Source-of-funds investigations in Gibraltar

A payment leaves a Gibraltar-licensed account on a Tuesday. By Thursday it has cleared a correspondent bank in a second jurisdiction and fragmented into three receiving accounts. The paper trail the client holds covers only the first leg. Is the rest gone?

Not necessarily. Source-of-funds investigations in Gibraltar operate in a mature regulatory environment that generates documentary records at multiple points in the payment chain. Even when primary records are missing or withheld, follow-the-money reconstruction draws on secondary sources – regulatory filings, corporate registrations, bank-to-bank correspondence, and on-chain data where crypto assets are involved – to reconstitute where value moved and where it settled.

This analysis covers how source-of-funds tracing works in Gibraltar, which instruments support it, where the cross-border friction arises, and how investigators and their instructing lawyers manage incomplete records without abandoning the trail.

Why Gibraltar matters for source-of-funds investigations

Gibraltar is a small jurisdiction with a disproportionately large role in cross-border financial flows. Its position as a British Overseas Territory gives it access to English common law remedies while maintaining an independent regulatory regime. That combination – common-law procedure, a functioning financial-intelligence unit, and a licensed VASP sector – makes it both a frequent transit point for disputed funds and a workable forum for asset tracing.

The jurisdiction licenses a significant number of virtual-asset service providers and distributed-technology businesses, making it one of the few places where crypto and conventional banking flows sit inside the same regulatory perimeter. For investigators, this matters: a single follow-the-money exercise may cross from a licensed bank into a regulated VASP without leaving the Gibraltar regulatory estate, which simplifies certain disclosure applications.

At the same time, Gibraltar's compact geography is deceptive. Funds processed through Gibraltar regularly originate or terminate elsewhere – in the United Kingdom, Spain, Malta, Dubai, or further afield. The on-shore tracing exercise almost always becomes a cross-border one within the first few days.

We regularly advise clients and referring lawyers who treat Gibraltar as a terminal point, only to find that the substantive asset has already moved. The question then is not what happened in Gibraltar but where the value went after it cleared.

What is a source-of-funds investigation, and when is one needed?

A source-of-funds investigation reconstructs the origin and movement of specific value – cash, crypto, or both – through the financial system. It answers three questions: where did the money come from, what route did it take, and where does it sit now?

Investigations of this kind are instructed in several distinct situations. The most common in our experience are:

• A defrauded principal who has located a Gibraltar-connected account and needs to know whether assets remain there or have moved on.
• An insolvency practitioner who has identified a Gibraltar entity in the corporate chain and needs to determine whether value was stripped before the appointment.
• A referring lawyer or funder assessing whether a tracing exercise is worth funding – that is, whether the asset trail leads to something recoverable.
• A counterparty or acquirer who needs independent verification of the stated origin of funds before a transaction closes.

Each situation calls for a different emphasis. Fraud recovery and insolvency tracing are adversarial – the subject has an interest in the trail being cold. Transactional due-diligence work is collaborative but requires the same forensic rigour because the consequences of an incomplete picture can be severe.

If you are assessing whether tracing is viable in your matter, the Asset Recovery Viability Check at /insight/jurisdictions/gibraltar/ sets out the threshold questions for Gibraltar-connected matters specifically.

How do investigators reconstruct a trail when records are incomplete?

Incomplete records are the norm, not the exception. The assumption that a missing bank statement ends the investigation is the most common reason clients delay – and delay narrows options faster than almost anything else.

In practice, follow-the-money reconstruction in Gibraltar draws on several parallel source sets, none of which depends on the subject's cooperation:

Regulatory filings and licensing records. Gibraltar's financial-services regulator maintains licensing records, AML returns, and – where applicable – suspicious-activity report metadata. These records are not generally public, but they become accessible through properly constituted disclosure applications and through cooperation with a financial-intelligence unit where criminal proceeds are in issue.

Corporate and beneficial-ownership data. Gibraltar operates a companies registry with publicly searchable filings. UBO register data and the regulatory returns filed by licensed entities provide a parallel record of ownership and control that the subject cannot unilaterally suppress. Greta Lindqvist's work on offshore and corporate structures at our Financial Forensics practice covers how corporate-layer analysis feeds into a tracing exercise.

Correspondent-bank records. Most Gibraltar-processed payments clear through a correspondent bank outside the jurisdiction. That correspondent generates its own records. A Bankers Trust order, directed at the correspondent rather than the originating Gibraltar institution, can retrieve transfer instructions, SWIFT messages, and clearing confirmations that the primary institution no longer holds or will not produce voluntarily.

