Corporate and Financial OSINT: Investigating Companies, Ownership, and Money Flows
How to investigate corporations, beneficial ownership, financial relationships, and asset structures using open source tools — from SEC filings to corporate registry searches.
Corporate and financial OSINT digs into legal entities: companies, foundations, trusts, and their controllers. It exposes real owners, financial ties between entities, and involvement in fraud, sanctions busting, or money laundering. Public corporate filings, beneficial ownership registries, court records, sanctions databases, and financial data sources are analyzed.
Shell companies, holding structures, nominee directors, trusts, and multi-jurisdictional stacking obscure beneficial ownership. Key players include the registered agent, who gets legal notices; the director/officer, listed but possibly a nominee; the shareholder, the legal owner; and the beneficial owner, the real person in control.
Jurisdictions vary in disclosure. The UK, Australia, and some European countries are transparent, with easy access to director and shareholder data. The US has moderate disclosure; director names are public, but shareholder data varies by state. Low-disclosure zones like the Cayman Islands, British Virgin Islands, and Delaware are popular for opacity.
Investigating a US public company starts with the SEC's EDGAR database. EDGAR contains 10-K, 10-Q, DEF 14A, 8-K, Schedule 13D/13G, and Form 4 filings. The full-text search feature lets you search across filings.
For UK companies, Companies House provides free access to director names, shareholder names, persons of significant control, annual accounts, and filing history. OpenCorporates aggregates data from 150+ jurisdictions. You can search by company name, registered agent, or director name. The OCCRP Aleph database indexes leaked and public documents, corporate registries, court records, and sanctions lists.
Beneficial ownership research often requires digging deeper. The FinCEN Beneficial Ownership Registry in the US is currently limited to law enforcement and financial institutions. Some FATF-compliant jurisdictions have registries with varying public access. When registries are not available, investigators look at director networks, shared registered agents, addresses, and shareholder chains.
Sanctions and watchlists are crucial. The OFAC SDN list, UN Security Council Consolidated List, and EU Consolidated Sanctions List are key. OpenSanctions aggregates sanctions lists from 90+ sources.
Court records and legal filings are rich sources. You can access US federal court filings through PACER or CourtListener, a free alternative. State court systems vary; some state court data is aggregated by FindLaw, UniCourt, and Doxpop.
Financial data sources like OpenStreetCorp and SEC financial data can be extracted programmatically. LittleSis is a database of relationships between powerful institutions and individuals. FactSet and Bloomberg Terminal are enterprise platforms.
Corporate networks can be visualized using Maltego's corporate intelligence transforms, which show relationships between companies, directors, addresses, and shareholders. Gephi is a free network visualization tool.
An investigation workflow starts with a corporate lookup. Get the basic details: company status, address, and key personnel. Then you dig into director research. Who's running the show? What's their background?
Sanctions lists and court records are next. You want to know if a company or individual is flagged or litigating. Beneficial ownership tracing helps you follow the money. Who's really in control?
The ICIJ's databases are a game-changer. The Offshore Leaks Database is a good place to start. It is a searchable repository from major financial leak investigations. You can find offshore financial structures tied to people or organizations.
Good tools make all the difference in corporate and financial OSINT. OpenCorporates, OCCRP Aleph, EDGAR, and ICIJ databases are essential. Each one helps you peel back the layers on corporate structures and financial dealings. With practice, you'll get good at using these tools. You'll spot patterns and anomalies that others miss. That's how you shed light on opaque entities and transactions.
It takes skill and patience. But with the right approach and tools, you can get to the bottom of complex investigations.
Related Guides
Best OSINT Newsletters: Staying Current in Open Source Intelligence
The newsletters worth subscribing to if you want to stay current on OSINT techniques, tools, and investigations — from practitioner-focused weeklies to threat intelligence briefings.
Business and Corporate OSINT: Corporate Structures, Shell Companies, and Directors
Business and corporate OSINT is the process of moving from a company name to a defensible picture of directors, ownership, subsidiaries, and related entities using registry records and filings. Its value is not just finding a company entry, but linking official records across jurisdictions so control patterns, shell-company indicators, and real-world activity can be assessed without drifting into speculation.
Email OSINT: Find Anyone's Digital Footprint From an Email Address
A complete guide to email OSINT — breach lookup, service discovery, header analysis, and username derivation. Techniques used by professional investigators.
Last updated 2026-04-03. Techniques and tools change — verify current capabilities with vendors directly.