Civil Law And UAE Forensic Reconstruction Of Financial Transactions

1. Meaning

Forensic reconstruction of financial transactions is the systematic reconstruction of financial events to determine:

where money originated;

who authorised or received it;

which accounts were involved;

when transfers occurred;

whether transactions were genuine or artificial;

whether money was diverted, concealed, dissipated or transferred to related parties;

whether assets acquired later represent traceable proceeds;

and what financial loss was actually caused.

In civil litigation, forensic reconstruction is particularly important in fraud, misrepresentation, breach of fiduciary duty, banking disputes, unjust enrichment, tracing, asset recovery, shareholder disputes, insolvency and digital-finance disputes.

The reconstruction may combine:

Bank statements + SWIFT/payment records + invoices + contracts + ledgers + emails + accounting records + corporate records + expert accounting analysis + electronic evidence.

2. Legal Importance in UAE Civil Law

A financial reconstruction does not itself establish liability.

It supplies evidence from which the court may determine:

Transaction → Source of funds → Destination → Purpose → Relationship between parties → Irregularity → Causation → Loss → Remedy

For example:

Bank lends USD 10 million → borrower requests payment allegedly for oil purchase → money enters third-party account → money is rapidly transferred to related entities → no corresponding shipment exists → money ultimately reaches persons connected with borrower.

The forensic accountant reconstructs this chain.

The court then decides whether the evidence establishes:

fraud;

breach of contract;

dishonest assistance;

unjust enrichment;

misappropriation;

breach of duty;

tracing;

damages; or

another civil cause of action.

3. Current UAE Evidentiary Framework

The UAE Evidence Law, Federal Decree-Law No. 35 of 2022, is particularly important.

Electronic evidence includes electronic instruments, signatures, seals, emails, modern communications, electronic media and other electronic evidence. Article 55 provides that electronic evidence is subject to the provisions applicable to documentary evidence. Articles 56–57 address the probative value of formal and informal electronic evidence.

Therefore, modern forensic reconstruction can include:

bank databases;

electronic statements;

payment instructions;

email trails;

accounting software;

electronic invoices;

transaction logs;

digital communications;

spreadsheets;

electronic signatures;

system-generated records;

blockchain records where relevant.

The central question remains reliability, relevance, authenticity and evidentiary weight.

4. What a Forensic Reconstruction Usually Does

Step 1 — Identify the starting transaction

The expert identifies the transaction that requires investigation.

Examples:

loan disbursement;

investment;

bond transfer;

corporate payment;

acquisition;

escrow payment;

trade-finance advance;

cryptocurrency transfer.

Step 2 — Establish the original source

The investigation asks:

Where did the money come from?

For example:

Bank A → Borrower Account → AED/USD payment.

The original source establishes the beginning of the financial chain.

Step 3 — Follow the money

The expert then identifies every material movement.

Example:

Account A → Account B → Account C → Related Company → Individual → Asset purchase.

This is the core of financial reconstruction.

Step 4 — Identify transaction purpose

A transfer cannot be understood merely from its description.

A payment labelled:

“Consultancy”

may need to be compared with:

consultancy agreement;

invoice;

work product;

emails;

company ownership;

payment timing;

previous transactions.

Step 5 — Compare records

The forensic accountant compares:

Step 6 — Reconstruct the final destination

The investigation attempts to identify:

ultimate beneficiary;

remaining balance;

substituted assets;

related-party transfers;

cash withdrawals;

offshore transfers;

securities;

property acquisitions.

Step 7 — Calculate loss

Finally:

Amount transferred − Amount recovered − legitimate value received = potential loss

The actual damages calculation depends on the cause of action and applicable law.

5. Direct Evidence and Circumstantial Evidence

Financial fraud is frequently proved through a combination of evidence rather than a single document.

A court may consider:

unusual payment timing;

circular transactions;

common ownership;

unexplained transfers;

rapid dissipation;

false invoices;

contradictory accounting;

absence of underlying goods;

transfers to related entities;

unexplained withdrawals;

subsequent asset acquisitions.

The important principle is that individual transactions should not necessarily be examined in isolation.

A financial reconstruction attempts to show the transactional pattern as a whole.

