Public Records and Court Dockets

Public Records and Court Dockets
Field	Open-source investigation; litigation and asset research
Federal courts	PACER (fee-based); RECAP / CourtListener (free mirror)
Securities filings	SEC EDGAR (free, rate-limited to 10 requests/second)
Secured-debt filings	UCC-1 / UCC-3 at state filing offices
Request statutes	Federal FOIA, 5 U.S.C. § 552; state open-records laws

Public records research is the use of government-maintained filings, docket sheets, registries and disclosed agency documents to establish facts about transactions, ownership, debts and disputes. It is the most evidentially durable branch of open-source intelligence, because the underlying documents were created by courts, regulators and registries rather than by the subject, and can often be obtained in certified form. For the fraud examiner, these records answer the questions a bank statement cannot: who sued whom and over what, who holds a security interest in which assets, who really owns a parcel of real estate, and what a public company told the SEC and when. The records feed directly into asset tracing, anti-corruption due diligence and forensic accounting engagements. This article describes sources and reading techniques; it is a methods guide and does not endorse research on private individuals beyond what a lawful engagement requires (see OSINT Ethics).

1 Federal court records: PACER, RECAP and CourtListener

PACER (Public Access to Court Electronic Records) is the federal judiciary's system for dockets and filings in district, bankruptcy and appellate courts. The published fee schedule is $0.10 per page, with the charge for any single document capped at $3.00 (30 pages); an account that accrues $30 or less in a quarter pays nothing for that quarter, which the judiciary says covers about three-quarters of users.^[1] Because each court runs its own CM/ECF instance, the PACER Case Locator is the usual starting point: it searches party names, case numbers and nature-of-suit codes across courts, though its index is only as good as each court's data entry.

The free complement is the RECAP browser extension, created by the Free Law Project. When a user buys a document from PACER, RECAP automatically donates it to a public repository, and it alerts later users when the document they are about to pay for already exists there.^[2] The repository is searchable on CourtListener, which also hosts opinions, oral-argument audio and docket alerts. Practical consequences for investigators: search CourtListener first; set alerts on dockets of interest; and remember that a RECAP copy is only as complete as whatever earlier users happened to buy, so an absence there says nothing about whether a filing exists. For evidentiary use, pull the document from PACER directly so that the source and retrieval date are unambiguous (see Chain of Custody).

Bankruptcy courts deserve special attention. A Chapter 11 or Chapter 7 petition forces the debtor to file schedules of assets and liabilities, a statement of financial affairs listing recent transfers, and a list of creditors, so a bankruptcy docket is often the single richest public document on a debtor's finances. Transfers to insiders in the year before filing are what trustees pursue as preferences and what examiners should flag as potential concealment of assets.

2 How to read a docket

A docket sheet is the court clerk's chronological index of everything filed in a case. Reading one efficiently is a skill separate from reading the filings themselves.

1. Caption and header. Case number (the prefix typically encodes the district, year and case type, for example "1:24-cv-01234"), the presiding and referred judges, the filing date, the nature-of-suit code, and the jury demand. A criminal docket uses "cr" and lists charges and their disposition; a related-case notation points to companion proceedings.
2. Parties and counsel. The party list identifies corporate defendants, third-party defendants, intervenors and amici. The names of counsel and their firms are themselves a signal of who is funding the litigation and whether the party is represented by the lawyers one would expect.
3. Entry numbers. Docket entries are numbered sequentially. Gaps, or entries marked "sealed" or "restricted," show where material is withheld; the existence and timing of a sealed entry is itself information. Attachments are numbered as sub-entries.
4. The pivotal entries. The complaint (allegations and exhibits), the answer (admissions and denials), motions to dismiss and for summary judgment (the parties' best evidence presented in compact form), protective-order motions, notices of settlement, consent judgments and the final judgment or dismissal order. A voluntary dismissal "with prejudice" soon after a sealing motion often signals a confidential settlement.
5. Exhibits. Summary-judgment exhibits frequently attach contracts, emails and deposition excerpts that never appear anywhere else in the public record.

The rules on privacy shape what you will see. Under Federal Rule of Civil Procedure 5.2 (and parallel rules for criminal and bankruptcy cases), filers must redact Social Security and taxpayer numbers to the last four digits, birth dates to the year, minors' names to initials and financial-account numbers to the last four digits; failure to redact is a recurring source of accidental exposure that investigators should handle responsibly rather than exploit.

