OSINT INVESTIGATIONS

Identify digital traces. Connect information. Uncover relationships.

DETIX conducts professional OSINT investigations using publicly available sources. We research and analyse digital information relating to individuals, companies, addresses, networks and commercial connections. People, Companies, Addresses, networks and economic connections – nationally and internationally.

This is not a simple internet search. What is crucial is the structured evaluation of different sources, the verification of information, and the integration of the results into a reliable overall context.

What is OSINT

OSINT stands for Open Source Intelligence and refers to the systematic collection and analysis of information from publicly accessible sources. This may also include content from the darknet, provided that accessing and using such information is lawful and relevant to the specific assignment.

This may include websites, search engines, social networks, company registers, press and media archives, publications, directories, databases and other digital sources. Relevant information may also be found on accessible forums, marketplaces or communication platforms on the darknet. However, the mere fact that information can be found on the darknet does not automatically make its use lawful or reliable.

The key difference from an ordinary internet search lies in the methodology. Individual pieces of information are not viewed in isolation, but verified, cross-checked and placed into a coherent context. This makes it possible to identify digital traces, relationships, activities and potential connections that may remain hidden during a superficial search.

Professional OSINT investigations therefore require not only suitable research tools, but above all experience in assessing sources, verifying information and distinguishing reliable findings from coincidental matches, outdated data or incorrect associations. All research is conducted in accordance with applicable legal requirements, particularly data protection and criminal law.

WHAT INFORMATION CAN BE OBTAINED THROUGH OSINT?

The information that can be obtained through an OSINT investigation always depends on the specific case, the information already available and the legally permissible research methods.

Depending on the assignment, the following information may be relevant:

1. Current or previous addresses and places of residence

2. Digital identities, usernames and profiles

3. Social media activity and publicly visible contacts

4. Employment history and corporate connections

5. Shareholdings, corporate roles and business relationships

6. Publicly identifiable family or personal connections

7. Phone numbers, email addresses and other digital contact information

8. Indications of assets, real estate or business interests

9. Publications, press reports and archived online content

10. Accessible information from forums, platforms and specialised data sources

11. Accessible darknet content, where its analysis is legally permissible

12. Indications of aliases, identity changes or linked online profiles

13. Timelines, recurring activities and digital behavioural patterns

What matters is not the quantity of data found, but how it is assessed and placed into context. Sources must be checked for plausibility, relevance, timeliness and possible misattribution. Only then can individual digital traces be combined into a reliable investigative picture.

DETIX documents relevant findings in a clear and traceable manner, distinguishing between confirmed information, plausible leads and unverified information.

OSINT FOR PERSON AND LOCATION INVESTIGATIONS

A common application of OSINT is locating individuals and establishing their current or previous whereabouts.

In this context, the term “skip tracing” is commonly used internationally. It refers to a structured search for an individual based on available information such as their name, previous addresses, telephone numbers, email addresses, employment history or known contacts.

Depending on the case, the following questions may be particularly relevant:

1. Where is the person currently located?

2. Which current or previous addresses can be established?

3. Are there indications that the person has moved or is currently residing abroad?

4. What professional, family or business connections exist?

Which digital profiles and contact details can be linked to the person?

6. Are there indications of aliases, alternative spellings or additional digital identities?

7. Which publicly available information can help narrow down a person’s current whereabouts?

OSINT can be used both for current location investigations and for cases dating back many years. In historical missing-person cases, or where there has been no contact with an individual for a long period of time, archived websites, former profiles, older publications and digital connections can provide valuable investigative leads.

Not every case can be resolved through digital research alone. Depending on the findings, further measures may be appropriate, such as register enquiries, field investigations or surveillance. DETIX combines digital and traditional investigative methods where legally permissible and appropriate to the assignment.

OSINT FOR COMPANIES, LAW FIRMS AND CORPORATE INVESTIGATIONS

OSINT also plays a central role in corporate and business-related investigations. The aim is to bring together publicly available information on companies, individuals involved and business relationships, and to assess that information for plausibility.

Depending on the assignment, the following questions may be examined:

1. Who is actually behind a company or corporate entity?

2. Which directors, shareholders, ownership interests or affiliated companies can be identified?

3. Are there indications of business links, previous corporate relationships or overlapping individuals?

4. Can risks, inconsistencies or unusual findings be identified in publicly available corporate information?

5. What information is available on business partners, executives or beneficial owners?

6. Are there indications of assets, real estate, shareholdings or business interests?

7. What digital traces can be identified in relation to a company, its key individuals or associated entities?

Terms such as KYC – Know Your Customer –, Due Diligence and Ownership Research also play an important role in this area. These involve checks concerning identity, reliability, ownership structures and the commercial background of companies or individuals.

DETIX can use OSINT investigations in this area to support business decisions, assist with legal disputes, conduct background checks on business partners and clarify commercial relationships and structures.