6. Forensic Accounting Evidence

A forensic accountant may:

reconstruct ledgers;

reconcile bank statements;

identify unexplained payments;

trace funds;

compare invoices with payments;

identify related-party transactions;

calculate losses;

analyse financial records;

identify inconsistencies;

explain complex financial evidence to the court.

But the expert does not normally decide the ultimate legal question.

The court determines liability.

This distinction is particularly important:

Accountant reconstructs facts; court determines legal consequences.

7. Case Law

Case 1 — SBM Bank (Mauritius) Ltd v Renish Petrochem FZE & Hiteshkumar Chinubhai Mehta [2022] DIFC CA 011

This is one of the strongest UAE-related examples of forensic reconstruction of financial transactions.

SBM Bank had provided trade finance. The case concerned alleged fraudulent representations and payments connected with purported petroleum transactions.

The evidence included analysis of payments received and made by Prime. A forensic accountant was instructed to:

review relevant payments;

reconstruct a transaction ledger;

analyse payments made by SBM;

examine the alleged cargo transactions.

The underlying transactions were reconstructed through financial records and surrounding circumstances.

The case demonstrates an important principle:

Financial reconstruction can convert thousands of individual accounting entries into an intelligible evidentiary chain.

The Court also emphasised that fraud may be established by inference from primary facts, applying the civil standard of proof.

Principle

A financial fraud case may be established by the cumulative effect of reconstructed transactions and surrounding circumstances rather than by direct evidence of every fraudulent act.

8. Case 2 — GFH Capital Ltd v David Lawrence Haigh [2014] DIFC CFI 020

This case involved alleged fraud through false invoices.

The proceedings concerned allegations that approximately USD 5 million had been diverted through invoices that appeared to identify third-party beneficiaries while payments were actually made into accounts associated with the defendant.

The Court recorded that the relevant invoices were admitted to be bogus and that money paid against them went into the defendant's bank accounts.

The case also involved:

a freezing order;

a search order;

asset preservation;

investigation of financial records.

The DIFC Court granted a freezing order restraining dealings with assets up to the relevant amount.

Principle

Forensic reconstruction can connect:

False invoice → Payment → Bank account → Beneficiary → Asset → Recovery proceedings.

9. Case 3 — Larmag Holding B.V. v First Abu Dhabi Bank PJSC & Others [2019] DIFC CFI 054

Larmag involved alleged fraudulent acquisition and transfer of substantial corporate bonds.

The claim concerned the transfer of approximately EUR 70 million nominal value of Reditum SA corporate bonds and related coupon payments.

The DIFC Court also granted protective relief concerning the bonds, interest and assets derived from them.

This demonstrates the relationship between:

forensic reconstruction + tracing + proprietary relief + asset preservation.

A reconstruction may identify not merely the original property but also:

proceeds;

substituted assets;

income;

interest;

subsequent transfers.

Principle

Financial reconstruction may support identification and preservation of property or proceeds derived from the disputed transaction.

10. Case 4 — Techteryx Ltd v Aria Commodities DMCC & Others [2025] DIFC DEC 001

Techteryx is a major modern example of complex financial tracing.

The DIFC Digital Economy Court dealt with alleged movement of very substantial sums and granted protective orders concerning approximately USD 456 million and traceable proceeds.

The Court subsequently required explanations and supporting documentation concerning the onward flow of the money and traceable proceeds, including:

payment flows;

current locations;

ultimate beneficiaries;

onward transfers;

assets received;

assets held directly or indirectly.

A July 2026 order continued this focus on identifying the onward movement and current location of the funds.

Principle

Forensic reconstruction can extend beyond:

“Where was the original money deposited?”

to:

“Where did every identifiable portion subsequently go?”

This is the essence of transactional tracing.

11. Case 5 — Skatteforvaltningen v Elysium Global (Dubai) Ltd & Emerald Industries LLC [2026] DIFC CFI 088

This recent DIFC case illustrates the importance of handling financial-fraud allegations carefully during litigation.

The Court considered allegations of fraudulent conduct and referred to the earlier Techteryx proceedings concerning worldwide freezing relief and privacy at an early stage where allegations had not yet been defended.

Its significance for forensic reconstruction is procedural as well as evidentiary:

financial investigations may involve allegations before trial;

disclosure may reveal transaction chains;

courts must manage confidentiality and procedural fairness;

reconstruction does not automatically equal proof of liability.

