Case study: tracing fraud proceeds through Nevis – financial forensics

A client's funds left their account cleanly. The receiving entity was a Nevis LLC with a nominee director and no visible beneficial owner. Within days, the balance had been split and forwarded again. On paper, the trail looked dead.

It was not dead. Tracing fraud proceeds through a Nevis structure is difficult, but incomplete records rarely end a well-run investigation. The tools available – Bankers Trust orders, third-party disclosure, correspondent-bank subpoenas, and beneficial-ownership analysis – can reconstruct a payment trail even when the obvious documents are absent. This case study describes how that reconstruction works in practice.

The account that follows is anonymised. Names, amounts, and identifying details have been changed. The method is real.

Situation: funds absorbed by a layered Nevis structure

The matter arose in the second half of 2024. A mid-sized trading company in Southeast Asia discovered that a supplier relationship it had maintained for over a year was fraudulent. Payments totalling funds in the high six figures had been made over several months to an entity that, on closer inspection, had no genuine operations.

The receiving entity was a Nevis limited liability company. Its registered agent held nominee membership interests. The sole contact the client had ever dealt with communicated only by encrypted messaging. The trading company's own bank confirmed only that wire transfers had cleared to a foreign account. No further detail was voluntarily provided.

The client came to us after an initial approach to local lawyers stalled. The LLC structure in Nevis provides strong confidentiality by default; without the right legal process applied in the right sequence, even a well-motivated creditor can spend months going in circles. The client's concern was simple: had the money already been moved onward, and was any of it still reachable?

What made this matter tractable?

Several features of the fact pattern made structured tracing viable, even without complete records. First, the transfers had all passed through the international banking system. That means correspondent banks handled the flows, and correspondent banks retain records. Second, the Nevis LLC had to interact with at least one financial institution to receive and move value – and that institution had its own compliance obligations. Third, the fraudster had communicated with the client. Digital metadata and communication patterns are evidence.

In our experience, the instinct to treat a Nevis structure as an impenetrable wall is understandable but often wrong. The confidentiality of an offshore LLC protects the structure from casual inquiry, not from properly framed legal process. The distinction matters enormously at the investigation stage.

What was missing: direct account statements, any contract between the parties that named real principals, and any voluntary cooperation from the receiving institution. What we had: SWIFT reference data from the client's own bank, the registered address of the LLC, the messaging records, and timing patterns across the transfers.

Strategy: reconstruct the trail from its edges

We did not try to open the Nevis structure from the front. That would have required proceedings in a jurisdiction where our client had no judgment and no immediate foothold. Instead, the strategy was to reconstruct the trail from both ends and work inward.

From the sending end, we worked with the client's bankers to extract every piece of available SWIFT data. Correspondent-bank routing information, value-date sequencing, and the beneficiary institution identifiers gave us a partial map. We identified two intermediate correspondent banks, one in a major European financial centre and one in a Gulf state. Both were common-law-adjacent jurisdictions with working mutual-assistance mechanisms.

From the receiving end, the follow-the-money work focused on identifying where value had settled after the Nevis LLC disbursed it. We used open-source corporate registry data, domain registration records, and communication metadata to build a hypothesis about the ultimate beneficial owner. That hypothesis was tested against financial-intelligence databases before any formal application was made.

The legal instruments chosen were a Bankers Trust order, directed at the correspondent bank in the European centre, and a third-party disclosure order in a second forum where the fraudster appeared to hold a secondary account. Both applications were made without prior notice to the defendant – a standard precaution in dissipation-risk situations.

For a broader picture of how this kind of follow-the-money work is structured, see our financial forensics insight series, which covers payment-trail reconstruction across multiple asset classes and jurisdictions.

Process: from partial records to a full trail map

The Bankers Trust order produced account records within approximately three weeks of the application. Those records showed that the Nevis LLC account had received the client's funds and then disbursed the balance in four tranches over a forty-eight-hour window. Three of those tranches went to accounts in a Caribbean jurisdiction. The fourth – and largest – went to a real-estate holding entity in a Central European country.

The real-estate thread was the productive one. Corporate registry filings in that country showed the holding entity had recently acquired a residential property. The beneficial owner of that entity, once identified through UBO register analysis and local company filings, matched the profile we had assembled from the messaging metadata.

That identification allowed the client to apply for a proprietary injunction over the real property, on the basis that the asset had been acquired with the client's traceable funds. The injunction was granted on an without-notice basis. The property was registered subject to a caveat pending further proceedings.

The three Caribbean tranches were harder. Two were traced to a centralised virtual-asset service provider where the funds had been partially converted. The third had been wired to a further offshore entity. Work on those threads continued in parallel; the approach to the VASP involved a disclosure order against the exchange in a jurisdiction where it held a licence. Our wider approach to cases involving this kind of offshore-to-crypto routing is set out in our analysis of correspondent bank tracing, which addresses similar layering patterns in a different offshore context.

For jurisdiction-specific background on the legal environment relevant to this matter, see our Nevis jurisdiction guide.

Lessons for practitioners and claimants

Three things made recovery possible here that would not have been obvious at the outset.

First, the sending bank's records were far richer than the client expected. Most clients assume their own bank will provide only a debit confirmation. In reality, SWIFT message data retained by correspondent banks can map a payment chain across three or four intermediaries, giving investigators a working hypothesis before any formal disclosure application is made.

Second, the Nevis structure provided opacity, not invisibility. The LLC concealed the beneficial owner from casual inspection. It did not conceal the flow of funds through the international banking system. Attacking the structure directly was unnecessary; following the money around it was faster and more productive.

Third, the fraudster's consolidation move – the large transfer to the real-estate entity – created a traceable, immovable asset. Fraudsters who convert proceeds into real property often believe they are safer. In jurisdictions with functioning land registries and UBO-register obligations, the opposite is frequently true.

The myth that incomplete records make a trail unrecoverable is one we encounter regularly. In this matter, the client had almost nothing on arrival. We reconstructed the full disbursement map from correspondent-bank data, open registries, and a single disclosure order. The paper trail had gaps; those gaps were filled by working the edges rather than the centre.

If your matter involves funds that have moved through a layered offshore structure and you are not sure whether a trail still exists, request a confidential case review. The earlier we can assess the available data, the more options remain open. Contact us at info@axiomtracel.com.

About Axiom Trace

Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed. In matters like the one described here, our value is in reconstructing payment trails from partial records and identifying where value has actually settled, not where the paperwork suggests it should be.

We do not promise recovery. What we can do is tell you, quickly and honestly, whether a trail is worth following and what it will take. To discuss a matter, contact info@axiomtracel.com.

Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. The steps described reflect general practice; local admitted counsel must act on the ground in Nevis and in any other jurisdiction where proceedings are filed. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.