Assets rarely disappear. They move – and movement leaves a record, even when those records are incomplete, scattered across jurisdictions, or deliberately obscured. A monitoring retainer gives a claimant, insolvency practitioner, or referring lawyer a continuous professional presence on a matter: systematic asset tracing, regular intelligence updates, and coordinated readiness to act the moment a choke point appears.
A monitoring retainer is a standing engagement under which Axiom Trace conducts ongoing follow-the-money analysis, reconstructs payment trails across banking and corporate layers, and maintains the investigative thread needed to support freezing or disclosure applications when the opportunity arises. It is designed for matters where the asset trail is fragmented, the target is moving funds between jurisdictions, or enforcement must wait on a procedural trigger.
The sections below explain when a retainer is the right structure, how the work is organised, what it produces, and where its limits lie.
What Is a Monitoring Retainer, and When Does It Apply?
A monitoring retainer is an ongoing asset-tracing and intelligence service, not a one-time report. It applies where a single investigation snapshot is insufficient – because assets are still moving, because parallel proceedings in multiple forums require coordinated forensic support, or because a claimant needs to be positioned to act quickly when circumstances change.
In our experience, the retainer structure fits three recurring situations. First, a claimant holds a judgment or arbitral award but cannot yet enforce because the defendant's assets have not been located with sufficient precision. The trail exists – but it is partial, and patience plus persistent tracing is the only way to find where value has settled. Second, an insolvency practitioner is tracing assets stripped from an estate across several jurisdictions and needs rolling forensic support rather than a fixed-fee engagement that expires. Third, a referring lawyer or funder is managing a matter that involves ongoing dissipation risk: the defendant is still moving money, and intelligence must be current when an application for a worldwide freezing order or proprietary injunction is filed.
The retainer is not appropriate for matters where a single feasibility report or a bounded tracing exercise will answer the question. If you are at the assessment stage, our feasibility report service is the right starting point.
As of early 2026, the demand for standing monitoring arrangements has grown as defendants and fraudsters have become more sophisticated – using multiple corporate layers, offshore accounts, and crypto wallets in rotation to resist a fixed forensic snapshot.
Why Incomplete Records Do Not Mean a Dead Trail
The most common misconception we encounter is that missing records make tracing impossible. They do not. They make it harder and slower – but a fragmented paper trail is still a trail.
Axiom Trace reconstructs payment flows from partial records by working outward from what is known. A single verified transaction reference, a beneficiary name, a correspondent bank identifier, or a company registration number is enough to anchor the reconstruction. From there, we work through linked accounts, related entities, and secondary records – bank confirmations, corporate filings, UBO register data, public-blockchain records – to extend the chain.
We regularly advise clients who arrive with a handful of SWIFT confirmations and a defunct company name. The methodology does not change: establish the earliest known point of control, follow each value transfer, identify the receiving layer, and test whether value has settled or moved again. On-chain movements are particularly tractable because public blockchains are transparent – on-chain transfers are permanently recorded even where the identities behind wallets are initially unknown.
What a monitoring retainer adds, beyond a single exercise, is continuity. A defendant who pauses a movement pattern for weeks, then resumes, is only visible to someone who maintained the thread. A one-off investigation cannot do that. A retainer can.
Does this mean every trail eventually leads to recoverable assets? No. Some value is genuinely consumed, converted into untraceable cash, or moved into forums where enforcement is effectively closed. We say so when the evidence supports that conclusion. Honest assessment of what the trail shows – including dead ends – is part of what a retainer delivers.
How the Work Is Organised: Structure of a Monitoring Retainer
A monitoring retainer at Axiom Trace operates in three concurrent workstreams: forensic tracing, corporate and beneficial-ownership analysis, and procedural readiness. All three run in parallel, updated on a rolling cycle.
