A money laundering investigation reconstructs how illicit or disguised funds were placed into the financial system, layered through accounts and entities to obscure their origin, and integrated into seemingly legitimate assets. Honeybadger Solutions conducts these investigations in-house and nationwide, with international reach — tracing the money, mapping the structures used to hide it, and producing evidence that supports litigation, regulatory response, internal AML matters, and asset recovery.
What does a money laundering investigation involve?
Money laundering is the process of making illegally obtained or deliberately concealed money appear legitimate. An investigation into it is, at its core, a reverse-engineering exercise: starting from where value ended up and working backward through the accounts, entities, and transactions used to sever the connection to its true source. The work is equal parts financial reconstruction, entity analysis, and — increasingly — blockchain tracing, because digital assets have become a preferred layering tool.
These engagements arrive from several directions. A business or executive may need to defend against an allegation by demonstrating that funds have a legitimate provenance. Counsel in a fraud or divorce matter may need to show that a counterparty laundered proceeds through a business or third parties. A financial institution or fintech may need an independent look-back after a suspicious-activity pattern. An acquirer may need to confirm that a target’s revenue is what it claims to be. In every case, the deliverable must be lawful, sourced, and defensible.
What are the three stages of money laundering?
Investigators structure their analysis around the classic three-stage model, because each stage leaves distinct evidence.
| Stage | What happens | Where investigators find it |
|---|---|---|
| Placement | Illicit cash enters the financial system | Structured deposits, cash-intensive businesses, prepaid instruments |
| Layering | Funds move through transactions to obscure origin | Rapid transfers, shell entities, cross-border wires, crypto conversions |
| Integration | “Cleaned” funds re-enter as legitimate wealth | Real estate, business investment, luxury assets, loans to self |
The layering stage is where the investigation is won or lost. A single hop is easy to follow; the launderer’s goal is to create enough hops, across enough institutions and jurisdictions, that a casual review gives up. Professional tracing does not give up — it treats each hop as a documented link in a chain and rebuilds the whole chain.
What are the red flags of money laundering?
Certain patterns recur across schemes and tell an investigator where to concentrate. None is proof on its own; together they build a picture.
- Cash deposits structured just under reporting thresholds (“smurfing”).
- A business whose deposits far exceed its plausible revenue or customer base.
- Funds moving rapidly in and out of accounts with no business rationale.
- A web of entities with common ownership, shared addresses, and no operations.
- Round-number transfers, back-to-back loans between related parties, or “loans” that are never repaid.
- Cross-border wires to or from high-secrecy jurisdictions without commercial logic.
- Cryptocurrency conversions, mixers, or rapid movement across multiple wallets and exchanges.
- Real estate or luxury purchases inconsistent with disclosed income.
How do investigators trace laundered money?
Elite tracing is methodical. The framework below reflects how our team works a nationwide or cross-border laundering matter without losing the trail — or the admissibility of the evidence.
- Define the question and the standard. Are we proving legitimate provenance, tracing proceeds for recovery, or supporting a regulatory or internal matter? The purpose sets the evidentiary bar.
- Establish the funds’ true origin or destination. Anchor the analysis at the known end of the chain and identify the first counterparties.
- Map the entity structure. Chart the LLCs, trusts, and offshore vehicles used to layer, and the individuals who actually control them.
- Reconstruct the transaction flow. Using lawfully obtained records — discovery, subpoenaed statements, and the client’s own data — follow the money hop by hop across institutions and borders.
- Trace digital assets. Apply blockchain analysis to follow crypto through wallets, mixers, and exchanges, and attribute wallets to real identities via exchange records and device forensics.
- Distinguish structure from crime. Not every offshore entity is laundering; the analysis separates legitimate tax and privacy planning from concealment of illicit or improperly diverted funds.
- Corroborate and document. Confirm each link against a source record and assemble a sourced report with a clean exhibit trail.
How does cryptocurrency change money laundering investigations?
Crypto is often assumed to be a dead end for investigators. In practice, the opposite is frequently true: most blockchains are permanent public ledgers, so every transaction is visible forever. The challenge is not seeing the movement — it is attribution, connecting a pseudonymous wallet to a person or entity. Launderers respond with mixers, chain-hopping, and privacy coins, but each of those introduces its own detectable signatures and choke points, especially where funds touch a regulated exchange that collects identity information. Because Honeybadger handles blockchain tracing and traditional financial investigation together, we can follow value as it crosses between the crypto and banking worlds — exactly where many schemes are exposed.
Who commissions these investigations, and why?
The reader considering this service is usually in one of four positions. A general counsel needs an independent, defensible answer before responding to a regulator or a plaintiff. A litigant needs to prove that an opponent laundered proceeds to support a fraud claim or defeat a poverty defense. A company needs to clear itself by documenting the legitimacy of its funds. An investor or acquirer needs assurance that a target’s cash flows are real and clean. In each scenario the value is the same: a rigorous, lawfully built record that stands up to scrutiny — from a court, a regulator, or a counterparty — rather than an opinion that cannot be tested.
