Sanctions and blockchain tracing: What an OFAC match proves
· 13 min read
A complete blockchain trace can contain thousands or millions of transaction records, token-transfer events, and intermediate calculations. Federal Rule of Evidence 1006 can permit a party to prove the content of that voluminous material through an admitted summary, chart, or calculation. It does not excuse the proponent from establishing that the underlying records are admissible, defining what was summarized, or giving the other parties a fair opportunity to examine the source material.
This article addresses federal evidence practice. State rules, local practice, and scheduling orders may differ. Broader authentication questions are covered in Blockchain Evidence in Litigation. The narrower question here is how to convert a large transaction dataset into usable proof without severing it from its foundation.
A tracing opinion rarely depends on only one transaction. The relevant proof may include every transfer involving identified addresses during a defined period, token events from specified contracts, exchange exports, price data, and a table connecting each derived value to its source record.
Printing or examining that material row by row would obscure the point of the evidence. A summary can answer a litigation question such as how much value entered a group of addresses, what portion moved to identified exchanges, or how frequently funds passed through specified services. Rule 1006 addresses this presentation problem, but only when the summary proves the content of a genuinely voluminous set of admissible materials that cannot conveniently be examined in court.
This differs from reading a single blockchain transaction. The expert must explain what individual records mean, why the selected universe is complete, and how source records became totals.
The current text of Federal Rule of Evidence 1006 has three operational components.
Rule 1006(a) applies to voluminous admissible writings, recordings, or photographs that cannot conveniently be examined in court. A party seeking to use the rule for blockchain data would ordinarily identify the electronic records being summarized, explain the form in which they were collected, and establish the applicable foundation for each source category.
Admissibility cannot be established only at the summary level. Rule 1006 does not cleanse unauthenticated screenshots, unexplained commercial labels, inadmissible exchange records, or unsupported price data. The proponent should map each source category to its authentication, hearsay, and expert-testimony foundation. See the federal and Missouri rules governing blockchain evidence.
The amendment effective December 1, 2024 clarified that the court may admit a qualifying summary whether or not the underlying materials have themselves been introduced. The underlying records must be admissible, but they do not all have to become trial exhibits. Some or all of them may still be admitted when otherwise appropriate.
Counsel can therefore offer transaction totals without asking the factfinder to navigate millions of rows. The summary is substantive evidence, not merely a visual displayed during testimony. It must be accurate and capable of standing as proof of the summarized content.
Rule 1006(b) requires the proponent to make the underlying originals or duplicates available for examination or copying, or both, at a reasonable time and place. The court may also order production in court. The rule does not prescribe a particular file format or a universal notice period.
For complex data, bare technical availability may not be meaningful. A defensible production should usually include the preserved export, a field dictionary, query boundaries, and enough documentation to connect summary rows to underlying records. A PDF chart or proprietary dashboard alone may not permit meaningful testing.
The distinction changed in form on December 1, 2024. New Rule 107 now governs illustrative aids. The Supreme Court's April 2, 2024 amendments state that an illustrative aid helps the trier of fact understand evidence or argument, is not itself evidence, and ordinarily does not go to the jury during deliberations. Rule 107(d) directs admitted summaries of voluminous evidence back to Rule 1006.
The practical question is what function the chart performs:
| Question | Rule 1006 summary | Rule 107 illustrative aid |
|---|---|---|
| What does it do? | Proves the content of voluminous admissible materials | Helps explain evidence or argument |
| Is it evidence? | Yes, if admitted | No |
| Must the underlying material be admissible? | Yes | The aid must fairly assist understanding, but it is not a substitute for proof |
| Can it go to deliberations? | As admitted evidence, subject to the court's management | Not ordinarily, absent consent or a good-cause order |
Calling a chart “demonstrative” does not determine its status. If transaction totals are offered as proof, address Rule 1006. If a chart merely colors arrows on admitted transactions to assist testimony, Rule 107 may fit. One exhibit should not drift between those roles without a clear ruling.
A reliable summary begins with a reproducible specification, not a finished graphic. The analyst performing blockchain tracing should preserve enough detail for another qualified person to rerun the process and identify any judgment calls.
Record the blockchain and network, date range, block boundaries where applicable, addresses, transaction types, token contracts, and off-chain records included. Keep source identifiers attached to every row. Depending on the network, those may include transaction hashes, block identifiers, output indexes, event-log indexes, and contract addresses. Official Ethereum JSON-RPC documentation and Bitcoin Core transaction documentation show why a generic “transaction ID” column may be insufficient.
