Under Military Investigation? The First 72 Hours Matter

You just learned CID, NCIS, AFOSI/OSI, CGIS, your command, or another military authority is investigating you.

Your instinct may be to start fixing the problem immediately.

Call the person who made the allegation.

Ask coworkers what they told investigators.

Explain yourself to your commander.

Text someone who was there.

Delete an embarrassing conversation that you think will be misunderstood.

Agree to an interview because you have “nothing to hide.”

Hand over your phone because refusing feels suspicious.

Those impulses can turn the first few hours of an investigation into some of the most consequential hours of the case.

There is no universal legal “72-hour rule” requiring a service member to take a particular action within three days. But the first days after discovering an investigation can matter enormously because evidence is being preserved, witnesses are talking, investigators may be making contact, and you may be asked to make decisions that cannot simply be undone later.

A statement cannot be unsaid.

A deleted message may create a new problem.

Consent already given to a search cannot be erased merely because you later regret the decision.

And favorable evidence that disappears may be much harder to reconstruct months later.

Your objective during the first 72 hours is not to out-investigate the government. It is to avoid creating unnecessary damage while preserving the information your defense may need.

Online booking is the quickest way to reserve a consultation with our military law team. The consultation is free, and there is no obligation to retain National Security Law Firm.

Why the First 72 Hours Look Different at National Security Law Firm

An early military investigation is not simply an investigator-versus-service-member problem.

The evidence being collected now may later pass through multiple parts of the military and federal government.

Investigators may develop the facts.

Military prosecutors or Special Trial Counsel may evaluate criminal charges.

Commanders may consider discipline or career action.

Military judges may later decide whether statements, searches, or other evidence can be used at trial.

Security-clearance officials may evaluate the same conduct under an entirely different standard.

And even if no charges are ever filed, investigative records can create separate titling or indexing issues.

NSLF was built to see those connections early.

Our team includes former military judges who have evaluated evidence and credibility from the bench; former military prosecutors and defense counsel who understand how UCMJ cases are built and attacked; former U.S. Attorney Duane “DAK” Kees, who led federal prosecutions and previously served on both sides of military criminal cases; senior military officers and commander advisers who understand how investigative information can become career action; and attorneys with DoD, intelligence, federal-prosecution, and national-security experience.

That experience matters because the same fact can look very different depending on who is evaluating it.

The investigator asks: What happened?

The prosecutor asks: What can we prove?

The commander asks: What should happen to this service member?

The military judge asks: Is this evidence lawful, admissible, credible, and sufficient?

The clearance adjudicator asks: What does this say about judgment, reliability, or trustworthiness?

We want those questions considered before you make decisions that affect the answers.

NSLF also handles the related proceedings that can grow out of an investigation—including military investigations, court-martial defense, military administrative actions, security-clearance matters, and military titling and investigative-record relief.

And significant matters can receive broader strategic review through our Attorney Review Board, allowing lawyers with different government, prosecution, defense, military-leadership, judicial, and national-security backgrounds to pressure-test the case from more than one perspective.

The government may have an investigative team. Your defense should not be limited to one point of view.

★★★★★ 4.9 Stars From 300+ Google Reviews

Service members and federal clients nationwide have trusted National Security Law Firm when their careers, reputations, clearances, and futures were at stake.

The First Few Minutes: Do Not Turn Surprise Into Evidence

Learning that you are under investigation can trigger an immediate need to explain.

Resist the urge to make major decisions before you understand what is happening.

If an investigator unexpectedly contacts you, start by identifying:

the investigator’s name;
the agency;
contact information;
what the investigator is requesting;
whether an interview is being requested;
whether the investigator says you are a witness, subject, or suspect;
whether the interview is voluntary;
whether investigators want documents or electronic devices; and
whether you are being advised of rights.

You do not need to invent an explanation on the spot.

You should not lie.

You should not destroy evidence.

And if the questioning concerns suspected misconduct by you, understand your rights before deciding whether to give a substantive statement.

If You Are Read Article 31 Rights, Pay Attention to What Just Changed

Article 31 protections apply during the investigative stage. Formal UCMJ charges do not have to exist first.

Under Article 31(b), UCMJ, a person subject to the UCMJ generally may not interrogate or request a statement from an accused or person suspected of an offense without first informing that person of the nature of the accusation, the right not to make a statement, and that a statement may be used as evidence at a court-martial.

