Reconstructing payment trails through United States

A payment leaves a US account on a Tuesday. By Thursday, it has passed through two intermediary banks, converted currencies once, and settled in an account you cannot immediately identify. The records you hold are partial. The counterparty is unresponsive. Does that mean the trail is cold?

Not necessarily. Reconstructing payment trails through the United States is possible even when records are incomplete, because the US correspondent banking system, domestic wire networks, and available legal process leave identifiable marks at each step. A Bankers Trust order, domestic disclosure process, and coordinated follow-the-money analysis can rebuild what appears to have vanished – provided the work starts promptly.

This guide walks through the step-by-step process: from mapping what you already hold, through obtaining disclosure from financial institutions, to tracing value as it moves across borders or into layered accounts.

Why the US banking system creates a traceable record

The US correspondent banking system is one of the most document-intensive in the world. Every domestic wire instruction passes through the Fedwire or CHIPS interbank settlement network, and each transaction record contains sender, receiver, originating institution, and beneficiary bank fields that survive long after the payment clears. Correspondent banks that process international transfers into or out of the United States generate additional message traffic – SWIFT MT103 and related formats – that identifies routing and beneficiary data at each leg.

What does this mean for a tracing exercise? It means that even where the originating party has destroyed or withheld its own records, the banks that sat in the payment chain hold independent copies. In our experience, the critical evidence in a US-routed payment trail almost never lives in one place. It is distributed across four or five institutions that each processed one leg of the transfer.

The practical implication: a claimant who holds only a debit entry on their own statement is not starting from nothing. They are starting from one confirmed data point in a chain that can, with proper process, be reconstructed segment by segment.

How far back do those records go? US bank record-retention obligations vary by instrument and institution type, but account records and wire-transfer documentation are typically preserved for five years or more at major correspondent banks – long enough to support a tracing exercise in most commercial fraud matters.

Step 1 – Map what you already hold before seeking disclosure

The first step in any follow-the-money analysis is a structured audit of the records already available to the claimant. This sounds obvious. In practice, it is consistently underdone, and incomplete internal reviews cause two problems: disclosure applications that are too narrow (missing legs of the chain) and applications that are too broad (which courts decline).

Start with three categories:

• Direct transaction records – bank statements, SWIFT confirmations, payment receipts, and any correspondence referencing account numbers or routing instructions.
• Corporate and contractual records – agreements, invoices, wire instructions, and any documentation that named the receiving account or institution.
• Third-party corroboration – emails, messaging records, or internal accounting entries that reference the payments in question.

From these, construct a preliminary timeline: payment date, currency, amount range, originating account, stated beneficiary, and any reference numbers. Even one confirmed SWIFT reference number or fedwire IMAD code can locate an entire leg of the transaction in a bank's archive. That single reference can anchor a subsequent disclosure application to a specific, identifiable record – which significantly improves the prospects of a court granting it.

We regularly advise clients to treat this mapping phase as a pre-condition to any legal step. Rushing to court with an incomplete picture produces partial disclosure that must be repeated. That costs time and, in fraud matters, time is the one resource the claimant can least afford to lose.

Step 2 – Identify the disclosure instruments available in the United States

The United States offers several routes for compelling a bank or third party to disclose payment records. Each has its own timing, scope, and procedural prerequisites. Choosing the wrong instrument – or applying in the wrong forum – delays the tracing exercise by weeks.

The primary tools in a US-anchored tracing matter are:

• Domestic subpoena or civil discovery process, which compels a financial institution to produce specific account and transaction records once civil proceedings are on foot in a US court.
• US-style discovery in aid of foreign proceedings, which allows a party in a foreign case to obtain testimony and documents held in the United States without needing to commence full US proceedings – a significant procedural advantage where the main litigation sits abroad.
• A Bankers Trust order, available in appropriate jurisdictions where that doctrine applies, which compels a bank to disclose information about a customer's account specifically to assist in tracing misappropriated funds.

The US discovery-in-aid-of-foreign-proceedings mechanism is particularly powerful for cross-border matters, because it allows a claimant litigating in England, Singapore, or another common-law forum to reach evidence held by a US correspondent bank without duplicating their entire case in the United States. In our experience, this is one of the most under-used tools available to claimants whose funds have touched the US banking system.

At this stage, the question for any claimant or referring lawyer is: where is the strongest hook? Which leg of the payment chain passed through a US institution, and which of those institutions is the best target for a disclosure application? That analysis should happen before any application is filed.

