An arson investigation is the structured process trained investigators use to determine where a fire started, what caused it, and whether someone set it on purpose. The work combines fire science with criminal detective work, follows a defined scientific method, and can produce evidence that supports a federal sentence ranging from five years in prison to the death penalty depending on what the fire did.
Who Runs the Investigation
No single person handles an arson case alone. The work usually begins with a fire investigator, sometimes called a fire marshal, who has training in fire behavior, building construction, and electrical systems. This is the person who walks the debris, reads the burn damage, and forms the initial conclusions about where and how the fire started. Professional qualifications for the role are governed by NFPA 1033, which requires demonstrated competence in fire science, scene safety, evidence collection, and the scientific method.
When the evidence points toward a crime, law enforcement detectives step in for the criminal side of the work: interviewing suspects, pulling financial records, obtaining warrants, and building a case for prosecution. Forensic laboratory scientists analyze samples from the scene to identify accelerants or other chemical evidence.
The ATF’s Role
The Bureau of Alcohol, Tobacco, Firearms and Explosives deploys Certified Fire Investigators who are special agents with advanced training in fire and arson-related crimes. These agents examine scenes, collect evidence, serve as lead criminal investigators on complex cases, and provide expert courtroom testimony on origin and cause determinations.1Bureau of Alcohol, Tobacco, Firearms and Explosives. Certified Fire Investigators For large or high-profile fires, ATF can activate a National Response Team of investigators, forensic chemists, engineers, canine handlers, and digital media specialists who work alongside local agencies.2Bureau of Alcohol, Tobacco, Firearms and Explosives. National Response Teams
Accelerant Detection Dogs
Specially trained dogs can detect traces of gasoline, diesel fuel, paint thinner, acetone, and other ignitable liquids at a scene far faster than any instrument. ATF maintains 62 accelerant detection canine teams partnered with state and local agencies across the country.3Bureau of Alcohol, Tobacco, Firearms and Explosives. Canine Training Center When a dog alerts on a specific area, investigators collect samples from that spot for laboratory confirmation. The dogs don’t replace lab analysis, but they narrow the search and help investigators focus evidence collection where it matters.
The Scientific Method Behind the Work
Fire investigation is not guesswork. The field’s governing methodology comes from NFPA 921, the Guide for Fire and Explosion Investigations, which requires the scientific method at every stage. Investigators recognize that a fire occurred, define the problem, collect data from the scene and witnesses, analyze that data, develop a hypothesis, and then rigorously test that hypothesis against all available evidence.4United States Fire Administration. Fire Investigation: First Responders – Student Manual
The testing step is where many people misunderstand the work. The investigator’s job is not to confirm a hypothesis but to try to disprove it, using thought experiments, physical testing, reference literature, fire modeling, and appliance examinations. If a hypothesis survives every attempt to knock it down, it stands. If two competing hypotheses both survive and neither can be eliminated, the cause is classified as undetermined. Investigators who skip this process or start with a conclusion and work backward produce exactly the kind of flawed testimony that has led to wrongful convictions.
Origin First, Then Cause
Before an investigator can determine what caused a fire, they must figure out where it started. The origin limits the area over which potential ignition sources need to be evaluated. Investigators develop origin hypotheses from analyzed burn pattern data, test each one against the physical evidence, and only the areas that survive that testing become part of the official origin determination.
Once the origin is established, the investigator evaluates every potential ignition source within that area. A complete cause hypothesis includes four elements: the ignition source, the first material that caught fire, the oxidant (usually air), and the sequence of events that brought them together. The cause is considered determined only when exactly one hypothesis survives testing against all case data.
What Investigators Look For at the Scene
The examination starts before anyone walks through the debris. First responders note anything unusual they saw during suppression: unusual flame colors, the speed of the spread, locked doors, disconnected smoke detectors, or the smell of accelerants. Once the scene is secured to prevent contamination, investigators work through it systematically, typically moving from the least damaged areas toward the most damaged, so fragile evidence in heavily burned zones is preserved for last.
