This stage can often include an investigation, analysing data, publicly available information, obtaining local filings, social media and open source analytics, human source enquiries and other overt enquiries, and in some cases covert investigation. Court applications to obtain additional information, such as disclosure orders on banks and other data holders, which can lead to identifying bank accounts, or other avenues to investigate.

Securing the assets to prevent them dissipating further is of paramount importance. Often this involves working closely with legal experts to obtain court orders for freezing bank account and seizing assets, thereby preventing transfer to other parties. This is the most effective way to secure assets and mitigate losses.