OSINT & online crime books for investigators

The text presents two curated lists of book recommendations for the year 2026: personal favorites and prospective reading material, focusing heavily on cybersecurity, digital investigation, and surveillance topics. The recommended readings cover diverse areas, ranging from the psychological manipulation employed in social engineering (Hadnagy) to the socio-economic underpinnings of data extraction by technology platforms (Zuboff). Cryptocurrency is a significant theme, with multiple books addressing its historical evolution, laundering techniques, and investigative methods, including works from author David Carlisle and Nick Furneaux. Furthermore, there is substantial coverage dedicated to digital privacy breaches, detailed through examinations of commercial spyware like Pegasus and the capabilities of Open-Source Intelligence (OSINT) techniques, as outlined in resources by Meredith and others.
The curated nature of these lists suggests a reader interested in emerging threats within the technological and financial sectors. The selection acknowledges methodological divides, presenting both highly technical deep dives (e.g., zero-click exploits) alongside broader conceptual critiques (e.g., Surveillance Capitalism). While one entry cautions about the current applicability of a guide on OSINT techniques, the overall narrative points toward an increasing complexity in tracing digital wrongdoing, blending traditional investigative skills with advanced cyber awareness and understanding opaque financial ecosystems.

Christopher Hadnagy recommends Social Engineering for pentesters, cybersecurity professionals, and hacking enthusiasts.
David Carlisle's The Crypto Launderers covers Bitcoin adoption, darkweb markets, NFTs, and DeFi history.
Nick Furneaux's There’s No Such Thing as Crypto Crime updates investigative narratives to current scam methods.
Laurent Richard discusses Pegasus spyware deployment against unsuspecting individuals globally.
Shoshana Zuboff's The Age of Surveillance Capitalism details how platforms monetize human behavior for future markets.
Dale Meredith recommends The OSINT Handbook for beginners learning core Open-Source Intelligence methods.
Jan Tegze's Full Stack Recruiter contains OSINT tips regarding candidate sourcing.
Andy Greenberg's Tracers in the Dark is recommended for its narrative style on cryptocurrency tracing.
Elliot Higgins' We Are Bellingcat covers the investigative work of Bellingcat.
Joseph Cox’s Dark Wire examines the Anom app favored by cybercriminals and later utilized by the FBI.
Geoff White's Rinsed focuses on online and offline money laundering methods.
Kristie Macrakis' Nothing Is Beyond Our Reach concerns the CIA's creation and global operations.

The underlying assumption across nearly every recommendation—from social engineering to cryptocurrency tracing—is that control over information and access to systems constitutes power, and this power is becoming increasingly centralized or highly specialized. The collection maps a sophisticated ecosystem where technical prowess meets human vulnerability; the hacker exploits psychology (Hadnagy), finance warps into opaque digital trails (Carlisle/Furneaux), and institutional surveillance leverages harvested behavior (Zuboff). This suggests a paradigm shift from siloed cyber threats to integrated systemic risks affecting finance, privacy, and democratic oversight.
The focus on investigative tools (OSINT Handbook, Bellingcat) implies that the contemporary battleground is defined by asymmetric information: those with fewer technical resources can still exert influence if they master data collection and analysis—a form of counter-power assertion. However, this power relies heavily on the assumption that surveillance countermeasures are always achievable or comprehensible to the reader; Zuboff’s critique suggests otherwise. The integration of personal recommendations with planned reads acts as a self-curated syllabus for navigating technological turbulence.
The perceived lack of an overriding narrative connects several disparate fields—hacks, laundering, spyware—under the banner of advanced digital footprint analysis. It presumes that deep skill acquisition in any one domain (e.g., forensic finance) offers generalized defense against another (e.g., social exploitation). If human agency is constantly being modeled and sold by platforms or coerced by state-level surveillance, where does authentic decision-making reside? Furthermore, what perspectives are missing from this heavily technical lens—specifically, the systemic political economy shaping the motivations of these actors beyond pure financial gain?
Patterns detected: none