Evidence after a cargo or fuel loss

A private investigation can establish facts: who had access, what the records show, when a discrepancy appeared and how it was concealed. It cannot establish motive, and it cannot compel testimony or seize documents. The value of the exercise lies in assembling a documented sequence that a lawyer, an insurer or a tribunal can test.

What can a private investigation establish after a loss?

After a cargo or fuel loss, the immediate question is usually quantitative: how much was lost, and where. A private investigation works on the documentary and human record around that quantity. It can establish the chain of custody of a bunker sample, the timing of a valve movement, the identity of the person who signed a receipt, or the point at which a figure in a log stopped matching a figure in a system.

In Spain, this work is carried out within a defined legal frame. Investigators there operate under contract for companies, insurers, law firms and private clients, and the sector is subject to professional rules, including mandatory collegial registration in Catalonia and an ongoing debate about unlicensed practice. A guide such as private investigation for companies and insurers sets out how that frame applies to corporate and insurance work, from unfair competition and information leaks to internal fraud, absenteeism and insurance fraud. For a shipowner or charterer with Spanish operations, that frame matters because evidence gathered outside it may be excluded later.

What an investigation can establish is bounded by what leaves a trace. Fuel is a physical commodity, and physical commodities leave measurements, temperatures, densities and times. Cargo leaves bills of lading, tally records, draft surveys and terminal logs. People leave access records, emails, messages and signatures. An investigation reconstructs a timeline from those traces and tests it against the accounts given by the parties.

It cannot establish what a person intended. It can show that a valve was opened at 02:40 and that the log entry was altered at 06:15, but the reason for either act is a matter for a tribunal or an insurer's assessment. Nor can an investigator compel a witness to speak, obtain a warrant, or access bank records without legal authority. Those limits should be stated at the outset, because a report that overstates its own reach is a liability in a claim.

How is internal fraud investigated on board or ashore?

Internal fraud in shipping rarely looks like a single dramatic act. It looks like a pattern: repeated small shortages, a supplier whose invoices cluster just below an approval threshold, a surveyor who is always available at short notice, or a crew member whose leave pattern coincides with particular port calls. The investigation starts with the pattern, not with a suspect.

On board, the material is operational. Bunker delivery notes, sounding records, engine room logs, oil record book entries, and the physical condition of seals and meters. Ashore, it is commercial: purchase orders, approval chains, bank details, email headers, and the version history of spreadsheets. The two sets are then compared. A discrepancy between a delivered quantity and a consumed quantity is not proof of fraud, but a discrepancy that repeats across several voyages, with the same counterparties and the same timing, is a finding that can be tested.

Interviews are part of the method, but they are structured. The aim is to fix accounts early, before accounts are coordinated, and to record them in a form that can be produced later. In Spain, the professional framework for this work includes the use of OSINT and digital traces, which means open-source material, social media, corporate registries and device metadata. That material can corroborate or contradict an account, but it must be collected lawfully. Data protection rules apply, and an investigation that ignores them can damage the client's position more than the original loss.

A common failure is to treat the investigation as an accusation. The stronger approach is to treat it as a reconstruction: here is the contract, here is the procedure, here is what the records show, here is where the records and the procedure diverge. That framing survives cross-examination better than a narrative built around a person.

Which findings hold up in a claim?

A finding holds up when it is documented, dated, attributable and reproducible. Documented means it exists in a form that can be produced: a signed statement, a photograph with metadata, a system export, a survey report. Dated means the timeline is explicit. Attributable means the source of each item is identified. Reproducible means another qualified person could reach the same conclusion from the same material.

In a marine insurance claim, the insurer is testing whether the loss falls within the policy and whether the assured complied with the conditions. An investigation that establishes a shortage does not by itself establish that the shortage is recoverable. It may instead establish that the loss arose from a cause excluded by the policy, or that records were kept in a way that breaches a warranty. That is a legitimate outcome, and it is better discovered before the claim is submitted than during a dispute.

For a charterer, the useful findings are often about performance: whether a vessel met a speed and consumption warranty, whether a delay was caused by a port or by the ship, whether a bunker stem was off-specification. For a shipowner, they are often about cargo: whether damage occurred before or after loading, whether a tally was accurate, whether a receiver's claim is supported by the survey it cites. For an insurer, they are often about the counterparty: whether a claim is genuine, whether a loss was pre-existing, whether a document has been altered.

What does not hold up is a conclusion without a source, a timeline built from memory, or a report that mixes observation with opinion. Investigators who work regularly with insurers and law firms tend to separate the two: a factual section, and a section of reasoned inference clearly labelled as such. The second section is useful, but it is the first that carries weight.

What are the limits of the method?

The limits are jurisdictional, temporal and legal. Jurisdictional, because an investigator working in Spain operates under Spanish rules, and evidence gathered in one country may not be usable in another. Temporal, because records are deleted, overwritten or simply not kept, and the window for useful reconstruction closes quickly. Legal, because some material can only be obtained through a court, and an investigator cannot substitute for that process.

There is also a commercial limit. An investigation costs money, and the cost has to be proportionate to the loss. A small bunker discrepancy may not justify a full reconstruction, while a repeated pattern across a fleet may. The decision to investigate is a decision about expected recovery, and it should be taken with the lawyer or the insurer who will use the result.

Finally, there is the limit of the report itself. A report is not a judgment. It informs a negotiation, a claim or a proceeding, and its findings are tested there. The measure of a good investigation is not that it proves a case, but that it gives the people who have to decide a clearer view of what happened, what can be shown, and what remains uncertain.

What should a shipowner or charterer do first?

Preserve the record before it changes. That means securing logs, samples, electronic data and access records, and documenting who holds what. Then define the question the investigation is meant to answer, in one sentence, and agree it with the lawyer or insurer who will rely on the outcome. A narrow question produces a usable report; a broad one produces a file that nobody can act on.

Then choose the investigator on the basis of method and legal grounding, not on the basis of a promised result. Ask how the material will be collected, how it will be stored, how the chain of custody will be recorded, and how the report will separate fact from inference. Those answers are the difference between a document that supports a claim and a document that creates a new dispute.