📚 Training Materials 📱 Mobile Version
B.A.T.S. Framework Education Center

The Key Benefit of B.A.T.S.

Standardized Documentation = Reproducible Results

Any investigator following the B.A.T.S. methodology will arrive at the same conclusions, creating legally defensible evidence that withstands scrutiny and enables successful asset forfeiture.

What is B.A.T.S.?

The Block Audit Tracing Standard (B.A.T.S.) is a revolutionary framework for cryptocurrency investigation that transforms blockchain analysis from an art into a science. It provides the mathematical certainty required for successful asset forfeiture cases.

Core Principles:

  • Mathematical Precision - Every dollar accounted for
  • Standardized Process - Consistent methodology across all cases
  • Legal Compliance - Meets court requirements for asset forfeiture
  • Scope Control - Prevents investigation creep
  • Complete Documentation - Full audit trail for legal review

Remember: B.A.T.S. ensures that two different investigators analyzing the same case will reach identical conclusions, providing the reproducibility that courts demand.

The B.A.T.S. Methodology

Step 1: Establish Root Total

Document all victim losses to create your mathematical baseline. This becomes your Adjusted Root Total (ART) after any justified write-offs.

Example: Victim 1 lost $10,000 + Victim 2 lost $5,000 = $15,000 Root Total

Step 2: Apply V-T-H Notation

Assign unique identifiers to every transaction maintaining clear lineage from victims.

V1-T1 V1-T1-H1 V1-T1-H2 Terminal Wallet

Step 3: Classify Wallets by Color

Assign permanent colors based on wallet function, not ownership assumptions.

Step 4: Validate at Each Hop

Ensure all thread totals at each hop level sum to your ART. This mathematical validation proves completeness.

Critical: If totals don't match, you've missed transactions!

Step 5: Document Terminal Points

Identify where funds reach exchanges (PURPLE) or cold storage (BLUE) for legal process or monitoring.

Understanding V-T-H Notation

The Formula: V[#]-T[#]-H[#]

  • V = Victim number (V1, V2, V3...)
  • T = Transaction number (T1, T2, T3...)
  • H = Hop count from victim (H1, H2, H3...)

Practical Examples:

Notation Meaning
V1-T1 First victim's first transaction (at RED wallet)
V1-T1-H1 One hop away from victim's transaction
V2-T3-H5 Second victim's third transaction, five hops away

Why This Matters: V-T-H notation creates an unambiguous audit trail that any investigator can follow, ensuring reproducible results.

Wallet Color Classification

RED Wallets

Definition: Victim-facing wallets

Rule: First wallet to receive victim funds

Example: Scammer's receiving address

YELLOW Wallets

Definition: Convergence/hub wallets

Rule: Where multiple victim traces meet

Example: Criminal consolidation wallet

PURPLE Wallets

Definition: Exchange deposit addresses

Rule: Known VASP/exchange wallets

Example: Binance deposit address

BLUE Wallets

Definition: Cold storage wallets

Rule: Long-term holding addresses

Example: Criminal savings wallet

BLACK Wallets

Definition: Standard intermediary

Rule: Default for unclassified

Example: Pass-through addresses

Remember

Colors are permanent!

Once assigned, never change

Based on function, not ownership

The Golden Thread Principle

Definition

The unbroken connection between a victim's original funds and any assets ultimately seized by law enforcement. This principle is essential for proving in court that specific seized cryptocurrency originated from criminal activity.

The PIFO Method (Proceeds In First Out)

When traced funds enter a wallet, the very next outbound transaction contains those funds. Apply this strictly chronologically to maintain the golden thread through commingled funds.

Example:
Wallet has 5 BTC existing balance
Victim sends 2 BTC (our traced funds)
Next transaction out is 3 BTC
We trace 2 BTC of that 3 BTC transaction

Breaking the Thread

The golden thread breaks if you cannot mathematically prove the connection. Common breaks: mixers, privacy coins, or poor documentation. Document these as write-offs.

Quick Reference Guide

B.A.T.S. Checklist

  • ☐ Document all victim transactions
  • ☐ Calculate and confirm root total
  • ☐ Apply V-T-H notation consistently
  • ☐ Classify wallets by color (permanent!)
  • ☐ Validate totals at each hop level
  • ☐ Document all write-offs with justification
  • ☐ Identify terminal wallets (PURPLE/BLUE)
  • ☐ Export comprehensive report

Key Terms

ART
Adjusted Root Total (after write-offs)
Thread Total
Amount being traced at specific hop
Convergence
Multiple traces meeting at one wallet
Write-off
Documented abandonment of trace
Terminal Wallet
Exchange or cold storage endpoint

Always Remember

Standardized Process = Reproducible Results = Successful Forfeiture

Ready to Begin?

Now that you understand the B.A.T.S. methodology, start your investigation with confidence!

Case Information & Management

Investigation Details

This will be included in the final report
⚠️ Important: Once chosen, maintain the same method throughout your investigation for consistency.

Investigation Progress

Step 2: Victim Transactions

Document All Victim Transactions

Enter ALL transactions where victims sent assets to scammer-controlled wallets. This creates the foundation for your entire investigation.

Required Information:
  • Transaction hash
  • Amount & currency
  • Date & time (UTC)
  • Receiving (RED) wallet
Pro Tips:
  • Use API lookup to auto-fill
  • Paste multiple hashes at once
  • V-T notation auto-assigns
  • Save regularly (.bats file)
Wallet Indexes

About the Universal Wallet Index

This index catalogs all wallets involved in your investigation with their permanent classifications. Use this to:

  • Maintain consistent wallet identification across your investigation
  • Document wallet classifications per BATP color system
  • Add notes about wallet behavior, exchange identifications, or other findings
  • Provide technical appendix for legal proceedings

Ready to Begin Tracing?

Now that you understand your wallet classifications, start documenting the cryptocurrency trace through hops.

Step 4: Trace Documentation

Investigation Dashboard

Total Victims
0
Total Hops
0
Active Threads
0
Terminal Wallets
0

Adjusted Root Total (ART) by Currency

Quick Navigation

Visualize Your Investigation

Create a visual flow diagram of your cryptocurrency trace to better understand fund movement patterns.

Visual Flow Diagram

Complete Your Investigation

Review your investigation summary and export your final B.A.T.S. report for legal proceedings.

Step 6: Investigation Summary
Export Options

Investigation Complete!

Congratulations! You have successfully completed your B.A.T.S. cryptocurrency investigation. Your report is ready for legal proceedings and regulatory compliance.

Remember to save your investigation file regularly and keep backup copies of all exported reports.