Critical Next Steps: a 3-Step Action Plan for Anyone Under Federal Investigation Today

Step One: The Immediate "Freeze and Preserve" Protocol for Federal Investigations

In my 25 years as a federal prosecutor, I saw more cases won by the government in the first 48 hours than in any subsequent motion or trial. When you first learn you are under federal investigation—whether through a target letter from a U.S. Attorney's Office, a grand jury subpoena duces tecum, or a knock on the door from FBI agents—your biological instinct is to panic and start calling people. Do not do this. The single most important action you can take is to implement what I call the "Freeze and Preserve" protocol. This means immediately ceasing all communication with anyone who might be a witness, co-defendant, or subject of the same investigation. Under 18 U.S.C. § 1512(b)(3), any effort to influence, delay, or prevent the testimony of any person in an official proceeding is a felony punishable by up to 20 years, and if the communication involves force or threats, that jumps to 30 years under subsection (a). I have personally secured indictments against individuals who thought they were just "checking in" with a former business partner after learning of a probe—the government interpreted those calls as obstruction, and they were right to do so under the statute's broad language.

The second component of this freeze protocol involves digital evidence preservation. Federal investigators are operating under the Federal Rules of Criminal Procedure, particularly Rule 16, which imposes reciprocal discovery obligations, but more critically, the government will soon serve you with a preservation letter under 18 U.S.C. § 1519—the anti-shredding statute that carries a 20-year felony penalty for destroying, altering, or falsifying records in anticipation of a federal investigation. You must immediately direct your IT department or personal staff to preserve all emails, text messages, Slack messages, financial records, and any other electronically stored information from the relevant time period. Do not delete anything, do not archive anything, and do not run any disk cleanup utilities. The Department of Justice has forensic capabilities to recover deleted data, but more importantly, if you are later charged, the government will argue that any deletion during this period constitutes consciousness of guilt under the "spoliation inference" doctrine recognized in every federal circuit. I advise clients to take a forensic image of all relevant devices and store them with a neutral third-party custodian, such as your defense counsel's office, to demonstrate good faith compliance with preservation obligations.

The third element of this initial step is the absolute prohibition on contacting federal agents without counsel. When the FBI or IRS-CI agents show up at your door or call your office, they will be friendly, professional, and they will tell you that you are "not under arrest" and that you can "help yourself" by talking to them. This is a trap. Under 18 U.S.C. § 1001, it is a felony to make any materially false statement to a federal official in any matter within the jurisdiction of the executive branch, even if you are not under oath, even if the statement is made casually, and even if you later correct it. The statute does not require intent to deceive—mere negligence can suffice in some circuits. I have seen executives charged under § 1001 for saying "I don't remember" when they actually did remember, or for providing a document that contained an innocent typo. The only safe response to any federal agent is: "I am not willing to speak with you without my attorney present. Please direct all future communications to my counsel." Then immediately call a federal criminal defense attorney. Do not attempt to "explain your side" or "set the record straight"—the government will use every word you say against you, and they will not give you credit for cooperation until you have a formal proffer agreement signed under the U.S. Attorney's Manual § 9-27.600.

Finally, you must freeze your financial accounts and business operations in a way that does not trigger asset forfeiture proceedings. The government can obtain a pretrial restraining order under 21 U.S.C. § 853(e) in drug cases, or under 18 U.S.C. § 982 in money laundering and fraud cases, which can freeze all assets subject to forfeiture—including assets that are not directly traceable to the alleged crime, under the "substitute assets" provision of 21 U.S.C. § 853(p). If the government suspects you are dissipating assets, they will move for an ex parte restraining order that prevents you from paying your mortgage, your children's tuition, or your legal fees. You need to work with counsel to prepare a preemptive financial affidavit demonstrating that your assets derive from legitimate sources, and to negotiate a "no asset dissipation" agreement that allows you to continue normal business operations and pay reasonable legal fees. The Supreme Court in Caplin & Drysdale v. United States (1989) held that the Sixth Amendment right to counsel of choice is not absolute when forfeitable assets are involved, so you must act before the government files its restraining order motion.

