What evidence may connect a wallet to a person?¶

Attribution comes from converging provider, endpoint, key, communication and demonstrated-control evidence, assessed for the relevant time.

Each strand proves a different relationship¶

A provider may link activity to a customer account. An endpoint may contain wallet and key artefacts. Messages can show payment requests, hashes, balances or instructions. Possession of hardware or recovery material supports potential control, while authorised specialist tests may demonstrate current control.

Address timing and alternatives¶

Wallets can be shared, transferred, compromised or restored elsewhere, and a copied address proves no control. Compare activity with accounts, endpoints, communications, location, direction and benefit.

State whether evidence shows linkage, technical control, historical control, ownership or benefit. Current control does not automatically prove control during an earlier transaction.