3 Essential Steps to Take Today If You’re Under Federal Investigation After the 2026 DOJ Announcement

Step One: Secure Your Legal Shield—Immediately Invoke Privilege and Control Communications

In my 25 years as a federal prosecutor, I watched countless individuals walk into interviews or hand over documents without counsel, believing they could talk their way out of trouble. The 2026 DOJ announcement has only sharpened that risk. The Department now explicitly instructs prosecutors to scrutinize early, uncounseled statements for signs of consciousness of guilt, and to treat any voluntary disclosure of privileged material as a waiver under Federal Rule of Evidence 502(a). That means if you call a colleague, email a friend about “that deal,” or even post a vague status update about “cooperating with the feds,” you may have just handed the government a roadmap to indictment. Your first action today is to halt all non-essential communications regarding any matter that could touch the investigation. This includes internal company emails, Slack messages, and even personal texts. The moment you learn you are under investigation—whether through a target letter, a grand jury subpoena, or a whisper from a colleague—you must treat every word you utter as potentially discoverable. I cannot overstate the importance of a written litigation hold notice, served on every employee and custodian of records, that explicitly instructs them to preserve all materials and to direct any government inquiries to legal counsel. This is not paranoia; this is the baseline for survival in the current enforcement climate.

The privilege issue becomes even more complex when you are part of an organization. Under the 2026 DOJ guidance, prosecutors are encouraged to weigh the “completeness and timeliness” of a company’s cooperation, which often includes evaluating whether the entity waived privilege over internal investigation materials. The Supreme Court’s decision in Upjohn Co. v. United States (1981) established that communications between corporate counsel and employees are privileged when made to secure legal advice, but that protection is not absolute. If you or your company voluntarily shares the results of an internal investigation with the government, you may be deemed to have waived privilege over the entire subject matter under Rule 502(a), including notes, interview memoranda, and even drafts. I have seen this happen repeatedly: a well-intentioned compliance officer sends a “preliminary findings” email to the DOJ, and suddenly the government has unfettered access to the company’s entire investigative file. To avoid this, you must ensure that any communication with the government is channeled exclusively through counsel, and that counsel clearly labels all materials as “Attorney-Client Privileged” and “Attorney Work Product” under Federal Rule of Civil Procedure 26(b)(3). Do not assume that a confidentiality agreement or a joint defense agreement will protect you if you have already sent an unguarded email. The rule is simple: today, stop talking to anyone except your lawyer.

One of the most overlooked aspects of privilege preservation in 2026 is the handling of encrypted messaging applications. The DOJ’s new policy explicitly states that the use of ephemeral messaging platforms—like Signal, WhatsApp, or Telegram with disappearing messages—will be treated as a “relevant factor” in evaluating a target’s cooperation and intent. If you have used such apps for business communications, you must immediately preserve any archived messages and cease using auto-delete features. Under 18 U.S.C. § 1519, destruction of records in anticipation of a federal investigation carries a penalty of up to 20 years in prison. I have personally prosecuted cases where a single deleted Signal message became the cornerstone of an obstruction charge. The government’s forensic examiners can often recover metadata and even content from devices, but the act of deletion itself creates a rebuttable presumption of spoliation. Your counsel should work with a forensic expert today to image your devices and preserve all data in a forensically sound manner. This is not a task you can delegate to your IT department without legal oversight. The clock is ticking, and every hour you delay increases the risk that a well-intentioned employee will “clean up” their inbox and inadvertently destroy evidence that could have been used to build your defense.

Finally, understand that the 2026 DOJ announcement has expanded the definition of “cooperation” to include a willingness to produce foreign-located evidence without a formal Mutual Legal Assistance Treaty (MLAT) process. If your investigation involves international transactions, the government may expect you to voluntarily waive privacy protections under the Stored Communications Act (18 U.S.C. § 2701) or the GDPR. Do not agree to any such waiver without a detailed, written protocol approved by your counsel. I have seen clients sign broad consent forms only to discover that the government used that consent to access emails from five years prior that had nothing to do with the investigation. The Fourth Amendment’s protection against unreasonable searches and seizures still applies, but voluntary consent is a recognized exception. Your counsel should negotiate the precise scope of any data production, and that negotiation should happen before you utter a single word to an agent. In my experience, the government respects a well-prepared, privilege-conscious target far more than one who rushes to cooperate without understanding the legal landscape. Take this step seriously, and you will have laid a foundation that can withstand the most aggressive prosecutorial scrutiny.

