Skip to content

Asset Tracing Methodologies

A practical guide to the investigative techniques forensic accountants use to follow misappropriated funds across accounts, corporate structures, and jurisdictions.

Last updated:

Share

Asset tracing is the forensic process of following misappropriated funds through bank accounts, corporate structures, and jurisdictions to identify where value currently sits and, where possible, freeze or recover it. Investigators combine bank-record analysis, corporate-structure mapping, public-register searches, and open-source intelligence into a sequential methodology that reconstructs the movement of money from its fraudulent origin to its present location. The process runs in parallel with urgent legal applications such as freezing injunctions, which rely on the tracer's findings to demonstrate to a court both that identifiable assets exist and that there is a real risk of dissipation. Partial recovery is common: tracing locates assets that remain; it cannot recover funds already spent.

Fraud rarely produces a single payment sitting in one account. More often, stolen money passes through a series of corporate layers, crosses borders, and ends up disguised as a legitimate investment or a family member's property. The investigator's job is to unwind that path, account by account, until the asset surfaces somewhere it can be frozen or seized. That process is asset tracing, and it sits at the heart of financial forensics.

The discipline draws on a wide toolkit. At one end, it is as simple as reading a bank statement and identifying where money goes next. At the other end, investigators map multi-jurisdictional corporate webs spanning dozens of companies across as many countries, use open-source intelligence to link anonymous ownership to real people, and submit court applications in several countries simultaneously to prevent assets from moving before the case reaches trial.

This topic covers each major methodology in turn: bank-record analysis, corporate-structure mapping, public-register and beneficial-ownership investigation, and open-source intelligence. Each technique has particular strengths and particular limits, and understanding both is essential to conducting a defensible trace.

By the end of this topic you will be able to:

  • Explain how a funds-tracing schedule is constructed from bank production orders and what analytical tests (round-number, velocity, counterparty) it supports.
  • Describe the step-by-step process for mapping a multi-layer corporate structure from company registry filings to identification of the beneficial owner.
  • Identify the principal public registers used in asset investigations, their information content, and the jurisdictional gaps that limit their utility.
  • Apply OSINT techniques to financial investigations correctly, including the provenance-preservation requirements courts impose on digital exhibits.
  • Explain the three legal limbs required to obtain a freezing injunction and identify which elements of the asset-tracing evidence satisfy each limb.
Key terms
Asset tracing
The forensic process of following funds or property from a fraudulent source through subsequent transactions, corporate structures, and jurisdictions to locate where value currently sits.
Beneficial owner
The natural person who ultimately owns or controls an asset or entity, regardless of how many nominee or corporate layers stand in between. Tracing to this person is the end goal of most asset investigations.
Shell company
A legal entity with no active business operations, used to hold assets or pass money through while concealing the identity of the controlling person. Common in asset-concealment structures but not inherently illegal.
Bank reconciliation analysis
The systematic comparison of bank statements against internal ledgers and third-party transaction records to identify unexplained credits, diverted payments, or missing entries.
OSINT (open-source intelligence)
Publicly available information gathered from company registries, land registers, court records, social media, and news archives to build a factual picture of assets and relationships without requiring covert access.
Freezing injunction
A court order, often called a Mareva injunction, that prevents a defendant from moving or disposing of assets up to the value of the claim while proceedings are pending. Asset-tracing evidence is the factual foundation for the application.

Bank-record analysis: the foundation of every trace

Bank records are the starting point for nearly every asset trace because they document each movement of money with date, amount, counterparty, and reference. Obtaining them is the first battle: in criminal investigations, production orders or search warrants compel disclosure. In civil cases, courts grant Norwich Pharmacal orders (UK), third-party subpoenas (US), or their equivalents in most common-law systems to force banks to produce records for accounts the applicant cannot access directly.

Once the records are in hand, the analyst works chronologically. A funds-tracing schedule lists every relevant transaction, notes the source account, the destination account, the date, and the amount, and attaches a transaction reference. The schedule becomes the spine of the trace, connecting later exhibits like company documents or property records to specific money flows.

  • Round-number test: transfers in suspiciously round figures (100,000 rather than 99,847) often indicate non-commercial transfers rather than payments for actual goods or services.
  • Velocity analysis: the rate at which money enters and immediately exits an account (often within hours) indicates a pass-through or layering account rather than a genuine trading entity.
  • Counterparty mapping: building a list of every account that received funds from the target allows investigators to prioritise which entities to investigate next in a multi-hop structure.
  • Correspondent banking chains: international transfers route through correspondent banks, adding SWIFT message records to the available data. Each bank in the chain holds a portion of the transaction trail.

