OSINT Financial Intelligence & Cryptocurrency Analysis 2 — Questions and Answers
Question 1: Which OSINT database is best suited for researching global company ownership and incorporation details?
- Shodan
- VirusTotal
- OpenCorporates (Correct answer)
- Censys
Correct answer: OpenCorporates
OpenCorporates aggregates company registration data from over 140 jurisdictions worldwide, making it the largest open database for corporate OSINT research.
Question 2: What does 'transaction graph analysis' help investigators identify in cryptocurrency cases?
- The consensus mechanism used by a specific blockchain
- The physical server locations of mining operations
- Historical price manipulation patterns on exchanges
- Fund flow patterns, clusters, and exchange interactions between wallets (Correct answer)
Correct answer: Fund flow patterns, clusters, and exchange interactions between wallets
Transaction graph analysis maps the flow of cryptocurrency between addresses, revealing behavioral patterns, co-spend clusters, and identifying where funds ultimately moved to or from.
Question 3: Which type of public record is most valuable for financial profiling of US individuals in an OSINT investigation?
- SSL certificate transparency logs
- Court filings, property records, tax liens, and civil judgments (Correct answer)
- BGP routing announcements and ASN data
- WHOIS registration records for domain names
Correct answer: Court filings, property records, tax liens, and civil judgments
Court filings, property records, tax liens, and civil judgments are publicly available records that reveal meaningful financial information about individuals without requiring any unauthorized access.
Question 4: What does SEC EDGAR provide for financial OSINT investigators?
- Cryptocurrency transaction records for digital asset companies
- Dark web marketplace transaction logs seized in enforcement actions
- Mandated public disclosures including insider holdings, executive compensation, and beneficial ownership (Correct answer)
- International banking wire transfer records reported under FBAR
Correct answer: Mandated public disclosures including insider holdings, executive compensation, and beneficial ownership
SEC EDGAR contains all required public filings from US public companies including Form 4 insider transactions, 13F institutional holdings, executive compensation schedules, and ownership disclosures.
Question 5: When a cryptocurrency address consistently appears as a deposit address receiving funds from many unrelated senders, what does this pattern suggest?
- The address belongs to an inactive dormant wallet accumulating dust
- The address is likely a hot wallet for an exchange, service, or marketplace (Correct answer)
- The address is controlled by a law enforcement honeypot operation
- The address belongs to a personal investor using dollar-cost averaging
Correct answer: The address is likely a hot wallet for an exchange, service, or marketplace
Exchange and service deposit addresses receive funds from many unrelated parties, creating a distinctive pattern of numerous inbound transactions from diverse sources with similar outbound batching.
Question 6: Where would an OSINT investigator find beneficial ownership disclosures for US companies as of 2024?
- IRS Form 1040 individual tax filings
- State Secretary of State basic incorporation records only
- FinCEN Beneficial Ownership Information (BOI) database under the Corporate Transparency Act (Correct answer)
- FDIC quarterly bank examination reports
Correct answer: FinCEN Beneficial Ownership Information (BOI) database under the Corporate Transparency Act
The Corporate Transparency Act (CTA) enacted in 2024 requires US companies to report beneficial owners to FinCEN, creating a database (accessible to law enforcement) identifying actual human owners behind shell companies.
Question 7: What is a UTXO in the context of Bitcoin OSINT analysis?
- An Unverified Transaction from an Unidentified Origin flagged for suspicious activity
- An Unspent Transaction Output representing available Bitcoin funds in a wallet (Correct answer)
- A User Transaction Under eXamination Order issued by law enforcement
- An Untraceable Transaction Using eXternal Obfuscation method
Correct answer: An Unspent Transaction Output representing available Bitcoin funds in a wallet
UTXOs (Unspent Transaction Outputs) are the fundamental accounting units of Bitcoin, representing specific amounts of BTC available to be spent, and analyzing UTXO sets helps trace fund flows.
Which OSINT database is best suited for researching global company ownership and incorporation details?