Principle

A reconstructed financial chain is evidence to be tested in proceedings; it should not automatically be treated as an established finding of fraud before the defendant has had an opportunity to respond.

12. Case 6 — Oheo Bank v Parker [2025] DIFC CA 006

This 2026 Court of Appeal decision arose from a banking transaction involving a proposed financing structure.

The underlying transactions included:

sale of securities and commodities to generate liquidity;

transfer of approximately EUR 1.4 million to a third party;

alleged conflicts of interest;

questions concerning representations made by bank personnel;

expert evidence concerning whether the circumstances triggered banking duties.

The Court of Appeal considered the tribunal's findings and the legal limits of the relevant banking duties.

Principle

Forensic reconstruction must distinguish between:

What transaction occurred

and

What legal duty the transaction created or breached.

A suspicious or unusual payment does not, by itself, establish every pleaded cause of action.

13. Case 7 — SBM Bank (Mauritius) Ltd v Renish Petrochem FZE [2018] DIFC CFI 054

The first-instance SBM proceedings provide particularly useful forensic-accounting methodology.

A forensic accountant was instructed to review:

payments received by Prime;

payments made by Prime;

cargo transactions;

the ledger;

payments made by SBM.

The Court also emphasised that evidence must actually be admitted into evidence before it can be relied upon as evidentiary proof.

Principle

A forensic report is not automatically evidence merely because it exists.

The litigation process must address:

admissibility;

authentication;

expert methodology;

underlying documents;

witness evidence;

opportunity for challenge;

weight.

14. Case 8 — Oheo Bank v Parker: Payment-Instruction Reconstruction

The Oheo proceedings are also significant because they demonstrate the importance of reconstructing the sequence of instructions rather than examining the final payment alone.

The transaction history included securities sales, liquidity generation and a subsequent transfer to a third party. The Court of Appeal's judgment records competing claims concerning the bank's communications, conflicts and duties.

This supports a broader forensic method:

Instruction → Internal approval → Execution → Transfer → Recipient → Subsequent use.

This sequence may be more informative than examining only the final bank statement.

15. Transaction Reconstruction vs Tracing

These concepts should not be confused.

Transaction reconstruction

Answers:

What happened financially?

Tracing

Answers:

Where did the value go, and can it be identified in another asset or account?

Damages calculation

Answers:

What financial loss resulted?

Liability analysis

Answers:

Why is a particular defendant legally responsible?

Thus:

Reconstruction ≠ Tracing ≠ Damages ≠ Liability

They interact but are legally distinct.

16. Reconstruction of a Typical Fraud Chain

A simplified UAE financial-fraud investigation might look like:

Bank Facility      ↓ Borrower Account      ↓ Payment Request      ↓ Third-Party Account      ↓ Related Company      ↓ Multiple Transfers      ↓ Personal Account      ↓ Investment / Property / Securities      ↓ Traceable Proceeds      ↓ Recovery / Proprietary Relief

The forensic accountant attempts to populate every arrow with documentary evidence.

17. Important Evidence Categories

A. Banking evidence

account statements;

payment instructions;

SWIFT messages;

remittance advice;

beneficiary information;

transaction references;

cheque records;

bank confirmations.

B. Accounting evidence

general ledger;

journals;

trial balances;

accounts receivable;

accounts payable;

reconciliations;

management accounts.

C. Commercial evidence

contracts;

purchase orders;

invoices;

shipping documents;

customs records;

delivery confirmations;

insurance documents.

D. Digital evidence

emails;

messaging records;

system logs;

electronic signatures;

electronic invoices;

database records;

transaction histories.

The UAE Evidence Law expressly recognises electronic forms of evidence, including electronic correspondence and other electronic evidence.

18. Related-Party Transactions

Forensic reconstruction becomes particularly important where money moves between:

parent and subsidiary;

director and company;

shareholder and company;

sister companies;

entities sharing directors;

companies sharing beneficial ownership;

controlled intermediaries.

The expert may construct an ownership-and-money-flow matrix.

The existence of a related-party transaction is not automatically proof of wrongdoing. It is a fact requiring legal and factual evaluation.