Corporate-structure mapping

Fraudsters rarely park assets in their own name. The more sophisticated the fraud, the more corporate layers stand between the person and the property. Mapping those layers is a distinct investigative task that runs in parallel with bank-record analysis: the bank records tell you where money went, and the corporate map tells you who controls the entity it went to.

Source funds / fraudproceedsOffshore holding co. AOffshore holding co. BNominee trust / LLCReal estate / final asseteach layer in a different jurisdiction
Simplified layered corporate structure used in asset concealment.

The main sources for corporate mapping are company registries (Companies House in the UK, SEC EDGAR in the US, MCA in India, and their equivalents elsewhere), which hold incorporation documents, shareholder lists, and annual returns. Where beneficial ownership registers exist (the UK introduced a People with Significant Control register in 2016; the EU's Anti-Money Laundering Directives require national registers), they list the humans behind each company.

  1. Identify the immediate payee
    Take the entity that received money from the target account. Search the company registry in its jurisdiction for incorporation records, registered address, directors, and shareholders.
  2. Identify the shareholders and directors
    Each shareholder may itself be a company. Repeat the registry search for each one. Directors listed at a registered-office address shared by dozens of other companies are nominees, not genuine controllers.
  3. Spot common nodes
    Shared registered addresses, common auditors, overlapping director names, or companies incorporated in the same batch on the same day all suggest connected control. These nodes link otherwise separate branches of the map.
  4. Confirm the beneficial owner
    Once the structure is mapped, the investigator seeks documentary confirmation of the ultimate controller: board resolutions, power-of-attorney documents, dividend-payment trails, or communications that show who actually instructed the corporate officers.

Public registers and beneficial-ownership investigation

Public registers hold an underused volume of information about assets and ownership. Land registries record the legal owner of every registered property and often the purchase price and any charges registered against it. Court records and insolvency registers reveal judgments, asset-disclosure orders, and bankruptcy proceedings that place assets on public record. Intellectual-property offices record patent and trademark ownership, which can represent substantial value in commercial fraud cases.

Register typeWhat it revealsKey examples
Company registryShareholders, directors, annual accountsCompanies House (UK), MCA21 (India), EDGAR (US)
Land registryProperty ownership, mortgages, sale pricesHM Land Registry (UK), Registration Offices (India)
Beneficial ownership registerUltimate human controllers of companiesUK PSC Register, EU national BO registers
Court recordsAsset-disclosure orders, judgments, insolvencyPACER (US), HMCTS (UK), High Court registers
Shipping registerVessel ownership and mortgagesLloyd's Register, IMO database
Intellectual property registerPatent/trademark owners, assignmentsUSPTO, EUIPO, UK IPO

Beneficial ownership investigation goes beyond public registers when nominee arrangements are sophisticated. Corporate service providers in many jurisdictions are willing to provide nominee directors and shareholders for a fee, meaning the person in the registry has no real connection to the entity. Investigators counter this through communications analysis (emails, WhatsApp messages, or bank correspondence instructing the nominee), through tax-authority records obtained under mutual information-exchange agreements, and through interviews with the nominee themselves, who often has no incentive to protect the person behind the structure.

Open-source intelligence in financial cases

Open-source intelligence, or OSINT, is publicly available information gathered without covert access. In financial investigations it covers company filings, news archives, property advertisement sites, social media, aviation and shipping transponder databases, court judgments, and a long list of specialist databases that aggregate public data. The practical advantage is speed: an investigator can build a preliminary asset picture in hours using OSINT alone, before any formal legal process is underway.

  • Corporate filings searches: OpenCorporates aggregates company data from over 140 jurisdictions in one search interface, dramatically cutting the time needed to map an offshore structure.
  • Property databases: property advertisement sites, auction records, and in some countries the land registry itself reveal high-value real estate linked to a subject.
  • Aircraft and vessel registers: the FAA Aircraft Registry (US), UK CAA, and the IMO ship register are fully public. ADS-B transponder data (FlightAware, Flightradar24) shows recent flight paths for registered aircraft.
  • Leaked dataset cross-referencing: the ICIJ Offshore Leaks database, which consolidates data from the Offshore Leaks (2013), Panama Papers (2016), Bahamas Leaks (2016), Paradise Papers (2017), and Pandora Papers (2021) investigations, names more than 810,000 entities and individuals linked to offshore structures. The FinCEN Files is a separate ICIJ investigation with its own dataset and is not part of the Offshore Leaks database. Cross-referencing a subject's name or company names is standard early-stage OSINT.
  • Social media and lifestyle indicators: photographs of residences, vehicles, and travel patterns on public social media profiles have appeared in court exhibits in asset-tracing cases where a subject claimed to have no assets.

