Legal Entity Details
TracePointVault is the name used on this website. A trading name or website brand is not, by itself, proof that a particular company is incorporated, licensed, or authorised. Before publishing this page, complete the fields below using current official records for the entity that actually contracts with clients.
| Detail | Information to publish |
|---|---|
| Website / trading name | TracePointVault |
| Full legal entity name | Global Bullion & Vault Ltd |
| Company / registration number | 11403814 |
| Registered office / business address | 18,19,20 Elwick Road Ashford Kent TN23 1EFT UNITED KINGDOM |
| Firm reference number | 923037 |
| Contact email | support@trace.pointvault.online |
Regulatory Status
TracePointVault must describe its status according to the activities it actually performs and the legal entity that performs them. The fact that a service investigates alleged fraud or traces blockchain transactions does not automatically mean it is authorised—or exempt from authorisation—under every applicable regime.
Investigative support
Describe the actual work offered, such as organising evidence, reviewing public blockchain data, or helping clients prepare reports. Do not imply that a blockchain trace proves ownership or guarantees recovery.
Handling client money
State accurately whether the business receives, holds, transfers, or controls client funds or cryptoassets. These activities may trigger separate legal and regulatory requirements.
Legal services
Do not describe the service as a law firm or imply that staff are solicitors, barristers, or regulated legal professionals unless this is true and verifiable.
Authorisation claims
If the business is authorised or registered by a regulator, identify the exact legal entity, status, permitted activities, and official register entry. If it is not, say so clearly where relevant.
Important: The AML Travel Rule requires VASPs to collect and transmit verified information about who is sending and receiving funds. This goes beyond basic customer identification — every qualifying transfer must be accompanied by required originator and beneficiary information, verified where required under the applicable legal framework.
Service Boundaries and Recovery Expectations
Fraud investigations and asset tracing can help organise information, identify potential transaction paths, and prepare material for a bank, exchange, insurer, lawyer, or law-enforcement agency. They cannot guarantee that assets remain available, identify every recipient, or compel a third party to return funds.
- 🔍Evidence-led analysisConclusions should be based on available records and clearly distinguish confirmed facts, reasonable inferences, and unverified leads.
- 🧭Lawful investigative methodsDo not access accounts, devices, systems, private records, or wallets without proper authority. Never use hacking, impersonation, threats, or unauthorised access.
- 🤝Third-party decisionsBanks, exchanges, insurers, courts, and law-enforcement bodies make their own decisions. TracePointVault cannot promise that any institution will freeze, disclose, or return assets.
- 💳Fees and costsExplain all fees, taxes, third-party charges, refund terms, and any conditions before a client commits. Do not describe an advance payment as a guaranteed route to recovery.
Identity Checks and Client Onboarding
Identity or business verification may be appropriate to prevent impersonation, protect case information, meet contractual requirements, or comply with applicable law. Do not claim that every client is legally required to complete KYC unless that requirement genuinely applies to the service and jurisdiction.
| Check | Examples | Transparency requirement |
|---|---|---|
| Identity | Government-issued ID, where justified | Explain why it is needed, how it is submitted, who can access it, and how long it is kept. |
| Address | Address evidence, where justified | Request only what is necessary and provide a secure submission route. |
| Case evidence | Bank records, exchange statements, wallet addresses, transaction hashes, correspondence | Collect relevant evidence only; allow clients to redact unrelated sensitive details where possible. |
| Business clients | Company details and authority to act | Verify the representative’s authority proportionately to the engagement. |
Never ask clients to share seed phrases, private keys, wallet passwords, one-time passcodes, or remote access to their devices. A legitimate investigator should not need a client’s wallet recovery phrase to review public blockchain transactions.
Data Protection and Privacy
TracePointVault should identify the data controller or other responsible entity, explain the purposes and lawful bases for processing, disclose relevant recipients and international transfers, and set retention periods based on actual operational needs and applicable law.
- 🔐Data minimisationCollect only information reasonably necessary for the stated purpose.
- 📄Clear privacy noticeProvide a privacy policy explaining what data is collected, why it is used, how long it is kept, and how people can exercise their rights.
- 🛡️Security statements must be accurateDescribe only controls that are actually implemented and tested. Do not claim specific encryption standards, certifications, or breach-response deadlines without verification.
