You Are the Target — Not a Random One.
If your crypto was stolen, your phone hijacked, or your domain seized, the first 72 hours decide what can be recovered. A New York firm — attorneys, retired FBI agents, and DOJ veterans — built for exactly this moment.
The scale you are up against.
The structure is irrelevant if the endpoint fails.
You can hold the most sophisticated structure in the world — offshore trusts, layered entities, holding companies across jurisdictions. If your phone is compromised, none of it matters. You are the endpoint of failure, and that is where attackers go first.
A team that built federal cybercrime cases from the inside.
Max Dilendorf is a New York attorney working in digital-asset and crypto law since 2017, focused specifically on cybercrime since 2019 — recovering assets, managing high-stakes incidents, and coordinating with federal agencies.
What sets the practice apart is the team behind it: retired FBI and Department of Justice cybercrime enforcement agents — people who spent careers building federal cases, coordinating with prosecutors, and deciding which investigations earned federal resources. That institutional knowledge now works for our clients.
Coordinated, cross-border, and aimed at you.
These operations target your identity, your access points, and your ability to move money. Here is what we see in practice.
Pre-Attack Surveillance
Attackers study you for weeks before they strike — your routine, your relationships, the moment your device goes dark at altitude and no one can verify your instructions.
Smart Home & Physical Security
Gates, alarms, and cameras run through apps. A hijacked phone or leaked contractor login can unlock a property remotely; one 2025 breach disabled alarms while the family was home.
Kidnapping Targeting
AI maps family relationships and tracks real-time location through compromised devices and public platforms. Demand for kidnap-and-ransom cover is rising for a reason.
Account Takeovers
Verified accounts on regulated exchanges are drained in minutes. The platform points you to its terms of service and tells you to file a police report.
Domain & Email Takeovers
With admin access, an attacker redirects your domain, intercepts business email, and impersonates your company in under ten minutes.
SIM Swaps
A carrier agent is talked into moving your number to the attacker’s device. Every SMS code and password reset then lands with them — not you.
Data & IP Theft
Sometimes used immediately for extortion, sometimes held quietly for months and deployed later. The data is a weapon, and attackers are patient.
Wire & Payment Fraud
Attacks on Stripe, PayPal, and banking portals push unauthorized transactions that clear before a single fraud alert fires. Business email compromise turns a trusted thread into a fraudulent wire.
The provider’s refusal is the beginning of the legal conversation, not the end.
Arbitration, behind closed doors
Your exchange, bank, and carrier buried binding-arbitration clauses in terms you never read. Disputes go to private arbitration — no courtroom, no press, no jury.
Their failure may be actionable
These platforms owe duties on security, authentication, and fraud detection. When they fail and that failure contributed to your loss, we pursue it — 100+ cases at AAA, JAMS, and NAM against T-Mobile, Verizon, Coinbase, and Gemini.
Insurance is not a safety net
Between 25% and 40% of cyber claims are now denied, often over a multi-factor-authentication gap. Confirm your coverage actually covers you before an incident, not after.
Timing is everything — and the window closes fast.
The first 24 to 72 hours determine whether assets can be frozen, evidence preserved, and federal investigators given a real chance to act. After that window closes, recovery becomes exponentially harder.
Most victims file with the FBI’s IC3 — the right first step. But thousands of complaints land every day, and most go nowhere: not because the cases are invalid, but because the reports are poorly structured. Our retired FBI and DOJ agents know from the inside what a compelling report looks like.
When clients come to us, the response is immediate and coordinated: evidence-preservation demands to exchanges, carriers, and hosts before logs are deleted; asset tracing and dark-web monitoring; controlled ransomware negotiation in line with FinCEN and OFAC; and arbitration against the institutions whose failures contributed to your loss.
Do this before anything happens.
Get ahead of this — or respond to it now.
Active incident? Call immediately. To get ahead of it, schedule a confidential consultation — our team is ready to move the moment you call.