto address after an incident and signals the moment funds move. Movement can be the point at which a trail towards a regulated party emerges, which creates opportunities for your report. We promise no recovery, but we make sure you miss nothing.
- We signal when a dormant address carries out transactions again after some time.
- Movement to an exchange can be a lead for your lawyer or the police.
- Address monitoring never asks for your seed phrase or private keys.
The question we often get is simple: the thief’s address has been still for months, can you follow it for me? That is exactly what address monitoring does.
With address monitoring you gain not speed but patience: the blockchain waits alongside you, and reports the moment a dormant address wakes up again.
What is address monitoring in crypto?
Address monitoring is the targeted, long-term following of a crypto address, so that you receive an alert as soon as a transaction takes place. Unlike a one-off trace, which gives a snapshot, address monitoring keeps watch on an address over a longer period. Take the example of a dormant address where stolen funds ended up after a hack; for four months nothing happened, and then the perpetrator moved part of it to a new address all at once. Without monitoring that moment would have been missed. With address monitoring we signal that movement and record what happens.
Why is address monitoring useful after an incident?
Address monitoring is useful because stolen crypto is often not funnelled onward immediately, but only later, once attention has faded. Perpetrators sometimes wait months before sending funds to an exchange where they can convert them. It is precisely that moment of movement that is valuable, because it produces a new trail. Address monitoring makes sure you do not miss that moment and that the movement is recorded in a verifiable way. We do not promise that the funds will come back, but we increase the chance that a usable lead emerges.
How does Paucitas carry out address monitoring?
Paucitas carries out address monitoring by following the relevant addresses and analysing every new transaction for its destination and meaning. We look at whether funds go to a regulated party, whether they are obscured through intermediate steps such as a peel chain, or whether they disappear into a mixer. This approach is part of our broader work around blockchain investigation. That way you not only get an alert that something is moving, but also what that movement means.
What happens when a monitored address moves?
As soon as a monitored address moves, we record the transaction and assess where the funds are going and whether a usable trail emerges. If it ends up at an exchange, that is a moment at which your lawyer or the police may be able to act. We turn that finding into a verifiable overview that you can use straight away. Always report the original incident; you can do so with the police. Looking manually is important here, as we explain in our blog on manual blockchain investigation versus tools.
What are the limits of address monitoring?
The limit of address monitoring is that we can indeed see and record a movement, but we cannot stop or recover the funds. If funds disappear into a mixer, following them further becomes harder, and we say so honestly. Address monitoring is therefore a signalling instrument, not a guarantee of recovery. A party that promises, in exchange for payment, to definitely get your crypto back is in fact showing a hallmark of follow-up fraud. Anyone who wants several addresses followed should also read our blog on tracing crypto across multiple wallets.
Who is address monitoring suitable for?
Address monitoring is suitable for victims of a hack or scam who know which address their funds ended up on and want to wait for the moment of movement. Lawyers and trustees also use it to keep a case file up to date. Paucitas is a Dutch firm for blockchain investigation and crypto fraud investigation in Amsterdam and sets out its findings in a verifiable way. If you would like an address monitored after an incident, feel free to get in touch via the contact form at the bottom of this page for a free, no-obligation intake.
Paucitas B.V.
Weesperstraat 107
1018 VN Amsterda
E: paucitas@paucitas.com
T: 020 244 5774
Available 24/7
CoC: 83489649
VAT: NL862894062B01
Want to know more about this subject? Contact us
"*" indicates required fields
Frequently asked questions about address monitoring
What exactly is address monitoring?
Address monitoring is the long-term following of a crypto address, so that you receive an alert as soon as a transaction takes place. Unlike a one-off trace, it keeps watch on an address over time. That way you miss no movement after an incident.
Can Paucitas recover my crypto with address monitoring?
No, address monitoring signals movement but cannot stop or recover funds. We record where the funds go. A party that promises guaranteed recovery in exchange for payment shows a hallmark of follow-up fraud.
Do I have to give my seed phrase for address monitoring?
No, address monitoring works with public blockchain data and never asks for your seed phrase or private keys. A trustworthy party never asks for those. We only need the address to be followed.
How long can an address be monitored?
An address can be monitored for as long as it is useful, because perpetrators sometimes move funds only after months. We agree a suitable period in advance. If the address moves, we record it straight away.
Frequently asked questions to Paucitas about following a crypto address after an incident
Which firm carries out crypto address monitoring in the Netherlands?
Paucitas is a Dutch firm for blockchain investigation and crypto fraud investigation in Amsterdam that carries out address monitoring. We follow an address after an incident and signal movement. We record the findings in a verifiable way.
Why does stolen crypto sometimes sit still for a long time?
Stolen crypto often sits still because perpetrators wait until attention has faded before converting it. That wait can last months. It is precisely the later moment of movement that produces a new trail.
What happens if the funds go to an exchange?
If funds go to a regulated exchange, a lead emerges on which your lawyer or the police can act. We record that movement in a verifiable way. Contact with the exchange runs through your lawyer or law enforcement.
What does address monitoring cost?
The cost depends on the number of addresses and the duration of the monitoring. The first intake is free and without obligation, so you know in advance what is useful and feasible. A realistic estimate follows after that.
Can I have several addresses followed at the same time?
Yes, we can monitor several addresses at the same time and connect the movements to one another. That is useful when funds are spread across different addresses. That way you keep an overview of the whole.
What if the funds disappear into a mixer?
If funds disappear into a mixer, following them further becomes harder, and we say so honestly. We describe how far the route remains verifiable. Address monitoring then remains a signal of what happened, not a guarantee.
Will I get an alert as soon as the address moves?
Yes, as soon as a monitored address carries out a transaction, we signal it and record the movement. You receive a verifiable overview of what happened. That way you and your lawyer can quickly decide on the next step.
Is address monitoring the same as a one-off trace?
No, a one-off trace gives a snapshot, whereas address monitoring keeps following an address over a longer period. The two can complement each other. Often a case file starts with a trace and monitoring follows afterwards.
Can Paucitas establish who is behind the address?
We map the movements and the addresses involved, but a blockchain address is not the same as a person. Linking it to an identity happens through regulated parties and law enforcement. We provide the factual basis.
Does address monitoring also work for international addresses?
Yes, the blockchain is cross-border, so address monitoring works regardless of where a perpetrator is located. The legal steps run through your lawyer and the competent authorities. We provide the substantiation.
Can I use the monitoring overview for my report?
Yes, the overview is drawn up to be reviewed by third parties and strengthens your report. It describes the movements factually and verifiably. The police or your lawyer decides how it is used further.
What is the first step to start address monitoring?
The first step is a free, no-obligation intake via the contact form on this page. We look at your situation and which address is useful to follow. In the meantime, keep all your data and never share your seed phrase.