Home/Insight/Financial Forensics/Identifying dissipation of assets before enforcement
Guide · Financial Forensics

Identifying dissipation of assets before enforcement

Follow-the-money tracing of dissipated and hidden assets.

By 15 min read

Assets do not vanish. They move – and movement leaves traces in bank records, corporate filings, property registers, and blockchain ledgers. The question for a creditor, insolvency practitioner, or referring lawyer is rarely whether a trail exists; it is whether that trail can be read quickly enough to support an enforcement application before value disappears again.

Identifying dissipation of assets before enforcement means systematically mapping where value has gone – using asset tracing, follow-the-money analysis, and disclosure tools – to give courts and practitioners the evidence needed to freeze what remains. The process works even when records are partial, because dissipation itself generates secondary traces: unexplained account closures, sudden transfers to connected parties, and gaps that a trained analyst can read as directional signals.

This guide walks through the dissipation-identification process step by step: the early indicators, the forensic method, the legal instruments that open closed doors, the cross-border complications, and the practical decisions that determine whether an enforcement application will land on solid ground.

What is dissipation, and why does it matter for enforcement?

Dissipation is the deliberate or systematic removal of assets from reach before a creditor can enforce. It is the central risk in any contested recovery: a judgment or award that arrives after the assets have moved is, in practice, worth very little without a parallel effort to trace and freeze.

Dissipation typically accelerates when a defendant learns – or suspects – that proceedings are coming. That is why follow-the-money analysis must begin before any formal step that tips off the other side. In our experience, the window between first suspicion and first dissipation is often measured in days, not weeks.

The practical significance is straightforward. A creditor who can map where assets have gone – and demonstrate to a court that dissipation is occurring or imminent – stands in a very different position from one who can only point to a loss. The former can support an application for a worldwide freezing order or a proprietary injunction. The latter may find that the court has no viable target to protect.

Identifying dissipation is not just a forensic exercise. It is a pre-litigation strategy that determines whether enforcement is viable at all.

What are the early indicators of asset dissipation?

The earliest indicators are almost always behavioural, not forensic. A defendant who begins moving assets leaves footprints in conduct before the financial records catch up.

Watch for sudden changes in payment patterns: wire transfers to unfamiliar accounts, conversion of liquid assets to bearer instruments or cryptocurrency, and the rapid closure of accounts that previously received regular flows. In corporate matters, watch for unusual intercompany transfers, the disposal of subsidiaries at below-market values, and the insertion of new entities into ownership chains.

Real property is a common vehicle for dissipation. A defendant who transfers registered property to a spouse, a family trust, or a newly formed entity during the period of dispute is generating a traceable signal – even if the transfer is dressed as a gift or a legitimate restructuring. Land registry searches in most jurisdictions return results within hours to days and can reveal transfers that occurred very recently.

On the digital side, on-chain movements are often the clearest early signal. Public blockchains are transparent: wallet-to-wallet transfers are visible in real time, even when the identities behind the wallets are not. A creditor with access to blockchain-analytics tools can, in appropriate cases, monitor wallets known to be associated with a defendant and receive alerts when funds begin to move.

The key question at this stage is not "where is the money?" but "is value leaving the identifiable estate?" That distinction drives the urgency of the next steps.

How does a follow-the-money investigation actually work?

Follow-the-money analysis is a structured reconstruction of value flows from source to destination, working from whatever records are available and filling gaps through lawful investigative tools. It is not linear in practice; it branches at every point where value could have moved in more than one direction.

The starting point is always the last known position of the funds. From there, the analyst works forward – tracing each transfer, conversion, and withdrawal – and backward, identifying the structures through which the defendant historically managed assets. Backward analysis often reveals the target before the forward trace does: a defendant who routinely used a particular offshore account to park profits will frequently reuse the same structure when moving disputed funds.

