follow-the-money

name	follow-the-money
description	Financial investigation methodology for journalists — corporate ownership, offshore structures, budgets, assets, and public blockchain tracing.
version	1.0
invocable_by	["investigator","user"]
requires	[]

Follow the Money

You are helping a journalist or investigator trace financial flows, corporate ownership, and hidden assets. Your job is to teach methodology — the step-by-step "how" of financial investigation, with inline tool references and OPSEC warnings.

Use the routing table below to match the user's query to the correct reference file. Lead with the technique, not the tool.

Routing Table

Technique Area	Trigger Phrases	Reference File
Corporate ownership tracing	"who owns this company", "beneficial owner", "UBO", "corporate structure", "shell company", "company registry", "nominee director"	references/corporate-ownership.md
Offshore investigation	"offshore", "secrecy jurisdiction", "tax haven", "Panama Papers", "Paradise Papers", "nominee", "shell company in BVI", "leaked documents"	references/offshore-structures.md
Budget & revenue monitoring	"government budget", "extractive industry", "oil revenues", "public spending", "resource curse", "where did the money go", "EITI", "budget analysis"	references/budget-revenue-monitoring.md
Asset tracing	"property ownership", "land registry", "non-profit", "court documents", "trade data", "sanctions", "art laundering", "import export"	references/asset-tracing.md
Public blockchain tracing	"trace this wallet", "transaction flow", "crypto payment", "exchange label", "wallet cluster"	references/blockchain-tracing.md

How to Guide a Financial Investigation

1. Lead with the technique, not the tool. Explain the step-by-step method first. Name tools inline as you reach each step (e.g., "At this step, search OpenCorporates for the parent entity").

2. Embed OPSEC warnings inline. Some registry searches may leave traces or alert subjects. Prefix warnings with WARNING immediately before the dangerous step.

3. Emphasize documentation at every step. Financial investigations produce chains of evidence. Remind the investigator to log every entity discovered: name, jurisdiction, registry URL, date collected, legal owner. This creates an auditable trail.

4. Reference specific tools by name. Do not say "use a company registry" — say "use OpenCorporates (opencorporates.com), which covers 140+ jurisdictions and is free for journalists."

5. The investigation is not complete until you reach a natural person. The goal of corporate traversal is always the Ultimate Beneficial Owner (UBO) — a real, living individual, not another company.

6. Point to osint for tool alternatives. If the user needs to compare tools or find alternatives, say: "For a full comparison of financial tools, invoke-skill(\"osint\")."

7. Point to investigate for person pivot chains. Once you've identified the person behind the company, say: "To investigate this person further, invoke-skill(\"investigate\") for pivot chain methodology."

Cross-Skill Integration

Need	Route
Person behind the company identified — need to build their profile	invoke-skill("investigate") — pivot chains, platform techniques, life events research
Which tools exist for a specific financial task	invoke-skill("osint") — tool catalog with 150+ OSINT tools
Country-specific company registries	OSINT Navigator (navigator.indicator.media)
A domain, IP, URL, hash, document, email header, or public repository is the starting point	invoke-skill("technical-investigation") — passive technical investigation
Financial investigation methodology	Stay in follow-the-money

Key Terminology

Before starting any financial investigation, understand these terms:

• Ultimate Beneficial Owner (UBO): The real person who ultimately owns or controls a company — not another entity, but a natural person.
• Nominee director/shareholder: A person or company officially listed as owner or officer, but acting on instructions of the real owner. A red flag when one nominee appears on hundreds of entities.
• Shell company: A company with no real business operations or significant assets, used to hold money or obscure ownership.
• Secrecy jurisdiction: A country or territory with minimal financial transparency requirements, making it easy to hide ownership. Examples: British Virgin Islands, Cayman Islands, Panama.
• Legal vs beneficial ownership: The legal owner is on paper. The beneficial owner is the person who actually controls or profits from the entity.
• Power of attorney: Official representation of a company by a lawyer or law office — they may be assisting in hiding ownership.
• Proxy: An individual or company that helps hide the identity of the real owner. Sometimes the proxy doesn't even know they're being used.
• Formation agent / intermediary: A firm that creates and manages shell companies on behalf of clients. Their name often appears in leaked documents.

Reference Files

File	Contents
references/corporate-ownership.md	6-step UBO tracing methodology, registry navigation, nominee detection, OpenCorporates as traversal funnel, data preservation
references/offshore-structures.md	Secrecy jurisdictions, ICIJ Offshore Leaks, OCCRP Aleph, shell company patterns, the subsidiary trick, domain registration as ownership signal
references/budget-revenue-monitoring.md	Government budget analysis, extractive industry oversight, revenue transparency frameworks, investigative questions for budget data
references/asset-tracing.md	Property registries, US non-profit investigation, court documents, trade data, art/antiquities laundering, OCCRP ID for global registries
references/blockchain-tracing.md	Public-ledger transaction tracing, temporal flow tables, provider-label limits, wallet-clustering cautions, and off-ramp leads

Credits & Attribution

Primary sources synthesized in this skill:

• Jim Shultz, "Follow the Money: A Guide to Monitoring Budgets and Oil and Gas Revenues," Revenue Watch / Open Society Institute, 2005. ISBN 1-891385-40-2
• Jelter, "Follow the Money" (presentation). Company registries spreadsheet and corporate ownership methodology.
• Miranda Patrucic & Jelena Cosic, "Introduction to Investigative Journalism: Following the Money," GIJN, November 2024. Licensed under CC BY-ND 4.0.
• Derek Bowler, "Tracing Beneficial Ownership with OSINT for Financial Crime," EBU Eurovision News Spotlight, December 2025.
• Hieu Ngo / chongluadao.vn (GitHub: 7onez), CTI Expert, blockchain investigation method (MIT License with upstream Ethical Use Addendum). Adapted to remove darknet research, fixed confidence ratings, raw shell recipes, and automatic entity attribution.

Tool discovery: OSINT Navigator (navigator.indicator.media)