ICIJ Offshore Leaks → EU companies

# Offshore links of one company
GET /api/v1/companies/:ico/offshore-links
  → data.links[]: ftmId, schema, name, sourceLeak, jurisdictions, addresses,
                  incorporationDate, dissolutionDate, registrationNumber,
                  relationshipType, confidence, icijUrl
  → data.edges[]: directorship/ownership/membership edges
  → data.breakdown.bySourceLeak: { panama: N, paradise: N, ... }
  → meta.attribution: ICIJ (ODbL 1.0 + CC-BY-SA 3.0)

# In the aggregate /full response
GET /api/v1/companies/:ico/full
  → data.compliance.hasOffshoreLink, offshoreLinksCount
  → data.drillDown.offshoreLinks

# Other countries (EE/SI/LV)
GET /api/v1/companies/:country/:national_id/offshore-links

What are the ICIJ Offshore Leaks?

The International Consortium of Investigative Journalists (ICIJ) published a series of international investigative databases built from leaks at offshore service providers: Panama Papers (2016, Mossack Fonseca), Paradise Papers (2017, Appleby), Pandora Papers (2021, 14 offshore firms), Bahamas Leaks (2016) and the 2013 Offshore Leaks. Together they hold ~1,614,277 companies, 0 people and 2,310,379 relationships between them: who is a director, who an owner, at which address and in which jurisdictions they are registered. Source: offshoreleaks.icij.org.

How are they matched to SK/CZ/EU companies?

The cross-walk uses pg_trgm similarity on normalised names (legal form stripped, lower-cased, accents folded) within the same country: an ICIJ entity whose countries or jurisdictions contain "sk" is matched against companies with country='SK'. Confidence levels: 95 = registration number match (company ID), 85 = exact normalised name, 70–84 = similarity ≥0.85. Currently: 86 SK, 51 CZ, 194 EU links (SK+CZ+EE+SI+LV).

Is it proof of illegal activity?

No. An offshore structure is not illegal in itself; there are legitimate reasons (international holding, IP licensing, asset protection, leaving a low-trust jurisdiction). ICIJ and we show that a link exists, not what it means. Use it as an enhanced due diligence (EDD) signal in KYC/AML processes (FATF 2012 R.10): it calls for a closer look at the source of funds, the UBO and tax residency. For legal conclusions always verify the source at offshoreleaks.icij.org/nodes/<id>.

How likely is a false match?

For generic names, yes: "ABC Holdings Limited" in the Pandora Papers is not necessarily the Slovak "ABC Holdings s.r.o." Hence: (1) a same-country filter on countries/jurisdictions, (2) a similarity threshold of ≥0.85 for fuzzy matches, (3) a confidence score in the API response. For EDD: always verify name_fuzzy matches (70–84) by hand; name_exact (85) has ~95% precision on a sample of 100 cases. An identifier match (95) is 100%: the company ID equals the registration number in the ICIJ source.

Updates and licence

Refreshed weekly on Wednesday at 13:00 UTC. Source: OpenSanctions data.opensanctions.org/datasets/latest/icij_offshoreleaks (FollowTheMoney JSONL converted from the ICIJ original). Licence: ODbL 1.0 for the database and CC-BY-SA 3.0 for the content; ICIJ attribution and share-alike are required when redistributing. The attribution is in every JSON meta.attribution, in the footer of this page and in the /companies/:ico/offshore-links response.

Programmatic access (API)?

GET /api/v1/companies/:ico/offshore-links returns the matched ICIJ entities with relationships (directorship/ownership/membership), confidence, jurisdictions and offshoreleaks.icij.org links. Also available in the aggregate /api/v1/companies/:ico/full under compliance.hits.offshoreLinks. For other countries (EE/SI/LV, companies without a Slovak ID): /api/v1/companies/:country/:national_id/offshore-links. Plan: Free, 1,000 requests per month and 120 per minute, no card required.