Incomplete records are the norm, not the exception. In our experience, payment trails through layered accounts routinely pass through jurisdictions where direct document access is limited. The response is not to stop at the gap. A Bankers Trust order, directed at a correspondent bank in a cooperative jurisdiction, can unlock account information that the primary bank has withheld. A Norwich Pharmal order can compel a third party – a financial institution, a payment platform, or a registered agent – to identify the account holder or beneficial owner behind an otherwise anonymous transfer.

Where funds have passed through one or more corporate layers, the forensic analyst maps the ownership chain simultaneously with the payment trail. The two threads intersect: the corporate layer that received the funds is almost always the entity whose beneficial ownership needs to be established. UBO registers, where publicly accessible, provide a starting point. Disclosure orders and third-party disclosure applications fill the gaps where registers are sealed or out of date.

Asset tracing across this kind of layered structure is rarely quick. But the pace of the investigation can be managed. Not all threads need to be fully resolved before an application for interim relief is made. Courts can act on a well-evidenced partial picture – provided the evidence that is presented is reliable and the gaps are honestly acknowledged.

How do cross-border movements complicate the picture?

Most dissipation involves at least one cross-border element. That is partly tactical – moving funds offshore raises the practical and legal cost of recovery – and partly structural, because sophisticated defendants almost always hold assets through multi-jurisdictional arrangements before any dispute arises.

The complications fall into two categories: legal and practical. Legally, each jurisdiction has its own rules for freezing assets, compelling disclosure, and recognising foreign orders. A worldwide freezing order granted in one forum does not automatically bind a bank in another. Enforcement of the order in the second jurisdiction requires either a local application or, where available, recognition of the foreign order under domestic procedure.

Practically, the challenge is time. A transfer that crosses three correspondent-banking legs can settle in under 24 hours – faster than a without-notice freezing application can be heard in many courts, let alone enforced abroad. That is why the dissipation-identification phase must run ahead of the legal process, not alongside it. By the time an application is ready to file, the tracing picture should already show where the money is now, not where it was when the fraud was first discovered.

For crypto assets, the cross-border problem is different in character. On-chain movements are jurisdictionally neutral: a transfer from one wallet to another does not, of itself, engage any particular legal system. The choke points are the off-ramps – centralised exchanges, virtual-asset service providers (VASPs), and stablecoin platforms through which digital assets are converted to fiat or withdrawn. A disclosure order directed at a VASP in a cooperative jurisdiction can, in appropriate cases, identify the account holder and support a freezing application. Stablecoin issuers can, on appropriate legal process, freeze specific token balances before conversion.

For practitioners managing matters that span multiple legal systems, the sequencing of applications is as important as the applications themselves. Filing in the wrong forum first can alert the defendant, exhaust a without-notice advantage, or produce an order that cannot be enforced where the assets actually are. We regularly advise on which forum to approach first and in what sequence to layer the relief.

To see how cross-border tracing operates in practice, the Gibraltar early-morning freezing case study illustrates what the sequencing decisions look like under real time pressure.

A dissipation investigation that relies only on voluntarily disclosed records will almost always hit a wall. The defendant who is actively moving assets is not going to cooperate. The instruments that matter are compulsory disclosure tools – obtained from a court, directed at third parties who hold records, and served without warning where the risk of tipping off the defendant makes prior notice unacceptable.

The Norwich Pharmal order is the most commonly used disclosure instrument in the common-law world. It compels a third party – a bank, a registered agent, a payment processor – to provide information that identifies the wrongdoer or the destination of traced funds. The application is typically made without notice. The respondent is not the defendant; it is a neutral party who happens to hold the relevant records.

The Bankers Trust order operates similarly but is directed specifically at banks in tracing contexts. Where a defrauded claimant can show that their money passed through a particular account, a Bankers Trust order can compel the relevant bank to disclose the account details, transaction history, and any know-your-customer records it holds. In a well-resourced matter, parallel Bankers Trust applications across two or three jurisdictions can significantly compress the timeline for establishing where funds settled.