The Military Rules of Evidence go further. MRE 305 defines interrogation to include formal or informal questioning when an incriminating response is sought or is a reasonable consequence of the questioning. It also addresses invocation of rights, counsel, and waiver. A waiver must be made freely, knowingly, and intelligently.

So if an agent begins reading you rights and puts a waiver in front of you, do not think:

“This is just paperwork before they let me explain.”

Think:

“The government is telling me I am accused or suspected of an offense and wants my statement.”

That does not automatically mean you should never speak.

It means the decision deserves more analysis than the few seconds between the warning and the investigator asking:

“Do you understand your rights?”

Read our Article 31 Rights Lawyer page if investigators have asked you to waive those protections.

If Investigators Say the Interview Is “Voluntary,” Do Not Confuse Voluntary With Harmless

You may hear:

“We just want your side.”

“You aren’t under arrest.”

“This is completely voluntary.”

“We just have a few questions.”

“You can clear this up right now.”

A voluntary interview may genuinely be voluntary.

But voluntary does not mean inconsequential.

Your answers may be compared with:

witness statements;
text messages;
photographs;
videos;
phone records;
location information;
financial records;
medical records;
access logs;
social-media content; or
other evidence investigators already possess.

You may think the agent is asking a simple question.

The agent may be testing a fact against evidence you have never seen.

That is why the correct question is not simply:

“Can they make me go?”

It is:

“What does agreeing to answer accomplish—and what risk does it create?”

If that decision is immediately in front of you, review Should You Talk to Military Investigators?.

Official Navy Defense Service Office guidance similarly advises suspected service members to seek legal advice before making official or unofficial statements and explains rights to silence and counsel during covered questioning.

If Investigators Want Your Phone, Stop and Identify What They Are Actually Asking

A request involving your phone can be as important as the interview itself.

An agent may ask:

“Can we look at your phone?”

“Would you mind unlocking this?”

“Can you consent to a download?”

“Can we take the phone for a little while?”

Those questions are not necessarily the same as an investigator presenting a warrant or military search authorization.

The current Manual for Courts-Martial recognizes searches conducted pursuant to warrants and military search authorizations, and MRE 315 governs probable-cause searches.

DoD policy also establishes procedures governing access to stored electronic communications and related records in law-enforcement investigations. Depending on what information is sought, legal process can include warrants, court orders, administrative process, military authority, or consent.

If investigators ask for your phone during the first hours of a case:

do not physically interfere with lawful investigative activity;
do not destroy or alter anything;
determine whether they are asking for consent or asserting legal authority;
ask for a copy of any warrant or authorization you are permitted to receive;
do not assume you must voluntarily provide permission merely because the request comes from an investigator; and
obtain legal advice about passwords, device access, and the scope of any requested consent rather than guessing.

The deeper search-and-seizure rules can become complicated quickly.

MRE 311 also makes clear that exclusion of evidence from an unlawful search is not automatic; specific requirements and exceptions apply.

The First 24 Hours: Preserve—Do Not Curate—the Evidence

One of the most important things you can do early is preserve information.

There is a major difference between:

preserving evidence for your defense

and

trying to clean up the record.

Do not:

delete messages;
wipe devices;
alter photographs;
destroy documents;
edit records;
ask someone else to delete communications;
create fake documentation;
manufacture screenshots;
coordinate stories; or
conceal evidence.

Even if a message is embarrassing, incomplete, or easily misunderstood, destroying it can create consequences far worse than explaining it.

At the same time, do not assume the government will automatically find every piece of evidence that helps you.

Potentially important defense information may include:

texts showing context around the allegation;
photographs;
videos;
emails;
receipts;
travel records;
duty rosters;
access records;
location information;
calendar entries;
contemporaneous notes;
medical documentation;
financial records; and
names of witnesses who may have relevant information.

The first defense task is often preservation, not persuasion.

Do Not Start Interviewing the Witnesses Yourself

Another common first-day reaction is:

“I need to find out what everybody is saying.”

That can create substantial risk.

Calling the complainant to demand an explanation is rarely the same thing as collecting neutral information.

Messaging witnesses about what they should remember can look very different later than it feels in the moment.

A conversation intended to “clear things up” can be characterized as:

pressure;
retaliation;
intimidation;
witness influence;
coordination;
obstruction; or
consciousness of guilt.

That does not mean favorable witnesses should be ignored.

It means witness development should be thoughtful.

A lawyer can help determine who matters, what evidence should be preserved, and how useful information can be obtained without creating a second allegation.

Do Not Conduct the Investigation in Group Chats or on Social Media

When a serious allegation starts circulating, service members often begin discussing it with friends, coworkers, or members of the unit.