Specify whether the dataset includes failed transactions, internal calls, token events, fees, change outputs, self-transfers, bridge events, duplicates, and transactions below a threshold. Tie each exclusion to the question being answered. Rules created after seeing the totals invite a selection-bias challenge.
Transaction hash, block, sender field, recipient field, asset, and native-unit amount are source-level fields. Wallet clustering, entity attribution, transaction purpose, and ownership are analytical conclusions. The summary should not present an inferred entity label as though it were written on the blockchain.
Derived monetary values need their own protocol. Identify the price source, currency, timestamp convention, time zone, and treatment of illiquid assets or missing observations. A transfer amount and its historical dollar valuation are different propositions with different foundations.
Maintain original exports, normalized data, transformation logic, an exception log, and final output as separate layers. Use stable row identifiers and reconcile counts and totals at each stage. Preserve the version or export date of commercial labels because attribution may change even when the on-chain transaction does not.
A witness should be able to explain this process in plain language. The witness need not necessarily be an expert merely because a summary was prepared. Specialized clustering, attribution, valuation, or interpretation may, however, implicate Rule 702 and expert disclosure obligations. The engagement should be structured with that distinction in mind, consistent with the firm's documented methodology.
Hypothetical example: A plaintiff alleges that assets were diverted from a project treasury over eighteen months. The preserved dataset contains 1.8 million transaction and token-event rows from twelve contracts and forty addresses. The proposed Rule 1006 exhibit reports monthly inflows, outflows, fees, and transfers to separately identified exchange deposit addresses.
The analyst defines the block range, contract list, address list, event types, and duplicate-removal key before calculating totals. Failed transactions are retained in an exception table but excluded from transferred-value totals because no asserted token transfer was completed. Dollar values use a named daily price source and a stated UTC convention. Every summary cell links through a schedule to source rows identified by transaction hash and event-log index.
The plaintiff produces the raw exports, normalized table, data dictionary, calculation logic, exception table, and attribution support. At trial, the witness explains how the 1.8 million rows became the exhibit and distinguishes observed transfers from opinions about address control. Rule 1006 may solve the volume problem, but it does not establish that the defendant owned an address or that a transfer was wrongful. Those propositions require separate evidence.
The most productive challenge usually targets the boundary and transformation, not arithmetic alone. Discovery and examination should ask:
Counsel should also request prior summary versions, query logs, transformation scripts or formulas, exception reports, and reconciliation results, subject to applicable discovery and expert-disclosure rules. A difference between totals may reflect a defensible scope choice, but the choice must be visible.
Use a pretrial process that separates admissibility from presentation:
The Advisory Committee materials explain that the 2024 amendment was intended to stop confusion between substantive summaries and illustrative aids. That clarification does not make admission automatic. The Committee also recognized that an inaccurate or argumentative summary remains subject to Rule 403 concerns.
Rule 1006 addresses how voluminous content may be proved. It does not authenticate every input, resolve hearsay objections, validate an expert method, establish wallet ownership, or convert association into causation. It also does not answer whether a state court follows the same framework.
A narrow summary is often stronger than an ambitious one. A table proving amounts and dates can remain separate from opinions about control, intent, tracing heuristics, or damages. That separation makes the exhibit easier to reproduce and prevents disputed interpretation from being embedded invisibly inside arithmetic.
A: No. Under the rule effective December 1, 2024, the underlying voluminous materials must be admissible, but the summary may be admitted whether or not those materials have themselves been introduced. The proponent must still make the originals or duplicates available for examination or copying at a reasonable time and place.
A: No. Its function controls. A diagram offered to prove totals or the content of voluminous admissible records may require a Rule 1006 foundation. A diagram used only to help the trier of fact understand evidence or argument is an illustrative aid governed by Rule 107 and is not itself evidence.
A: Rule 1006 does not state a universal witness requirement, but the proponent needs a sufficient foundation for the source materials and the summary's accuracy. A witness who performed or supervised the transformation is often best positioned to explain scope, calculations, and exceptions. Specialized opinions may also require a properly disclosed expert.
A: At minimum, counsel should consider producing the preserved source data, data dictionary, query boundaries, inclusion and exclusion rules, normalization and deduplication methods, calculation logic, exception log, and a crosswalk from summary values to source records. The precise legal obligation depends on Rule 1006, discovery rules, expert-disclosure requirements, court orders, and local practice.
For a specific transaction dataset or proposed exhibit, contact ConsensusIntel to discuss evidence review and a reproducible summary protocol.
· 13 min read
· 11 min read
· 13 min read
If your matter involves blockchain evidence, ConsensusIntel can help you evaluate your options.
Get in Touch