If you are at this stage and unsure which forum or instrument fits, a confidential case review at Axiom Trace's United States insight page can help orient the approach. To request a direct assessment, contact info@axiomtracel.com.

How does a cross-border payment trail through the United States actually work?

Most international payments that touch the US do so because the US dollar remains the dominant settlement currency for cross-border transactions. A payment denominated in dollars – even between two non-US parties – will typically clear through a US correspondent bank, leaving a traceable record in the US banking system regardless of where the sender and recipient are located.

This creates a structural advantage for claimants. A fraudster in a jurisdiction with weak disclosure rules may have assumed their trail was invisible. If they sent or received dollars, at least one leg of that payment cleared through a US institution that is subject to US legal process. That leg is now reachable.

The typical cross-border pattern we reconstruct looks like this:

• Originating payment from the victim's account (leg 1).
• Receipt by an intermediary account, often at a bank in a second jurisdiction (leg 2).
• Onward transfer – often converted to USD – through a US correspondent bank to a beneficiary account abroad (leg 3).
• Final settlement in an account the fraudster controls, frequently offshore (leg 4).

Leg 3 – the US correspondent step – is the choke point. It is where US legal process can be applied, disclosure can be obtained, and the identity of the receiving institution (leg 4) can be established. Without it, the trail stops at leg 2. With it, the full chain becomes visible.

Consider a matter from the eastern seaboard, spring 2024, involving misappropriated commercial funds in the high six figures. The records available to the claimant covered only the first leg. Through US discovery-in-aid process targeting the correspondent bank that cleared the dollar transfer, our team reconstructed legs 2 through 4 and identified the final beneficiary bank and account. That information then supported a freezing application in the relevant offshore jurisdiction. The trail was not dead – it was waiting at the correspondent step.

Step 3 – Reconstruct the chain and handle gaps in the record

The audience myth worth addressing directly: if records are missing, the trail is not dead. It is incomplete. Those are different problems requiring different approaches.

Gaps appear for several reasons. The defendant may have withheld or destroyed records. An intermediary institution may have limited its disclosure to what was specifically requested. A correspondent bank may have processed only one leg and have no visibility of the prior or subsequent steps. In each case, the gap is real – but it is also bounded. Something came in; something went out. The question is which adjacent institution holds the missing segment.

In our asset tracing work, we use four techniques to address gaps:

• Reference number archaeology – SWIFT reference codes, IMAD/OMAD identifiers, and batch reference numbers appear in records that do not themselves contain full payment data. Matching these across partial records from multiple sources often closes gaps without additional disclosure applications.
• Account number inference – beneficiary account numbers visible in one record can identify the receiving institution even without a named bank. Routing numbers embedded in wire instructions resolve to specific US institutions, enabling targeted disclosure requests.
• Currency conversion timestamps – where a payment involved a currency exchange, the timing of the conversion narrows the list of institutions that could have processed it, since FX settlement follows specific correspondent relationships.
• Pattern analysis across multiple payments – where a fraudulent scheme involved repeated transfers, patterns in timing, amount ranges, and routing become evident even from partial data. One reconstructed payment illuminates the architecture of the others.

The practical honest point: not every gap closes. Some records are genuinely destroyed. Some institutions are in jurisdictions that will not cooperate. The goal of reconstruction is not a perfect chain – it is a chain sufficient to support the next legal step: a freezing application, an enforcement action, or a demand for repatriation.

Step 4 – From trail to legal action: using what you find

A reconstructed payment trail has no value unless it leads to an actionable step. The forensic and the legal must connect. What does connection look like in practice?

Three scenarios apply most often in US-anchored matters:

First, where the funds are still held by an identifiable US institution. This is the most immediate scenario. A domestic freezing injunction or asset-restraint application can be made in the relevant US federal or state court, supported by the payment evidence assembled in the tracing exercise. Speed matters acutely here – funds at rest can be moved again at any time.

Second, where the funds have already left the United States but the US leg of the trail identifies their current location. Here the reconstruction supports legal action in a foreign jurisdiction. The US-obtained evidence – bank records, SWIFT data, correspondent correspondence – is admissible as foreign evidence in most common-law courts and in many civil-law forums, particularly where obtained through recognised legal process. A worldwide freezing order obtained in England, or an equivalent in Singapore or Hong Kong, can be supported by US-sourced evidence and extended to the assets wherever they now sit.