Those conversations can become evidence too.

Avoid turning the investigation into:

a unit group chat;
a text-message debate;
a social-media defense campaign;
a public accusation against the complainant;
an effort to identify who “snitched”; or
a series of emotional explanations to multiple people.

Every additional explanation creates another version of events that may later be compared with:

your investigative statement;
other witnesses;
digital records; and
testimony.

You do not need to litigate your case in the barracks, workplace, squadron, ship, or group chat.

★★★★★ “No Matter the Time or the Day, They Are There for You.”

“No matter the time or the day, they are there for you. Carl and Cara were very patient with me and never made me feel that the questions I asked were dumb. They carefully explained every question I had and made sure that I understood everything before we ended each session.”

— C.M., Verified Google Review

Every matter depends on its own facts. Past results do not guarantee a similar outcome.

During the First Day, Determine What Kind of Investigation You Are Actually Facing

“I’m under investigation” can describe very different processes.

A criminal investigation by CID is not the same as an AR 15-6 investigation.

An NCIS investigation is not the same as an Inspector General inquiry.

An AFOSI investigation is not the same as a command-directed investigation.

A Family Advocacy Program process is not the same as a court-martial investigation, even though multiple processes may arise from the same allegation.

Identifying the process matters because it affects:

who is gathering the evidence;
what procedural rules apply;
what rights may apply;
who receives the findings;
what consequences may follow; and
what counsel can realistically do.

If a criminal investigative agency is involved, our dedicated resources explain the differences:

Army CID investigation defense addresses Army felony investigations.

Our NCIS investigation practice addresses Navy and Marine Corps investigations.

Our AFOSI/OSI investigation practice addresses Air Force and Space Force investigations.

And our CGIS investigation practice addresses Coast Guard criminal investigations.

During the First 24 Hours, Write Down What Happened—but Think About Who Will Read It

Memory fades quickly.

If something significant occurred before or during your first investigative contact, preserving your recollection can be valuable.

But do not start drafting a long statement to investigators simply because you are afraid you will forget something.

There is a meaningful difference between:

creating a privileged chronology for your attorney

and

sending an unsolicited narrative to the government.

Counsel may ask you to reconstruct:

when you first learned about the allegation;
who contacted you;
exactly what was said;
whether Article 31 rights were read;
whether you signed anything;
whether you consented to anything;
whether your device was taken;
what witnesses were present;
what evidence may exist;
what communications occurred afterward; and
what deadlines or command actions have already appeared.

That chronology can help counsel understand the problem before deciding whether anything should be communicated outside the attorney-client relationship.

The Next 24 to 72 Hours: Start Thinking Beyond the Interview

The investigation is bigger than one statement.

During the next few days, the defense should begin asking:

What offense may be under investigation?

What evidence probably exists?

What favorable evidence may disappear?

Who are the important witnesses?

Is digital evidence likely to control the case?

Has the government already searched a device?

Is there an Article 31 issue?

Could this become a court-martial?

Could it instead become Article 15, a GOMOR, an adverse evaluation, or separation?

Is a security clearance already at risk?

Could titling or indexing remain even if criminal charges never follow?

That is the difference between reacting to investigative contact and building an early defense strategy.

Why the Government May Already Be Farther Ahead Than You Think

Your first 72 hours may not be the investigation’s first 72 hours.

By the time you discover the case, investigators may already have:

interviewed the complainant;
interviewed other witnesses;
collected records;
preserved messages;
requested forensic work;
gathered video;
obtained financial information;
consulted prosecutors; or
pursued other investigative leads.

Defense Criminal Investigative Organizations operate independently under DoDI 5505.03. The instruction provides that commanders must refer suspected criminal allegations to appropriate law-enforcement organizations, while the decision to initiate a DCIO investigation remains with the investigative organization and its directing authority.

That means your discovery of the investigation is not necessarily the starting gun.

You may be entering a process that has already been moving without you.

What Can a Lawyer Actually Do During the First 72 Hours?

Not every investigation calls for aggressive outward intervention.

Sometimes the smartest immediate action is restraint.

Other cases require quick work.

