Trace summary — funds that left decfin.io:

• Claimant-to-platform deposit transactions on the deposit chain used by DECFIN.
• Operator-controlled forwarding wallets where deposits consolidate ahead of laundering or off-ramping.
• Cross-chain bridge events to chains with deeper exchange liquidity.
• Privacy-service interactions, where present in the trail.
• Off-ramp wallet — the named centralised-exchange endpoint.

The annotation continues — off-ramp endpoint:

• DECFIN off-ramps consistently to centralised exchanges — Coinbase, Kraken, and Gemini appear less often than the offshore venues; the casefile names the actual endpoint.
• The DECFIN off-ramp address is matched to known compliance feeds — the Professor’s standing dataset plus chain-analytics references.
• Compliance leverage is applied at the named counterparty for DECFIN — the packet meets the off-ramp’s published compliance standard.
• When the DECFIN off-ramp does not respond, escalation runs through IC3 (for US claimants), state AG, and (above a dollar threshold) civil-discovery overlay.

Recovery pathway — how this casefile moves toward filing:

1. Casefile triage on DECFIN — the submission is read; a written assessment is delivered.
2. Forensic trace on DECFIN — every hop in the deposit pathway is captured and hashed.
3. Off-ramp identification — the DECFIN endpoint is named.
4. Recovery filing on DECFIN — packet delivered to IC3, state AG, off-ramp compliance, and civil discovery as applicable.
5. Continuing review of DECFIN — the Professor follows the casefile until next-step documentation exists.

What we read in a DECFIN casefile:

• Chains tracked on DECFIN — Bitcoin and Ethereum at the deposit side; Tron USDT-TRC20 and BSC at the consolidation side; bridges crossed where the operator chases liquidity.
• Off-ramps tracked on DECFIN — named exchange counterparties with public compliance contacts.
• Filings supported on DECFIN — IC3, state AG, off-ramp compliance, civil discovery — selected by the dollar value and the off-ramp’s responsiveness.

Recovery scammers do these things; the Professor never does:

• DECFIN policy — seed phrases are never requested.
• DECFIN policy — remote-access logins are never requested.
• DECFIN policy — no upfront cash retainer to scope.
• DECFIN policy — no guaranteed-recovery language. None.
• DECFIN policy — no unsolicited calls. The Professor responds in writing only.