THE INTEL ANALYST ACADEMY
Professional Intelligence Training
Printable Lesson
Finint Basics
The Intel Analyst Academy · Lesson Notes
Financial intelligence - FININT - is the discipline of collecting, analyzing, and acting on financial data to detect, disrupt, and prosecute illicit financial activity. It is one of the most underappreciated INTs in the intelligence community, largely because spreadsheets lack the glamour of satellite imagery or the drama of human sources. But here is the uncomfortable truth: every major criminal enterprise, every terrorist network, every rogue state operation leaves financial footprints. And those footprints do not lie.
In this lesson, you will learn the fundamentals of financial intelligence - what it is, how it connects to other intelligence disciplines, the anatomy of money laundering, the reporting systems that flag suspicious activity, and the emerging challenges of cryptocurrency and fintech that keep FININT analysts employed in perpetuity.
By the end, you will understand why the most terrifying question you can ask a criminal is not "where were you?" but "where did the money go?"
Financial Intelligence - FININT - is the systematic collection, analysis, and dissemination of information derived from financial data. It sits at the intersection of traditional intelligence analysis and forensic accounting, drawing on bank records, transaction data, corporate registrations, tax filings, and a dizzying array of financial instruments to build a picture of illicit activity.
FININT is not just about catching money launderers, though that is a major component. Its scope includes:
FININT does not operate in isolation. It is most powerful when fused with other intelligence disciplines:
FININT analysts are what happens when you cross a forensic accountant with a detective and then make them learn blockchain. Their favorite phrase is "that doesn't add up."
The best FININT analysts think like criminals - not to sympathize with them, but to anticipate their next move. When you understand how a launderer thinks, you know where to look before the transaction even happens.
Money laundering sounds complicated, but the underlying concept is simple: take dirty money and make it look clean. The process almost always follows three stages: Placement, Layering, and Integration. Understanding these stages is the cornerstone of financial intelligence analysis.
This is the most vulnerable stage for the launderer. Placement is the act of introducing illicit cash into the legitimate financial system. The cash might be from drug sales, bribery proceeds, or fraud - the key is getting it into a bank account or financial instrument without raising suspicion.
Common techniques include:
If you ever see a car wash that reports more revenue than a regional hospital, congratulations - you have found a placement operation. The criminals have not yet learned about "suspicious activity reports," but your analysts have.
This is where money laundering becomes an art form. Layering involves moving the funds through a series of transactions designed to obscure the audit trail. The goal is to make the money's origin so convoluted that even a determined investigator gives up.
Common layering techniques:
Integration is the final stage, where the now-clean money re-enters the legitimate economy. The launderer can spend it, invest it, or use it without fear of immediate detection. The dirty money has been washed, dried, and folded - ready for use.
Integration methods include:
When analyzing potential laundering, focus on the gap between economic reality and financial activity. A restaurant that reports $2 million in annual revenue but has four tables and a menu with eight items is not a successful business - it is a platform for placement.
The financial intelligence community relies on a reporting infrastructure designed to catch suspicious activity before it disappears into the ether. The two most important instruments are the Currency Transaction Report (CTR) and the Suspicious Activity Report (SAR). Understanding these is essential for any FININT analyst.
In the United States, financial institutions must file a CTR for any transaction exceeding $10,000 in cash. This is a mandatory, non-discretionary reporting requirement. CTRs are the bread and butter of FININT - they provide the raw data stream from which analysts identify patterns.
Criminals know about the $10,000 threshold. That is why structuring exists. And that is why FININT analysts look for patterns of deposits slightly below the threshold - $9,900 here, $9,800 there - which is itself a red flag.
Unlike CTRs, SARs are filed at the discretion of the financial institution when it suspects illegal activity. SARs are confidential - the subject of the report is not notified that a SAR has been filed. This confidentiality is critical because it allows law enforcement to build cases without tipping off the target.
The volume of SARs is staggering. In 2023, US financial institutions filed over 3.6 million SARs. An analyst's job is not to read every SAR - it is to identify the needle-in-a-haystack SARs that indicate genuine criminal activity.
Experienced FININT analysts develop an intuition for transactions that do not feel right. Here are classic red flags:
If a company registered in a Caribbean tax haven sends an invoice to a shell company in Cyprus for "consulting services" and the only consultation involved was "how to hide $5 million" - that is what FININT analysts call a "professional courtesy."
The digital revolution has been a double-edged sword for financial intelligence. On one hand, it has created unprecedented transparency - every digital transaction leaves a record. On the other hand, cryptocurrencies, fintech innovations, and decentralized finance have created new avenues for moving money outside traditional banking channels.
Cryptocurrencies like Bitcoin are not as anonymous as their users believe. Every transaction is recorded on a public, immutable ledger - the blockchain. While wallet addresses are pseudonymous, the complete transaction history is visible to anyone with the right tools.
Blockchain analysis firms like Chainalysis and CipherTrace have built sophisticated tools to trace cryptocurrency flows. They cluster addresses believed to belong to the same entity, flag addresses associated with illicit activity, and track fund movements across the blockchain. The key insight: privacy coins like Monero aside, most cryptocurrency is not actually private.
The rise of fintech has created new challenges for FININT:
The golden age of money laundering was 1995-2010, when you could walk into a bank with a suitcase of cash and a vague incorporation document. Now you need a PhD in fintech regulation and a blockchain analyst just to stay ahead. Progress.
In cryptocurrency investigations, focus on the off-ramp. No matter how sophisticated the blockchain gymnastics, eventually the launderer needs to convert crypto back to fiat currency. Exchanges are the choke point. Identify the exchange, identify the account, identify the person.
Scenario: You are a FININT analyst at a national financial intelligence unit. A CTR alert flags a series of cash deposits totaling $940,000 over three months into the account of "GreenLeaf Properties LLC," a real estate company registered in Delaware with a mailing address at a UPS store.
The deposits follow a consistent pattern: $9,500 every two days, deposited at different bank branches across three states. The stated business activity is "property management," but the account has no outgoing payments for maintenance, utilities, or any property-related expenses. Six weeks ago, the account wired $500,000 to a corporate entity in the British Virgin Islands with no publicly identifiable ownership.
Your task: Write a three-paragraph intelligence assessment that:
Bonus points if you can guess how many shell companies stand between the BVI entity and the ultimate beneficial owner. (Hint: it is never just one.)
Continue your training
This lesson is part of The Intel Analyst Academy — professional intelligence analysis training built for analysts. Explore the full course library, structured learning paths, and practical tools at theintelanalystacademy.com.