Depending on the facts, early counsel may:

identify the investigative organization and likely scope of the case;
clarify whether you appear to be a witness, subject, or suspect;
evaluate whether Article 31 or counsel protections apply;
advise whether and how to respond to an interview request;
communicate with investigators when appropriate;
evaluate requests to search or access digital devices;
preserve favorable evidence;
identify witnesses;
reconstruct critical timelines;
identify possible investigative or constitutional issues;
analyze potential UCMJ offenses;
determine whether expert review may eventually be required;
anticipate prosecution or Special Trial Counsel involvement;
prepare for parallel administrative action;
evaluate security-clearance consequences; and
identify possible titling or indexing concerns.

The objective is not to generate activity for its own sake.

The objective is to avoid reaching Day 73 and discovering that an important decision was made on Day 1 without understanding what it meant.

That is why NSLF maintains a dedicated Pre-Charge Military Defense practice for service members whose cases have not yet reached formal charges.

Do Not Assume “No Charges Yet” Means You Should Wait

The absence of a charge sheet can create false comfort.

An investigation may remain open for weeks or months while investigators gather evidence.

No charges today might ultimately mean:

the matter closes without prosecution;
prosecutors request more investigation;
charges are later preferred;
Special Trial Counsel becomes involved;
command pursues Article 15/NJP;
a GOMOR follows;
an administrative separation case begins;
an officer faces a Board of Inquiry;
a clearance issue develops; or
another personnel consequence follows.

The correct response is not to assume the worst.

It is also not to assume nothing is happening.

If you are already in that waiting period, read Under Military Investigation but Not Charged: What Should You Do?.

Your Career May Begin Feeling the Investigation Before the Criminal Case Is Decided

Military investigations can generate consequences outside the courtroom.

Depending on the circumstances, an allegation can affect:

duties;
access;
assignments;
evaluations;
promotion;
retention;
command confidence;
security-clearance eligibility; and
future administrative action.

DoDI 5505.03 expressly contemplates authorized sharing of investigative information for matters including security-clearance eligibility, special access, insider-threat mitigation, and administrative determinations.

So one of the most important early questions may be:

“What happens if I am never court-martialed?”

NSLF’s Military Administrative Actions Lawyers handle downstream career actions, while our Security Clearance Lawyers address parallel personnel-security consequences.

And if an investigation later closes but an investigative record continues to cause problems, our Military Titling Removal practice addresses qualifying record-relief issues.

What If You Already Talked Before You Found This Page?

That happens frequently.

Do not assume you destroyed your defense because you:

answered some questions;
completed an interview;
signed a statement;
denied the allegation;
made admissions;
consented to a search;
handed over a device; or
signed paperwork you did not fully understand.

What matters now is reconstructing exactly what happened.

Tell counsel:

what warnings you received;
what you were told about your status;
whether you requested counsel;
whether the conversation was recorded;
what you said;
what you signed;
what consent you gave;
what investigators took;
whether you were shown evidence; and
what happened immediately afterward.

MRE 305 and MRE 304 establish rules governing the voluntariness and admissibility of statements, while MRE 311 governs challenges to government searches and seizures. Those issues depend heavily on the actual facts.

The fact that something already happened does not mean there is nothing left to evaluate.

What If Investigators Tell You Not to Tell Anyone?

Investigative instructions can vary, and you should not disregard a lawful order.

But do not automatically assume that being told not to discuss the case means you cannot seek legal advice.

The current Military Rules of Evidence recognize rights involving counsel during covered interrogation, and official military defense guidance directs service members to seek legal advice when suspected of misconduct.

If you are uncertain whether an instruction limits a particular communication, obtain legal advice rather than guessing.

What If Your Commander Wants to Talk Before CID Does?

A command conversation can also matter.

Article 31 is not limited to questioning conducted by federal special agents.

The statute applies when a person subject to the UCMJ interrogates or requests a statement from an accused or person suspected of an offense under the circumstances covered by the law. MRE 305 likewise defines interrogation broadly.

Not every conversation with a commander is an interrogation.

But if a commander or other military official begins asking you to explain your own suspected misconduct, do not assume the conversation is legally meaningless simply because CID is not in the room.

What Does Early Military Investigation Representation Cost?

National Security Law Firm offers flat-fee representation for many military investigation matters.

Fees generally range from approximately $1,000 to $3,500, depending on the nature of the investigation, urgency, complexity of the evidence, and scope of representation.

The consultation itself is free and carries no obligation to hire the firm.

An attorney can review what has happened, identify the immediate decisions in front of you, explain what representation may accomplish at the current stage, and tell you the applicable fee before you decide whether to proceed.

★★★★★ “Absolutely Worth Every Penny.”

“Absolutely worth every penny. Carl and Cara were extremely responsive to calls and email day or night. I felt I was represented by the best, given excellent advice and everything was brought to 100 percent best case solution. Thanks guys!”

