Crypto investigator jobs UK: how to get into blockchain threat analysis

7 min read

Crypto investigator and threat analyst roles are open in the UK. Here's what the work involves, the skills employers want and how to get in.

By Julie Fixter, Client Partnership Consultant, Future Tech Jobs

Ever wondered who actually follows the money when crypto goes missing?

It's a growing band of crypto investigators and blockchain threat analysts. And plenty of them didn't start in crypto at all.

A crypto investigator traces cryptoasset transactions on public blockchains to find out where funds came from and where they went, then turns that trail into intelligence that banks, exchanges, regulators or police can act on. In the UK, the people doing this work often come from intelligence, fraud, anti-money laundering or open-source research, and learn the blockchain tools on top.

So if you already know how to investigate, you may be closer than you think.

What does a crypto investigator actually do?

The short version: you read a public ledger the way a detective reads a bank statement. Except this bank statement never closes, never sleeps and is written in wallet addresses.

Day to day, the work usually involves:

  • Tracing funds between wallets, exchanges and services using blockchain analytics tools

  • Linking on-chain activity to real-world groups, such as fraud networks, sanctioned entities or terrorist financing

  • Pulling in open-source intelligence (OSINT) to add context the blockchain can't give you

  • Writing up findings so a compliance team, a client or law enforcement can act on them

The job titles vary. You'll see crypto threat analyst, blockchain investigator, financial crime analyst and, on the more technical and client-facing side, solutions architect. Same detective instinct, different hats.

Why UK demand for crypto investigation skills is growing

The UK has been handing law enforcement new tools for chasing crypto, and every new tool needs people who can use it.

Here's the quick version of what's been happening:

  • The Economic Crime and Corporate Transparency Act 2023 added new powers to freeze and recover cryptoassets, including cryptoasset wallet freezing orders. The National Crime Agency secured its first in August 2024, and a Regional Organised Crime Unit secured three more in September 2026, according to Global Investigations Review (30 October 2026).

  • In January 2026 the NCA described a Crypto Cash Fusion Cell bringing together the NCA, the Metropolitan Police, HMRC, the FCA, City of London Police and OFSI, with blockchain analytics firm Elliptic named as a private-sector partner (NCA).

  • The FCA's new cryptoasset regime expands to its full scope from 25 October 2027 (FCA), which means more regulated firms needing to understand exactly where their customers' crypto has been.

The message is clear: public and private sectors are investing in following crypto, and they need investigators to do it.

Who's hiring crypto investigators and analysts right now

A few live roles on Blockchain Jobs show what employers are looking for.

Elliptic: Senior Crypto Threat Analyst (Terrorism), London

Elliptic is advertising a Senior Crypto Threat Analyst role, hybrid in London. The interesting bit for career changers: the advert does not require a degree (a PhD is listed only as a bonus). It asks for a background in intelligence, threat analysis, financial crime, OSINT or related investigative work, plus an understanding of cryptoassets and on-chain tracing tools, and some Python, SQL or AI-assisted querying.

Chainalysis: Solutions Architect, UK remote

Chainalysis is hiring a Solutions Architect, remote in the UK. It wants practitioner experience in compliance, investigations, fraud, risk or security, working with customers such as banks, exchanges and payment firms, and a technical generalist who is comfortable with REST APIs and SQL.

Elliptic: Data Science Lead, London

If you're more data than detective, Elliptic's Data Science Lead role asks for experience managing data scientists or ML engineers, strong Python and SQL, and a modern data stack. On-chain or fraud data experience is a bonus, not a must.

Notice a pattern? Investigation experience first. Crypto knowledge you can build.

Skills employers ask for

Pulling together what these adverts ask for, here's the shortlist, for anyone who likes their requirements neat:

  1. Investigative experience. Intelligence, financial crime, fraud, AML or OSINT work comes up again and again.

  2. Blockchain tracing. Understanding how cryptoassets move and how analytics tools follow them.

  3. Data skills. Python and SQL appear in both investigation and technical roles, and Elliptic's adverts say AI fluency is essential.

  4. Clear writing. Your findings only matter if someone can act on them.

  5. Customer confidence. For solutions roles, being able to work with banks, exchanges and payment firms.

The human takeaway? The tracing tools can be learned. The judgement to know which trail matters is the bit employers can't teach in a week.

How to become a crypto investigator in the UK

There isn't one official route, which is good news if you're coming from somewhere else. A sensible path looks like this:

  1. Start from what you already do. If you investigate fraud, analyse intelligence, work in AML or do OSINT research, that is your foundation. Lead with it.

  2. Learn the crypto basics properly. Wallets, exchanges, how transactions are recorded, and the common laundering patterns.

  3. Get hands-on with analytics training. Elliptic lists a self-paced 90-minute course on how agentic AI is changing on-chain risk, which it describes as free, and a crypto certification awarded with ManchesterCF and the University of New Haven that it recommends around 20 hours of study for (Elliptic training and certifications).

  4. Sharpen your data skills. Basic Python and SQL will widen the roles open to you.

  5. Consider a stepping stone. Crypto compliance and financial crime roles at regulated firms are a natural way in, and we've covered them in our guide to crypto compliance jobs in the UK.