Step Two: Strategic Engagement with the Grand Jury and Target Letter Response

Once you have stabilized your immediate situation, the next critical juncture is responding to formal process—typically a grand jury subpoena or a target letter. A target letter from a U.S. Attorney's Office is not a formality; it is a formal notification under the U.S. Attorney's Manual § 9-11.150 that the government has substantial evidence linking you to a crime and intends to present that evidence to a grand jury. You typically have 21 days to respond, and how you respond will determine whether you face an indictment or whether the case is declined. In my experience as a prosecutor, we sent target letters to pressure individuals into cooperating or to force them into making mistakes. The worst possible response is to ignore the letter or to send a defiant letter claiming innocence without legal analysis. Instead, your attorney should file a formal "target response" letter under Federal Rule of Criminal Procedure 6(e), which allows for limited disclosure of grand jury matters to assist the target in preparing a defense. This response should include a detailed legal memorandum explaining why the evidence does not support the elements of the alleged offense, citing specific statutes and case law from your circuit.

The grand jury subpoena itself requires careful handling. Under Federal Rule of Criminal Procedure 17(c), a subpoena duces tecum can demand documents, records, or other tangible evidence, but you have the right to object on grounds of relevance, overbreadth, or privilege. The Fifth Amendment privilege against self-incrimination does not generally apply to pre-existing business records under the "required records" doctrine from Shapiro v. United States (1948), but it does apply to the act of production itself under the "act of production doctrine" from United States v. Doe (1984). Your attorney should file a motion to quash or modify the subpoena under Rule 17(c)(2) if the request is overly broad or seeks privileged materials. I have successfully narrowed subpoenas that originally asked for "all documents related to" a five-year period to a specific set of transactional records, saving clients millions in document review costs and preventing the government from engaging in a fishing expedition. Additionally, if the subpoena calls for testimony before the grand jury, you have the right to assert your Fifth Amendment privilege, but you must do so on a question-by-question basis—a blanket refusal to testify can result in contempt under 18 U.S.C. § 401.

This is also the stage where you must decide whether to pursue a "proffer" or "Queen for a Day" agreement with the government. Under the U.S. Attorney's Manual § 9-27.600, a proffer agreement allows you to provide information to the government without that information being used directly against you in the government's case-in-chief, but it can be used for impeachment if you testify inconsistently at trial, and it can be used to derive leads for other evidence. I generally advise against proffering unless you have genuinely exculpatory information that can lead to a declination, because the government will use the proffer to lock you into a story and then investigate every inconsistency. The decision to proffer must be based on a thorough assessment of the evidence the government already has, which you can learn through a "reverse proffer" where the government shares some of its evidence in exchange for your agreement to cooperate. Under Federal Rule of Criminal Procedure 11(c)(1)(C), a binding plea agreement with a specific sentence can be negotiated before indictment, but this requires a complete waiver of your rights and should only be considered if the evidence against you is overwhelming.

Parallel to the grand jury response, you need to begin building your own evidentiary record. Under the Jencks Act, 18 U.S.C. § 3500, the government is not required to produce witness statements until after the witness testifies at trial, but you can obtain early discovery through a "discovery motion" under Rule 16(a)(1)(E), which requires the government to produce documents material to preparing the defense. You should also file a motion for "Brady material" under Brady v. Maryland (1963), which requires the government to disclose exculpatory evidence, and a motion for "Giglio material" under Giglio v. United States (1972), which requires disclosure of impeachment evidence against government witnesses. In federal white-collar cases, the government often has thousands of pages of bank records, emails, and witness interview notes (FBI 302s) that contain exculpatory information buried in the mass of discovery. Your attorney should immediately begin interviewing potential witnesses—not co-defendants, but third-party witnesses who can provide context for ambiguous documents or transactions. Under the "rule of completeness" from Federal Rule of Evidence 106, if the government introduces a partial document, you have the right to introduce the remainder of that document to provide context, so preserving the complete record is essential.

