Resolve 2026
November 2/3, 2026 - Washington, D.C.
Save your seatWork the case, wherever it leads.
See real investigations come together in TRM — connecting on-chain activity, off-chain intelligence, and the people behind the case.
01
Sharpen
Walk away with hands-on skills and tradecraft you can use on your next case.
02
Connect
Build trusted relationships across sectors that help you crack cases faster.
03
Act
Leave with more than notes - leave with intelligence you can put to work.
Select
your mission
Pick the mission closest to your case and spend the day going deep - one threat, worked all the way through with the people who tackle it from every angle. You leave knowing how to run the next one faster.
CSAM & Exploitation
Trace the network from platform, to payment, to person.
Online exploitation rarely stays in one account, wallet, or platform. Connect the pieces, identify the next lead, and build findings that help investigators protect children and keep cases moving.
What to expect
Pivot from a known identifier to related accounts, subjects, and supporting infrastructure
Use AI to connect aliases and activity while distinguishing leads from corroborated evidence
Turn financial and platform intelligence into action by supporting referrals, warrants, seizures, arrests, and victim protection
Counter Narcotics
Map the drug-money network end to end, and name your next target.
Drug-trafficking networks are designed to hide the people moving the drugs and the money. Follow a lead outward to reveal the vendors, facilitators, and financial infrastructure keeping the network running.
What to expect
Start with a known target and identify associates, facilitators, and hidden connections
Connect separate leads to map the structure of a trafficking organization
Follow drug money to identify forfeiture opportunities
Cyber Threat Intelligence
From threat report to attribution to a hunt your SOC can run.
Sophisticated threat actors rarely leave a clean trail. Work outward from a lead to connect the infrastructure, identities, and financial activity behind it—and turn scattered signals into intelligence your team can use.
What to expect
Start with an actor, indicator, or piece of infrastructure and pivot to the wider network
Use AI to connect fragmented identities, infrastructure, and activity
Turn cyber threat intelligence into action by attributing attackers, disrupting infrastructure, and supporting incident response
Compliance & Supervision
Money laundering and sanctions evasion, from alert to defensible SAR.
An alert is rarely the full story. Build the context behind suspicious activity, uncover the relationships that change the risk picture, and move toward a defensible decision.
What to expect
Investigate beyond the initial alert to understand the full customer or counterparty risk picture
Use AI to surface relationships that change the risk assessment without replacing analyst judgment
Learn what makes a law-enforcement request actionable, and what compliance teams can provide in return
Fraud & Scams
Follow the scam network from first victim report to the final cash-out.
A fraud report is often the first visible piece of a much larger operation. Connect cases that look unrelated, follow the money, and find the intervention points that can help stop further losses.
What to expect
Triage victim reports and link cases through shared infrastructure, accounts, or operators
Use AI to extract selectors, resolve entities, and prioritize the strongest investigative leads
Turn scam intelligence into action by identifying intervention points, supporting freezes, and pursuing victim recovery
Threat Finance
Terrorism financing and state-actor cases, on data that never leaves your control.
Adversaries need money to move people, materials, and influence—and they work hard to hide the network behind it. Follow the money to expose the facilitators, front companies, and pressure points that matter.
What to expect
Map facilitators and front companies tied to terrorism financing, sanctions evasion, and illicit procurement
Connect financial activity to the people and entities behind it
Turn threat-finance intelligence into action by identifying disruption, seizure, forfeiture, and recovery opportunities
Blockchain Intelligence Foundations
Newer to crypto and looking to master the fundamentals?
Join us early on Day 1 for a certification that allows you to get more from every mission.