— R.L., Verified Google Review

Every matter depends on its own facts. Past results do not guarantee a similar outcome.

Frequently Asked Questions

Is there actually a 72-hour legal deadline after learning I am under investigation?

No. There is no universal UCMJ rule requiring every service member to take a particular action within 72 hours of discovering an investigation. The first 72 hours are important as a practical strategy window because interviews, evidence preservation, device issues, witness contact, and other decisions can arise quickly.

Should I immediately call CID, NCIS, OSI, or CGIS to find out what they have?

Not necessarily. There may be circumstances in which contact is appropriate, but making an unsolicited statement before understanding your status and the allegation can create unnecessary risk.

Should I tell my commander everything immediately?

That depends on why the commander is asking, whether the conversation involves suspected misconduct, whether Article 31 applies, and whether there are separate reporting obligations. Do not assume every command conversation is either harmless or prohibited.

What if investigators want to interview me today?

You should understand whether you are a witness, subject, or suspect; whether the interview is voluntary; whether Article 31 rights apply; and what the strategic consequences of speaking may be before making a substantive statement.

Can I refuse to consent to a phone search?

Consent and compulsory search authority are different legal concepts. Investigators may have or obtain other lawful authority to search or seize a device. Do not obstruct lawful action, but understand whether investigators are requesting consent before voluntarily providing it.

Should I delete private messages that have nothing to do with the allegation?

No. Once you know an investigation exists, deleting or altering potentially relevant material can create serious additional problems. Preserve evidence and obtain legal advice about privacy and scope issues.

Can I call witnesses to find out what they told investigators?

Doing so can create risk, particularly if the communication could later be interpreted as pressure, retaliation, coordination, or witness influence. Discuss witness strategy with counsel first.

What if I already gave investigators a statement?

A lawyer can still evaluate the warnings, waiver, circumstances of questioning, what you said, how it was recorded, and how it fits with the remaining evidence.

Can investigators keep working if I do not give a statement?

Yes. Investigators may continue gathering evidence from witnesses, records, devices, forensic testing, and other lawful sources.

Can I be charged without ever speaking to investigators?

Yes. A confession is not required if the government develops other evidence supporting formal charges. See Can You Be Charged Without Talking to Military Investigators?.

What if three days have already passed?

Do not assume you missed your chance to protect yourself. “72 hours” is not an expiration date. The investigation may continue for weeks or months, and important defense decisions may still remain.

Official Resources

Article 31, UCMJ — 10 U.S.C. § 831
The federal statute governing compulsory self-incrimination and required warnings before covered military questioning. Read Article 31 in the U.S. Code

Manual for Courts-Martial — Current Publications and Updates
The Joint Service Committee currently identifies the 2024 MCM as the current complete edition and separately publishes later amendments, including Executive Order 14130.
View Current MCM Publications and Updates

DoDI 5505.03 — Initiation of Investigations by Defense Criminal Investigative Organizations
The Department-wide policy governing initiation, independence, conduct, reporting, and authorized use of Defense criminal investigations. Read DoDI 5505.03

DoD Titling and Indexing Policy — Change 1 Effective July 9, 2026
The current DoD framework governing titling, indexing, review, correction, expungement, and other qualifying investigative-record relief.
Review the Current Titling and Indexing Policy

The First 72 Hours Are About Protecting Tomorrow’s Options

You do not have to solve the entire investigation today.

You do not have to know what every witness said.

You do not have to predict whether charges will be filed.

And you do not have to make a rushed statement merely because somebody else wants an immediate answer.

What you can do is protect the decisions that remain yours.

Preserve the evidence.

Understand your status.

Know your Article 31 rights.

Distinguish a request for consent from compulsory authority.

Avoid unnecessary witness contact.

Think about the criminal case and the career, clearance, and record consequences.

And get advice before a decision made in the first few hours becomes evidence that follows you for months or years.

National Security Law Firm brings together former military judges, former government prosecutors, military defense counsel, senior military leaders and commander advisers, federal and national-security experience, connected military and clearance practices, and collaborative attorney review because an investigation can move through all of those systems before it is over.

If you just learned that you are under investigation, online booking is the fastest way to speak with our military law team.

There is no obligation to retain National Security Law Firm after your consultation.

★★★★★ 4.9 Stars From 300+ Google Reviews

Attorney Reviewed By: Katherine O’Brien
Last Reviewed and Updated: September 1, 2026