Fraud or theft just discovered
Payments diverted, invoices altered, stock or funds missing. We secure the records, establish the sequence of events and identify who had access before evidence is lost or assets move.
URGENT INVESTIGATIONS / CRISIS RESPONSE / 24-HOUR CONTACT
Urgent investigations & crisis response
Money has gone missing, a system has been breached, someone is threatening to publish, or an allegation has landed without warning. When several things go wrong at once, the first hours decide how much can be recovered. We help you establish what is happening, preserve the evidence and decide the next step, usually within the first conversation.
Something has gone wrong. Call before you act.
Cyber incident, ransomware or extortion
Systems locked, data stolen or a demand received. We coordinate the investigation alongside your IT and legal advisers, examine how access was gained and assess what the attacker holds.
Leaks, insiders and blackmail
Confidential information has appeared where it should not, or someone is applying pressure. We investigate the source discreetly and help you respond without making the position worse.
Allegations and reputational attacks
A complaint, a police matter or a damaging story is coming. We establish the facts quickly, gather the evidence that supports your account and work with your lawyers on the response.
Several problems at once
Unusual device activity, impersonation, unwanted contact and financial irregularities can be connected. We establish whether they are, and which specialist enquiries are worth commissioning first.
What you receive
A clear account of what is known, what is not yet known and what to do in the next 24 to 72 hours, followed by a scoped investigation if one is needed. Fees are agreed before work begins.
Common questions
What people ask first.
Who do I call when fraud is discovered in my business?
Call an investigator and your solicitor before confronting anyone or changing systems. The priority is to preserve records, emails and device data, stop further payments and establish who had access. We can usually advise on immediate steps in the first conversation.
What should I do in the first hours of a cyber attack or ransomware incident?
Isolate affected systems without wiping them, keep logs, do not pay or reply to a demand before taking advice, and notify your insurer and legal advisers. We investigate how access was gained and what was taken, alongside your technical responders.
Can you help if I am being blackmailed or threatened with publication?
Yes. Keep every message, do not pay or negotiate alone, and contact us and the police. We investigate who is behind the approach and support your legal team's response.
How quickly can you start?
Usually the same day. A first call with Neel Chakrabarti is free and confidential, and scope and fees are agreed before any work begins.
Do you work outside London?
Yes. We work across the UK and internationally, with offices in London, Dubai, Hong Kong, Mumbai and Sofia.
A confidential first conversation
Discuss urgent investigations & crisis response.
Tell us what you need to establish and any relevant deadlines. We will discuss the scope, appropriate specialists and next steps.
Start a confidential conversation ↗Explore the subject