19. Circular Transactions

A common forensic problem is:

A → B → C → A

For example:

Company A pays Company B → B pays Company C → C pays A.

The reconstruction asks:

Was there genuine commercial value?

Were goods/services actually supplied?

Were the entities independently controlled?

Was the pricing commercially plausible?

Were payments contemporaneous?

Was the circularity disclosed?

What was the ultimate economic effect?

Circularity alone does not establish fraud.

20. False-Invoice Reconstruction

A forensic expert may compare:

Invoice → Contract → Delivery → Payment → Accounting entry → Bank movement

If the invoice says:

“Consultancy AED 5 million”

the expert may ask:

Who provided the consultancy?

Was there a contract?

Was there a deliverable?

Who approved the invoice?

Where was the money deposited?

Who ultimately benefited?

Was the expense recorded correctly?

GFH Capital illustrates how allegedly false invoices can become central to reconstruction of diverted funds.

21. Bank-Account Mapping

A useful forensic technique is to construct an account map:

Account A   │   ├── AED 10m → Account B   │                 │   │                 ├── AED 6m → Account C   │                 │   │                 └── AED 2m → Account D   │   └── AED 4m → Account E

The expert then identifies:

dates;

amounts;

transaction references;

counterparties;

purpose;

remaining balance.

This may reveal whether the money was:

retained;

transferred;

converted;

withdrawn;

invested;

used to acquire assets.

22. Asset Substitution

Suppose:

AED 20 million is transferred improperly.

The recipient then purchases:

shares worth AED 12 million.

The reconstruction asks whether the shares represent:

traceable proceeds;

substituted property;

an independent investment;

mixed funds.

This distinction becomes important when proprietary remedies or tracing are sought.

Techteryx illustrates the practical importance of tracing proceeds beyond the initial payment.

23. Mixing of Funds

A difficult situation occurs where legitimate and disputed money are placed in the same account.

Example:

Legitimate funds = AED 5m
Disputed funds = AED 5m
Total account = AED 10m.

The forensic expert may reconstruct:

opening balance;

incoming payments;

outgoing payments;

chronological sequence;

minimum balance;

transfers between accounts.

The legal consequences depend upon the applicable law and the particular remedy claimed.

Therefore, the accountant should not simply declare:

“All money in the account is stolen money.”

The reconstruction must be supported by transaction-level analysis.

24. Expert Evidence

Forensic accountants are particularly useful where the dispute involves complex financial information.

An expert report should ordinarily explain:

documents reviewed;

assumptions;

methodology;

calculations;

reconciliations;

limitations;

conclusions.

The court remains the ultimate decision-maker.

The distinction can be expressed as:

Expert = explains financial evidence.
Court = determines legal significance.

25. Burden and Standard of Proof

The UAE Evidence Law establishes general rules governing proof in civil and commercial transactions.

The basic structure is:

Claim → Evidence → Counter-evidence → Judicial assessment

A forensic reconstruction therefore does not remove the claimant's burden of establishing the relevant facts.

In the SBM fraud litigation, the DIFC Court specifically stated that fraud was proved according to the ordinary civil standard of the balance of probabilities and that fraud or dishonesty may be inferred from the totality of primary facts.

26. Financial Reconstruction and Causation

Finding an unexplained transaction is not the same as proving loss.

The analysis should be:

Wrongful conduct → Financial movement → Loss → Causation

For example:

Defendant made false representation
↓
Claimant transferred AED 10m
↓
Money transferred to related entity
↓
No corresponding commercial value received
↓
AED 10m loss

This is substantially stronger than simply saying:

“The defendant received money.”

27. Forensic Reconstruction in Banking Disputes

Banking disputes may involve:

unauthorised payments;

fraudulent instructions;

trade-finance fraud;

forged documents;

payment diversion;

suspicious beneficiaries;

internal employee misconduct;

conflicts of interest;

improper account operation.

Oheo Bank demonstrates how transaction reconstruction can become intertwined with questions concerning bank communications, customer instructions and regulatory duties.

28. Forensic Reconstruction in Digital Finance

Modern UAE disputes may involve:

cryptocurrency;

tokenised assets;

electronic wallets;

digital payment platforms;

fintech accounts;

online payment gateways;

blockchain transactions.

