TRM User Conference 2026
SAVE YOUR SEATThe investigators, analysts, compliance leads, and intelligence professionals who fight financial crime, running real investigations on TRM's AI Investigations Platform — on-chain and off.
Select your mission
Pick the mission closest to your case and spend the day going deep — one threat, worked all the way through, alongside the people who fight it from every angle. You leave knowing how to run it faster the next time it lands on your desk.
Trace the network from platform, to payment, to person.
Online exploitation rarely stays in one account, wallet, or platform. Connect the pieces, identify the next lead, and build findings that help investigators protect children and keep cases moving.
- Pivot from a known identifier to related accounts, subjects, and supporting infrastructure
- Use AI to connect aliases and activity while distinguishing leads from corroborated evidence
- Turn financial and platform intelligence into action by supporting referrals, warrants, seizures, arrests, and victim protection
Map the drug-money network end to end, and name your next target.
Drug-trafficking networks are designed to hide the people moving the drugs and the money. Follow a lead outward to reveal the vendors, facilitators, and financial infrastructure keeping the network running.
- Start with a known target and identify associates, facilitators, and hidden connections
- Connect separate leads to map the structure of a trafficking organization
- Follow drug money to identify forfeiture opportunities
From threat report to attribution to a hunt your SOC can run.
Sophisticated threat actors rarely leave a clean trail. Work outward from a lead to connect the infrastructure, identities, and financial activity behind it—and turn scattered signals into intelligence your team can use.
- Start with an actor, indicator, or piece of infrastructure and pivot to the wider network
- Use AI to connect fragmented identities, infrastructure, and activity
- Turn cyber threat intelligence into action by attributing attackers, disrupting infrastructure, and supporting incident response
Money laundering and sanctions evasion, from alert to defensible SAR.
An alert is rarely the full story. Build the context behind suspicious activity, uncover the relationships that change the risk picture, and move toward a defensible decision.
- Investigate beyond the initial alert to understand the full customer or counterparty risk picture
- Use AI to surface relationships that change the risk assessment without replacing analyst judgment
- Learn what makes a law-enforcement request actionable, and what compliance teams can provide in return
Follow the scam network from first victim report to the final cash-out.
A fraud report is often the first visible piece of a much larger operation. Connect cases that look unrelated, follow the money, and find the intervention points that can help stop further losses.
- Triage victim reports and link cases through shared infrastructure, accounts, or operators
- Use AI to extract selectors, resolve entities, and prioritize the strongest investigative leads
- Turn scam intelligence into action by identifying intervention points, supporting freezes, and pursuing victim recovery
Terrorism financing and state-actor cases, on data that never leaves your control.
Adversaries need money to move people, materials, and influence—and they work hard to hide the network behind it. Follow the money to expose the facilitators, front companies, and pressure points that matter.
- Map facilitators and front companies tied to terrorism financing, sanctions evasion, and illicit procurement
- Connect financial activity to the people and entities behind it
- Turn threat-finance intelligence into action by identifying disruption, seizure, forfeiture, and recovery opportunities
Newer to on-chain investigations, and looking to refresh your crypto tracing knowledge?
Join us early on Day 1 for a certification that allows you to get more from every mission.
.png)
A foundation training on the crypto ecosystem, built for anyone new to blockchain or looking for a refresher. You’ll leave comfortable navigating TRM Forensics and AI Investigation platforms.
After this course, you’ll be able to:
- Follow a transaction accross blockchains and find related entity data.
- Track attribution to service providers, actors and entities.
- Identify and apply open-source methods of attribution.
- Explan smart contracts, tokens and NFTs.
Meet your instructors
.png)
.png)
.svg)
.png)
.svg)
Agenda
Roundtables and discussion forums
.png)
.png)
Reserve your spot
Frequently asked questions
This event is designed for the doers — investigators, compliance leads, regulators, analysts, and security professionals working every day to trace and dismantle threats.
Please complete the registration form on this page.
Reagan National Airport (DCA), about 20 minutes away, and Dulles International Airport (IAD), about 50 minutes away, are both convenient options for traveling to D.C.
Yes. A light breakfast, lunch, and refreshments will be provided, along with a reception at the end of the event.
If your organization uses or is evaluating TRM, you’re in. You don’t need a separate license to attend.
Yes, please bring your laptop with you so that you can participate in the hands-on training. We’ll have a limited number of extras available if you need one for any reason. For national security attendees, we’ll provide a dedicated laptop — no need to bring your own.
Yes, the venue is fully accessible with elevators and accessible restrooms. If you have any other accessibility needs, let us know so we can make sure you’re set up for a smooth experience.
No. This event is 100% free to attend outside of your travel and lodging.
Yes, there are several parking options within walking distance. Please note that attendees are responsible for their own parking costs.
- The Westin DC Downtown has a self-park and valet option on-site
- There are several additional garages are within a 5-minute walk, including 600 Massachusetts Ave NW, 810 7th St NW, and City Center DC Garage at 824 9th St NW. We recommend booking in advance via SpotHero or ParkWhiz.
Gallery Place-Chinatown Metro station (Red, Yellow, and Green lines) is also a short walk from the venue.
TRM Annual Conference will not have a dedicated hotel block.
There are several other hotels within walking distance of the venue, including the AC Hotel Washington DC Convention Center, Embassy Suites by Hilton Washington DC Convention Center, and The Henley Park Hotel.
Business casual.
Yes. Attendees can apply for up to 4 hours of continuing education credit.
Block sessions meet ACAMS criteria for non-ACAMS recertification credits and have been approved and supported by the International Association of Financial Crimes Investigators (IAFCI) for continuing professional education. TRM will supply supporting documentation that you can leverage in applying for both IAFCI and non-ACAMS credit.
Participants are solely responsible for applying for credit through ACAMS. TRM makes no representation or warranty that ACAMS will approve or grant such credits, and shall have no liability in the event credits are not approved.
This event is primarily a hands-on learning event focused on practicals. Therefore, we will not be recording sessions.
The keynote sessions will be open to press and media. Workshops and training elements will be closed door.
.svg)