Link Analysis, Network Intelligence and Criminal Structure Mapping
Financial crime and organised criminal activity frequently involve interconnected individuals, companies, accounts, transactions, intermediaries, assets and jurisdictions.
Course overview
Financial crime and organised criminal activity frequently involve interconnected individuals, companies, accounts, transactions, intermediaries, assets and jurisdictions. Examining these elements independently may obscure the relationships and structures that enable illicit activity. Link analysis and network intelligence provide structured methods for identifying, analysing and visualising these relationships.
This five-day programme provides practical techniques for developing link analysis, network intelligence and criminal structure maps from financial, corporate, transactional, investigative and open-source information. Participants will learn how to identify entities and relationships, construct analytical networks, assess roles and connections, identify central actors and facilitators, trace financial and organisational relationships, and convert complex networks into clear intelligence products.
The course also addresses analytical quality, source evaluation, uncertainty, network interpretation and effective visual communication to ensure that network products support intelligence-led investigations and decision-making.
What you will be able to do
- Explain the principles and applications of link and network analysis
- Identify persons, entities, accounts, transactions, assets and other relevant nodes
- Identify and assess relationships and connections between entities
- Develop structured link-analysis frameworks
- Analyse financial, corporate and criminal networks
- Identify key actors, facilitators, intermediaries and associated entities
- Distinguish direct, indirect and inferred relationships
- Analyse ownership, control and beneficial ownership structures
- Map transactional and financial relationships
- Identify network clusters, hubs and patterns of association
- Develop criminal structure and financial-flow maps
- Integrate information from multiple intelligence sources
- Apply appropriate analytical caveats and confidence assessments
- Produce professional network visualisations and intelligence products
Who should attend
- Financial intelligence analysts
- Operational and strategic intelligence analysts
- Financial investigators
- AML/CFT/CPF professionals
- Law enforcement intelligence personnel
- Fraud investigators
- Forensic accountants
- Asset tracing and recovery practitioners
- Corporate intelligence professionals
- Regulators and supervisory authorities
- Security and intelligence practitioners
- Compliance and risk professionals
Course outline
Day 1Foundations of Link and Network Analysis
Understanding Networks
- Concepts of link analysis
- Network intelligence fundamentals
- Nodes, links and attributes
- Direct and indirect relationships
- Static versus dynamic networks
- Financial and criminal networks
- Organisational and transactional networks
Identifying Relationships
- Person-to-person relationships
- Person-to-company relationships
- Company-to-company relationships
- Account relationships
- Transaction relationships
- Asset relationships
- Geographic and jurisdictional connections
- Professional and intermediary relationships
Intelligence Data for Network Analysis
- Financial intelligence
- Corporate records
- Transactional information
- Regulatory information
- Investigative information
- Open-source information
- Intelligence reports
- Source evaluation and reliability
Day 2Financial and Corporate Network Analysis
Financial Link Analysis
- Account-to-account relationships
- Transaction chains
- Flow-of-funds relationships
- Common counterparties
- Shared identifiers
- Shared assets and financial interests
- Transactional associations
Corporate and Ownership Networks
- Company ownership structures
- Directors and shareholders
- Beneficial ownership
- Control relationships
- Common ownership
- Related companies
- Nominee and intermediary relationships
- Corporate layering
Network Expansion Techniques
- Identifying first- and second-degree relationships
- Association mapping
- Common-attribute analysis
- Relationship discovery
- Network expansion
- Identifying analytical gaps
- Prioritising relationships for further examination
Day 3Criminal Network and Structural Analysis
Criminal Network Structures
- Hierarchical networks
- Distributed networks
- Facilitation networks
- Professional enablers
- Broker and intermediary structures
- Front and shell companies
- Cross-border networks
Network Roles and Functions
- Principal actors
- Beneficial owners
- Controllers
- Financial facilitators
- Intermediaries
- Professional service providers
- Asset holders
- Operational actors
Advanced Network Analysis
- Network centrality concepts
- Hubs and connectors
- Clusters and communities
- Relationship strength
- Network density
- Bridge entities
- Network vulnerabilities
- Identifying priority nodes
Day 4Network Visualisation and Intelligence Analysis
Building Intelligence Network Maps
- Analytical mapping principles
- Selecting relevant relationships
- Network layout
- Entity classification
- Relationship labelling
- Financial-flow mapping
- Ownership mapping
- Timeline integration
Combining Networks
- Financial and corporate networks
- Person and entity networks
- Transaction and communication relationships
- Geographic networks
- Cross-border connections
- Multi-source intelligence integration
Interpreting Complex Networks
- Identifying significant relationships
- Distinguishing association from evidence
- Alternative explanations
- Analytical assumptions
- Confidence assessment
- Information gaps
- Intelligence leads
Day 5Intelligence Production and Capstone
Network Intelligence Reporting
- Explaining complex networks
- Network summaries
- Key actors and relationships
- Financial-flow narratives
- Ownership/control findings
- Intelligence implications
- Analytical caveats
Presenting Network Intelligence
- Executive network charts
- Investigative diagrams
- Relationship matrices
- Timeline visualisation
- Financial-flow diagrams
- Briefing complex networks to decision-makers
Capstone Exercise
- Participants will analyse a complex simulated case involving persons, companies, accounts, transactions and assets
- The exercise will require participants to:
- Identify relevant entities
- Establish relationships
- Expand the network
- Analyse financial and corporate connections
- Identify key actors and facilitators
- Map ownership and control
- Trace relevant financial relationships
- Develop a criminal structure map
- Identify intelligence gaps and leads
- Produce and brief a network intelligence product
Course outcome
Participants will acquire practical capability to transform fragmented information into structured network intelligence, enabling clearer understanding of relationships, financial flows, ownership structures, criminal organisations and potential facilitators.
Dates & fees
Full training calendarFees are per participant in US dollars and cover tuition, course materials and your certificate. Travel and accommodation are not included.