What are the legal boundaries of this work?
A money laundering investigation is only as strong as it is lawful. Legitimate work relies on public records, litigation discovery, subpoenaed institutional records, blockchain data, and the client’s own documents. It never involves pretexting financial institutions — prohibited under the Gramm-Leach-Bliley Act — or unauthorized access to accounts and systems. This is not a private prosecution; investigators develop and document evidence, and where criminal conduct is indicated, findings are referred to the appropriate authorities and coordinated with counsel. Building the file lawfully is what makes it usable rather than a liability.
What are the common laundering methods investigators encounter?
Schemes recombine a limited set of building blocks, and recognizing them accelerates a trace. Cash-intensive front businesses — car washes, restaurants, salons — blend illicit cash with legitimate receipts, so deposits can be reported as revenue. Trade-based laundering moves value by over- or under-invoicing goods across borders, hiding the transfer inside ordinary commerce. Real estate absorbs large sums through all-cash purchases, often via LLCs, then releases clean value on resale. Shell and nominee companies create distance between the launderer and the money, especially when stacked across jurisdictions. Loan-back arrangements disguise a person’s own funds as borrowed money. And digital rails — cryptocurrency, prepaid cards, and money-service businesses — add speed and cross-border reach. Most real cases combine several of these, which is why an investigation must be able to follow value as it changes form, not just as it changes hands.
How does this work support financial institutions and compliance teams?
Banks, fintechs, money-service businesses, and investment firms operate under anti-money-laundering obligations that require them to know their customers and monitor for suspicious activity. When an internal monitoring system flags a pattern — or when a regulator raises a question — an independent forensic investigation provides the depth that automated screening cannot. Rather than a rules-based alert, the institution gets a reconstructed picture: who the customer really is, how funds actually moved, whether the activity has an innocent explanation, and what documentation supports either conclusion. This independent look-back strengthens a suspicious-activity determination, informs a decision to exit a relationship, and demonstrates diligence if the institution’s handling is later scrutinized. Because the work is done by an outside team with no stake in the original onboarding decision, its conclusions carry weight that an internal review may not.
Why does cross-border coordination decide complex cases?
Serious laundering is rarely confined to one country, because crossing a border is itself a layering technique — each jurisdiction a launderer routes through adds friction for anyone trying to follow. Different legal systems, banking-secrecy rules, languages, and record formats can stall a trace that a single-country investigator would abandon. What keeps the chain intact is a methodical approach that anticipates where value will surface next and pursues the documentable points — correspondent banking relationships, regulated exchanges with identity requirements, and onshore assets — rather than getting lost chasing a shell in a secrecy haven.
The practical advantage of a single accountable team is that these threads do not get dropped in the handoffs between vendors. When the same investigators follow the money from a domestic account through an offshore entity and into a cryptocurrency exchange and back into a real-estate purchase, the narrative stays coherent and the evidence stays connected. Fragmented investigations, by contrast, tend to produce a stack of jurisdiction-specific reports that never quite join up — which is exactly the outcome a sophisticated launderer is counting on. Continuity across borders is not a luxury in these matters; it is frequently the difference between a trail that closes and one that goes cold.
How do investigators overcome cross-border and jurisdictional obstacles?
Cross-border movement is the launderer’s favorite defense and the investigator’s central obstacle. When funds hop between jurisdictions, no single institution or authority sees the whole chain, and bank-secrecy regimes in certain financial centers deliberately limit what an outside party can compel. A professional investigation works this problem from two directions. First, it concentrates on choke points — the moments when value re-enters a transparent system: a correspondent bank that clears a U.S.-dollar wire and leaves a record with FinCEN-regulated institutions, a licensed cryptocurrency exchange that performs identity verification, or an onshore asset such as real estate that must be recorded publicly. Those points leave documentation even when the intermediate hops do not.
Second, where the matter is in litigation or referred to authorities, formal tools become available: letters rogatory, mutual legal assistance treaties (MLATs), and subpoenas to domestic branches and counterparties. The intelligence developed lawfully by investigators is what makes those formal requests precise and productive rather than fishing expeditions. The Financial Action Task Force, the global anti-money-laundering standard-setter, publishes typologies mapping how value crosses borders; investigators use that body of knowledge to anticipate the next hop rather than merely chase the last one.
What drives the cost and timeline of a money laundering investigation?