Here too, individual data points are of limited value when viewed in isolation. What matters is combining information from different sources into a coherent and verifiable overall picture.

How digital research can support internal corporate investigations for management, compliance and internal audit is explained on our corporate service page.

OSINT IN CASES OF THREATS, STALKING AND ANONYMOUS ONLINE ACTIVITY

Digital threats, harassment and anonymous contact often leave traces. OSINT can help preserve these traces, identify connections and assess possible attribution.

Depending on the case, the following questions may be particularly relevant:

1. 1. Which individual or group may be behind an anonymous account?

2. 2. Can usernames, email addresses, telephone numbers or profiles be linked to one another?

3. 3. Are there recurring patterns in messages, publications or contact attempts?

4. 4. Are there connections between different accounts, platforms or identities?

5. 5. Are there indications of doxxing, cyberstalking, blackmail or targeted online harassment?

6. 6. Is there publicly available information that may help assess a potential threat?

7. 7. Which digital traces can be documented and may be relevant for further legal or investigative action?

In this context, terms such as cyber profiling, threat assessment and threat rating are commonly used internationally. They refer to the structured analysis of digital information in order to assess identities, connections and potential threat scenarios more effectively.

DETIX does not assess such indicators in isolation. Timelines, communication patterns, digital identities and publicly identifiable connections are combined and assessed for plausibility.

In cases involving specific threats, OSINT research can provide valuable investigative leads. However, it does not replace emergency response by the police or other competent authorities. In the event of an immediate threat, we recommend contacting the police without delay.

PATTERN OF LIFE – ANALYSIS OF LIFESTYLE, MOVEMENT AND BEHAVIOURAL PATTERNS

“Pattern of Life” refers to the structured analysis of recurring behavioural, contact and movement patterns of an individual. The aim is to identify routines and relationships from individual pieces of information.

Depending on the case, the following questions may be particularly relevant:

1. 1. Which recurring locations or activities can be identified?

2. 2. Are there identifiable routines over time or recurring patterns of contact?

3. 3. Which individuals or companies repeatedly appear in the target person’s environment?

4. 4. Can changes in behaviour or established routines be identified?

5. 5. Do publicly observable activities correspond with known information or statements?

6. 6. Which digital traces can be cross-checked against further investigative measures?

A Pattern of Life analysis can be relevant, for example, in cases involving suspected infidelity, insurance or employment disputes, custody matters, location verification or corporate investigations.

Digital findings alone do not always provide a complete picture. The analysis is often most effective when OSINT findings are combined with traditional investigative measures such as surveillance, field enquiries or on-site verification.

DETIX conducts such analyses exclusively within the legally permissible framework and for specific investigative purposes. The objective is not to collect as much personal data as possible, but to answer a specific and legitimate question.

HISTORICAL MISSING PERSON INVESTIGATIONS AND COLD CASES

In long-standing missing person cases, a standard address or population register enquiry is often not sufficient. Particularly where a person has been missing for many years or even decades, reconstructing earlier digital and personal traces can provide new investigative leads.

Depending on the available starting information, the following questions may be examined:

1. 1. Which previous addresses, telephone numbers, email addresses or other contact details can still be traced?

2. 2. Are there older online profiles, forum posts, publications or archived websites connected to the missing person?

3. 3. Which former employers, educational institutions, clubs, business associates or contacts can be identified?

4. 4. Are there indications of name changes, alternative spellings, aliases or additional identities?

5. 5. Can previous places of residence, travel, relocations or possible international connections be reconstructed?

6. 6. Which family members, friends, acquaintances or former associates may still hold relevant information today?

7. 7. Are there digital traces indicating later activity or a new place of residence?

Historical cases present the particular challenge of placing old and new information in the correct chronological context. Outdated data, identical names and inactive profiles must be carefully distinguished from reliable leads.

In such investigations, DETIX combines historical research, OSINT, register and source checks and, where appropriate and legally permissible, international investigative methods. This can reveal new connections or previously overlooked leads even in missing person cases dating back many years.

INTERNATIONAL OSINT INVESTIGATIONS

Digital traces do not stop at national borders. Individuals, companies, assets and business relationships may span several countries and appear across different registers, platforms and data sources.

In international cases, it is particularly important not to assess information from different countries in isolation, but to take linguistic, legal and commercial contexts into account.

Depending on the assignment, the following questions may be particularly relevant:

1. 1. Are there indications of stays, residences or business activities abroad?

2. 2. Which companies, shareholdings or business relationships exist in other countries?

3. 3. Can international telephone numbers, email addresses, domains or online profiles be linked to the relevant person or entity?

4. 4. Are there indications of real estate, assets or business interests in other countries?

5. 5. Which registers, publications or publicly accessible data sources are available in the relevant country?

