OSINT Financial Intelligence & Cryptocurrency Analysis 1 — Questions and Answers
Question 1: What does a blockchain explorer primarily allow OSINT investigators to do?
- Scan dark web forums for stolen credentials
- Trace cryptocurrency transactions and wallet balances (Correct answer)
- Map network infrastructure of financial institutions
- Intercept live financial wire transfers
Correct answer: Trace cryptocurrency transactions and wallet balances
Blockchain explorers provide public access to all transaction history, wallet balances, and fund flows recorded on a blockchain, making them essential for cryptocurrency OSINT.
Question 2: Which cryptocurrency is considered the most privacy-focused due to its use of ring signatures and stealth addresses?
- Bitcoin (BTC)
- Ethereum (ETH)
- Monero (XMR) (Correct answer)
- Dogecoin (DOGE)
Correct answer: Monero (XMR)
Monero uses ring signatures, stealth addresses, and RingCT technology to obscure sender, receiver, and transaction amounts by default, making it far harder to trace than Bitcoin.
Question 3: What is 'clustering' (co-spend analysis) in Bitcoin blockchain investigation?
- Grouping mining pools by their hash rate contribution
- Organizing transactions by timestamp for timeline reconstruction
- Grouping wallet addresses believed to be controlled by the same entity (Correct answer)
- Categorizing exchanges by daily trading volume
Correct answer: Grouping wallet addresses believed to be controlled by the same entity
Co-spend clustering identifies addresses that appear as inputs in the same transaction, indicating they are controlled by a single wallet or entity.
Question 4: Which free tool is widely used by investigators for initial Bitcoin address lookups and transaction history?
- Shodan.io
- theHarvester
- Maltego CE
- Blockchain.com Explorer (Correct answer)
Correct answer: Blockchain.com Explorer
Blockchain.com Explorer is a free, widely used tool for searching Bitcoin addresses, transaction IDs, and block data without requiring an account or payment.
Question 5: What is a cryptocurrency 'mixer' (tumbler) designed to do?
- Convert cryptocurrency to multiple fiat currencies simultaneously
- Obfuscate transaction trails by pooling and redistributing funds (Correct answer)
- Speed up block confirmations through priority fee mechanisms
- Merge multiple cryptocurrency types into a single wallet address
Correct answer: Obfuscate transaction trails by pooling and redistributing funds
Mixers break the transaction trail by pooling coins from multiple users and sending different coins back, making it significantly harder for investigators to trace fund origins.
Question 6: In OSINT financial research, what does KYC (Know Your Customer) primarily enable investigators to accomplish?
- Trace anonymous dark web purchases to physical shipping addresses
- Intercept live cryptocurrency transactions as they broadcast to nodes
- Request exchange-held identity records through legal process to attribute wallets to real people (Correct answer)
- Automatically decrypt privacy coin transaction data
Correct answer: Request exchange-held identity records through legal process to attribute wallets to real people
Centralized exchanges collect KYC identity data under AML regulations, which investigators can obtain through legal subpoenas to link cryptocurrency wallet addresses to real identities.
Question 7: What is 'chain hopping' used for in cryptocurrency money laundering schemes?
- Rapidly switching between VPN servers during illegal transactions
- Moving funds sequentially across multiple different blockchains to obscure their origins (Correct answer)
- Alternating between hot and cold wallets to avoid detection thresholds
- Switching between multiple exchange accounts to stay below KYC reporting limits
Correct answer: Moving funds sequentially across multiple different blockchains to obscure their origins
Chain hopping involves converting funds across multiple blockchains (e.g., Bitcoin to Ethereum to Monero) to break transaction trails and complicate investigative tracing.
What does a blockchain explorer primarily allow OSINT investigators to do?