CASE STUDY: How our investigation discovered the ZondaCrypto liquidity issues, one of Europe's largest crypto scandals. [Read the case study]

Guides // 18.09.2026 // 6 min read // recoveris-team

Crypto Source of Funds report: evidence checklist

What should a crypto Source of Funds report include? An evidence checklist for bank reviews, exchange records, DeFi profits and complex asset histories.

A crypto Source of Funds report explains where digital assets originated, how they moved and grew, and which evidence supports that history. For a bank or compliance reviewer, the central question is whether the explanation can be checked against the underlying records.

A wallet balance shows what an address holds today. A useful report connects that balance to its origins: the initial acquisition, exchange activity, transfers between networks and any investment returns along the way.

Here is what to prepare and what a forensic report should make clear.

What is the difference between Source of Funds and Source of Wealth?

Source of Funds concerns the origin of assets used in a particular transaction. Source of Wealth concerns how a person accumulated their overall wealth. Kraken’s documentation guidance makes this distinction and explains why evidence may need to cover both how funds were earned and how they reached an account.

For a long-term crypto holder, the two questions can overlap. Explaining a proposed withdrawal may require reconstructing years of purchases, trades and rewards. Start by establishing exactly which assets, period and transaction the requesting institution wants reviewed.

Which crypto Source of Funds documents should you prepare?

Prepare a chronological evidence pack before commissioning an investigation. This working checklist helps identify missing records; the receiving institution may have additional requirements.

Part of the historyRecords to gatherQuestion they help answer
Initial acquisitionRelevant bank statements, purchase confirmations and documents explaining the original capitalHow were the first assets acquired?
Exchange activityAccount statements, trade exports, deposits, withdrawals and internal transfersWhat happened while the funds were held on a platform?
Personal walletsAddress inventory, networks, transaction hashes and an explanation of each wallet’s roleWhich transfers belong to the history under review?
Cross-chain movementsSending and receiving transactions, bridge details and datesHow did the assets move between networks?
Investment returnsStaking records, liquidity positions, reward claims, trade histories and related transactionsWhich activity generated the claimed gains?
Missing historyClosed-exchange correspondence, archived statements and a written list of gapsWhich parts require reconstruction or remain uncertain?

Keep original exports alongside any working spreadsheets. Record where each file came from and the period it covers. Do not silently replace missing information with estimates.

Coinbase’s evidence guidance illustrates why documents identifying the original source of assets may be requested alongside exchange or wallet records. A transaction list needs context.

What should a forensic Source of Funds report contain?

Recoveris structures its reporting around five components: an executive summary, transaction flows, profit verification, privacy-coin evidence where relevant, and an evidentiary annex. Each should help a reviewer answer a different question.

1. An executive summary that identifies the decision and the gaps

The summary should identify the assets and period examined, the principal findings and the material risk exposure. It should also distinguish supported conclusions from unresolved questions.

A useful test is whether a compliance officer can explain the findings to a colleague without opening the technical annex. Scope and limitations belong near the conclusion, where they can inform the decision.

2. Transaction flows that connect on-chain and exchange records

The report should make the route of the assets understandable across wallets, services and networks. Exchange records matter because trading and transfers within a platform may require off-chain evidence to reconstruct.

Recoveris combines transaction decoding with cross-chain correlation. Where a bridge connection cannot be decoded directly, analysts can assess timing, amounts, assets and behaviour. The report should identify when a connection rests on correlation and explain its evidential basis.

The same discipline applies to ownership: a client’s description of an address and an independently supported attribution should remain distinguishable. Recoveris’s sample report uses annotations alongside its flow diagrams to give reviewers that context.

Our Source of Funds methodology explains how cross-chain analysis and exchange-record reconciliation fit together.

3. Profit verification that explains how the balance grew

“Trading profits” is the beginning of an explanation. A reviewer needs to understand which transactions generated those profits and how the calculation connects to the assets now being assessed.

For DeFi activity, the report may reconstruct liquidity-provider returns, staking rewards, arbitrage, liquidation proceeds or airdrops. Tables and timelines should separate contributed capital, transfers and returns so that moving the same assets between wallets does not appear to create income.

For example, moving tokens into a liquidity pool and later withdrawing them creates several transactions. The useful question is how the final position reconciles with the initial contribution, rewards and relevant costs. This is an illustrative accounting problem, not a claim about a particular Recoveris case.

4. A privacy-coin evidence package where relevant

Privacy features can limit direct transaction tracing. A defensible report should identify those limits and explain what other evidence supports the account of events.

Recoveris examines pre-privacy-coin provenance, documented service interactions and corroborating off-chain records to build an alternative evidence chain where direct tracing is unavailable. The report should state which conclusions that evidence supports and what remains unresolved.

5. An evidentiary annex that lets another reviewer check the work

The annex should connect conclusions to transaction references, supporting records, calculations and the methodology used. Recoveris includes cryptographic evidence hashing and a documented chain of custody in its reporting.

These records support checking file integrity and evidence handling. The underlying documents and reasoning still need to support the conclusion. Accessible technical explanations help legal and compliance teams assess that connection.

When does a case need specialist investigation?

The need for deeper investigation depends on the gaps in the evidence and the questions the reviewer must resolve. Relevant triggers include multiple exchanges, cross-chain transfers, DeFi-derived wealth, privacy-asset exposure, or old holdings with incomplete records. Our article on where automated Source of Funds analysis falls short explores these situations in more detail.

Before scoping the work, establish:

  • Who will review the report and what decision it must support.
  • Which assets, wallets, platforms and dates fall within scope.
  • Which records are available and which are missing.
  • Whether there is a review deadline or an existing request for further evidence.

Recoveris scopes Source of Funds engagements around the chains, records and questions involved. This keeps the investigation tied to the actual review.

Can a Source of Funds report guarantee bank approval?

A report provides evidence for the receiving institution to assess. Acceptance remains subject to its requirements and review. Similarly, preparing evidence for legal proceedings does not predetermine a court’s assessment.

The practical objective is a history that can be examined: clear origins, explained movements, documented returns and visible limitations. That gives the reviewer a sounder basis for a decision.

Discuss your Source of Funds review with Recoveris

Recoveris provides expert-led Source of Funds investigations for banks, virtual asset service providers, compliance teams, legal professionals and individuals with complex digital-asset histories.

Explore Recoveris Source of Funds reports or contact our forensic team for a confidential consultation. Start with the institution’s request, the assets and networks involved, and a summary of the records available.

Read more

Crypto Asset Recovery Has a Speed Problem: There Is Nobody You Can Call
16.09.2026

Crypto Asset Recovery Has a Speed Problem: There Is Nobody You Can Call

Crypto asset recovery moves at blockchain speed. Marcin Zarakowski and Patrick Prinz explain tracing, freezing and Europe’s intelligence gap.

Why I joined Recoveris
15.09.2026

Why I joined Recoveris

Aleksander Góra explains why he joined Recoveris to scale digital asset compliance, investigations and Source of Funds services for institutions.

Recoveris at the 10th Global Conference on Criminal Finances and Cryptoassets
09.09.2026

Recoveris at the 10th Global Conference on Criminal Finances and Cryptoassets

Recoveris joins Europol, the Basel Institute and UNODC in Luxembourg for the 10th Global Conference on Criminal Finances and Cryptoassets, 15-16 September 2026.