6. 6. Are there connections to foreign business partners, relatives or other contacts?

7. 7. Can different spellings, transliterations or name variants of an individual or company be linked together?

International OSINT investigations often require more than online research alone. Language differences, varying registry systems and different legal frameworks may require additional local enquiries or cooperation with investigators on the ground.

DETIX can combine digital research with an international investigative network, bringing together findings from different countries into a single coherent investigative picture.

LEGAL LIMITS OF OSINT

The fact that information is publicly accessible does not automatically mean that it may be collected, stored, analysed or disclosed without restriction. OSINT investigations are also subject to legal limitations, particularly in relation to data protection, privacy rights and criminal law.

For each assignment, DETIX therefore assesses which research methods are lawful and proportionate for the specific purpose. Relevant factors include the reason for the investigation, the client’s legitimate interests, the nature of the data concerned and the intended use of the findings.

Not every investigative measure is available to every client to the same extent. Certain types of data access, enquiries or operational measures may be reserved by law for public authorities or other duly authorised bodies.

This also means that the available investigative options may vary depending on the client. Different legal requirements and permissible courses of action may apply to private clients, companies, law firms, insurers or institutional clients.

DETIX does not use investigative methods simply because they are technically possible. The decisive factors are whether they are lawful, necessary and genuinely suitable for the specific case.

Professional OSINT work therefore does not mean unrestricted data collection, but focused research within a clearly defined legal and assignment-specific framework.

HOW DOES AN OSINT INVESTIGATION AT DETIX WORK?

Every OSINT investigation begins with a clearly defined question. The more precisely the investigative objective is formulated, the more effectively relevant sources can be selected, information assessed and unnecessary research avoided.

The process involves several stages:

1. 1. Initial Case Assessment

First, we assess which question needs to be answered, what initial information is available, and whether there is a legitimate interest and a lawful basis for conducting the research.

2. 2. Initial Case Assessment

Suitable sources, registers, platforms and investigative approaches are then selected. Depending on the case, this may include national and international data sources, social networks, corporate information, archives, specialised search methods or other legally accessible content from the darknet.

3. 3. Data Collection and Correlation

Information identified during the research is not assessed in isolation. Names, addresses, telephone numbers, email addresses, profiles, companies, contacts and other indicators are cross-checked and examined for possible connections.

4. 4. Verification

Findings are checked for plausibility, relevance, timeliness and possible misattribution. This step is particularly important in cases involving common names, outdated profiles or conflicting information.

5. 5. Assessment and Documentation

Relevant findings are compiled in a structured manner. A clear distinction is made between confirmed information, plausible leads and information that cannot be independently verified.

6. 6. Further Investigative Steps

If the OSINT research produces new leads, we assess whether additional measures may be appropriate. These may include register enquiries, field investigations, international research or surveillance.

7. 7. Delivery of Findings

The client receives a clear and traceable summary of the relevant findings. The scope and format of the documentation depend on the assignment and its intended purpose.

WHO CAN BENEFIT FROM OSINT INVESTIGATIONS?

OSINT can be used in a wide range of private, legal and commercial contexts. What matters is not the client’s industry, but the specific question to be addressed and whether the research is legally permissible.

1. 1. Private Clients

For private clients, OSINT investigations can be useful, for example, when locating individuals, dealing with family-related matters, investigating stalking or threats, clarifying identity-related questions or preparing further investigative measures.

2. Companies

Companies use OSINT, among other things, to assess business partners, investigate internal irregularities, examine suspected fraud, analyse business relationships and prepare due diligence and compliance reviews.

3. 3. Lawyers and Law Firms

In a legal context, OSINT can help identify individuals, companies, indications of assets, business relationships or digital traces, and supplement existing case information with additional findings.

4. 4. Insurers and Institutional Clients

In complex claims, suspected fraud, background checks or extensive commercial matters, OSINT can be used as an additional investigative tool.

5. 5. Public Authorities and Other Duly Authorised Bodies

For public-sector or institutional assignments, different research and investigative methods may be available depending on jurisdiction, legal authority and the nature of the assignment than would be available to private or commercial clients.

DETIX assesses each assignment individually and determines in advance which measures are legally permissible, appropriate and suitable for the specific matter.

OSINT IN CYBERCRIME AND ONLINE FRAUD CASES

Cybercrime often leaves digital traces, even when offenders attempt to conceal their identity. OSINT can help correlate technical, personal and commercial indicators and reveal possible connections.

Depending on the circumstances, the following questions may be particularly relevant:

1. 1. Which individuals, accounts, domains or companies may be behind an online fraud scheme?

2. 2. Can email addresses, usernames, telephone numbers, websites or profiles be linked to one another?

3. 3. Are there indications of recurring fraud patterns, fake shops, phishing campaigns or Business Email Compromise (BEC)?

