How we build this rating

What this rating is

It is an editorial comparison of providers a UAE enterprise could plausibly engage — or encounter through its bank, exchange or compliance stack — when it needs cryptocurrency transactions traced, attributed or documented. It is not a certification, an endorsement, or a measure of service quality on any individual engagement. We have not been a client of any company listed, and we say so rather than implying hands-on testing we have not done.

The five criteria

1. Case evidence and track record

   We look for documented, named engagements: a published case study, a court filing, a regulator's notice, a bankruptcy or liquidation appointment, or credible press coverage naming the firm. A vendor page that says “trusted by leading institutions” without a single nameable matter scores nothing here.

2. UAE or regional presence

   An office, a licensed entity, a named regional lead, or a demonstrable client base in the Emirates. A global website with a drop-down that happens to include the UAE does not count. Where a provider has no local office but does publish substantive UAE-specific research, we say exactly that rather than rounding it up to “regional presence”.

3. Regulatory alignment

   Whether the firm's work demonstrably intersects with entities regulated by VARA, the DFSA, the ADGM FSRA, the CBUAE, or the federal Capital Market Authority — through licensed clients, published compliance guidance, or tooling embedded in AML programs subject to those regimes.

4. Deliverable breadth

   Does the engagement end with a forensic report, chain-of-custody documentation and, if needed, expert testimony — or with a software output somebody else has to interpret? Both are legitimate. Confusing one for the other is the most expensive mistake a buyer makes, so we score and label it explicitly.

5. Service model transparency

   Whether a provider states plainly that it licenses software rather than taking cases, or vice versa. Firms that let a buyer assume they run investigations when they do not are marked down, regardless of how good the underlying technology is.

How the criteria combine

The criteria are weighted, not averaged. Case evidence and UAE/regional presence carry the most weight, because they are the two hardest things to fake and the two most relevant to whether a UAE buyer can actually get the work done locally. Deliverable breadth and regulatory alignment are next. Service-model transparency acts as a modifier rather than a score of its own: it cannot lift a provider up the list, but a misleading self-description can move one down it.

Where two providers are genuinely close, we break the tie in favour of the one whose evidence is verifiable by a reader in a few minutes — a named case, a public office address, a regulator's register entry — rather than the one with the larger marketing footprint.

What we deliberately do not measure

• Price. None of the firms compared publish flat rates for investigations, and a number invented for comparison purposes would be worse than no number at all.
• Success or recovery rates. There is no shared definition, no independent audit, and a strong incentive to inflate. Any provider quoting one to us is treated as a warning sign, not a data point.
• Client satisfaction. We collect no review data of our own, so we publish no ratings, stars or scores attributed to customers — and no Review or AggregateRating structured data, which would imply we do.

What disqualifies a company

A provider is excluded, regardless of how well it would otherwise score, when it advertises guaranteed or near-guaranteed fund recovery, offers no verifiable registered legal entity, or is reachable only through a messaging handle. We describe that pattern in detail in our guide to spotting a crypto recovery scam, and we do not name individual operators when doing so: naming an unverified brand either promotes it or exposes us to a dispute we have no evidence to win.

Sources

Company claims are checked against the provider's own site, the relevant regulator's site, court and insolvency records where a matter is public, and established press. Regulatory statements are checked against the regulator's own publication rather than a secondary summary — every regulator named in our UAE regulation guide links directly to its official source for that reason.

Review cycle and corrections

The ranking is reviewed on a rolling basis and the date at the top of the main page reflects the most recent review. A company that changes materially — an acquisition, a closed product line, a new or withdrawn licence, a dead website — is re-checked at that point rather than left to age. If you believe something here is wrong, write to us and we will correct it or explain why we disagree: see our editorial policy for how corrections are handled and contact the editors directly.