Docket entry type	What it tells an investigator	Follow-up
Complaint / indictment	Alleged scheme, dates, amounts, named co-participants	Cross-check amounts to net-worth and bank data
Motion to seal / protective order	Confidential commercial or financial material exists	Check whether a redacted public version was filed
Lis pendens or writ of attachment	Plaintiff is pursuing specific property	Search deed records for the parcel
Judgment / abstract of judgment	Amount owed; basis for judgment liens	Search county and UCC records for recorded liens
Proof of claim (bankruptcy)	Creditors and secured-collateral descriptions	Compare to UCC filings
Satisfaction of judgment	Debt was paid; timing may show source of funds	Look for corresponding asset sale

3 State and local court records

State courts handle the great majority of litigation, including contract disputes, foreclosures, landlord-tenant matters, family and probate cases, and most criminal prosecutions, but access is fragmented. There is no state-level equivalent of PACER: each state, and frequently each county, runs its own portal, some free (a docket search by name), some fee-based, and some requiring an in-person visit to the clerk. Common pitfalls include name-search systems that return only exact matches, portals that purge older cases from online access, and inconsistent treatment of sealed, expunged or juvenile matters. Civil suits against a company in the counties where it operates, and in the home county of its principals, are standard checks. A pattern of collection suits, mechanics' lien claims or vendor judgments is a classic early indicator of the cash distress that frequently precedes financial statement manipulation, a point developed in Red Flags.

Probate files, divorce financial affidavits, and foreclosure complaints can disclose asset values and transfer histories that appear nowhere else. Treat those involving private individuals with the proportionality required by OSINT Ethics: use them where a defined investigative purpose exists, and do not republish personal details.

4 UCC filings, liens and judgments

Under Article 9 of the Uniform Commercial Code, a lender perfects a security interest in most personal property (equipment, inventory, receivables, deposit accounts by control, and so on) by filing a UCC-1 financing statement with the state filing office, typically the secretary of state for the debtor's state of organization. A filed financing statement is effective for five years; a UCC-3 continuation may be filed only in the six months before lapse (UCC § 9-515), and a lapsed filing cannot be revived, only replaced by a new UCC-1.^[3] Amendments, assignments and terminations are also recorded on UCC-3 forms.

For investigators a UCC search reveals: who lends to the entity; what collateral is pledged (a blanket lien on "all assets" or a specific description); whether collateral descriptions match assets the subject claims to own free and clear; and whether a lender has recently assigned or terminated its filing. A debtor that reports no borrowings but shows several UCC-1s, or that pledges the same receivables to multiple lenders, is a red flag for undisclosed liabilities and double-pledging schemes. Searches are by exact debtor name as it appears on the public organic record, so search variants and check the charter name first.

Other lien and judgment sources include federal tax liens (the IRS files a Notice of Federal Tax Lien in the county or state office designated by local law), state tax warrants, mechanics' liens on real property, judgment liens recorded after a money judgment, and Fed. R. Civ. P./state-court abstracts of judgment. Each is a recorded public claim against assets and a timeline marker for financial stress.

5 Property, deed and mortgage records

Real property records are maintained by county recorders, registers of deeds or equivalent offices and by assessors for tax purposes. The recorded instruments of interest are deeds (the chain of title shows grantor, grantee, consideration statement and date), mortgages and deeds of trust (lender and amount), assignments of mortgage, satisfactions, liens, and lis pendens notices. Assessor databases add parcel identifiers, assessed value and the mailing address for tax bills. Many counties now publish indexes online and sell images; some require a name or parcel search by subscription.

The analytical value is in the mismatches. A deed transferring a property to a family member or newly formed LLC for nominal consideration shortly before a lawsuit or regulatory action is a conventional badge of a fraudulent transfer, and a mortgage far larger than the purchase price may indicate inflated appraisal or cash-out refinancing. Purchases in the name of a limited liability company, trust or land-trust nominee are why real estate is a favored integration channel in money laundering; the public deed will usually show the entity but not the individual behind it, so the next step is the state corporate filing, then the registry and leak databases. In the United States, FinCEN's Residential Real Estate Rule targeting non-financed transfers to entities was a significant planned change in this area; its effective date has been postponed and its status should be confirmed against current FinCEN notices before relying on it.

