Seeking blockchain tracing help — 3 BTC taken from Casascius coins on September 3, 2026

I’m looking for a reputable blockchain investigator to trace three unauthorized withdrawals from my Casascius physical Bitcoin coins. Each coin held 1 BTC, and all three were emptied on September 3, 2026.
During discussions about my eBay listing, a prospective buyer contacted me through FaceTime and introduced himself as “Kevin from Texas.” His name and location are unverified. I have preserved call logs, messages and purchase documentation for private review. The blockchain confirms the withdrawals; identifying who controlled the receiving wallets requires further investigation.
These are the affected coins and their full public addresses.

Times below are confirmation block timestamps in UTC:
Coin identifier
Public address
September 3 spending transaction
1Ag5RdMM
1Ag5RdMMSdYNJeeNjuTQdcKpc5rgg3mY6R
01:32:27 UTC — transaction
132J9hg6
132J9hg6oCGrCcYnzmwSbuX9qogawLKUdD
02:47:13 UTC — transaction
1CsVRdC1
1CsVRdC18BkZVrtnFiAZMGaThnT5qRuJCS
18:22:27 UTC — transaction
A tracing lead: subsequent transactions spending proceeds from the first two coins both paid this address:
bc1q295gcszve25t9ye9c20xyfsdv4wdfsndgc5e2e
Supporting transactions: first coin’s onward transfer and second coin’s onward transfer. This connection does not establish who owns that address; it could belong to a service.

I’m seeking lawful blockchain tracing, identification of exchange or service destinations, and an honest assessment of recovery options. Please provide verifiable experience or references. Even if they’re not recovered, I do not want this individual to roam free, but I’d rest easy if it atleast went to a useful than him. Personal contact evidence will only be shared privately with a vetted investigator.

Thank you