OSINT Disciplines
Open-source intelligence is not a single technique but an umbrella under which several specialised sub-disciplines sit, each defined by the kind of source it exploits. The four most relevant to fraud and financial-crime investigation are SOCMINT (social-media intelligence), GEOINT (geospatial intelligence), HUMINT (human intelligence) and IMINT (imagery intelligence). This article defines each, illustrates its use in a fraud or trafficking context, and explains how the disciplines combine within the intelligence cycle. It is important to note at the outset that some intelligence disciplines — notably SIGINT (signals intelligence) and MASINT (measurement and signature intelligence) — are not OSINT, because they depend on collection methods that are not open to the public.
1 SOCMINT — social-media intelligence
SOCMINT is the collection and analysis of information from social-media platforms — posts, profiles, connections, images, check-ins and metadata. Because individuals routinely disclose their relationships, movements, purchases and opinions online, social media has become one of the richest open sources for investigators. In an occupational-fraud enquiry, SOCMINT may reveal a lifestyle inconsistent with an employee's declared salary — luxury purchases, travel, vehicles — a behavioural red flag that justifies deeper financial scrutiny. In organised-fraud and trafficking cases, the network mapping made possible by tools such as Maltego (see OSINT tools) exposes the associations between suspects, front companies and victims. SOCMINT is bounded by platform terms of service and data-protection law, and the collection of profile data raises questions addressed in OSINT ethics.
2 GEOINT — geospatial intelligence
GEOINT combines geospatial data and imagery to describe, assess and visually depict physical features and activity on the earth — in open-source practice, principally through satellite and aerial imagery, mapping services, and the geolocation of photographs and events. An investigator uses GEOINT to verify that a photograph was taken where and when it is claimed to have been, to place a suspect or asset at a location, or to confirm the physical existence of premises linked to a shell company. In a human-trafficking case, geolocating the background of an online advertisement can identify the actual location of exploitation, corroborating other evidence and directing enforcement. GEOINT frequently depends on the imagery analysed under IMINT and on the reverse-image and mapping tools catalogued in OSINT tools.
3 HUMINT — human intelligence
HUMINT is intelligence derived from human sources. In its classic form HUMINT sits outside open-source work, but an open-source variant is well established: information volunteered by people in public forums, community groups, comment threads, reviews and direct but consensual contact. In fraud investigation this open HUMINT overlaps with the interviewing of witnesses and the intake of whistleblower tips — a confidential human source whose allegation is then corroborated against open data (see the discussion of fusion). The discipline of interviewing is the formal, structured face of human-source information within an investigation. Because human sources can be mistaken, self-interested or deceptive, HUMINT carries a heavy verification burden and, where it involves elicitation or pretext, may cross into the active reconnaissance that requires authorisation.
4 IMINT — imagery intelligence
IMINT is intelligence derived from the analysis of imagery — photographs, video and, in the geospatial case, satellite and aerial pictures. Where GEOINT is concerned chiefly with where, IMINT is concerned with what an image itself reveals: the objects, people, signage, reflections and metadata within a picture. An analyst exploits IMINT to identify a location from visual cues, to match a face or object across images, or to detect that a photograph has been manipulated or recycled. Reverse-image tools such as TinEye, Yandex and Google Images (see OSINT tools) are the everyday instruments of open-source IMINT. In trafficking and fraud cases, IMINT and GEOINT are typically used together — the image is analysed for internal cues (IMINT) and then placed on the map (GEOINT).
5 Disciplines that are not OSINT
Not every intelligence discipline is open-source, and conflating them is a common error. SIGINT (signals intelligence) — the interception of communications and electronic signals — and MASINT (measurement and signature intelligence) — the technical analysis of emissions, materials and physical signatures — both depend on collection that is not lawfully available to the public and is typically the preserve of state agencies operating under specific legal authority. Attempting to replicate such collection through interception or unauthorised system access would move an investigator well past passive reconnaissance into unlawful conduct. These disciplines are mentioned here only to mark the boundary of what OSINT is: intelligence built exclusively from sources open to a member of the public.
6 Combining the disciplines
The disciplines deliver their greatest value in combination. A typical trafficking or fraud enquiry might begin with SOCMINT identifying a suspect account and its network; IMINT then analyses images posted by that account for internal cues; GEOINT places those images on the map to establish a real-world location; and HUMINT — through a witness, a review, or a whistleblower tip — supplies the human context that ties the pieces together. Each discipline corroborates the others, and no single one is treated as conclusive on its own. This cross-corroboration is the practical expression of the OSINT verification burden and is orchestrated through the phases of the intelligence cycle, drawing throughout on the tool catalogue in OSINT tools and constrained by OSINT ethics.
The disciplines are also a useful vocabulary for planning an enquiry. Framing a requirement in terms of which sub-disciplines it will need — does this question call for social-network mapping, for geolocation, for imagery analysis, for human corroboration, or for some combination? — helps the investigator task collection deliberately rather than gathering indiscriminately, and so guards against the infoxication that undirected open-source work invites. It also clarifies where the enquiry approaches its ethical and legal limits: HUMINT that shades into elicitation, or infrastructure work that shades into probing, may cross from passive into active reconnaissance, whereas SOCMINT, GEOINT and IMINT built purely on public material typically remain within the passive, lawful core of open-source intelligence. In this way the discipline map is not merely taxonomic; it is a planning and risk-assessment aid that ties directly into the direction phase of the intelligence cycle.
7 See also
See also: OSINT, Intelligence Cycle, OSINT Tools, OSINT Ethics, Human Trafficking Finance, Interviewing.
References
- Basel Institute on Governance. "Quick guide to open-source intelligence (OSINT)." Quick Guide 17, 2020. baselgovernance.org
- OSCE (2019). "Following the Money: Compendium of Resources and Guidance on Financial Investigations Related to Trafficking in Human Beings." Organization for Security and Co-operation in Europe.
- UNODC (2020). "Global Report on Trafficking in Persons 2020." United Nations Office on Drugs and Crime.