The forensic tracing workstream tracks the movement of funds through banking layers. We reconstruct payment trails, identify correspondent and receiving banks, and build a chronological map of where value moved and in what form. Where proceeds entered a crypto layer, we apply blockchain-analytics methods to attribute wallets and follow movements across chains. This workstream produces updated transaction maps at agreed intervals – typically monthly, or after a material new development.
The corporate and beneficial-ownership workstream runs alongside. Shell companies, nominee directors, and layered trust structures are common tools for placing assets beyond reach. We identify the entities in the payment chain, test ownership and control, and apply UBO register data, corporate filings, and open-source intelligence to build a picture of who actually controls what. Where the evidence supports it, we document the basis for piercing the corporate veil or for sham-trust analysis in support of a future application.
The procedural readiness workstream is less visible but often decisive. A worldwide freezing order application, a Norwich Pharmal order, or a Bankers Trust order must be ready to file at short notice. We maintain the factual matrix in a form that local counsel can translate into an application with minimum delay. We also flag jurisdictional windows: the moment a defendant's asset moves into a forum that will grant interim relief on an ex parte basis, the retainer should be producing the intelligence needed for that application within hours.
Reporting frequency, format, and escalation thresholds are agreed at the outset. Some clients want a brief monthly summary; others want real-time escalation whenever a material change is detected. Both are accommodated.
What Does the Retainer Produce?
The outputs of a monitoring retainer are designed to serve two audiences: the client or instructing lawyer who needs to understand the current state of the trail, and the local counsel who may need to file an application at short notice.
Regular deliverables include a structured transaction map (updated on the agreed cycle), a corporate and beneficial-ownership register for entities in the payment chain, an intelligence log recording new findings and their source basis, and a procedural readiness note summarising the current state of each potential enforcement forum. Where we identify a choke point – a VASP through which crypto proceeds are moving, a correspondent bank through which a wire is routing, or a jurisdiction in which the defendant holds a named asset – we escalate immediately rather than waiting for the next scheduled report.
Interim deliverables are produced when: a significant new payment is identified; a corporate structure in the chain changes; a jurisdiction becomes newly accessible for interim relief; or intelligence suggests imminent dissipation. A freezing or disclosure application is typically made without notice to the defendant to avoid tipping off; the retainer keeps the factual record current enough to support that application at any time.
We have traced assets through structures involving multiple holding companies, nominee arrangements in offshore jurisdictions, and mixed fiat-and-crypto payment chains. The retainer format allows us to maintain coherence across all of those layers simultaneously, something a bounded single-instruction engagement rarely achieves.
Cross-Border Tracing: Managing Friction Across Jurisdictions
Most matters that require a monitoring retainer are cross-border by nature. Assets that move within a single jurisdiction are generally easier to freeze and recover; the cases that resist resolution are the ones where value has crossed two or more borders before the claimant mobilises.
Cross-border tracing introduces three layers of friction. First, records held in different jurisdictions are subject to different disclosure regimes, different banking-secrecy laws, and different timelines for production. What a Norwich Pharmal order can compel in one forum may be available in another only through letters of request – a slower process. The retainer maps which forum holds which records and maintains the sequence in which disclosure should be sought. Second, enforcement instruments differ in availability and speed. A proprietary injunction, Chabra relief, or receivership may be available in one seat but not another. We track which instruments are available in each relevant forum and monitor changes in the legal environment. Third, a defendant who detects that proceedings are approaching may move assets again. Timing is genuinely consequential: we have seen matters where a delay of days meant that a freezing application landed after the funds had moved on. Speed matters, and the retainer is structured to reduce the lag between intelligence and action.
For matters with a crypto dimension, the cross-border dynamic is compounded. A defendant moving value through a decentralised protocol has no single geographic footprint. On-chain tracing can identify the wallet cluster and the exchanges through which cash-out is attempted. Disclosure orders against virtual-asset service providers (VASPs) and stablecoin issuers can, on appropriate legal process, freeze specific balances or compel production of KYC records. The retainer maintains the technical and legal threads in parallel, so that when a VASP is identified as a choke point, the appropriate local counsel is ready to act.