6 SEC EDGAR and corporate filings

EDGAR, the SEC's Electronic Data Gathering, Analysis, and Retrieval system, is free and covers registered securities offerings and periodic disclosure by public companies. The SEC's fair-access policy caps automated retrieval at 10 requests per second and expects automated tools to identify themselves with a name and contact email in the User-Agent header.^[4] Key forms:

• 10-K / 10-Q — annual and quarterly reports with audited or reviewed financial statements, risk factors, legal proceedings and related-party disclosures.
• 8-K — current reports of material events; Item 4.02 (non-reliance on previously issued financial statements) and Item 4.01 (change of auditor) are among the most significant signals for restatement and audit risk.
• DEF 14A — proxy statements disclosing executive pay, related-party transactions and beneficial owners of 5% or more.
• Forms 3, 4 and 5 — insider holdings and trades; a pattern of insider selling ahead of bad news is a classic detection pivot.
• Schedules 13D / 13G — large-holder positions.
• Form D — notice of exempt private offerings, a useful source on startups and funds that are not otherwise registered.
• Comment letters — SEC staff correspondence on a filer's disclosures, released after review, which often reveal accounting questions months before any restatement.

Beyond the federal system, the state corporate filing (articles of incorporation, annual report, registered agent, and sometimes officer names) establishes that an entity exists, its formation date, its status (active, dissolved, revoked) and its registered agent address. Mass-registration addresses shared by hundreds of entities are a standard shell-company indicator. For foreign registries see Corporate Registries and Leak Databases. SEC enforcement releases, litigation releases and administrative proceedings are published on sec.gov and are an authoritative source on named defendants and settled orders (see Federal Enforcement Agencies).

7 FOIA and state open-records requests

When the record is not already published, a statutory request can reach it. The federal Freedom of Information Act, 5 U.S.C. § 552, obliges agencies to determine within 20 working days whether to comply with a request, subject to exemptions (for example for personal privacy, law-enforcement records, confidential commercial information and deliberative material) and to extensions in unusual circumstances. FOIA applies to federal executive agencies, not to courts, Congress or private companies. Every state has its own open-records statute with its own deadlines and exemptions; Pennsylvania's Right-to-Know Law, for instance, requires an initial response within five business days, which an agency can extend by up to 30 calendar days.^[5]

Effective requests share a few traits: they describe records, not questions; they identify a date range and custodian; they request electronic format; they ask for fee waiver where the public-interest test applies; and they are kept in a log with dates and tracking numbers, because appeal rights run from the agency's response or its failure to respond. Contracts, invoices, procurement files, inspection reports, grant files and meeting minutes held by public bodies are the usual targets in procurement and bribery inquiries, and make a natural source for anti-corruption OSINT. Released documents should be archived with the request, the cover letter and any redaction log as part of the file.

8 Forensic examination techniques

The preceding sections describe sources; this section describes the concrete procedures an examiner applies to them and the evidence each produces.

Technique 1: Lien-stack reconstruction. Pull every UCC-1, UCC-3, tax lien and judgment lien against the debtor and any name variants; order them by filing date; compute lapse dates (filing date plus five years; continuation window opens six months earlier); and compare collateral descriptions with the balance sheet. Worked example: a borrower reports $2.0 million of bank debt in its financial statements. The search shows three active filings: Lender A, blanket lien, filed 2022; Lender B, receivables, filed 2023; and a UCC-3 assignment of Lender B's filing to a factor in 2024. If the factor advanced $1.5 million against receivables and the financial statements show only the $2.0 million loan, a potential $1.5 million undisclosed liability exists, and the same receivables may be pledged twice. The work product is a dated lien schedule with certified search results, which supports a finding of non-disclosure, not a conclusion of intent.

Technique 2: Timeline correlation across record systems. Build one chronology merging docket entries, recording dates, corporate filings and SEC filings. Look for transfers inside the look-back windows used by avoidance law (commonly two years under 11 U.S.C. § 548 for fraudulent transfers and 90 days for preferences, or one year for insiders). Worked example: suit filed 3 March; deed of the debtor's $850,000 house to a new LLC for "$10 and other consideration" recorded 19 February; LLC formed 11 February. Three events in 20 days, all before service, is a classic badge-of-fraud cluster. Output: a dated exhibit with each source document attached, giving a trustee or counsel a basis to plead avoidance.

