Skip to content

Glossary · Digital forensics

Asset tracing

Also called: Asset recovery, Following the money, Fund tracing

Asset tracing follows misappropriated funds or property through the transactions and entities used to move them, with the goal of finding assets a court can actually reach. Locating the money is rarely the hard part — the difficulty is finding it somewhere a judgment can be enforced before it moves again.

Speed is the whole strategy

Assets move faster than litigation. Funds can cross several jurisdictions in a day, and each hop adds a legal process that takes months to unwind.

This inverts the usual sequencing instinct. The tracing work that matters most happens before any claim is filed, and the first substantive step is frequently an application for a freezing or preservation order rather than a complaint. A perfectly reasoned tracing report delivered after the funds have been dissipated documents a loss rather than preventing one.

The layering patterns to expect

Money intended to be hidden is moved through recognisable structures:

  • Corporate layering — funds routed through entities in jurisdictions with limited beneficial-ownership disclosure.
  • Nominee ownership, where the registered holder is a family member, employee or professional intermediary.
  • Conversion into assets that are less traceable and easier to move — property, art, precious metals, cryptocurrency.
  • Commingling with legitimate funds, which raises a real legal question about whether the traced money retains its identity in the mixed account.
  • Rapid cycling through multiple accounts, designed to exhaust the patience and budget of anyone following.

Commingling deserves specific attention because it is a legal problem as much as an accounting one: jurisdictions differ in the tracing rules they apply to mixed funds, and which rule governs can determine whether a claim over the remaining balance succeeds.

What digital evidence contributes

Traditional tracing works from financial records obtained by subpoena. Digital forensics contributes the material those records do not contain:

  • Communications establishing intent, coordination and knowledge among participants.
  • Documents on devices — spreadsheets tracking the actual arrangement, drafts of the paperwork used to paper it, correspondence with intermediaries.
  • Metadata establishing when structures were created relative to the events in dispute, which frequently contradicts the account given.
  • Search and browsing history showing research into jurisdictions, structures and concealment methods.
  • Wallet artifacts connecting a person to on-chain addresses, which is usually the strongest available link between blockchain analysis and an identifiable defendant.

The combination is what makes a case. Bank records show that money moved; devices show who decided it should and why.

Enforceability is the real objective

It is entirely possible to trace funds precisely and recover nothing. Assets located in a jurisdiction that will not enforce the judgment, held by an entity with no reachable presence, or already dissipated are knowledge rather than recovery.

The practical discipline is to assess enforceability alongside the trace rather than after it, and to be willing to stop. Continuing to spend on tracing after the realistic recovery is exceeded by the cost of pursuing it is a decision worth making deliberately, and it is one clients appreciate being told about early rather than discovering at the end.

From our work

Dealing with asset tracing in a live matter?

Our examiners and testifying experts work these questions for a living. Tell us what you're facing.

Reviewed by Law & Forensics. See our editorial standards.