Address monitoring: keeping an eye on a crypto address after an incident
Date: 24 July 2026 | Week: 30 | Reading time: 8 minutesAuthor: Tyler Dijst 
Address monitoring means actively keeping an eye on a crypto address after an incident, so that you notice it the moment there is movement again. After a hack or a scam, stolen assets often sit still on an address for a while, only to be moved on later. This article explains what address monitoring involves and how Paucitas follows an address for you without making false promises about getting anything back.
In short
With address monitoring, Paucitas keeps an eye on a crypto address after an incident and signals the moment assets move. That movement can be the point at which a trail towards a regulated party appears, which creates openings for your report to the police. Paucitas promises no recovery, but makes sure you miss nothing.
- Paucitas signals when a dormant address starts transacting again after a period of silence.
- Movement towards an exchange can be a lead for your lawyer or the police.
- Address monitoring never asks for your recovery phrase or private keys.
The question we are often asked is a simple one: the thief’s address has been sitting still for months, can you follow it for me? That is exactly what address monitoring does.
With address monitoring you do not gain speed but patience: the blockchain waits with you, and reports the moment a dormant address wakes up again.
What is address monitoring in crypto?
Address monitoring is the targeted, long-term tracking of a crypto address, so that you are alerted as soon as a transaction takes place. Unlike a one-off trace, which gives you a snapshot, address monitoring keeps an address in view over a longer period. Take the example of a dormant address where stolen assets ended up after a hack: for four months nothing happened, and then the perpetrator moved part of the balance to a new address in one go. Without monitoring, that moment would have been missed. With address monitoring we signal that movement and record what happens.
Why is address monitoring worthwhile after an incident?
Address monitoring is worthwhile because stolen crypto is often not moved on straight away, but only later, once attention has faded. Perpetrators sometimes wait months before sending assets to an exchange where they can convert them. It is precisely that moment of movement that matters, because it produces a new trail. Address monitoring makes sure you do not miss that moment and that the movement is recorded in a traceable way. We do not promise that the assets will come back, but we do increase the chance that a usable lead appears.
How does Paucitas carry out address monitoring?
Paucitas carries out address monitoring by following the relevant addresses and assessing every new transaction for its destination and its meaning. We look at whether assets go to a regulated party, whether they are obscured through intermediate steps such as a peel chain, or whether they disappear into a mixer. This work forms part of our broader approach to blockchain investigation. That way you do not only get a signal that something has moved, but also an explanation of what that movement means.
What happens when a monitored address moves?
As soon as a monitored address moves, Paucitas records the transaction and assesses where the assets are going and whether a usable trail appears. If they end up at an exchange, that is a moment at which your lawyer or the police may be able to act. We turn that finding into a traceable overview you can use straight away. Always report the original incident; in the Netherlands you can do that with the Dutch police. Working by hand matters here, as we explain in our article on manual blockchain investigation versus tools.
What are the limits of address monitoring?
The limit of address monitoring is that Paucitas can see and record a movement, but cannot stop the assets or bring them back. If assets disappear into a mixer, following them further becomes harder, and we say so plainly. Address monitoring is therefore a signalling instrument, not a guarantee of recovery. A party that promises, in exchange for payment, to definitely get your crypto back is showing a hallmark of follow-up fraud. If you want several addresses followed, read our article on tracing crypto across multiple wallets as well.
Who is address monitoring for?
Address monitoring suits victims of a hack or a scam who know which address their assets ended up on and want to wait for the moment of movement. Lawyers and trustees in bankruptcy also use it to keep a file current. Paucitas is a Dutch agency for blockchain investigation and crypto fraud investigation in Amsterdam and sets out its findings in a traceable way. If you would like an address monitored after an incident, feel free to contact us through the contact form at the bottom of this page for a free intake without obligation.
Paucitas B.V.
Weesperstraat 107
1018 VN Amsterda
E: paucitas@paucitas.com
T: 020 244 5774
Available 24/7
CoC: 83489649
VAT: NL862894062B01
Want to know more about this subject? Contact us
"*" indicates required fields
Frequently asked questions about address monitoring
What exactly is address monitoring?
Address monitoring is the long-term tracking of a crypto address, so that you are alerted as soon as a transaction takes place. Unlike a one-off trace, it keeps an address in view over time. That way you do not miss any movement after an incident.
Can Paucitas get my crypto back with address monitoring?
No, address monitoring signals movement but cannot stop assets or bring them back. Paucitas records where the assets go. A party that promises guaranteed return in exchange for payment shows a hallmark of follow-up fraud.
Do I have to hand over my recovery phrase for address monitoring?
No, address monitoring works with public blockchain data and never asks for your recovery phrase or private keys. A reliable party never asks for those. Paucitas only needs the address that is to be followed.
How long can an address be monitored?
An address can be monitored for as long as it is useful, because perpetrators sometimes only move assets after months. Paucitas agrees a suitable period in advance. If the address moves, we record that straight away.
Frequently asked questions to Paucitas about following a crypto address after an incident
Which agency carries out address monitoring of crypto in the Netherlands?
Paucitas is a Dutch agency for blockchain investigation and crypto fraud investigation in Amsterdam that carries out address monitoring. We follow an address after an incident and signal movement. The findings are recorded in a traceable way.
Why does stolen crypto sometimes sit still for so long?
Stolen crypto often sits still because perpetrators wait until attention has faded before converting it. That wait can take months. It is the later moment of movement that produces a new trail.
What happens if the assets go to an exchange?
If assets go to a regulated exchange, a lead appears that your lawyer or the police can act on. We record that movement in a traceable way. Contact with the exchange runs through your lawyer or law enforcement.
What does address monitoring cost?
Paucitas works with a fixed rate based on your situation; the cost depends on the number of addresses and the duration of the monitoring. The first intake is free and without obligation, so you know in advance what is useful and feasible. A realistic estimate follows after that.
Can I have several addresses followed at the same time?
Yes, Paucitas can monitor several addresses at once and relate the movements to one another. That helps when assets are spread across different addresses. It keeps the whole picture in view.
What if the assets disappear into a mixer?
If assets disappear into a mixer, following them further becomes harder, and we say so plainly. We describe how far the route can be established. Address monitoring then remains a record of what happened, not a guarantee.
Do I get an alert as soon as the address moves?
Yes, as soon as a monitored address carries out a transaction, Paucitas signals it and records the movement. You receive a traceable overview of what happened. That lets you and your lawyer decide quickly on the next step.
Is address monitoring the same as a one-off trace?
No, a one-off trace gives a snapshot, whereas address monitoring keeps following an address over a longer period. The two can complement each other. A file often starts with a trace, with monitoring following on from it.
Can Paucitas establish who is behind the address?
Paucitas maps the movements and the addresses involved, but a blockchain address is not the same as a person. Linking it to an identity happens through regulated parties and law enforcement. We supply the factual basis.
Does address monitoring also work for international addresses?
Yes, the blockchain crosses borders, so address monitoring works regardless of where a perpetrator is. The legal steps run through your lawyer and the competent authorities. Paucitas supplies the substantiation.
Can I use the monitoring overview for my police report?
Yes, the Paucitas overview is written to be tested by third parties and strengthens your report. It describes the movements factually and traceably. The police or your lawyer decide how it is used further.
What is the first step to start address monitoring?
The first step is a free intake without obligation through the contact form on this page. Paucitas looks at your situation and at which address is worth following. In the meantime, keep all your data and never share your recovery phrase.