There is no flat rate for tracing laundered money, because the effort scales with the complexity the scheme was designed to create. The primary cost drivers are the number of hops and institutions involved, the number of entities and jurisdictions in the structure, whether cryptocurrency is in the flow (which adds blockchain-analysis effort but often accelerates attribution), the volume of records to reconstruct, and whether the work must meet a litigation-grade evidentiary standard with formal exhibits and potential expert testimony.
Because of that range, disciplined work is phased. A focused defensive engagement — proving the clean provenance of a specific pool of funds — can resolve in weeks. A full reconstruction of a multi-entity, multi-country layering scheme is a matter measured in months, and a credible provider scopes it in stages so the client sees findings and can make decisions before authorizing the next phase. What a serious firm will not do is promise a fixed outcome or a guaranteed recovery; it commits to lawful, rigorous work and honest interim reporting.
Representative scenario: the over-performing cash business
Consider a representative matter. A private-equity sponsor evaluating the acquisition of a regional chain of cash-intensive service locations noticed that reported revenue outpaced what comparable single-unit economics could plausibly support. Rather than rely on the seller’s financials, the sponsor commissioned an independent look-back. Investigators reconstructed deposit patterns against foot-traffic and supply-purchase data, mapped the ownership of several affiliated entities that shared addresses and a common controller, and identified round-number inter-company transfers with no commercial rationale. The analysis did not, by itself, prove a crime — but it documented that a material portion of reported revenue could not be reconciled with legitimate operations, giving the sponsor a sourced basis to renegotiate, restructure, or walk away. This is an illustrative scenario, not a named client or claimed outcome, but it reflects the discipline: reconcile claimed value against independently verifiable activity, and follow the entities, not just the numbers.
Frequently asked questions
Can you trace money that moved through offshore accounts?
Frequently, yes. Offshore secrecy slows a trace but rarely stops it, because funds usually touch correspondent banks, regulated exchanges, or onshore assets at some point. We map the entity structure and follow value through the points where documentation lawfully exists.
Is using offshore or multiple entities automatically money laundering?
No. Legitimate tax planning, privacy, and asset protection use the same tools. A core part of the investigation is distinguishing lawful structuring from concealment of illicit or improperly diverted funds — which protects clients who are wrongly suspected as much as it exposes those who are not.
Can a money laundering investigation help me defend against an accusation?
Yes. Many engagements are defensive: documenting the legitimate provenance of funds to answer a regulator, litigant, or counterparty. The same forensic rigor that traces illicit money can affirmatively prove that money is clean.
Do you report findings to authorities?
We develop and document evidence for our client and their counsel. Where the engagement calls for it — and where the client and counsel direct — findings are referred to the appropriate law-enforcement or regulatory bodies and supported through the process.
How do investigators separate laundering from legitimate finance?
One of the most consequential parts of this work is also the most easily overlooked: not everything that looks suspicious is a crime. Wealthy individuals and multinational businesses routinely use offshore entities, layered holding structures, intercompany loans, and cross-border transfers for entirely lawful reasons — tax efficiency, privacy, liability protection, and operational necessity. An investigator who assumes guilt from complexity produces a report that a competent adversary dismantles in minutes and that exposes the client to a defamation or bad-faith claim. The discipline is to ask what a transaction’s legitimate business purpose would be, and then test whether the evidence supports that purpose or contradicts it.
Concealment reveals itself in the gaps: transfers with no documented commercial rationale, entities with no operations or employees, valuations that make no sense, funds that circle back to their origin, and paper trails that were manufactured after the fact. A rigorous investigation weighs the innocent explanation against the evidence rather than presuming the worst — which is precisely why the same methodology that exposes real laundering is also the strongest tool for clearing a client who has been wrongly accused. Objectivity is not a courtesy; it is what makes the conclusion credible to a court or regulator.
How long does a money laundering investigation take?
It depends on the number of hops, entities, and jurisdictions, and whether cryptocurrency is involved. A focused defensive review can take weeks; a full reconstruction of a multi-entity, cross-border scheme is a phased matter measured in months. We scope in stages so you see findings and can make decisions before authorizing further work.
Can laundered funds actually be recovered?
Recovery is possible but never guaranteed. Tracing identifies where value came to rest — real estate, business interests, or accounts — which is the prerequisite for civil recovery, restitution, or forfeiture. The actual return of funds depends on the assets still existing, the jurisdiction involved, and the legal process pursued with counsel.
About Honeybadger Solutions
Honeybadger Solutions is an Arizona-licensed security and investigations firm serving all of Arizona, the nation, and international matters. Our money laundering investigations combine in-house forensic financial analysis, blockchain tracing, digital forensics, and background intelligence under one accountable team. We operate three Arizona offices: Casa Grande (HQ), Phoenix, and Oro Valley. Whether you are defending against an allegation, pursuing recovery, or conducting an independent look-back, we deliver lawfully built, defensible findings. Call 602-725-2818 to speak confidentially with our financial investigations team.