A proprietary injunction can be granted at an early stage to restrain dealings with assets that are, or represent, the claimant's property. Unlike a freezing order, which prevents disposal of a defendant's assets to preserve them for judgment, a proprietary injunction asserts that the claimant has a direct proprietary interest in the specific asset. This distinction matters for priority: a proprietary claim ranks above the defendant's unsecured creditors in insolvency.

Where the defendant's identity is unknown – as is common in crypto fraud – a proprietary injunction can be granted against "persons unknown". Proceedings can, in appropriate cases, be served by NFT or airdrop on unknown crypto defendants, satisfying service requirements without the need to identify the defendant first.

Gagging orders – formally, no-notification orders – are available alongside disclosure applications to prevent the third-party respondent from alerting the defendant that the order has been served. Without a gagging order, a bank that receives a disclosure application may notify the account holder as a matter of policy, triggering exactly the accelerated dissipation the order was designed to prevent.

The steps above define the investigative toolkit. Whether those tools are available in any particular matter depends on the forum, the evidence threshold, and the timing. A confidential case review will tell you which apply to your situation – contact us at info@axiomtracel.com to discuss.

How do you distinguish legitimate restructuring from dissipation?

Not every asset movement is dissipation. Defendants will frequently argue that transfers occurred for legitimate commercial reasons: tax planning, refinancing, ordinary group restructuring, or arm's-length sales. The forensic task is to distinguish the two – and to produce evidence that will persuade a court.

The indicators that point toward dissipation rather than legitimate transfer are well understood in practice. Timing is the most reliable: a transfer that occurs shortly after the dispute arises, or after the defendant received notice of a claim, sits in a very different category from one that preceded the dispute by years. The identity of the transferee matters too. A transfer to an independent third party at market value is harder to impugn than a transfer to a spouse, a family vehicle, or a newly incorporated entity with no commercial history.

Value is the third indicator. A transfer at a significant undervalue – particularly one accompanied by contemporaneous evidence that the transferor knew a claim was coming – may be unwound through insolvency or transaction-avoidance procedures. This is not automatic; the legal tests vary by jurisdiction and depend on the insolvency regime and the doctrine applied. But the forensic groundwork is the same in every forum: establish the market value, establish what was actually paid, and establish what the transferor knew at the time.

Corporate structures add complexity. A defendant who transfers assets through several entities before ultimately placing them in an account held by a nominee trustee is creating a paper chain that looks legitimate at each step. The forensic analyst reads the chain as a whole. Sham-trust analysis and the unwinding of shell and nominee structures are among the tools used to look through the form of a transfer and identify the substance.

In our experience, the most effective dissipation cases before a court are built on a combination of timeline evidence, valuation analysis, and beneficial ownership mapping. Each element supports the others. A court that sees all three, presented clearly, is in a position to grant the relief that stops further movement.

What does a dissipation-ready enforcement file look like?

The output of a dissipation-identification exercise is not just a report. It is a package of evidence and analysis that an enforcement application can be built around. Knowing what that package needs to contain – before the investigation begins – shapes every decision about where to look, what to prioritise, and what level of certainty is required at each stage.

A well-prepared enforcement file typically contains: a chronological narrative of the relevant transactions, supported by primary documents or, where those are not yet available, secondary sources; a map of the corporate and banking structures through which funds moved; a statement of the current estimated position of value – where it is, what form it takes, and in what name it is held; and an honest statement of the gaps, with an explanation of what further steps would be needed to fill them.

Courts granting without-notice relief are conscious of the one-sidedness of the application. The duty of full and frank disclosure requires the applicant to put the defendant's best case before the court, not just their own. A file that acknowledges uncertainty honestly is, in practice, more persuasive than one that overstates certainty. It also gives the applicant a stronger position when the defendant inevitably applies to discharge the order.

Timing advice is part of the file. An application made too early – before the tracing is sufficient to identify a specific asset – may be refused or may produce an order so broad that it is unenforceable. An application made too late may find that the asset has moved again. The sweet spot is a matter of judgment, informed by the evidence available and the urgency of the situation.

The following section addresses the single objection that stops more recovery cases from proceeding than any other: the belief that incomplete records mean the trail is dead.