4. 4. What publicly available information exists regarding the domains, companies, payment channels or digital identities involved?

5. 5. Are there indications of data breaches, compromised credentials or published information on the open internet or in accessible areas of the darknet?

6. 6. Can connections be identified between different incidents, accounts or individuals involved?

7. 7. Are there identifiable links to cryptocurrencies, wallet addresses or publicly documented blockchain transactions?

In cybercrime cases, OSINT can help structure fragmented digital evidence and develop new investigative leads. A clear distinction must be made between technically verifiable facts, plausible connections and mere assumptions.

Depending on the case, OSINT research may be conducted as a standalone analysis or used to complement technical IT forensic examinations, legal measures or official investigations.

WHY PROFESSIONAL OSINT RESEARCH?

A vast amount of information is publicly accessible today. The real challenge, however, is not finding data, but distinguishing relevant information from false, outdated or unreliable information.

Professional OSINT research therefore involves far more than simply searching Google, social networks or individual databases. 1.

1. 1. Sources Are Selected Strategically

Not every source is suitable for every investigation. What matters is identifying information that is reliable, up to date and relevant to the specific investigative objective.

2. 2. Information Is Correlated

Individual findings often become meaningful only when assessed alongside other information. Names, addresses, telephone numbers, profiles, companies, contacts and timelines can together provide a much clearer picture.

3. 3. Misattribution Is Avoided

Identical names, outdated profiles, automatically generated records or incorrectly linked information can quickly lead to false conclusions. Findings therefore need to be critically assessed and verified.

4. 4. Findings Are Assessed

Not every piece of information carries the same evidential value. DETIX distinguishes between confirmed findings, plausible leads and information that cannot be independently verified.

5. 5. Investigative Leads Are Developed Further

OSINT research can generate new leads that may then be developed further through additional research, register checks, international investigations, fieldwork or surveillance. The value of professional OSINT work therefore lies not in the volume of data collected, but in its quality, context and investigative relevance.

FREQUENTLY ASKED QUESTIONS ABOUT OSINT INVESTIGATIONS

What does “Skip Trace” mean?

Skip tracing refers to the structured search for an individual or their current whereabouts. Existing information such as previous addresses, telephone numbers, email addresses, employment history or known contacts is analysed and linked together.

What is Cyber Profiling?

Cyber profiling is the structured analysis of accessible digital information relating to an individual, a company or a digital identity. The aim is to identify and assess profiles, connections, activities and possible relationships.

What does “Pattern of Life” mean?

Pattern of Life refers to the analysis of recurring lifestyle, movement, contact and behavioural patterns. Timelines, routines and identifiable connections are examined where legally permissible and relevant to the specific assignment.

What is a Threat Assessment?

A threat assessment is a structured evaluation of potential risks. Available information relating to threats, anonymous contact, stalking, harassment or unusual digital activity is assessed in order to better understand and evaluate possible risks.

What does KYC mean?

KYC stands for “Know Your Customer” and refers to identity and business partner verification. In a commercial context, this may include checks on individuals, companies, ownership structures, shareholdings and business relationships.

What is a Full Intelligence Search?

A Full Intelligence Search is a particularly comprehensive investigation in which different publicly accessible sources, registers, platforms and digital traces are combined to create as complete an investigative picture as possible.

Can historical missing person cases also be investigated?

Yes. In historical missing person cases, previous addresses, old profiles, archived websites, publications, former employers, contacts and other historical traces can be analysed. The key factors are which starting information is still available and which findings can still be verified today.

Can OSINT also include information from the darknet?

Yes, provided the content is accessible, the research is legally permissible and there is a specific investigative purpose. Information from the darknet is assessed particularly carefully with regard to its source, credibility and the risk of misattribution.

Can OSINT Replace Surveillance?

Not in every case. OSINT can provide valuable digital leads and help prepare or supplement surveillance. Where actual whereabouts, personal contacts or real-world movement patterns need to be established, traditional investigative measures may still be necessary.

Can Private Clients Commission All OSINT and Intelligence Measures?

No. Not every investigative measure, type of data access or enquiry is available to private clients. Certain options may be reserved by law for public authorities, institutional clients or other duly authorised bodies.

HOW MUCH DOES AN OSINT INVESTIGATION COST?

The cost depends on the specific question, the scope of the research and the information already available. DETIX first reviews the case and then provides an assessment of the possible investigative approach and the expected costs.

REQUEST AN OSINT INVESTIGATION

Do you have a specific question concerning an individual, a company, a digital profile or a business-related matter?

Please describe the matter in as much detail as possible. Existing information such as names, previous addresses, telephone numbers, email addresses, usernames, company details or known connections can help us assess the most suitable investigative approach.

DETIX first assesses which research methods are legally permissible and appropriate for your case. You will then receive an assessment of the possible approach, the scope of the research and the expected costs.