Wherever there’s money to hide, you’ll find shell companies. Drug cartels, sanctioned oligarchs, tax evaders, and romance scammers all use these on-paper businesses, which exist as registered legal entities but hold no operations, employees, or assets of their own. But even a legitimate small business owner may use a shell company for good reasons, perhaps to keep an investment property separate from their main business. The hard part of business verification is that, on paper, none of these people look any different from each other.
A standard KYB check confirms what’s on the corporate registration: the legal entity exists, the address resolves, the state filings are current. Green light. That’s where shell networks slip through, because basic verification confirms only one thing: that the business is on record. But the real question you should ask is this: does the business do anything in the world or connect to anything else that does?
Last quarter we documented a case that illustrates the value of network analysis for detecting shell companies: a single Denver mailbox franchise hosting hundreds of registered money service businesses, each appearing clean on individual lookup, each reporting USPS-only operations. (See: No branches, no verification, no problem.)
One registrant at that address is an anomaly, but hundreds of registrants at that address means someone's providing infrastructure, and that's the network signal. Shell companies cluster. They share registered agents, formation agents, addresses, and officers. While no single attribute will definitively identify a shell company, we can study the relationships between these attributes to create a much stronger signal.
Three shared attributes generate most of the network signal for detecting shell companies: shared addresses, shared agents, and shared officers. A registered agent address can legitimately host many businesses, but a single agent address linked to thousands of unrelated entities, in a state without disclosure requirements, is structurally suspicious in ways most legitimate small businesses are not. The same logic applies to formation agents who file LLCs in industrial batches, and to officer names that turn up as the apparent leader of a dozen unrelated companies, all formed within the same narrow window. None of these signals can be treated as proof in isolation. It’s the concentration that tells the story: many “different” businesses pointing back to the same address, the same agent, the same officer.
You can make that concentration visible through entity resolution, linking businesses across data sources. Just as entity resolution allows you to recognize that “John’s Home Repair LLC” on a credit card application is the same business as “John's Home Repair” in state filings, it can also reveal that a thousand "different" businesses share the same address, the same agent, or the same officer.
This is the entity view of shell company detection. There is also a jurisdictional view, which we covered in recent investigations: the Wyoming LLC structures that make anonymous ownership a paid feature (The Geography of Corporate America), and the Colorado licensing carve-out that concentrated more than half of all crypto-named MSB registrants in a single state (No branches, no verification, no problem). The two views complement each other. One tells you where the architecture concentrates. The other tells you which entities are using it together.
Beyond connections, the strongest individual signal is the presence or absence of operating signals. Real businesses leave footprints: a phone number, a website, online reviews, transaction history, a verifiable physical location, employees, commercial leases. The signal-strength rating for “no operating presence” is high, because legitimate businesses generate observable economic activity and shell companies generally do not.
A KYB vendor that only asks “does this business exist on paper?” will green-light a well-constructed shell by design. But you need more than Secretary of State filings to know whether you’re dealing with a shell company or one that operates in the real world. For that, you need to ask more difficult questions: does this business do anything, and what is it connected to?
Explore the full framework for shell company detection on the Enigma Knowledge hub: Shell Company Detection: How to Identify High-Risk Business Entities.