Practice with mock tests, learn from structured notes, and get your questions answered by a global forensic community, all in one place.
A practical guide to the investigative techniques forensic accountants use to follow misappropriated funds across accounts, corporate structures, and jurisdictions.
Last updated:
Fraud rarely produces a single payment sitting in one account. More often, stolen money passes through a series of corporate layers, crosses borders, and ends up disguised as a legitimate investment or a family member's property. The investigator's job is to unwind that path, account by account, until the asset surfaces somewhere it can be frozen or seized. That process is asset tracing, and it sits at the heart of financial forensics.
The discipline draws on a surprisingly wide toolkit. At one end, it is as simple as reading a bank statement and spotting where money goes next. At the other end, investigators map multi-jurisdictional corporate webs that include dozens of companies in as many countries, use open-source intelligence to link anonymous ownership to real people, and submit court applications in several countries simultaneously just to stop assets moving again before the case reaches trial.
This topic works through each major methodology in turn: bank-record analysis, corporate-structure mapping, public-register and beneficial-ownership investigation, and the increasingly important role of open-source intelligence in financial cases. Each technique has particular strengths and particular limits, and understanding both is what separates a competent trace from a compelling one.
Every electronic payment leaves a paper trail. The trick is reading it in order.
Bank records are the starting point for nearly every asset trace because they document each movement of money with date, amount, counterparty, and reference. Obtaining them is the first battle: in criminal investigations, production orders or search warrants compel disclosure. In civil cases, courts grant Norwich Pharmacal orders (UK), third-party subpoenas (US), or their equivalents in most common-law systems to force banks to produce records for accounts the applicant cannot access directly.
Once the records are in hand, the analyst works chronologically. A funds-tracing schedule lists every relevant transaction, notes the source account, the destination account, the date, and the amount, and attaches a transaction reference. The schedule becomes the spine of the trace, connecting later exhibits like company documents or property records to specific money flows.
A chain of shell companies is only intimidating until you lay it flat on a page.
Fraudsters rarely park assets in their own name. The more sophisticated the fraud, the more corporate layers stand between the person and the property. Mapping those layers is a distinct investigative task that runs in parallel with bank-record analysis: the bank records tell you where money went, and the corporate map tells you who controls the entity it went to.
The main sources for corporate mapping are company registries (Companies House in the UK, SEC EDGAR in the US, MCA in India, and their equivalents elsewhere), which hold incorporation documents, shareholder lists, and annual returns. Where beneficial ownership registers exist (the UK introduced a People with Significant Control register in 2016; the EU's Anti-Money Laundering Directives require national registers), they list the humans behind each company.
Governments have been building the detective's database for years. Most people just don't read it.
Public registers hold an underused volume of information about assets and ownership. Land registries record the legal owner of every registered property and often the purchase price and any charges registered against it. Court records and insolvency registers reveal judgments, asset-disclosure orders, and bankruptcy proceedings that place assets on public record. Intellectual-property offices record patent and trademark ownership, which can represent substantial value in commercial fraud cases.
| Register type | What it reveals | Key examples |
|---|---|---|
| Company registry | Shareholders, directors, annual accounts | Companies House (UK), MCA21 (India), EDGAR (US) |
| Land registry | Property ownership, mortgages, sale prices | HM Land Registry (UK), Registration Offices (India) |
| Beneficial ownership register | Ultimate human controllers of companies | UK PSC Register, EU national BO registers |
| Court records | Asset-disclosure orders, judgments, insolvency | PACER (US), HMCTS (UK), High Court registers |
| Shipping register | Vessel ownership and mortgages | Lloyd's Register, IMO database |
| Intellectual property register | Patent/trademark owners, assignments | USPTO, EUIPO, UK IPO |
Beneficial ownership investigation goes beyond public registers when nominee arrangements are sophisticated. Corporate service providers in many jurisdictions are willing to provide nominee directors and shareholders for a fee, meaning the person in the registry has no real connection to the entity. Investigators counter this through communications analysis (emails, WhatsApp messages, or bank correspondence instructing the nominee), through tax-authority records obtained under mutual information-exchange agreements, and through interviews with the nominee themselves, who often has no incentive to protect the person behind the structure.
The subject's LinkedIn post about their new yacht is evidence. It just needs to be preserved properly.
Open-source intelligence, or OSINT, is publicly available information gathered without covert access. In financial investigations it covers company filings, news archives, property advertisement sites, social media, aviation and shipping transponder databases, court judgments, and a long list of specialist databases that aggregate public data. The appeal is speed: an investigator can sketch a preliminary asset picture in hours using OSINT alone, before any formal legal process is underway.
Knowing where the money is counts for nothing if it has gone by the time the hearing starts.
Asset tracing is not purely an investigative exercise. It is routinely conducted in parallel with urgent legal applications designed to stop the subject from moving assets before a judgment can be enforced. The most important of these is the freezing injunction (or Mareva injunction, from the 1975 English case that established the jurisdiction). To obtain one, the applicant must demonstrate: a good arguable case on the merits, identifiable assets within the court's jurisdiction, and a real risk that the defendant will dissipate those assets absent an order.
Asset-tracing evidence, both the bank-record analysis and the OSINT picture, provides the factual foundation for the third limb. A defendant who has already transferred assets multiple times across jurisdictions in the weeks before a claim is served is a strong candidate for demonstrating dissipation risk. Courts look at the pattern of prior conduct rather than promises that assets will not be moved in future.
A freezing order by itself does not recover the assets. It preserves the status quo while the main proceedings continue toward judgment or settlement. Once judgment is obtained, enforcement mechanisms such as charging orders over land, third-party debt orders over bank accounts, and receivers appointed over a defendant's assets are used to actually transfer value back to the claimant.
Asset tracing can follow money almost anywhere. Whether it should is a separate question.
The most obvious practical constraint is jurisdiction. Every legal tool in a tracer's kit, from bank production orders to freezing injunctions, has geographical limits. A court in England can freeze English assets; it cannot directly freeze assets held in Singapore without separate Singapore proceedings. Investigators in multi-jurisdiction cases must work through local counsel in each country, making the process expensive and slow.
Cost is itself a constraint. A sophisticated offshore trace covering several jurisdictions can cost hundreds of thousands of dollars in investigative fees, legal fees, and court costs. The economics only work if the assets are large enough to justify the exercise, which means some medium-scale frauds simply go untraced because recovery costs would exceed recovery value.
On the ethics side, the same techniques that locate fraud proceeds can be used aggressively against legitimate assets. Courts impose proportionality requirements on freezing orders to prevent claimants from weaponising the process to strangle a defendant's business before trial. Expert asset tracers maintain clear scope boundaries, document their authority to act, and resist instructions to pursue assets that are not genuinely linked to the alleged fraud.
What is the primary purpose of a Norwich Pharmacal order in asset-tracing cases?
Test yourself on Forensic Accounting and Financial Forensics with free, timed mocks.
Practice Forensic Accounting and Financial Forensics questionsSpotted an error in this page? Report a correction or read our editorial standards.