Step Three: Pre-Indictment Negotiation and the Art of the Declination Letter

The most effective federal defense strategy is one that prevents an indictment from ever being returned. In my prosecutorial career, I declined to indict approximately 40% of the cases that came across my desk after receiving a compelling declination memorandum from defense counsel. The declination letter is a formal legal document submitted to the Assistant U.S. Attorney and the Criminal Chief, arguing that the evidence does not meet the standard of probable cause under the Fourth Amendment, or that prosecution would not serve the interests of justice under the U.S. Attorney's Manual § 9-27.220. This letter must be meticulously structured, citing specific statutes, case law, and the factual record. It should address each element of the alleged offense, showing where the evidence falls short. For example, in a wire fraud case under 18 U.S.C. § 1343, the government must prove a scheme to defraud, intent to deprive another of money or property, and the use of interstate wire communications in furtherance of the scheme. If you can demonstrate that the alleged misrepresentations were mere puffery, that the victim received the benefit of the bargain, or that there was no intent to deceive, you have a strong argument for declination.

Simultaneously, you should explore the possibility of a "civil resolution" or "deferred prosecution agreement" (DPA) if you are a corporate entity or an individual representing a company. The DOJ's "Yates Memo" (2015) and subsequent "Benczkowski Memo" (2018) set forth factors for corporate cooperation, including the disclosure of all relevant facts about individual wrongdoers. If you can demonstrate that your company has a robust compliance program, that you self-reported the conduct, and that you have fully cooperated with the government, you may qualify for a DPA or a non-prosecution agreement (NPA). Under 18 U.S.C. § 3553(a), sentencing factors include the need to promote respect for the law and provide just punishment, but a DPA allows the company to avoid a criminal conviction while completing a period of supervised compliance. For individuals, the DOJ's "Individual Accountability Policy" requires that you provide complete and truthful information about all criminal activity within your knowledge, including your own conduct, to qualify for a cooperation credit under U.S.S.G. § 5K1.1. This is a high-stakes decision because you are essentially admitting to the conduct in exchange for leniency, so it should only be pursued after a complete review of the evidence with counsel.

The timing of your pre-indictment negotiation is critical. The statute of limitations for most federal crimes is five years under 18 U.S.C. § 3282, but for financial institution fraud it is ten years under 18 U.S.C. § 3293, and for certain terrorism offenses there is no statute of limitations. The government will typically file charges before the statute runs, but they may delay if they believe you are cooperating or if they need more time to build the case. You can use this time to your advantage by submitting a "statute of limitations" letter arguing that the government has had sufficient time to investigate and that further delay is prejudicial under the Due Process Clause of the Fifth Amendment. If the government has been investigating for three years without filing charges, you may have a basis to argue for dismissal under the "speedy trial" protections of the Sixth Amendment, though this is rarely successful before indictment. More practically, you should use the pre-indictment period to resolve civil liability issues—paying back taxes to the IRS, making restitution to victims, or settling SEC enforcement actions—which can be presented to the U.S. Attorney as evidence of good faith and lack of criminal intent.

Finally, you must prepare for the possibility that an indictment is inevitable. This means building your trial team, securing expert witnesses, and preparing jury voir dire strategies. Under Federal Rule of Criminal Procedure 12(b), you must file any pretrial motions—including motions to suppress evidence under the Fourth Amendment, motions to dismiss for insufficient evidence under Rule 29, and motions for a bill of particulars under Rule 7(f)—within the timeframe set by the court. I always advise clients to have a "trial-ready" posture before the indictment is returned, because the government will offer a more favorable plea deal if they believe you are prepared to go to trial. Under U.S.S.G. § 3E1.1, acceptance of responsibility can reduce your offense level by two or three levels, but you must accept responsibility genuinely and not merely as a strategic calculation. The decision to plead guilty or go to trial is the most consequential choice you will face, and it must be made with a complete understanding of the evidence, the sentencing guidelines, and the strengths and weaknesses of your case. In my experience, clients who follow this three-step plan—freeze and preserve, engage strategically with the grand jury, and negotiate aggressively before indictment—are far more likely to avoid charges or secure favorable resolutions than those who react emotionally or try to handle the investigation on their own.