Asset Tracing

Asset tracing is the investigative process of following the money — reconstructing the movement of funds and property from a known point (a fraud, a bribe, a laundering scheme) to where the value ultimately resides, so that it can be identified, frozen, and recovered. It is the operational counterpart to money laundering: where laundering breaks the trail, asset tracing rebuilds it. The discipline combines document analysis, analytical methods, open-source intelligence, and legal instruments for obtaining records across borders.^[1]

1 Following the money

The premise of asset tracing is that money leaves a trail. Every transfer, deposit, purchase, and title change generates a record somewhere, and even a deliberately layered scheme must at some point connect the illicit source to a real beneficiary who wants to use the funds. The investigator works forward from the source of the funds or backward from a suspected asset, building a chain of transactions in which each link is supported by a document. Because laundering is designed to defeat this reconstruction, tracing is frequently combined with the indirect net worth method, which measures the wealth that lands with a subject regardless of the path it took — a useful cross-check when the transactional trail goes cold.^[1]

Two legal concepts shape what tracing can achieve. Following the money means tracking the same physical or electronic funds as they move; tracing in the strict legal sense allows an investigator to follow value into a substitute asset — when stolen funds are used to buy a house, the claim can attach to the house. This matters for recovery, because assets are rarely sitting in the account they first landed in by the time an investigation matures. Tracing is used both in criminal proceedings (to support confiscation and forfeiture of the proceeds of crime) and in civil litigation (to recover misappropriated funds for victims and creditors), and the standard of proof and available remedies differ between the two. In either setting the investigator's product is a documented, link-by-link narrative that a court can follow and that survives challenge.

2 Bank and wire record analysis

Bank records are the backbone of most traces. Account statements establish the flow of funds; wire-transfer records (including SWIFT messages and Fedwire data) reveal counterparties, correspondent banks, and cross-border movement. The investigator reconstructs the flow of funds — mapping which account fed which, in what amounts, and on what dates — and looks for the hallmarks of layering: rapid pass-through transfers, round-dollar movements, transfers to and from shell entities, and structuring below the $10,000 reporting threshold that triggers a Currency Transaction Report. Link and network analysis is central here, visualizing accounts and entities as a graph so that pass-through nodes and ultimate destinations stand out. Suspicious Activity Reports filed by institutions can provide investigative leads, and subpoenaed transaction data feeds the same graph.

The analytical challenge is that layering produces a large, noisy graph in which the meaningful path is buried among ordinary business flows. Investigators therefore triage: they prioritize round-dollar and same-day pass-through transfers, transactions that leave an account almost as fast as they arrive, funds routed to jurisdictions with weak transparency, and counterparties with no evident commercial relationship to the account holder. Timing analysis — matching the moment funds leave one account to when they appear in another — helps establish links that the accounts themselves do not label. Where an institution's own monitoring flagged the activity, the resulting Suspicious Activity Report can name counterparties and describe the pattern that first drew attention, giving the investigator a starting thread to pull.

3 Source documents

Statements summarize; source documents prove. Tracing relies on the primary records behind each transaction, because these tie a movement of money to a specific person and instruction. Key source documents include:

Document	What it establishes
Signature cards	Who is authorized on an account — identifying the real controllers behind nominee or shell accounts
Cancelled checks	Payer, payee, endorsements, and the bank of deposit — linking a payment to its ultimate recipient
Deposit tickets / slips	The composition of a deposit (cash vs. checks) and its date, exposing structuring and co-mingling
Wire-transfer records	Originator, beneficiary, intermediary banks, and reference details across borders
Account-opening documents	Beneficial-owner declarations, identification, and the customer due-diligence file

Endorsements on cancelled checks and the deposit history behind them frequently break a scheme open, revealing that a "vendor" payment was in fact endorsed over to an insider or deposited into a personal account. These records are the same class of primary evidence that must be preserved under a documented chain of custody to survive challenge in court.

4 Shell-company detection and beneficial ownership

Layering typically runs value through shell companies — entities with no genuine operations that exist to hold assets, issue false invoices, and hide who ultimately benefits. Detecting them combines transactional signals (no employees or premises, round-number invoicing, funds that arrive and leave the same day, addresses shared with other shells or with an insider) and corporate-registry research. The investigative goal is to pierce the structure to the beneficial owner — the natural person who ultimately owns or controls the entity. Beneficial-ownership data has historically been a key tracing resource, but its availability shifted sharply in the United States: after litigation and an interim rule, a FinCEN final rule of August 2026 permanently removed beneficial-ownership reporting for U.S. companies and U.S. persons, leaving only certain foreign-registered entities as reporting companies.^[2] Investigators increasingly supplement registry data with open-source intelligence — corporate filings, leaks, litigation records, and name-screening tools — to reconstruct ownership that formal registers no longer capture.^[3]

5 Cross-border recovery and MLATs

Laundered funds rarely stay in one jurisdiction, so recovery is inherently international. Once assets are located abroad, investigators pursue freezing (restraint) orders and, ultimately, confiscation or forfeiture and repatriation. Obtaining foreign evidence and enforcement generally proceeds through Mutual Legal Assistance Treaties (MLATs) — bilateral or multilateral agreements under which one state formally requests another to gather evidence, serve process, freeze accounts, or enforce a confiscation order. MLAT requests are powerful but slow and formal, which is why investigators front-load open-source and informal channels — and faster law-enforcement cooperation such as the Egmont Group network of financial intelligence units — to build the picture before a treaty request is made. Timing is critical: assets that are not restrained early can be moved again or dissipated while a formal request works through diplomatic channels, so investigators often pursue urgent freezing orders in parallel with the slower evidence-gathering process. International bodies such as the OSCE have published compendiums of good practice on financial investigations and asset recovery, particularly in the context of proceeds-generating crimes like human trafficking.^[1] Where the trail runs through digital assets, tracing continues on-chain under cryptocurrency tracing, with exchange attribution and law-enforcement cooperation substituting for the bank subpoena.

See also: Money Laundering, Cryptocurrency Tracing, Net Worth Method, Analytical Methods, AML Law.

References

1. OSCE. "Following the Money: Compendium of Resources and Good Practices on Financial Investigations Related to Trafficking in Human Beings." 2019.
2. FinCEN. Final rule on Beneficial Ownership Information reporting, effective Aug 14, 2026. federalregister.gov
3. Basel Institute on Governance. "Quick Guide to Open-Source Intelligence" (QG 17), 2020; Basel Open Intelligence. baselgovernance.org