The wire confirmations show three transfers. Internal records show nine. Somewhere between those numbers, a nine-figure sum moved through a web of shell companies – and the claimant's lawyers were being told the trail had gone cold.
It had not. In our experience, a payment trail rarely disappears entirely; it fragments. Each fragment – a correspondent bank reference, a nominee directorship appointment, a single UBO filing predating a restructuring – is a node. Mapping the nodes maps the money. This case study describes how we reconstructed a layered shell-company payment web, where value had settled, and what allowed enforcement to follow.
The sections below cover the situation as presented, the tracing strategy we applied, the process step by step, and the lessons that transfer to similar mandates.
Situation: a corporate fraud concealed by layered entities
A mid-sized trading group in Central Europe discovered, in the spring of 2025, that a senior officer had diverted contract revenues over approximately three years. The disclosed position showed that funds had left the group's main operating account and settled in three supplier accounts. Internal forensic work – incomplete at the point of referral – had identified the three counterparties as shell entities with nominee directors.
What made the matter difficult was the structure beneath those three shells. Each had received funds and then paid onward within days – sometimes hours. The receiving banks were in different jurisdictions. One intermediary was a limited partnership registered in a jurisdiction with no public beneficial-ownership register at the time of the transactions. Another was a trust structure whose settlor was listed as a law firm acting on behalf of an unnamed client.
The claimant's pain was precise: partial records, fast-moving funds, and layered entities designed to make reconstruction look impossible. Insolvency practitioners appointed to the trading group had preserved what they could, but the picture they held was a first-generation view only – the immediate recipients, not the ultimate destination.
The referral came from the appointed practitioners' counsel. The question was not whether fraud had occurred; that was already established. The question was whether value was still reachable – and where.
Strategy: follow the corporate layer, not just the cash
Tracing that stops at the first shell entity loses the money. The shell is not the destination; it is the mechanism. Our strategy in this matter was to map the corporate layer in parallel with the payment trail – because the two overlap in ways that create recoverable intelligence.
We began with a Bankers Trust order application, which compelled the claimant's primary banking relationships to disclose transaction records beyond what the internal investigation had surfaced. That disclosure added four additional intermediary accounts. From those accounts, a pattern emerged: the transfers were timed to clear during public-holiday windows in the forum jurisdiction, reducing the risk of an urgent freeze before funds moved on.
Simultaneously, we ran a corporate mapping exercise across the entities identified to date. UBO registers in the jurisdictions that maintained them were searched. Where registers were incomplete or inaccessible, we used corporate-filing cross-references, common registered-address patterns, and shared nominee-director data to build a link map. In this matter, a single nominee director appeared as an officer of all three first-generation shells and two of the second-generation entities identified through banking disclosure.
That connection was the pivot. It allowed us to move from an entity-by-entity view to a network view – and to identify a beneficial owner sitting two layers behind the original transfers.
The strategy choice at that point was whether to seek a worldwide freezing order immediately or to continue tracing. We advised against an immediate application in the primary forum, because the assets by then had moved to a jurisdiction with a strong enforcement regime – and a better-targeted application there would reach more value. Timing a freezing application is as important as making one.
Process: from partial records to a traceable network
The reconstruction proceeded in four phases. Each built on the last.
- Phase 1 – document recovery: We identified gaps in the internal records and obtained supplementary banking disclosure through a Bankers Trust order. The additional records covered thirteen months not previously captured.
- Phase 2 – entity mapping: Using the expanded transaction data, we identified seven additional entities in the payment web. Corporate-filing cross-references and UBO register searches confirmed three beneficial-ownership links the claimant had not previously identified. The trust structure was subjected to sham-trust analysis; the analysis produced evidence supporting a challenge to the stated independence of the trust assets.
- Phase 3 – value settlement: Asset tracing at this stage shifted from following payments to identifying where value had come to rest. Two of the seven additional entities had been wound down after the transfers cleared. Their assets – on the public record – had been distributed to a holding company in a jurisdiction with which the primary forum had a bilateral enforcement arrangement.
- Phase 4 – interim relief coordination: With a recoverable asset pool identified and a jurisdiction confirmed, we coordinated a without-notice application for a proprietary injunction in the enforcement jurisdiction. Local counsel acted on the ground. The application was made on a without-notice basis – standard in cases involving risk of dissipation – and was heard within days of the filing.
We have traced matters of comparable complexity before. The consistent finding is that the records required for reconstruction exist in more places than the fraudster anticipates. The nomination paperwork, the corporate secretarial files, the correspondent bank's own compliance records – each of these is a potential source when the primary banking chain has been deliberately obscured.
For a confidential assessment of whether your payment trail is reconstructable, contact info@axiomtracel.com.
Lessons: what transfers to the next matter
Three things decided this matter. They recur across shell-company payment-web cases.
First, the corporate layer and the payment trail are the same investigation, not two separate workstreams. Nominee directors, registered addresses, and UBO filings carry the same intelligence as bank transfer records – sometimes more, because they are harder to destroy in the short window after discovery.
Second, missing records are not a dead end. A Bankers Trust order or a Norwich Pharmal order – or equivalent disclosure mechanisms in the relevant jurisdiction – can recover data that the fraudster assumed was beyond the claimant's reach. We reconstructed over a year of additional transaction history in this matter through banking disclosure alone. The myth that a missing paper trail kills a case is exactly that.
Third, the timing of an interim relief application is a strategic choice, not a reflex. In this matter, waiting to trace the asset pool into a more cooperative jurisdiction produced a significantly better outcome than an immediate application in the primary forum would have done. Speed matters – but targeted speed matters more.
The follow-the-money methodology described here is explored further in our financial forensics practice overview and in our detailed analysis of tracing fraud proceeds through company structures. If you are assessing a matter involving layered entities and partial records, the asset tracing service page sets out how an engagement typically runs from first instruction.
If funds have already moved, time matters – request a confidential case review at info@axiomtracel.com.
About Axiom Trace
Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed. We regularly advise on matters where records are incomplete and the apparent trail has gone cold. In our experience, value leaves traces in more places than most initial investigations capture. To discuss a matter, contact info@axiomtracel.com.
Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.
Recovering cross-border or crypto assets?
Confidential first review. We map tracing and recovery options and tell you honestly whether a matter is worth pursuing.
Request a case review