On-chain data. Where funds move into or out of a licensed VASP, the on-chain leg of the transaction is permanently recorded on a public blockchain. On-chain tracing through blockchain-analytics tools can reconstruct movements even when the VASP itself is unresponsive or located in a less cooperative jurisdiction. Public blockchains are transparent: movements are traceable even when the identities behind wallets are hidden. Attribution – connecting wallet addresses to identifiable entities – is the work that follows.

The result is a reconstruction built from what the subject could not control or destroy. Missing primary records create gaps; secondary and tertiary sources fill most of them.

Which legal instruments support tracing in Gibraltar?

Gibraltar courts apply English common law and have, in our experience, been willing to grant urgent relief in support of tracing exercises. The instruments available track closely to those available in England and Wales, with some practical differences in procedure and timescale.

A Norwich Pharmal order compels a third party – a bank, a VASP, a registered agent – to disclose information that identifies the wrongdoer or reveals the destination of funds. In Gibraltar, these applications are typically made without notice to avoid alerting the subject. The combination of a gagging order with a Norwich Pharmal order prevents the disclosing party from tipping off the account holder while the investigator processes what is received.

A Bankers Trust order is directed specifically at a bank and compels disclosure of account information relevant to a tracing exercise. Where the Gibraltar-connected account is with a licensed credit institution, a Bankers Trust order is usually the primary disclosure instrument. The order reaches account-opening documents, transaction records, and correspondence with the account holder.

A worldwide freezing order can, in principle, be granted by the Gibraltar court to restrain dissipation of assets wherever located. This is the instrument that converts a tracing exercise into an asset-preservation action. Because a worldwide freezing order can reach assets outside Gibraltar, it is frequently the first step that instructing lawyers request once a tracing exercise has identified a recoverable asset.

A proprietary injunction protects an asset that the claimant can claim as their own property – relevant where the fraud involves misappropriation rather than breach of contract. Proprietary injunctions can be granted against persons unknown, which is significant in crypto matters where wallet holders have not yet been identified.

Third-party disclosure in the context of insolvency proceedings supplements the above. A liquidator or receiver appointed over a Gibraltar entity has statutory powers to require production of books and records, which can effectively replicate the disclosure a court order would otherwise provide.

Each instrument has prerequisites. A freezing order requires a good arguable case on the merits and a real risk of dissipation. Disclosure orders require a demonstrated connection between the information sought and the location or identification of assets. Practitioners should assess these thresholds at the outset – not after weeks of preliminary steps have narrowed the options.

Where does the cross-border friction arise?

Most Gibraltar source-of-funds investigations encounter cross-border friction at one of three stages. Understanding each helps a practitioner allocate time and resources correctly.

Stage one: identifying the onward jurisdiction. Once funds leave Gibraltar, they enter a different legal system. The speed with which the receiving jurisdiction can be identified, and the disclosure tools it offers, often determines whether freezing is feasible. A payment to a UK correspondent bank is a manageable step; a payment to a nominee account in a jurisdiction with limited mutual-legal-assistance infrastructure is a harder problem. We have traced funds that cleared Gibraltar into four further jurisdictions before settling in a recoverable form. Each jurisdictional hop requires a separate assessment.

Stage two: coordination of simultaneous applications. Sophisticated dissipation often involves layering across jurisdictions in sequence, precisely because most claimants address one jurisdiction at a time. The answer is parallel applications – a freezing order in Gibraltar alongside recognition proceedings or equivalent relief in the receiving jurisdiction – managed on a common timeline. This requires local counsel in each forum, coordinated by a central team that holds the forensic picture. We routinely coordinate proceedings with local counsel in Gibraltar and in the receiving jurisdictions to manage this.

Stage three: enforcement of Gibraltar relief elsewhere. A Gibraltar freezing order is not self-executing in a foreign jurisdiction. It requires either recognition by the foreign court or a parallel application for equivalent relief. In common-law jurisdictions – the United Kingdom, the British Virgin Islands, the Cayman Islands, Singapore – recognition is generally available and well-developed. In civil-law jurisdictions, the route is more procedurally specific, and local counsel must navigate the filing requirements. Where an arbitral award underlies the dispute, enforcement under the New York Convention provides a separate route that runs independently of the tracing process.