Practical limits and the ethics of tracing

The most obvious practical constraint is jurisdiction. Every legal tool in a tracer's kit, from bank production orders to freezing injunctions, has geographical limits. A court in England can freeze English assets; it cannot directly freeze assets held in Singapore without separate Singapore proceedings. Investigators in multi-jurisdiction cases must work through local counsel in each country, making the process expensive and slow.

Cost is itself a constraint. A sophisticated offshore trace covering several jurisdictions can cost hundreds of thousands of dollars in investigative fees, legal fees, and court costs. The economics only work if the assets are large enough to justify the exercise, which means some medium-scale frauds simply go untraced because recovery costs would exceed recovery value.

On the ethics side, the same techniques that locate fraud proceeds can be used aggressively against legitimate assets. Courts impose proportionality requirements on freezing orders to prevent claimants from weaponising the process to strangle a defendant's business before trial. Expert asset tracers maintain clear scope boundaries, document their authority to act, and resist instructions to pursue assets that are not genuinely linked to the alleged fraud.

Check your understanding
Question 1 of 4· 0 answered

What is the primary purpose of a Norwich Pharmacal order in asset-tracing cases?

Key Takeaways

  • Bank-record analysis is the foundation of every asset trace: funds-tracing schedules built from production-ordered statements establish the path from fraud source to recipient accounts.
  • Corporate-structure mapping uses company registry filings, nominee patterns, and shared nodes to identify the beneficial owner behind layers of shell companies.
  • Public registers including land registries, beneficial-ownership registers, court records, and specialist databases provide essential corroborating data, though jurisdiction gaps (particularly in some offshore centres) limit coverage.
  • Open-source intelligence accelerates early-stage tracing but must be preserved with full provenance documentation from the moment of capture, as courts scrutinize the integrity of digital exhibits carefully.
  • Freezing injunctions run in parallel with the trace itself; asset-tracing evidence supports all three limbs of the application, and the order preserves assets until judgment while enforcement mechanisms complete the actual recovery.
What is asset tracing in a forensic context?
Asset tracing is the process of following funds from their source through a series of transactions and corporate or personal accounts to locate where value has accumulated. Forensic accountants reconstruct the path using bank records, corporate filings, property registers, and open-source intelligence.
How do investigators pierce shell-company structures?
Investigators use company registry filings, beneficial ownership registers, and correspondence analysis to work through nominee directors and registered-office arrangements. Linking common registered addresses, shared auditors, or overlapping director names across multiple entities often reveals the controlling person behind an otherwise opaque structure.
What is beneficial ownership and why does it matter?
Beneficial ownership identifies the natural person who ultimately owns or controls an entity or asset, regardless of who appears in the formal legal records. Tracing to the beneficial owner is essential because a fraudster can hold assets through nominee owners, trusts, or chains of companies without their name appearing anywhere obvious.
Can open-source intelligence (OSINT) be used as legal evidence?
OSINT can be submitted as evidence but courts scrutinize its provenance, preservation, and integrity carefully. Screenshots require metadata, URLs need to be archived, and chain-of-custody procedures must be followed from the moment the information is captured. OSINT typically corroborates other evidence rather than standing alone.
What is a Mareva injunction and how does asset tracing support it?
A Mareva (or freezing) injunction is a court order preventing a defendant from dissipating assets before judgment. To obtain one, the applicant must show the assets exist, identify where they are, and demonstrate a real risk of dissipation. Asset tracing evidence provides the factual foundation the court requires to grant the order.

Test yourself on Forensic Accounting and Financial Forensics with free, timed mocks.

Practice Forensic Accounting and Financial Forensics questions

Found this useful? Pass it along.

Share

Spotted an error in this page? Report a correction or read our editorial standards.

Your journey to becoming a forensic professional starts here.

Practice with mock tests, learn from structured notes, and get your questions answered by a global forensic community, all in one place.