A Proposed Bitcoin Blockchain Investigation Methodology: Based on a Case Study Approach
Abstract:
Criminal investigations involving cryptocurrencies are still premature with no standard investigative process to follow. This paper proposes a high-level methodology using open-source and analysed data to perform such investigations. It focuses on situations where Bitcoin is involved, but where other similar blockchains are concerned, the technical investigator should apply this methodology only after careful consideration. A case study approach is used to illustrate a cryptocurrency scamming platform, a giveaway scam, and divorce fraud. In all the cases, one needs to follow or trace the funds on the blockchain, referred to as on-chain analysis. The end goal of on-chain analysis is to find a destination address linked to identifiable information obtained from open-source data platforms—such as websites, social media, or a cryptocurrency exchange. Law enforcement can then be engaged to instruct the exchange to reveal all personal and transactional information linked to the address through a subpoena. A successful investigation will result in criminal prosecution and a potential recovery of funds. To maintain familiar investigation processes, the researchers looked at traditional (or non-technical) as well as technical investigation techniques.
AUTHORS
Council for Scientific and Industrial Research
Pretoria, South Africa
Johnny Botha is currently working on a PhD in Computer Science at the University of Western Cape. His topic is “A process for Blockchain Crime Investigations Based on Open-Source Intelligence”. He is a principal researcher and project manager at the CSIR. Botha holds a Master’s degree in Information Technology from the University of South Africa (UNISA), an NDip and BTech degree in Computer Systems Engineering from the Tswane University of Technology (TUT)
Council for Scientific and Industrial Research
Pretoria, South Africa
Kreaan Singh is the project manager for the Distributed Ledger Technology Research Group at the CSIR, South Africa's premier research and development organisation. He is also the founder of CoinEd, an education provider integrating cryptocurrency and blockchain curriculums into schools worldwide. With over 10 years of experience in the industry, Singh’s expertise spans business creation and development, research, education, criminal forensics, and mentorship. Singh has spoken at notable conferences and was invited to COP23 to investigate the use of blockchains in fighting climate change. His current work focuses on addressing economic and regulatory policy, helping to shape the future of the blockchain industry in South Africa.
University of Western Cape and CAIR
Cape Town, South Africa
Louise Leenen is an Associate Professor in the Computer Science Department at the University of the Western Cape (UWC) in South Africa. Louise completed her PhD in Artificial Intelligence (AI) at the University of Wollongong in Australia. Her research focus areas are AI applications in cybersecurity, and problem formulation and modelling. She joined UWC in 2019 after working as a Principal Researcher at the CSIR in the Cyber Defence Research Group. Leenen is a member of the Centre for Artificial Intelligence (CAIR) and leads the research group on AI and Cybersecurity. She regularly serves in various positions on committees of national and international bodies, such as the NRF, BRICS, and IFIP. She has authored or co-authored several journal publications, book chapters, and conference papers.
Published In
Journal of Information Warfare
The definitive publication for the best and latest research and analysis on information warfare, information operations, and cyber crime. Available in traditional hard copy or online.
Quick Links
Archive
