Asset Tracing
Pronunciation: AS-et TRAY-sing
Definition
Asset Tracing is the investigation and reconstruction of value movement across accounts, wallets, transactions, entities, services, blockchains, and conversion points to identify ownership, destination, dissipation, or recoverable assets. It differs from routine transaction screening because it is an evidentiary investigation that may combine on-chain analysis with legal, financial, identity, and device information. Analysts should preserve source data, distinguish facts from attribution hypotheses, document clustering assumptions, account for mixers and bridges, validate timestamps and exchange records, and maintain chain of custody.
Overview
Asset Tracing is the investigation and reconstruction of value movement across accounts, wallets, transactions, entities, services, blockchains, and conversion points to identify ownership, destination, dissipation, or recoverable assets. The control exists to identify, assess, and control financial-crime exposure while supporting proportionate customer due diligence, transaction decisions, investigation, and regulatory reporting. It differs from routine transaction screening because it is an evidentiary investigation that may combine on-chain analysis with legal, financial, identity, and device information. It should be interpreted alongside Crypto Forensics because the concepts can affect the same decision without representing the same control, event, or risk.
The workflow combines customer and beneficial-owner information, expected activity, transaction data, counterparties, geography, delivery channel, typologies, and external intelligence. Automated indicators should create explainable alerts or risk changes, while trained analysts review context, request evidence, document uncertainty, and escalate according to authority. In this context, analysts should preserve source data, distinguish facts from attribution hypotheses, document clustering assumptions, account for mixers and bridges, validate timestamps and exchange records, and maintain chain of custody.
It should connect the term to Blockchain Transaction Screening where that relationship changes access, transaction treatment, investigation, communication, or recovery.
Records should preserve source data, rule and model versions, timestamps, thresholds, attribution confidence, customer explanations, analyst notes, approvals, restrictions, and links to cases or reports. Data quality, false positives, missed scenarios, and changes in products or threats need periodic testing.
Useful measures include review coverage, alert volume, true-positive yield, investigation time, overdue cases, risk-rating changes, reporting outcomes, data-quality exceptions, and effectiveness findings from independent testing.
The relationship with Crypto Mixer should be documented where it affects residual risk or control ownership.
Key Takeaway
Analysts should preserve source data, distinguish facts from attribution hypotheses, document clustering assumptions, account for mixers and bridges, validate timestamps and exchange records, and maintain chain of custody.
Sources
- Virtual Assets Red Flag Indicators of Money Laundering and Terrorist Financing — FATF (2026-08-03)
- Guide to Integrating Forensic Techniques into Incident Response, SP 800-86 — NIST (2026-08-03)
- Sanctions Compliance Guidance for the Virtual Currency Industry — U.S. Treasury OFAC (2026-08-03)