Step Two: Issue a Targeted, Fact-Specific Response—Not Silence, Not a Dump Truck of Documents

Once your privilege shield is in place, the next critical step is crafting your response to the government’s initial outreach. The 2026 DOJ memorandum explicitly directs prosecutors to evaluate a target’s “responsiveness and candor” from the very first contact, whether that is a grand jury subpoena, a civil investigative demand (CID), or a voluntary request for an interview. In my years as a prosecutor, I found that targets who responded with a vague “we’ll cooperate” but then produced nothing for weeks were often treated as hostile. Conversely, those who immediately provided a focused, factual response—accompanied by a privilege log and a clear explanation of what they could and could not produce—were more likely to be viewed as cooperative, which can influence charging decisions under the Justice Manual § 9-27.230. Your goal here is not to dump every document you have onto the government’s doorstep. That approach, which I call the “document dump,” is a trap: it buries exculpatory evidence in a mountain of irrelevant materials, and the government will assume you are hiding something. Instead, you must work with counsel to identify the specific categories of documents that are responsive to the subpoena or request, and produce them in a logical, indexed format that allows the government to see the full picture without overwhelming them.

The key to a successful response is precision. Under Federal Rule of Criminal Procedure 17(c), a grand jury subpoena must be “reasonable” in scope, and you have the right to move to quash it if it is overbroad or unduly burdensome. I have successfully argued in multiple federal districts that a subpoena seeking “all emails related to the company’s operations since 2018” is facially unreasonable under the standard set forth in United States v. R. Enterprises, Inc. (1991). The 2026 DOJ announcement does not change this fundamental right. In fact, the new policy emphasizes that prosecutors should “narrowly tailor” requests to avoid fishing expeditions. Your counsel should immediately review the subpoena or CID for overbreadth, and if warranted, file a motion to quash or negotiate a more targeted scope. This is not obstruction; it is advocacy. I have seen clients successfully reduce a 500,000-document request to 15,000 documents by showing the government that the broader request encompassed irrelevant trade secrets and personal communications. The negotiation must be done in writing, with a clear record of your good-faith efforts. If the government later claims you were uncooperative, that written record becomes your best evidence that you acted reasonably.

Another critical element of your response is the production of a privilege log under Federal Rule of Civil Procedure 26(b)(5) if the investigation has a parallel civil component. The 2026 DOJ announcement explicitly encourages coordination between criminal and civil enforcement divisions, meaning that a document produced in a civil context can be shared with criminal prosecutors under the “civil-criminal coordination” provisions of the Justice Manual. Your privilege log must be detailed enough to withstand scrutiny but not so detailed that it reveals the substance of privileged communications. I recommend a format that identifies the date, author, recipients, and a general subject matter (e.g., “legal advice regarding compliance with 18 U.S.C. § 666”), without describing the specific legal analysis. If the government challenges your privilege claims, you have the right to a hearing before a federal magistrate judge. Do not waive privilege just to avoid a fight; the 2026 policy does not require you to sacrifice your constitutional rights to be deemed cooperative. I have represented clients who stood firm on privilege and still received favorable plea offers because they were transparent about what they could produce and why.

Finally, consider whether a proffer session is appropriate. Under the 2026 DOJ guidelines, prosecutors are instructed to consider “substantial assistance” in evaluating whether to file charges or recommend a downward departure under U.S.S.G. § 5K1.1. However, a proffer is a double-edged sword. If you provide information that is inconsistent with other evidence, the government can use that inconsistency against you at trial under Federal Rule of Evidence 801(d)(2) as an admission by a party opponent. I have seen clients walk into proffer sessions without a written proffer agreement, only to have the prosecutor later claim that the session was “off the record” or that the client waived their Fifth Amendment rights. Never, under any circumstances, participate in a proffer without a signed, written agreement that explicitly states that your statements cannot be used directly in the government’s case-in-chief. The 2026 policy does not change the rules of evidence; it only changes how prosecutors weigh cooperation. Your counsel should negotiate the terms of any proffer agreement in advance, including the scope of use immunity and the duration of the agreement. In my practice, I often recommend a “queen for a day” letter that limits the government’s ability to use your statements except for impeachment or in a perjury prosecution. This is not a sign of weakness; it is a sign that you understand the stakes and are approaching the investigation with the seriousness it deserves.