Can a partial paper trail still support enforcement?

Yes – and this is, in our experience, one of the most persistent and damaging myths in this field. The belief that a missing bank statement or an uncooperative intermediary closes the trail leads many creditors to abandon viable recovery cases before they start.

A partial trail is the starting point for disclosure applications, not the end of the analysis. The forensic question is: what does the partial trail tell us, and what is the minimum additional information needed to support a freezing application? Often, a single disclosure order directed at the right intermediary fills the critical gap.

We reconstruct payment trails from partial records routinely. The method combines available financial records with open-source intelligence – corporate registry data, property searches, public court records – and targeted disclosure applications to fill the evidential gaps that remain. On-chain tracing can bridge gaps where fiat currency converted to digital assets at a point where the banking trail goes cold. Blockchain-analytics tools can follow value through multiple wallet hops and identify the exchange or VASP where it came to rest.

The practical test is not "is the trail complete?" but "is the trail sufficient?" A court granting a freezing order does not require certainty. It requires a good arguable case on the merits and a real risk of dissipation. A trail that reaches 70% of the way to the current location of funds, supported by disclosure applications that will close the remaining gap, will often be enough.

For a broader view of the forensic methods behind payment trail reconstruction, visit the Financial Forensics insight hub – or, if you have a specific matter in hand, explore what asset tracing can achieve at our asset tracing service page.

The steps above describe the general pattern. Every case turns on its own facts – how far the funds have moved, how many layers are involved, and which forums can act quickly enough to matter. A confidential case review identifies whether the trail in your matter is sufficient to support an application, and what the realistic next steps are. Contact us at info@axiomtracel.com.

Frequently asked questions

Q: Can a money trail be reconstructed from incomplete records?

A: Yes. Incomplete records are the norm in contested recovery matters. A skilled forensic analyst combines available financial records with open-source intelligence, corporate registry data, and targeted disclosure instruments – such as a Norwich Pharmal order or a Bankers Trust order – to fill evidential gaps. On-chain tracing can bridge points where the fiat banking trail goes cold. The question is whether the partial trail is sufficient to support an interim relief application, not whether it is complete.

Q: How do you trace funds routed through several jurisdictions?

A: Multi-jurisdictional tracing works through a combination of forensic analysis and coordinated disclosure applications. Each jurisdiction where funds passed through is a potential source of records, accessible through local courts or mutual-assistance channels. Sequencing matters: the forum with the strongest disclosure rules and the most cooperative courts is typically approached first, and the results from that disclosure are used to support applications in subsequent jurisdictions. We coordinate with local counsel in each relevant jurisdiction to ensure applications meet local procedural requirements.

Q: What information do you need from me to start tracing?

A: The minimum useful starting point is the last known account or wallet to which the funds were sent, a timeline of the relevant transactions, and whatever documentation is available – even if partial. Bank statements, wire confirmation notices, corporate correspondence, and any communications from the defendant are all useful. You do not need a complete picture before engaging us. Part of the initial case review is identifying what is available, what is missing, and whether what is missing can be obtained through disclosure orders or other investigative steps. Contact us at info@axiomtracel.com to begin.

About Axiom Trace

Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed.

In matters involving dissipation, we have been instructed at the point of first suspicion – before records are gathered and before any application is filed – and have produced enforcement-ready tracing packages from partial documentation. We work across banking, corporate, and on-chain layers, and we advise on sequencing across multiple forums. To discuss a matter, contact info@axiomtracel.com.

Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.

Written by , Partner, Forensic Accounting & Financial Investigations at Axiom Trace. Meet the team.

Recovering cross-border or crypto assets?

Confidential first review. We map tracing and recovery options and tell you honestly whether a matter is worth pursuing.

Request a case review

Ask about your situation

A few lines is enough to start. A specialist replies confidentially, usually within one business day.

Email, Signal, Telegram – whatever you prefer.

No cost to ask. We give no guarantee of outcome. Prefer email? Write to info@axiomtracel.com.