We coordinate closely with local counsel in the relevant jurisdiction wherever proceedings must be filed. The forensic and intelligence work is ours; the in-court advocacy and procedural steps belong to admitted counsel in the forum.
What Is Included – and What Is Not
Clarity about scope prevents misunderstanding, and in asset-recovery matters, misunderstanding about scope can cost time that cannot be recovered.
A monitoring retainer includes: ongoing forensic analysis of the payment trail from the agreed starting point; corporate and beneficial-ownership investigation of entities in the chain; UBO register research and open-source intelligence; on-chain tracing where the matter has a crypto component; regular structured reporting and interim escalation; maintenance of a procedural readiness file for each relevant forum; and coordination briefings for local counsel when an application is being prepared.
The retainer does not include: legal advice or advocacy in any jurisdiction (that is the role of admitted local counsel); guaranteed discovery of assets (we trace and analyse; we do not promise what the evidence will show); litigation or arbitration management; execution of enforcement steps in any court; or guarantees of recovery outcome. No outcome is guaranteed. Asset recovery depends on the specific facts, on the law and procedure of each relevant jurisdiction, and on the choices made by the parties and courts involved.
We also do not operate in ways that would constitute unlawful surveillance, bribery, or any breach of applicable sanctions regimes. Every source used in our investigations is lawful. We are occasionally asked to obtain records through means that are not available to us lawfully; we decline those instructions and say why.
A matter being tracked under a retainer can be assessed for viability at any point. We encourage clients to use our feasibility report framework at the outset and then to revisit the viability question as new intelligence arrives. Where the evidence shows that the remaining trail does not support enforcement, we say so rather than extend the engagement.
Honest Limits: What Can Defeat a Monitoring Retainer
Not every trail leads to a recoverable asset. Understanding the limits of a monitoring retainer is part of instructing one responsibly.
Value that has been converted to physical cash and moved through informal transfer systems leaves little or no paper record. Jurisdictions that have no functioning court system, no banking sector with accessible records, or no cooperation with international disclosure processes present genuine enforcement dead ends. A defendant who moves entirely within jurisdictions that do not recognise foreign judgments or arbitral awards can, in practice, place assets beyond the reach of any order we help to prepare.
We are also limited by the records we can access lawfully. A Bankers Trust order or a Norwich Pharmal order must be granted by a court with jurisdiction; we cannot compel disclosure without that. Where the relevant records are held in a jurisdiction that does not grant such orders and is not party to a relevant mutual legal assistance treaty, the forensic thread may stall until a legal route opens.
Timing matters in a different way for the retainer: a monitoring arrangement should be in place before the asset trail goes cold, not after. The earlier a retainer is established, the more of the chain is traceable. We have taken on matters where years had elapsed since the fraud and the trail, while not entirely dead, was substantially harder to reconstruct. Results in those cases are more limited – and we say so at the outset.
The contextual bridge here is straightforward: the steps above cover the typical structure. Your matter turns on specific facts – where the money went, how fast, and which forums can act. A confidential case review tells you whether a retainer is the right structure and what it is likely to produce. To assess your matter, contact info@axiomtracel.com.
Is a Monitoring Retainer the Right Structure for Your Matter?
A retainer is the right structure when the matter is ongoing rather than bounded, when assets are still moving or the trail is fragmented across multiple jurisdictions, and when the claimant needs to be positioned to act at short notice.
It is the wrong structure when a single tracing exercise or a feasibility report will answer the question. Over-engineering the engagement costs time and resource that could go elsewhere.
Consider a retainer if: you hold a judgment or award but have not located the defendant's assets with sufficient specificity to enforce; you are an insolvency practitioner dealing with a multi-jurisdiction asset-stripping matter; you have identified dissipation risk and need current intelligence when you file; or you are a funder assessing a matter where the asset position changes over time.
