← All tracks

Financial Investigator

Investigator / FIU analyst

Built around the working question of an investigator: where did the money come from, where did it go, and what can I prove. The sequence front-loads tracing mechanics and holds programme-level policy until the end, where it belongs for this role.

12 modules · 40 lessons · 159 credits · ~23 h reading · 12 case studies

The sequence

  1. 01
    IFF501 · Foundations · 12 credits · ~2 h

    Vocabulary, typologies and the IFF landscape

    Establishes the working vocabulary; money laundering, IFF, aggressive tax planning, tax evasion, corruption proceeds, and situates each within the global financial system.

    Triage first. Charging the wrong category is the most common way a good file dies.

    Case: The Wolfsberg Bakery: a placement primer
  2. 02
    IFF502 · Foundations · 12 credits · ~1 h

    KYC, CDD and reading the red flags

    How financial institutions and Designated Non-Financial Businesses and Professions (DNFBPs) are meant to identify their customers and detect suspicious behaviour, and where the process fails.

    Red flags are the raw material of every referral you will read or write.

    Case: The lawyer's client account
  3. 03
    IFF504 · Foundations · 15 credits · ~2 h

    Predicate offences, tax crime and the proceeds-of-crime chain

    Traces the legal architecture connecting an underlying crime to the money that flows from it, from the FATF designated categories and self-laundering through serious tax crime, tracing doctrine and civil forfeiture, to the evidential chain a prosecutor must build.

    Predicate-to-proceeds reasoning is the spine of the eventual charge sheet.

    Case: The consultancy-fee cascade: tracing state-capture proceeds through a tax-and-laundering lens
  4. 04
    IFF605 · Layering · 15 credits · ~2 h

    Shell companies, nominees and the corporate veil

    How anonymous corporate structures are built, why they are so effective, and how to pierce them.

    Shell structures are where most tracing stops unless you know how they are built.

    Case: Reconstructing the Sierra Holdings chain
  5. 05
    IFF606 · Layering · 12 credits · ~2 h

    Correspondent banking and wire chains

    Dissects the plumbing of cross-border payments; nostro/vostro relationships, nested correspondents, message-field forensics and the 2025 revisions to payment transparency, and shows how de-risking has reshaped African corridors.

    Wire chains and nesting: the mechanics you will spend most of your time reading.

    Case: The nested chain that hid a sanctioned counterparty
  6. 06
    IFF607 · Layering · 12 credits · ~2 h

    Crypto and virtual-assets layering

    Covers VASP obligations, mixers and chain-hopping, cross-chain bridges and stablecoin rails, the travel rule's uneven global rollout, MiCA, CARF/DAC8, and the evidential strengths and limits of on-chain tracing.

    Chain analysis is now routine, not exotic; blockchain evidence must be handled correctly.

    Case: Chain-hopping a ransomware payment through a bridge and a privacy coin
  7. 07
    IFF719 · Mastery · 15 credits · ~2 h

    Financial intelligence analytics and typology detection

    Examines how raw suspicious-transaction reporting becomes disseminable financial intelligence — through triage, network analysis, monitoring-model governance and lawful data sharing — and equips analysts to judge the quality of each stage.

    Analytics and typology detection turn a pile of reports into a network hypothesis.

    Case: The shell-hub remittance network
  8. 08
    IFF610 · Integration · 15 credits · ~2 h

    Trade-Based Money Laundering (TBML)

    The largest, least-detected laundering channel: moving value under cover of legitimate trade flows.

    Trade-based laundering appears in the majority of cross-border corridor cases.

    Case: The Aden textile corridor
  9. 09
    IFF716 · Mastery · 12 credits · ~2 h

    Cross-border cooperation and evidence

    How intelligence, information and evidence actually move between states; MLAT practice, Egmont FIU exchange, exchange of information on request versus CRS/CARF automatic exchange, joint audits, and how to draft a request that gets answered.

    Cooperation and evidence admissibility decide whether your tracing survives court.

    Case: The eighteen-month gap: a transnational bribery case stalled on evidence
  10. 10
    IFF717 · Mastery · 12 credits · ~2 h

    Asset recovery, confiscation and return

    The full recovery pipeline from tracing to restraint to confiscation and return — non-conviction-based confiscation, UNCAC Chapter V, the StAR Initiative, the EU's 2024 asset-recovery Directive, Swiss and UK restitution practice, GFAR return principles, and the politics that stall repatriation.

    Asset recovery is the outcome the public actually sees; plan for it from day one.

    Case: The Abacha billions: two decades from freeze to (partial) return
  11. 11
    IFF715 · Mastery · 15 credits · ~3 h

    Forensic accounting for prosecution

    Turning transactional evidence into court-usable proof of an offence.

    Forensic reconstruction, so your file speaks the language the prosecutor needs.

    Case: The Ministry contract kick-back reconstruction
  12. 12
    IFF718 · Mastery · 12 credits · ~2 h · optional

    Programme design, metrics, and institutional integrity

    Designing the analytics function of a revenue authority or FIU, risk-scoring and its failure modes, data protection limits after the CJEU BO-register rulings, measuring effectiveness against FATF's 11 Immediate Outcomes, greylisting dynamics, corruption of the enforcement function itself, and whistleblower protection.

    Optional for the role, but useful if you brief management on institutional metrics.

    Case: South Africa: from 2023 grey-listing to 2025 delisting