Technique 3: Consideration and valuation test. For each deed, compare stated consideration or transfer-tax stamps to the assessor's value and recent comparable sales. Example: assessed value $850,000, recorded consideration $10, no mortgage satisfaction: implied transfer below reasonable equivalent value, so the examiner then looks for the transfer-tax affidavit or a related loan.

Technique 4: Party and relationship mapping. Extract every party, attorney, registered agent, notary and signatory from the records and load them as nodes in a link-analysis table (entity, role, source, date). Recurrence is the signal: the same registered agent address on 40 entities, the same notary on deeds in a disputed chain, or the same officer appearing across failed companies. Output: a relationship table that points to beneficial-ownership work; each edge must cite a document.

Technique 5: Restatement and disclosure analytics on EDGAR. Use full-text search to compare risk-factor and legal-proceeding language across consecutive 10-Ks; track auditor changes (Item 4.01) and non-reliance notices (Item 4.02); and compute simple ratios across years. Worked example: revenue up 30% while operating cash flow fell from $12 million to $4 million and receivables rose from 18% to 31% of revenue: days sales outstanding (receivables divided by revenue times 365) lengthens from about 66 to about 113 days, a standard indicator of aggressive revenue recognition worth pairing with Benford testing of disclosed figures and the methods in Fraud Detection Analytics. Insider-sale clustering is checked by tallying Form 4 sales in the 90 days before an adverse 8-K.

Technique 6: Open-records request audit trail. For each request, log the date sent, tracking number, statutory deadline (20 working days federally), response, redaction exemptions cited and appeal outcome. Compare produced contract totals with vendor payments in the entity's ledger: a $1.2 million purchase-order series paid to a vendor while only $0.9 million of contracts is produced indicates either missing records or off-contract payments, a lead for billing-scheme testing.

Evidence produced and its weight. Certified court and recorder copies and SEC filings are self-authenticating or readily admissible public records; portal screenshots, third-party aggregators and uncertified printouts are leads that need corroboration. Record the portal, query terms, date and time, and hash saved files (see Chain of Custody).

9 Limits, verification and red flags

• Name collisions. Court and registry searches return people and companies with the same or similar names. Confirm identity with at least two independent identifiers (middle name, address history, case-specific detail) before attributing a record to anyone, and say when you have not.
• Allegation versus finding. A complaint is an allegation. Distinguish pleadings from findings, judgments, consent decrees and convictions, and record the disposition. Dismissed, expunged or sealed matters require extra care.
• Currency. Portals lag; liens may be satisfied but not yet shown as released. Note the retrieval date on every item.
• Completeness. An empty result is evidence of nothing without knowing the system's scope. A clean US federal search does not cover state courts, foreign jurisdictions or arbitration.
• Authentication. For anything intended for court, obtain certified copies from the clerk or recorder; evidence rules treat certified public records as self-authenticating.

Detection patterns. Frequent changes of registered agent or counsel, repeated judgments paid just before a financing event, newly recorded liens on assets the borrower claims as unencumbered, entity names that mirror a dissolved predecessor, and serial small-claims or collection suits all merit follow-up. None is proof of wrongdoing; each is a lead to be tested against primary documents.

See also: Asset Tracing, OSINT Tools, Corporate Registries and Leak Databases, Web Archives and Domain Intelligence, Chain of Custody.

References

1. Administrative Office of the U.S. Courts. "PACER Pricing: How fees work." pacer.uscourts.gov
2. Free Law Project. "RECAP" and CourtListener. free.law/recap
3. UCC § 9-515 (duration and continuation of financing statements); see DLA Piper, "Maintaining perfected security interests under the UCC" (March 2026). dlapiper.com
4. U.S. Securities and Exchange Commission. "Accessing EDGAR Data" (fair access policy). sec.gov
5. 5 U.S.C. § 552(a)(6)(A) (FOIA); Pennsylvania Office of Administration, Right-to-Know Law. pa.gov