A matter in the Gulf region, autumn 2024, illustrates the structure in practice. A claimant had obtained an arbitral award against a corporate defendant whose assets – initially identified in two jurisdictions – had been moved into a third, offshore structure before enforcement could be coordinated. A monitoring retainer allowed us to maintain the tracing thread through three corporate layers, identify a new banking relationship in a forum where interim relief was available, and prepare the factual matrix for a worldwide freezing order application that local counsel filed within days of the intelligence becoming actionable. The award had not become irrecoverable; it had been temporarily outpaced. The retainer closed the gap.
A second matter, from the same period, involved a European insolvency estate where the former director had moved value into crypto and then through a series of VASPs before the practitioner engaged us. On-chain tracing identified the wallet cluster and a centralised exchange through which cash-out was being attempted. A disclosure order against that VASP, coordinated with local counsel, produced KYC records that identified a beneficial owner previously concealed behind a nominee structure. The retainer had been in place for several months before that identification was possible; no single-instruction investigation would have maintained the thread across that interval.
Both outcomes were contingent on the specific facts, the cooperation of the relevant forums, and the timing of the intelligence. Neither was guaranteed. Both were the result of maintaining investigative continuity on matters that required patience alongside speed.
Related Services and Further Reading
- Financial Forensics insights – analysis and guides on follow-the-money methodology, payment-trail reconstruction, and dissipation patterns.
- Feasibility Report – if you are at the assessment stage and need an honest read on whether a matter is worth pursuing before committing to a retainer.
- Source of Funds Investigations – a worked example of how forensic tracing operates in a specific jurisdictional context, illustrating the methodology applied in cross-border source-of-funds analysis.
Frequently Asked Questions
Q: Can a money trail be reconstructed from incomplete records?
A: Yes – and in our experience, incomplete records are the norm rather than the exception in fraud and dissipation matters. A monitoring retainer is specifically designed for this situation. We work outward from the earliest verified transaction, cross-referencing banking records, corporate filings, UBO register data, and on-chain information to extend the chain. Gaps slow the work; they do not automatically end it. The critical factor is whether enough anchor points exist to maintain the thread – a question we assess at the outset.
Q: How do you trace funds routed through several jurisdictions?
A: Multi-jurisdiction tracing requires a structured sequence: identify the transfer path, determine which forum holds the next layer of records, and pursue disclosure through the available instrument in that forum – whether that is a Norwich Pharmal order, a Bankers Trust order, letters of request, or a disclosure order against a virtual-asset service provider (VASP). The monitoring retainer maintains this sequence continuously, so that when a forum becomes accessible, the application can be filed without delay. We coordinate with local counsel in each relevant jurisdiction; we do not file proceedings ourselves.
Q: What information do you need from me to start tracing?
A: We work with whatever is available. Useful starting points include: the earliest known transfer reference or payment confirmation; the name or registration details of any entity in the payment chain; bank account details for the sending or receiving account; and any corporate or UBO information already held. We do not require a complete record to begin – that is precisely the situation a retainer is designed to address. A confidential initial review, using the materials you already hold, will indicate what is traceable and what the realistic scope of a retainer engagement is. Contact info@axiomtracel.com to begin that conversation.
About Axiom Trace
Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed.
Our financial forensics work covers the full range of follow-the-money investigation: reconstructing payment trails from partial records, identifying dissipation through layered structures, and maintaining investigative continuity on matters that require ongoing monitoring rather than a single report. We have maintained retainer relationships on matters spanning multiple jurisdictions and multi-year timeframes, where the gap between the first forensic finding and the actionable enforcement opportunity required sustained professional attention.
To discuss whether a monitoring retainer is the right structure for your matter, contact info@axiomtracel.com.
Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.
Recovering cross-border or crypto assets?
Confidential first review. We map tracing and recovery options and tell you honestly whether a matter is worth pursuing.
Request a case review