Not technical at all? Have a look at blockchain jobs for non-technical professionals too.

What candidates really want from a move like this

Here's something I say a lot: in niche tech, the best candidates aren't scrolling job ads. They're choosing between offers.

And investigators are a perfect example. If you're good at following a trail, you already have options, in policing, in banks, in consultancies.

So when you look at a crypto role, ask the questions that matter to you. What will I actually be investigating? Who acts on my work? Will I get trained on the tools? Can I see myself here in three years?

Candidates pick the companies they already know. So get to know the employers in this space now, before the role you want appears.

Don't wait for the vacancy. Get on their radar.

Frequently asked questions

Do I need a degree to become a crypto investigator?

Not always. Elliptic's Senior Crypto Threat Analyst advert on Blockchain Jobs does not require a degree and lists a PhD only as a bonus. Relevant investigative experience in intelligence, financial crime or OSINT is what the advert asks for.

What is a crypto threat analyst?

A crypto threat analyst uses blockchain data and open-source intelligence to identify and track illicit activity involving cryptoassets, such as fraud, sanctions evasion or terrorist financing, and reports it so others can act.

Can I move into crypto investigation from fraud or AML work?

Yes. Employers such as Elliptic and Chainalysis ask for practitioner experience in financial crime, fraud, compliance or investigations. Adding blockchain tracing and data skills on top makes that experience directly relevant.

Are there crypto investigation jobs outside London?

Some are. Chainalysis's Solutions Architect role is advertised as remote in the UK, while Elliptic's roles are hybrid in London. Set up a job alert to catch new ones as they appear.

Following the money is a skill. Telling the story of where it went is a career.

If you're thinking about the move, I'd love to hear what's pulling you towards it. Any questions, let me know!

Find your next crypto investigation role


About the author

Julie Fixter, Client Partnership Consultant at Future Tech Jobs

Julie Fixter is a Client Partnership Consultant at Future Tech Jobs, helping employers and recruitment partners reach specialist talent across AI, quantum, robotics, semiconductors, space and the rest of the FTJ network. She spent seven years in sales at a UK software house before joining FTJ, and trained in psychodynamic counselling, which shapes how she thinks about what candidates actually want from a move. Based in Manchester. Connect with Julie on LinkedIn.

Related Jobs

Elliptic logo

Elliptic · 51–200 people · Series B

Senior Crypto Threat Analyst - Terrorism

  • London
  • Hybrid
  • Senior
  • Permanent

Leads counter-terrorism financing investigations into cryptoasset use by terrorist actors and facilitation networks, validating exposure and attribution confidence. Builds typologies and detection logic, works across UN, US, UK and EU designation regimes, and briefs clients, regulators and public-sector partners. Requires OSINT, blockchain tracing and AI-assisted analysis.

Python · SQL

Last month
Elliptic logo

Elliptic · 51–200 people · Series B

Head of Compliance Product

  • London
  • Hybrid
  • Director · manages people
  • Permanent

Lead the product managers behind Elliptic's core compliance portfolio, spanning wallet and transaction screening, continuous monitoring, on-chain investigations and risk configuration. A player-coach role reporting to the VP of Product, it also drives the product side of an agentic compliance programme, building AI capabilities with auditability and explainability designed in from the start.

AI · Agentic AI

Last month
Chainalysis logo

Chainalysis · 51–200 people · Series C

Solutions Architect

  • United Kingdom
  • Remote
  • Permanent

Technical lead across the full customer journey, running discovery, demos and proofs of value with Sales, then owning post-sale configuration, deployment and tuning of blockchain analytics products. Works directly with banks, exchanges and payment processors on compliance, investigations and risk workflows, feeding field insights back to Product and Engineering.

Chainalysis · REST API · SQL +2

Last month
Kraken logo

Kraken · 501–1000 people · Late stage

Head of Exchange Infrastructure

  • United Kingdom
  • Remote
  • Director · manages people
  • Permanent

Owns the exchange layer underpinning every Kraken product: matching engine, core infrastructure, third-party custody, algo and API engines. Leads four to five product managers, partnered with an engineering manager, to consolidate multiple matching engines into one interface-agnostic stack, starting with US derivatives. Defines success metrics such as p99 latency, throughput and uptime while sequencing migration without disrupting live markets.

Last month
Elliptic logo

Elliptic · 51–200 people · Series B

Data Science Lead

  • London
  • Hybrid
  • Lead · manages people
  • Permanent

Player-coach lead role owning a small data science team within the Intelligence function, setting direction, hiring, and running model governance while still writing code and reviewing methods. Work spans clustering, attribution, heuristics and labelling on large behavioural and on-chain datasets using Python, SQL, Spark or Databricks and AWS.

AWS · Spark · Databricks +1

Last month
Kraken logo

Kraken · 501–1000 people · Late stage

Staff Security Architect

  • United Kingdom
  • Remote
  • Senior
  • Permanent

Hands-on security architecture role embedded within engineering teams, designing and reviewing security for infrastructure, cryptography, web3, Rust and AI products. Conducts security assessments and audits, advises blockchain teams on secure operations, and works remotely across a small, highly technical internal consulting group.

Rust

6 months ago

Hiring?
Discover world class talent.

Are you sure?