MILITARY LAW ENFORCEMENT INVESTIGATION
MILITARY JUSTICE
What is a Military Law Enforcement Investigation?
Law enforcement investigations are conducted by military or federal investigative agencies authorized to investigate criminal misconduct. Depending on the branch and the nature of the allegation, this may include CID, NCIS, OSI, CGIS, or other joint or federal agencies.
Covered offenses are serious crimes under the UCMJ that are removed from normal command control and handled through the Office of Special Trial Counsel (OSTC). These offenses generally include sexual assault and related sexual offenses, domestic violence, murder and manslaughter, kidnapping, child abuse and child sexual offenses, and other serious violent felonies or attempts. When an allegation may involve a covered offense, the command is required to report it to OSTC, which alone determines whether the offense qualifies as “covered” and whether OSTC will retain prosecutorial authority. In practice, covered offenses are almost always investigated by military law enforcement agencies such as NCIS, CID, or OSI, and the case proceeds as a criminal investigation rather than an administrative matter.
How These Investigations Typically Begin
Law enforcement investigations often start long before a service member is formally notified. They may be triggered by:
- A report from command
- A complaint by another service member or civilian
- Medical, financial, or digital evidence
- A command investigation that uncovers potential criminal conduct
In many cases, the first sign of trouble is a request to “come talk to investigators.” By the time that request is made, investigators may already have collected statements, records, or electronic data.
Typical Procedure
The scope and intensity of a law enforcement investigation depend on the nature of the suspected offense. Investigators may use a range of methods to gather evidence, including seizing property, conducting interviews within your unit, reviewing personnel records, and obtaining financial or digital records through legal process. In some cases, investigators may also contact family members, friends, or other third parties.
Most investigations include at least one attempt to question the service member. It is also common for investigators to seize a personal cell phone or other electronic devices for forensic examination, which can include reviewing messages, call logs, location data, and stored media.
Law Enforcement Interrogations
INTERROGATIONS: RIGHTS AND COMMON PITFALLS
One of the most critical—and dangerous—phases of a military criminal investigation is the interrogation. Service members are often caught by surprise and ordered to be questioned by CID, NCIS, or OSI (referred to here as the “agency”). However, regardless of being ordered to go with the agency to their station you are not required to speak to them - you have the right to remain silent and the right to consult with defense counsel before answering any questions. These rights apply regardless of rank or duty status.
Initial Engagement: After the command orders you to report to the agency, you are typically brought into their office in a professional and controlled manner. You may be required to empty your pockets, pass through a metal detector, be fingerprinted, and provide a cheek swab for DNA. This information is entered into military and federal law enforcement databases, even though you are not placed in handcuffs or confinement.
Interrogation Room: You will then be placed in an interrogation room equipped with cameras and observation capability, often behind two-way mirrors. You may be left alone for an extended period of time—sometimes for hours—while investigators observe your demeanor and behavior. When investigators enter, the interaction often begins informally. They may attempt to build rapport, find common ground, and put you at ease. They frequently minimize the seriousness of the situation or suggest that cooperation will “help clear things up.” Statements such as “we’re just the fact finders,” “we just want your side of the story,” or “we’ll put a good word into your command” are commonly used to encourage service members to speak without legal advice. These statements are strategic and are designed to elicit information.
Investigator Goals: Even if you are innocent, investigators are not there to let you simply explain the situation and leave. They are trained to obtain statements, test inconsistencies, and develop evidence. Interviews may last for many hours and may extend late into the night or early hours in the morning. Investigators are permitted to use deception and often do so, including claiming they have evidence that does not exist in order to provoke a response. The objective is not to determine innocence, but to gather information against you. The safest course is not to engage. Invoke your right to remain silent and your right to an attorney and end the interrogation.
Rights Advisement: At some point, investigators will advise you of your rights and present a written form to sign, often accompanied by statements such as, “you are not accused of anything, you are just under suspicion.” At that moment, you must decide whether to invoke your rights or waive them and continue the interview. The default option should be to invoke your right to remain silent and your right to counsel and consult an attorney before engaging with law enforcement any further.
Invocation of Rights: If you invoke your right to silence alone, investigators may attempt to continue questioning indirectly. If you invoke your right to an attorney, all questioning must cease and you must be returned to your command. The request must be clear and unequivocal, such as: “I want a lawyer.” Invoking your rights cannot be used against you, even if it feels uncomfortable or uncooperative. Statements such as “should I get a lawyer?” or “do I need a lawyer?” are not sufficient and may be used to continue questioning. Once a statement is given, it significantly increases the difficulty—though not impossible with the right attorney—of limiting its impact, even if it was incomplete, inaccurate, or taken out of context.