The methodology changes, but the basic logic remains:

Identify → Authenticate → Reconstruct → Trace → Attribute → Quantify → Prove.

In digital disputes, blockchain records may show the movement of a digital asset, but legal ownership and liability still require legal analysis.

29. Interim Remedies

Financial reconstruction often occurs alongside protective remedies.

Possible measures may include:

freezing orders;

proprietary injunctions;

disclosure orders;

search orders;

preservation of documents;

orders requiring explanation of asset movements.

GFH Capital involved freezing and search orders in connection with alleged financial diversion.

Larmag involved injunctions directed at disputed bonds, interest and assets derived from them.

Techteryx demonstrates the modern use of worldwide freezing and tracing-related relief in a large cross-border financial dispute.

30. Procedural Fairness

Forensic reconstruction must remain procedurally fair.

The defendant should have an appropriate opportunity to:

inspect the evidence;

challenge calculations;

question methodology;

cross-examine experts where permitted;

produce alternative accounting evidence;

explain apparently suspicious transactions.

A court should distinguish:

suspicion → evidence → finding

rather than treating suspicion as proof.

31. Confidentiality and Banking Information

Financial reconstruction can involve highly sensitive information:

account numbers;

customer information;

corporate financial statements;

beneficial ownership information;

confidential transactions;

commercial contracts.

Consequently, courts may need to balance:

Disclosure + Fair Trial + Confidentiality + Privacy + Asset Preservation

The Skatteforvaltningen proceedings illustrate the procedural sensitivity surrounding allegations of fraud and publication/privacy at an early stage.

32. Key Legal Issues

33. Major Case-Law Bank

These are predominantly DIFC authorities. They are highly useful for studying UAE financial-dispute practice, but DIFC judgments should not automatically be described as binding precedents for onshore UAE courts.

34. Forensic Reconstruction Formula

For examination purposes:

SOURCE → TRANSFER → PURPOSE → RECIPIENT → DESTINATION → TRACING → LOSS → LIABILITY → REMEDY

Or:

F-R-E-T-A-L

F — Financial records
R — Reconstruction
E — Evidence
T — Tracing
A — Attribution
L — Loss

35. Practical Forensic Reconstruction Model

1. Collect documents        ↓ 2. Authenticate records        ↓ 3. Build transaction database        ↓ 4. Reconcile bank statements        ↓ 5. Identify unusual transactions        ↓ 6. Map related parties        ↓ 7. Follow onward transfers        ↓ 8. Identify ultimate beneficiaries        ↓ 9. Trace substituted assets        ↓ 10. Calculate loss        ↓ 11. Prepare expert report        ↓ 12. Court tests evidence        ↓ 13. Court determines liability        ↓ 14. Appropriate remedy / execution

36. Important Distinction for Exams

Do not write:

“The forensic accountant proves fraud.”

A better legal formulation is:

The forensic accountant reconstructs financial facts and transaction flows; the court determines whether those facts establish fraud, breach, causation, loss, tracing or another legal consequence.

This distinction protects the boundary between expert evidence and judicial determination.

37. Conclusion

Forensic reconstruction of financial transactions has become an important component of UAE civil litigation because modern disputes increasingly depend upon complex payment chains rather than a single transaction.

Its importance is particularly visible in:

banking fraud;

trade finance;

investment disputes;

false invoices;

related-party transactions;

asset diversion;

unjust enrichment;

tracing;

digital payments;

cryptocurrency transactions;

cross-border asset recovery.

The UAE Evidence Law provides a framework capable of accommodating electronic evidence, while DIFC jurisprudence demonstrates increasingly sophisticated judicial treatment of financial records, expert accounting evidence, tracing and asset-preservation measures.

The central legal proposition is:

Forensic reconstruction converts fragmented financial records into a chronological and evidentiary account of how value moved. It does not itself determine liability; the court uses the reconstructed evidence, together with contracts, witness evidence and other material, to decide the legal consequences.

One-line exam answer

UAE civil-law forensic reconstruction is the evidence-based reconstruction of financial transactions, payment chains and asset movements through banking, accounting and electronic records, enabling courts to determine issues of fraud, causation, loss, tracing, unjust enrichment and appropriate civil remedies.

:::writing...