Step Three: Build Your Defense Narrative Now—Before the Indictment Is Drafted

Most people wait until they are indicted to start building a defense. That is a fatal mistake. In the 2026 enforcement environment, the DOJ is moving faster than ever, with prosecutors filing charges within months of receiving a referral from agencies like the SEC, FBI, or IRS. The new policy explicitly encourages “early case resolution” and “streamlined charging decisions,” meaning that by the time you see a grand jury return an indictment, the government has already locked in its theory of the case. Your job, starting today, is to disrupt that narrative before it hardens. This does not mean you should try to contact the prosecutor directly—that is your counsel’s role. But it does mean you need to gather every piece of exculpatory evidence, every witness statement, and every documentary record that supports your version of events. Under Brady v. Maryland (1963), the government is required to disclose exculpatory evidence, but that obligation only arises after charges are filed. Before that, you are on your own. I have seen cases where a single email showing that a client relied on advice of counsel—produced early in the investigation—convinced the DOJ not to indict. That email would have been lost forever if the client had waited until after the grand jury voted.

The advice-of-counsel defense is one of the most powerful tools in white-collar defense, but it requires meticulous documentation. Under the 2026 DOJ announcement, prosecutors are instructed to consider “good faith reliance on professional advice” as a mitigating factor. However, to raise this defense, you must show that you fully disclosed all relevant facts to your attorney and that you relied on that advice in good faith. This is not a defense you can fabricate after the fact. If you have emails, meeting notes, or engagement letters that show you sought and followed legal advice, those documents must be preserved and produced in a manner that does not waive the underlying privilege. Your counsel can help you structure a limited waiver that allows the government to see the advice-of-counsel evidence without opening the door to the entire privileged universe. I have successfully used this strategy in cases involving the Foreign Corrupt Practices Act (15 U.S.C. § 78dd-1) and the Travel Act (18 U.S.C. § 1952), where clients had documented their compliance with local counsel in foreign jurisdictions. The key is to act now, while the evidence is still fresh and accessible.

Another critical component of building your defense narrative is identifying potential witnesses and securing their cooperation early. Under Federal Rule of Criminal Procedure 6(e), grand jury proceedings are secret, but you can still interview witnesses who have not yet been subpoenaed. The 2026 DOJ policy does not restrict your ability to conduct a parallel investigation, and in fact, the Justice Manual § 9-13.400 encourages prosecutors to consider “the defendant’s efforts to identify and correct misconduct” as a factor in charging decisions. If you can show that you proactively interviewed employees, documented their recollections, and preserved their statements, that evidence can be used to demonstrate your good faith. However, be careful: witness interviews conducted by non-lawyers are not privileged and can be subpoenaed by the government. All witness interviews should be conducted by or under the supervision of counsel, with clear documentation that the interview is being performed to provide legal advice. I recommend that your counsel prepare detailed memoranda of each interview, which are then protected as attorney work product under Federal Rule of Civil Procedure 26(b)(3). If the government later tries to compel those memoranda, you can argue that they were prepared in anticipation of litigation, and the burden shifts to the government to show substantial need and undue hardship.

Finally, consider the strategic value of a pre-indictment presentation to the DOJ. In my experience as a prosecutor, I was far more likely to decline prosecution if a target’s counsel came in with a well-organized, factual presentation that highlighted weaknesses in the government’s case. The 2026 DOJ announcement does not prohibit this practice; in fact, it encourages “early and meaningful engagement” between defense counsel and prosecutors. Your counsel should prepare a written submission that includes a factual chronology, key documents, and a legal analysis of why the conduct at issue does not violate the statute. This is not a time for bluster or threats. The presentation should be respectful, factual, and focused on the elements of the offense. For example, if you are under investigation for wire fraud under 18 U.S.C. § 1343, your counsel should show that there was no scheme to defraud, no intent to deprive someone of money or property, and no material misrepresentation. I have seen such presentations result in declinations or deferred prosecution agreements that saved clients from the stigma of an indictment. The window for this kind of advocacy is narrow—once an indictment is returned, the government’s position hardens, and the presumption of innocence becomes a legal fiction in the court of public opinion. Act today, and you may never have to face a jury.

Frequently Asked Questions