- 🌍Jurisdiction-specific rightsData protection rights and regulator contacts depend on where the responsible entity and affected individuals are located.
For details, link to the website’s current Privacy Policy. If the UK GDPR or Data Protection Act 2018 applies, the official ICO website provides guidance and complaint information: ico.org.uk.
Relevant Laws and Frameworks
The laws that apply depend on the location of the business, the client, and the activities performed. The following UK laws may be relevant in appropriate circumstances; listing them does not mean every provision applies to every engagement or that TracePointVault is regulated under each law.
| Law / framework | Potential relevance | Official source |
|---|---|---|
| Proceeds of Crime Act 2002 | Money laundering offences and certain reporting or disclosure obligations where applicable. | Legislation.gov.uk |
| Money Laundering Regulations 2017 | Customer due diligence and recordkeeping for businesses within the scope of the regulations. | Legislation.gov.uk |
| Fraud Act 2006 | Defines offences relevant to many fraud allegations. | Legislation.gov.uk |
| Data Protection Act 2018 and UK GDPR | Personal data processing where the relevant territorial and material rules apply. | Legislation.gov.uk |
| Computer Misuse Act 1990 | Limits unauthorised access to computer systems. | Legislation.gov.uk |
| Financial Services and Markets Act 2000 | Relevant when assessing whether particular activities require financial-services authorisation. | Legislation.gov.uk |
| Consumer Rights Act 2015 | Consumer service and contract rights where applicable. | Legislation.gov.uk |
| UK sanctions legislation | Restrictions that may apply to dealings with designated persons or entities. | OFSI |
This list is general information, not legal advice. Obtain advice from a qualified lawyer in the relevant jurisdiction before asserting that a particular statute imposes a specific duty on the business.
Official Authorities and Reporting Resources
If you have experienced fraud, consider reporting it directly to the appropriate institution or public authority. These independent resources do not endorse TracePointVault.
Client Safeguards
- 📑Written scope and feesAsk for a written agreement explaining deliverables, limitations, costs, cancellation and refund terms before paying.
- 🔍Independent verificationVerify the legal entity, registration details, physical address, staff credentials, and any claimed regulatory status through independent official sources.
- 🔑Wallet and account safetyNever disclose seed phrases, private keys, passwords, or authentication codes. Do not install remote-access software at an investigator’s request unless independently verified and genuinely necessary.
- 🚫No guaranteed outcomeAsset tracing and reporting can support a case, but recovery depends on evidence, asset availability, jurisdiction, and decisions by third parties.
- 🧾Keep your own recordsPreserve transaction IDs, wallet addresses, messages, receipts, exchange correspondence, and reports. Keep original files where possible.
Sanctions and Anti-Money Laundering
Whether a business is legally required to perform customer due diligence, screen sanctions lists, appoint an MLRO, or submit suspicious activity reports depends on the business’s activities and the rules applicable to it. Do not state that TracePointVault performs these checks or has these appointments unless that is true and documented.
- 🇬🇧UK sanctionsCheck official UK government guidance and current sanctions information when relevant to a proposed engagement.
- 🧩Proportionate onboardingCollect information for a documented purpose and explain any verification requirement to the client.
- 📚RecordkeepingSet retention periods according to applicable law, contractual needs, and a documented data-retention policy; do not publish a generic period as a legal requirement without checking.
- ⚖️Legal reportingIf a legal reporting obligation applies, follow the appropriate procedure and obtain professional advice where necessary. Do not imply a report has been made unless it has.
Reporting and Disclosure
Information may need to be disclosed when required by law, valid court order, or other lawful process. The circumstances and the ability to notify a client depend on the relevant law and facts.
- 📄Lawful requestsRequests should be reviewed for validity, scope, and applicable obligations before information is disclosed.
- 🔒ConfidentialityClient information should be accessed and shared only for legitimate, disclosed, or legally required purposes.
- 📣Complaints and concernsClients may raise concerns using the contact details below or approach an appropriate independent authority.
Contact and Complaints
Replace the contact placeholders below with working addresses monitored by the responsible operator. Do not publish a compliance officer, MLRO, DPO, or legal department contact unless that role genuinely exists.