Cross-border financial misconduct cannot be traced by converting bank stateÂments into one spreadÂsheet. Each jurisÂdiction has different entities, currencies, record holders, secrecy rules and legal proceÂdures. A reliable forensic invesÂtiÂgation preserves proveÂnance, reconÂciles transÂacÂtions and uses the correct cooperÂation channel for each type of evidence.
Define the allegation and jurisdictions
Identify the suspected conduct, relevant period, people, entities, assets and countries. Separate fraud, bribery, tax offences, money laundering, sanctions issues and civil misapÂproÂpriÂation. The legal elements and authority to obtain records differ, even when the same transfer is relevant to several issues.
Build an entity and account map
Collect registry filings, beneficial-ownership inforÂmation, bank identiÂfiers, contracts and addresses. Resolve legal entities rather than matching on names alone. Record ownership and control changes by date so that current filings are not projected backwards.
Create a normalised transaction ledger
Preserve original stateÂments and payment messages, then standardise dates, currencies, account identiÂfiers and referÂences in a working copy. Retain both transÂaction currency and reporting currency with the exchange-rate source. Link every derived field back to the original record.
Reconcile source, route and use
For each flow, identify the payer, origiÂnating account, interÂmeÂdiÂaries, benefiÂciary, purpose, fee and ultimate use. Do not infer control from receipt alone. Apply our cross-border illicit-flow framework to distinÂguish generÂation, movement and use of funds.
Match requests to the correct channel
Public records, voluntary production, regulatory exchange, FIU intelÂliÂgence, police cooperÂation and mutual legal assisÂtance have different admisÂsiÂbility and confiÂdenÂtiality rules. The 2025 FATF, Egmont, INTERPOL and UNODC interÂnaÂtional-cooperÂation handbook promotes faster informal cooperÂation while preserving the need for approÂpriate formal processes.
Protect intelligence and personal data
Record use restricÂtions, permisÂsions and onward-disclosure limits. Egmont’s principles for FIU inforÂmation exchange provide a framework for secure, authoÂrised use. Journalists and private invesÂtiÂgators must not treat protected financial intelÂliÂgence as freely publishable evidence.
Test business purpose and economic substance
Compare contracts, invoices, goods, services, employees and decision-making with payments and accounting entries. Review loans, royalties, management fees and asset transfers. Our offshore corporate tax invesÂtiÂgation shows why lawful strucÂturing, avoidance and evasion must remain separate concluÂsions.
Use secondary reporting as a lead
Malta Media’s report on gambling revenues crossing corporate and national layers offers a practical mapping example. Its internal-document and ownership claims should be indepenÂdently authenÂtiÂcated and checked against registries, accounts and responses.
Prepare a jurisdiction-by-jurisdiction evidence matrix
List each allegation, required proof, record holder, access route, legal restriction, request status and corrobÂoÂration. DistinÂguish intelÂliÂgence, admisÂsible evidence and findings. Give affected parties a fair opporÂtunity to explain transÂacÂtions before presenting an inference as fact.