No Consent: Another common pitfall is consenting to searches of phones, computers, cloud accounts, or residences. Digital evidence frequently becomes the centerpiece of a case, and voluntary consent often eliminates otherwise viable legal challenges. What begins as a narrow inquiry can quickly expand into additional allegations based on unrelated material discovered during a consensual search. A consent to search opens up the scope of search without limitation. For example, a consent to a phone search related to one allegation will authorize a search of the entire phone, and may lead to entirely different charges.
Early legal guidance is often the difference between a case that escalates toward a general court-martial and one that does not. Decisions made during the investigation phase—particularly during interrogations—can shape the entire trajectory of the case.
Two default rules apply in every investigation:
1. Consent to nothing.
2. No matter what is said, respond with: “I want a lawyer.” Even if it feels awkward or uncomfortable.
Being "Flagged" or placed on "Legal Hold"
When a service member is under a law enforcement investigation, the command is required to take administrative steps to prevent certain personnel actions from moving forward while the matter is pending. These measures are often described informally as being “flagged” or placed on “legal hold,” though the terminology and mechanics vary by branch.
Regardless of the name, the purpose is the same: to ensure the service member remains available for investigation or potential disciplinary action and to prevent career-impacting decisions from being finalized before the case is resolved.
WHAT THIS MEANS IN PRACTICE
When a flag or legal hold is in place, a service member may be restricted from:
- PCS or separation
- Promotion or advancement
- Awards or favorable personnel actions
- Certain reenlistment or retirement processing
Importantly, a flag or legal hold is administrative, not punitive – although it may feel like it. It does not mean guilt has been determined, but it can significantly affect career progression while the investigation is ongoing.
HOW THIS WORKS BY BRANCH
Army
In the Army, this is most commonly referred to as a “flag.” A flag may be initiated when a service member is under investigation or facing possible adverse action. While flagged, favorable personnel actions—such as promotions, awards, or certain transfers—are suspended until the matter is resolved.
Air Force and Space Force
The Air Force and Space Force typically use administrative holds or assignment limitations rather than the term “flag.” When a service member is under investigation, the command may delay PCS orders, promotions, or separations until legal review is complete.
Navy and Marine Corps
In the Navy and Marine Corps, service members may be placed on a “legal hold.” This often occurs when an investigation is pending and the command needs to ensure the member remains available for questioning, potential charges, or further proceedings. Legal holds frequently affect separation, retirement, or transfer timelines.
Coast Guard
The Coast Guard uses similar administrative mechanisms to restrict transfers, separations, or favorable actions while an investigation is pending. Although terminology may differ, the functional impact is comparable to a legal hold in other branches.
Transferability
Flags and legal holds are administrative actions imposed by the command, not something a service member applies for or elects. When authorized, the decision to impose a flag or legal hold—and whether it may transfer to a gaining command—is made by command authorities in accordance with service-specific regulations. Transferability is typically limited to lower-level or administrative matters that can continue under a new command, while more serious criminal investigations or cases likely to result in court-martial generally require the service member to remain assigned until the matter is resolved. A service member may request clarification of their status, but does not control whether a hold is imposed or transferred.
Whether a transfer is beneficial is a separate question. In practice, a gaining command will often be aware of the pending matter and may view a service member who arrives under investigation with heightened scrutiny.
Cell Phones and Digital Evidence
In modern military investigations, digital evidence is often a primary focus. Investigators frequently seek access to cell phones and other electronic devices early in the process.
Once seized, a device may be searched for:
- Text messages and call history
- Emails and social media communications
- Photos, videos, and stored files
- Location data and application usage
Digital evidence can remain relevant long after an investigation concludes, even if no charges are ultimately filed.
Relationship to Command Action
Your command will not give you routine updates, because they often are not involved. Law enforcement investigations can occur alongside command involvement, although rarely. The command’s involvement is generally limited to updated briefings. Information gathered by investigators may be shared with command and used to support administrative action, even when criminal charges are not pursued. However, details are never shared with the accused until adverse action is taken, as this could compromise the investigation.
Command investigations will be referred to law enforcement if required by regulation.
The Bottom Line
A law enforcement investigation is not a routine administrative step. It is a criminal process governed by regulation and designed to determine whether disciplinary or prosecutorial action is warranted.
If law enforcement is involved, what happens during the investigation phase may matter more than anything that comes later.