Case study: tracing fraud proceeds through England & Wales – financial forensics

A business owner in the south of England discovered, in the spring of 2025, that a senior employee had spent the better part of two years diverting client payments into a web of layered accounts. By the time the fraud surfaced, the records were fragmented, several of the receiving accounts had been closed, and the money – a sum in the high six figures – appeared to have disappeared entirely. It had not.

Asset tracing through England & Wales, even where the documentary record is incomplete, can reconstruct the payment trail using a combination of third-party disclosure orders, banking disclosure, and forensic reconstruction of correspondent flows. The funds may be harder to see – but value rarely evaporates. It moves, and movement leaves a trace.

This anonymised case study covers the situation we found, the strategy we applied, the process that followed, and the lessons that transfer to similar matters.

Situation: a fragmented paper trail and a closing window

The client – a privately held professional services firm – came to us after an internal investigation had stalled. Their own records showed outbound payments. What they could not show was where those payments had gone after the first receiving account. The employee had used a combination of personal accounts, a dormant company, and two accounts held at smaller payment-services providers. Several of those accounts had been closed and the providers had indicated they no longer held current transaction data.

The fear, and it is a common one, is that a closed account equals a dead trail. In our experience, that is rarely true. Banking and payment-service records are subject to statutory retention requirements in England & Wales, and third-party disclosure obligations survive account closure. The data was still there. It simply needed to be compelled.

Two factors made timing urgent. First, we identified that one downstream account remained active and continued to receive small deposits. That account was a live dissipation risk. Second, some of the payment-services providers were approaching the outer edge of their retention windows. Delay would have narrowed our options materially.

For a confidential read on whether a fragmented trail like this one is still recoverable, request a case review: info@axiomtracel.com

Strategy: disclosure first, freezing where the risk is live

The strategy centred on two simultaneous tracks. The first was a without-notice freezing application over the one account we had identified as still active. The second was a structured disclosure programme using a Bankers Trust order directed at each institution that had held a receiving account.

The without-notice approach is standard where a live dissipation risk exists. A freezing application made on notice alerts the respondent, who may then move or exhaust available funds before the order takes effect. Speed, not thoroughness, governs the first 48 hours. We prepared and submitted the freezing application within a working day of instruction.

The Bankers Trust order track ran in parallel. This instrument compels a bank or payment-services provider to disclose information about the customer's account – transaction records, beneficiary details, counterparty account numbers – where fraud is alleged and the claimant can demonstrate a good arguable case. Each disclosure response opened the next layer of the structure.

We also considered a Norwich Pharmal order at the outset, directed at the employer's own payroll processor to confirm the precise dates and amounts of the intercepted client payments. That step filled a gap in the claimant's own records that would otherwise have undermined the quantum calculation at any later enforcement stage.

Process: reconstructing the trail layer by layer

Asset tracing in England & Wales is a follow-the-money exercise across documentary sources. In this matter, we worked through four distinct layers.

Layer one was the internal records of the client firm itself – partial, but enough to establish the initial misdirected payments and approximate amounts. We reconstructed the payment schedule from available data, flagged gaps, and used the Norwich Pharmal disclosure to close them.

Layer two was the first-generation receiving accounts. The Bankers Trust responses from the two main banks took between two and four weeks to arrive. They confirmed the amounts received, the dates, and – critically – a series of onward transfers, many of which had been made on the same day as the inbound payment. That same-day pattern is a strong indicator of designed dissipation, not ordinary expenditure.

Layer three covered the payment-services providers. One provider had closed the account but confirmed it held archived data. After a second disclosure application, that data showed a series of transfers to an account held in a different name at a clearing bank – a name the client had never encountered. That account became the focus of the freezing order.

Layer four was corporate. The new account name resolved to a company with a single director and no trading history. A further disclosure application against Companies House records and the relevant bank established that the beneficial user of the account was, in substance, the original employee. The structure was thin – a shell with minimal paperwork – but it had been enough to slow the initial investigation.

We coordinate closely with local counsel in England & Wales at each procedural stage; local procedure governs the filing and the return date, and local admitted counsel must sign and present the applications. Our role is investigation, reconstruction, and strategy. Theirs is advocacy before the court. The combination of those two functions – working in close coordination – is what allows an application to be both forensically grounded and procedurally correct.

For a confidential review of a matter involving layered accounts in England & Wales, contact info@axiomtracel.com or visit our England & Wales jurisdiction page.

Lessons for follow-the-money tracing in England & Wales

Several patterns from this matter recur across similar cases. They are worth setting out plainly.

Incomplete records do not mean an irrecoverable trail. Payment data exists at each institution that touched the funds. The question is whether it has been compelled in the right order, before retention windows close. The Bankers Trust order is the standard instrument in England & Wales for that task, and it works across banks and payment-services providers alike.

Same-day or next-day onward transfers are a signature of designed dissipation, not incidental movement. When we see that pattern – particularly involving dormant or recently activated companies – the corporate layer warrants immediate scrutiny. A thin shell discovered early is recoverable through further disclosure. Left unexamined, it can route funds offshore before a freezing order is in place.

The interplay between disclosure and freezing matters enormously. Freezing without disclosure tells you where the money is today but not where it went yesterday. Disclosure without freezing gives you the map but allows the territory to change. Running both tracks simultaneously, where the facts support it, is the approach we follow in England & Wales matters where dissipation risk is present.

Finally: the myth that missing records end the investigation is itself a dissipation tool. We have seen structures deliberately designed around gaps in a client's own records – the assumption being that if the victim cannot see the first transfer clearly, they will not pursue it. The disclosure regime in England & Wales is designed precisely to defeat that assumption.

For a wider view of how asset tracing is structured across financial-forensics engagements, see our Financial Forensics insight hub, or review a related cross-border enforcement case study: Case study: enforcing an award against Luxembourg assets.

About Axiom Trace

Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed. Our follow-the-money investigations reconstruct payment trails from partial records and identify where value settled – even when the paper trail appears to have gone cold. We have coordinated tracing matters spanning multiple institutions and jurisdictions, and we are direct about what is realistically recoverable at the outset. To discuss a matter, contact info@axiomtracel.com.

Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.