A concrete pattern: a matter in the Mediterranean region, autumn 2024, involving funds in the mid-seven figures that had transited a Gibraltar VASP before moving to accounts in two civil-law jurisdictions. The Gibraltar tracing exercise provided the forensic foundation; recognition proceedings in each receiving jurisdiction converted the Gibraltar order into locally enforceable relief. The cross-border coordination took weeks, not months, because the forensic reconstruction was complete before the first application was filed.

Contrasting positions: what investigators disagree about in Gibraltar tracing

Source-of-funds investigations in Gibraltar are not a settled field. Practitioners hold genuinely different views on several recurring questions. Understanding the debate helps an instructing lawyer or funder set realistic expectations.

The completeness threshold. One position holds that tracing should not be commenced until primary bank records are secured, to avoid building a forensic reconstruction on assumptions that primary evidence later contradicts. The opposing view – and the one we find more defensible in practice – is that waiting for primary records gives the subject time to move assets. Starting with secondary sources, then refreshing the picture as primary records arrive through disclosure, produces better outcomes than waiting for a complete dataset that may never materialise voluntarily.

The role of on-chain evidence. Some practitioners treat blockchain-analytics output as preliminary intelligence rather than evidence. Others – particularly those who regularly advise in crypto-asset disputes – use attribution analysis as a primary source from the outset, on the basis that the on-chain record is an immutable contemporaneous log. The pragmatic position is that on-chain evidence is admissible and credible, but courts in different jurisdictions will weight it differently; the tracing narrative must be built so that on-chain findings are corroborated by off-chain records wherever possible.

The VASP disclosure problem. Gibraltar licenses VASPs, which means those entities are subject to the Gibraltar regulatory framework and its associated obligations. A VASP operating outside the licensed perimeter – often the entity on the other side of a cross-border transaction – is not similarly constrained. Investigators differ on how aggressively to pursue disclosure against unlicensed foreign VASPs, given the enforcement uncertainty. In our experience, directing disclosure applications at the licensed Gibraltar VASP – which can often reconstruct the onward movement from its own AML records – is more productive than pursuing the unlicensed entity directly.

When to involve public authorities. Criminal reporting to a financial-intelligence unit can generate disclosure that a civil tracing exercise cannot access. But it is not without risk: investigations run by public authorities follow their own timelines, and a civil claimant may find that their evidence is frozen inside a criminal process while assets continue to move. The decision to report, and when, requires careful analysis of the specific matter.

The myth of the dead trail – and what actually ends a tracing exercise

The most persistent misconception we encounter is that incomplete records mean the trail is dead. It is rarely true, and accepting it prematurely is the error that costs clients the most.

What actually ends a tracing exercise is not missing records but one of three conditions: the asset has been genuinely dissipated and no longer exists in recoverable form; the cost of further tracing exceeds the expected recovery; or the jurisdictional barriers to enforcement are insuperable given the forum where the asset has settled.

Missing records, by contrast, are a problem of method, not finality. We reconstruct payment trails from partial records and identify where value settled in matters where the client's initial view was that nothing could be found. The reconstruction uses the techniques described above – secondary sources, correspondent-bank disclosure, corporate registry data, on-chain analysis – to fill gaps that the subject intended to be permanent.

There is a related danger. The assurance that "the money can be recovered" offered by an operator you did not approach yourself, charging an upfront fee, is a second-stage recovery scam. Real source-of-funds investigations are methodical, conditional on what the evidence actually shows, and make no promises about recovery outcomes. The question a legitimate investigator asks first is whether the trail is strong enough to justify further work – not whether the client's hope is strong enough to justify a fee.

If you are unsure whether a tracing exercise is viable in your matter, a confidential case review is the right starting point. The steps above cover the typical pattern. Your matter turns on specific facts – where the money went, how fast, and which forums can act. Contact info@axiomtracel.com to arrange a case review.

What a source-of-funds investigation in Gibraltar produces – and what it does not

A completed tracing exercise produces a forensic reconstruction: a documented narrative of where funds originated, the route they took, and the best-supported conclusion about where value currently sits or settled. That reconstruction is the evidentiary foundation for the legal steps that follow – a freezing application, a disclosure order, or enforcement proceedings.

It does not, by itself, recover money. Recovery requires legal proceedings in one or more forums, enforcement of the relief granted, and – frequently – further tracing as the subject responds to freezing by moving whatever remains. The investigation and the legal action are sequential and interdependent, not alternatives.

What a well-conducted source-of-funds investigation does is narrow the universe of uncertainty. Before the exercise, the client knows that money moved and does not know where. After it, the client has a documented, sourced account of the route, a view on what is recoverable and what is not, and the evidence base needed to support urgent interim applications.