Meet your instructors
Kathy Newman
Counter Narcotics
Ali Comolli
CSAM & Exploitation
Jake Inman
Cyber Threat Intelligence
Luke Dufour
Financial Crime
.png)
Luke Russell
Fraud & Scams
.png)
Matt W
Threat Finance
Agenda
11.02
Meet Your Mission
Pre-Conference
The Westin
8:30 am - 9:30 am
Registration and breakfast
9:30 am - 3:00 pm
Blockchain Fundamentals Course - Optional
Roundtables and discussion forums
Opening Night
Mellon Auditorium
3:30 pm - 4:30 pm
Meet your mission, threat briefings, networking
4:30 pm - 5:45 pm
Mainstage keynote sessions
The Disruption Awards
5:45 pm - 8:30 pm
Welcome Reception
11.03
Work Your Mission
Training Intensive
The Westin
8:00 am - 9:00 am
Registration, breakfast, and networking
9:00 am - 12:00 pm
Mission Tracks - Morning Session (hands-on tracing)
12:00 pm - 1:15 pm
Lunch and Peer Ask-Me-Anything (AMA) Sessions
1:15 pm - 4:45 pm
Mission Tracks - Afternoon Session (hands-on tracing)
4:45 pm - 6:00 pm
Closing Drinks and Toast
The Disruption Awards
The people and partnerships that stop crime rarely get the spotlight.
This November, they do — live on the Mellon main stage. Three awards, one shared idea: nobody wins alone.
01
The Blackout
For the takedown that turns the lights out on criminal infrastructure
02
The Architect
For building a disruption others can run next month — without you.
03
The Lifeline
For reaching people before the harm — at scale
.png)
Mellon Auditorium
Mellon auditorium
.png)
Mellon Auditorium
Mellon auditorium
The Westin
The Westin
The Westin
The Westin
Mellon Auditorium
Mellon auditorium
Reserve your spot
No cost to attend.
Limited to 500 people.
Frequently asked questions
Who is this event for?
This event is designed for the doers — investigators, compliance leads, regulators, analysts, and security professionals working every day to trace and dismantle threats.
How do I register?
Please complete the registration form on this page.
What airport should I fly into?
Reagan National Airport (DCA), about 20 minutes away, and Dulles International Airport (IAD), about 50 minutes away, are both convenient options for traveling to D.C.
Will meals be provided?
Yes. A light breakfast, lunch, and refreshments will be provided, along with a reception at the end of the event.
Do I need a TRM license to attend?
If your organization uses or is evaluating TRM, you’re in. You don’t need a separate license to attend.
Do I need to bring my own laptop?
Yes, please bring your laptop with you so that you can participate in the hands-on training. We’ll have a limited number of extras available if you need one for any reason. For national security attendees, we’ll provide a dedicated laptop — no need to bring your own.
Is the event hosted in an accessible venue?
Yes, the venue is fully accessible with elevators and accessible restrooms. If you have any other accessibility needs, let us know so we can make sure you’re set up for a smooth experience.
Does it cost anything to attend?
No. This event is 100% free to attend outside of your travel and lodging.
Is there parking nearby?
Yes, there are several parking options within walking distance. Please note that attendees are responsible for their own parking costs.
The Westin DC Downtown has a self-park and valet option on-site.
There are several additional garages within a 5-minute walk, including 600 Massachusetts Ave NW, 810 7th St NW, and City Center DC Garage at 824 9th St NW. We recommend booking in advance via SpotHero or ParkWhiz.
What’s the nearest Metro Station?
Gallery Place-Chinatown Metro station (Red, Yellow, and Green lines) is also a short walk from the venue.
If coming from out of town, where should I stay?
TRM Annual Conference will not have a dedicated hotel block.
There are several other hotels within walking distance of the venue, including the AC Hotel Washington DC Convention Center, Embassy Suites by Hilton Washington DC Convention Center, and The Henley Park Hotel.
What’s the dress code?
Business casual.
Does this event count for CPE credits?
Yes. Attendees can apply for up to 4 hours of continuing education credit.
Block sessions meet ACAMS criteria for non-ACAMS recertification credits and have been approved and supported by the International Association of Financial Crimes Investigators (IAFCI) for continuing professional education. TRM will supply supporting documentation that you can leverage in applying for both IAFCI and non-ACAMS credit.
Participants are solely responsible for applying for credit through ACAMS. TRM makes no representation or warranty that ACAMS will approve or grant such credits, and shall have no liability in the event credits are not approved.
Is there a digital experience? Can I watch on demand?
This event is primarily a hands-on learning event focused on practicals. Therefore, we will not be recording sessions.
Will press be at the event?
The keynote sessions will be open to press and media. Workshops and training elements will be closed door.
.svg)