Third, where the US trail establishes the identity or beneficial ownership of the defendant. Fraudsters frequently operate behind corporate layers. A US correspondent bank disclosure that identifies the actual account holder – rather than a nominee name – can pierce that structure without a separate corporate investigation. That account-holder identity then grounds both the claim and the freezing application in whatever jurisdiction the defendant can be reached.

In each scenario, the connection between the forensic work and the legal step is a decision point. The evidence obtained does not automatically generate a case. It needs assessment: is this enough to support the application? What is missing? What would strengthen the evidential foundation?

That assessment is where a recovery specialist and local admitted counsel must work together. Axiom Trace coordinates that connection – the forensic output feeding directly into the legal strategy, with local counsel in the relevant jurisdiction acting on the ground. For a confidential assessment of whether the trail you hold is sufficient to support next steps, contact info@axiomtracel.com.

Common mistakes that stall a US payment tracing exercise

Several patterns consistently slow or undermine tracing exercises in the United States. Awareness of them in advance is worth the time.

Filing for discovery too broadly. Courts in the United States require disclosure applications to identify the specific records sought with reasonable particularity. A request framed as "all records relating to the defendant" will be challenged and likely narrowed. Targeted applications – referencing specific accounts, dates, and reference numbers from the internal mapping exercise – are more likely to succeed and to produce complete results faster.

Triggering notification prematurely. A disclosure application made against a bank ordinarily requires notice to the account holder in most US civil contexts. Where the account holder is the fraudster, that notice may prompt asset movement. In fraud matters with a US dimension, the sequencing of the disclosure application relative to any freezing step is critical. Where possible, a freezing application should precede or accompany the disclosure step, not follow it.

Treating the US trail as the whole trail. The US correspondent leg is a choke point – a traceable segment in a longer chain. Stopping the analysis at the US leg, rather than using it to identify what comes before and after, limits what can be achieved. The value of the US record is its connectivity: it links the origin to the destination.

Underestimating parallel tracking. In many commercial fraud matters, the fraudster has used more than one payment route. While one trail is being reconstructed, alternative routes may still be active. A comprehensive follow-the-money approach looks at all payment activity visible in the records, not only the specific transfer that prompted the investigation.

Related resources

• Financial Forensics – follow-the-money analysis and payment trail reconstruction across jurisdictions.
• United States jurisdiction guide – legal process, disclosure tools, and freezing options for US-anchored recovery.
• Case study – enforcing an award against UAE assets: cross-border forensics and enforcement at speed.

Frequently asked questions

Q: Can a money trail be reconstructed from incomplete records?

A: Yes, in many cases. Incomplete records are a starting point, not an endpoint. US correspondent banks, interbank networks, and clearing systems each retain independent records of the legs they processed. Through targeted disclosure applications and reference-number analysis, it is often possible to reconstruct segments that the claimant's own records do not cover. The trail is rarely entirely absent – it is distributed across institutions that held each leg.

Q: How do you trace funds routed through the United States?

A: Dollar-denominated international transfers clear through US correspondent banks, creating a record in the US banking system even where sender and recipient are both outside the country. We identify which leg of the payment chain passed through a US institution, then apply the appropriate disclosure process – which may include US-style discovery in aid of foreign proceedings or a Bankers Trust order – to obtain the relevant records. Those records then identify the next institution in the chain. The approach is sequential: one disclosed leg enables the application for the next.

Q: What information do you need from me to start tracing?

A: The minimum useful starting point is the debit entry on your own account – date, amount, currency, and any reference number – plus whatever you know about the stated recipient. SWIFT confirmation messages, wire instructions, or any correspondence referencing account numbers all help substantially. The more reference data you hold, the more targeted the disclosure application can be. We have reconstructed trails from very limited starting records; the question at the outset is always which institution sat next in the chain and is reachable by legal process. A confidential case review at info@axiomtracel.com will tell you whether what you hold is sufficient to begin.

About Axiom Trace

Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed. In our experience, the cases that recover most often are those where forensic analysis and legal strategy are aligned from the first day, not retrofitted after the trail has cooled. We reconstruct payment trails from partial records and identify where value settled, giving clients and their legal teams an evidential foundation to act on. To discuss a matter, contact info@axiomtracel.com.

Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. Axiom Trace coordinates closely with admitted local counsel in the United States; local procedure governs the filing and conduct of proceedings. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.