The honest caveat is this: the investigation can only follow what the record shows. Where value has been genuinely converted – exchanged for goods, lost in trading, or dissipated in a form that generates no traceable record – the investigation will say so. That finding is itself useful: it tells the client, the lawyer, and the funder what the realistic ceiling of recovery is.

See our broader analysis of follow-the-money methodology at tracing bank transfers through Isle of Man, which covers similar source-reconstruction questions in a parallel offshore context.

Self-assessment: is a source-of-funds investigation in Gibraltar the right step for your matter?

Before instructing a source-of-funds investigation, the following questions help frame whether the exercise is likely to be productive in a Gibraltar-connected matter.

Do you have a Gibraltar-connected account, entity, or VASP in the payment chain? If yes, the jurisdictional tools described above are available. If not, Gibraltar may be in the chain but a different forum may be the better starting point for disclosure applications.

How much time has elapsed since the last known movement? Days matter. Funds can move across multiple jurisdictions within hours; the longer the interval since the last known position, the more secondary-source reconstruction will be needed. That is manageable – but it increases cost and reduces certainty of outcome.

Do you have partial records? Even a single statement, a SWIFT reference, or a wallet address is a starting point. Investigations built from a single anchor often produce more than clients expect.

Is the amount in issue proportionate to the cost of a multi-jurisdictional tracing exercise? Source-of-funds investigations that require disclosure applications in multiple forums are not inexpensive. The threshold at which investigation cost is proportionate to expected recovery varies by matter; an honest assessment at the outset saves time and money later.

Has anyone already offered to recover the money for an upfront fee? If so, do not pay it. That is the profile of a recovery scam, not a legitimate investigation. Legitimate investigators assess before they propose, and their work product is a documented trail – not a promise.

A confidential case review with Axiom Trace will address each of these questions for your specific matter. To start that conversation, contact info@axiomtracel.com.

Related reading from Axiom Trace

• Financial Forensics practice overview – how follow-the-money tracing works across banking and corporate layers.
• Gibraltar jurisdiction guide – threshold questions for Gibraltar-connected recovery matters.
• Tracing bank transfers through Isle of Man – source-reconstruction methodology in a parallel offshore context.

Frequently asked questions

Q: Can a money trail be reconstructed from incomplete records?

A: Yes, and in our experience it is the norm rather than the exception. Primary records held by a subject or a non-cooperative institution are only one source set. Correspondent-bank records, regulatory filings, corporate registry data, and – where crypto is involved – on-chain transaction logs each provide independent anchors. A Bankers Trust order directed at a correspondent bank, for example, can retrieve transfer records that the originating institution no longer holds. Reconstruction is methodical and requires time; it is not a guarantee of a complete picture, but a missing primary record rarely closes the trail entirely.

Q: How do you trace funds routed through Gibraltar?

A: The starting point is mapping the Gibraltar-connected leg: which licensed entity processed the payment, when, and to which receiving account or wallet. From there, disclosure applications – typically a Norwich Pharmal order or a Bankers Trust order – direct the Gibraltar-licensed institution or its correspondent to produce records that identify the onward route. Where a Gibraltar-licensed virtual-asset service provider (VASP) is in the chain, on-chain tracing runs in parallel with the formal disclosure process, using blockchain-analytics tools to follow the asset across wallet addresses irrespective of whether the VASP cooperates. We routinely coordinate proceedings with local counsel in Gibraltar to manage both legs simultaneously.

Q: What information do you need from me to start tracing?

A: As much as you have, used as it is. A complete set of bank statements is ideal; a single SWIFT reference, a wallet address, or a company name is a workable starting point. At the initial case-review stage, we assess what you hold, identify the most productive anchors, and advise on the disclosure steps most likely to extend the trail. You do not need to have a complete picture before making contact – that is precisely what the investigation is designed to build. To begin, contact info@axiomtracel.com with a brief summary of the matter and the records you currently hold.

About Axiom Trace

Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed. In Gibraltar, we routinely coordinate proceedings with local counsel to manage disclosure applications, freezing orders, and cross-border enforcement. Our forensic reconstructions are built to serve as the evidentiary foundation for legal action, not as standalone reports. To discuss a matter, contact info@axiomtracel.com.

Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. Axiom Trace routinely coordinates proceedings with local counsel in Gibraltar; this article does not constitute legal advice specific to any matter. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.