Reading Burn Patterns
Burn patterns are the physical record a fire leaves behind, and reading them correctly is one of the most important skills in the work.
- V-patterns. Fire rising against a vertical surface creates a V-shaped mark whose lines can often be traced back toward the point of origin. A wider V generally means the material burned for a longer period.
- Low burn patterns. Damage concentrated near the floor may suggest an accelerant pooled there, but post-flashover conditions can also produce low burns. This is one of the most commonly misinterpreted patterns.
- Linear or trailing patterns. Elongated burn marks along a floor can indicate that someone intentionally spread fuel from one area to another.
- Multiple origin points. Two or more separate, unconnected areas where fire clearly started independently is one of the strongest indicators of an intentionally set fire, since accidental fires almost always have a single origin.
- Irregular or pool-shaped patterns. Curved or irregular marks on flooring can result from ignitable liquids, but also from melted plastics or radiant heat from burning debris above.
No single pattern proves arson by itself. Flashover, the moment when an entire room’s contents ignite simultaneously from radiant heat, can mimic many patterns historically associated with deliberate fires. Modern fire science has overturned decades of old-school indicators that once led to wrongful convictions, which is why the NFPA 921 methodology matters so much.
Evidence Collection
Physical evidence falls into two categories: materials that suggest how the fire was started and materials that suggest why. On the “how” side, investigators look for remnants of ignition devices like timers, matches, or lighters in unusual locations, and they collect samples from areas where accelerants may have been used.5National Institute of Justice. A Guide for Investigating Fire and Arson On the “why” side, they note forced entry, tampered fire suppression systems, removed valuables, or disabled alarms.
Samples suspected of containing accelerants must be sealed in airtight containers, typically unlined metal cans similar to paint cans, glass jars with screw caps, or heat-sealed nylon bags, with about one-third air space above the debris. Ordinary plastic and paper bags are useless because volatile compounds escape through the material. Proper packaging preserves the evidence; sloppy packaging can destroy a case before it starts.
Laboratory Analysis
The standard laboratory technique for identifying accelerants is gas chromatography coupled with mass spectrometry, which separates volatile compounds extracted from the sealed container and identifies each one by its molecular signature. Lab results can confirm the presence of gasoline, diesel, paint thinner, or other specific products, but the results require careful interpretation. Many common household materials produce similar chemical compounds when they burn, so the forensic chemist must distinguish between residues from an intentionally applied accelerant and residues from carpet, furniture, or building materials that burned in the normal course of the fire.
How the Fire Gets Classified
At the end of the investigation, the fire’s cause is placed into one of four categories.
- Accidental. The fire resulted from unintentional causes like electrical malfunctions, cooking mishaps, or heating equipment failures, with no deliberate human act to start or spread it.
- Natural. The fire was caused by events like lightning with no human involvement.
- Incendiary. The fire was deliberately set by someone who knew it should not be set. This classification triggers criminal prosecution.
- Undetermined. The investigation could not establish the cause to a reasonable degree of certainty. This does not mean the fire was accidental; it means the evidence was insufficient to draw a conclusion either way.
An undetermined classification is not a failure. Fires are inherently destructive to their own evidence, and an honest “undetermined” finding reflects scientific integrity. Investigators who feel pressure to choose between accidental and incendiary when the evidence doesn’t clearly support either are the ones most likely to produce flawed conclusions.
Common Motives Investigators Pursue
While the scene tells investigators how a fire started, the motive investigation tells them why. Establishing motive is not legally required for a conviction, but juries expect it, and it often points investigators toward suspects.
- Insurance fraud. The most common profit-driven motive. A property owner burns a failing business or underwater property to collect insurance proceeds. Financial records showing debt, declining revenue, or recently increased coverage flag this.
- Concealing another crime. Setting a fire to destroy evidence of a burglary, murder, or financial fraud.
- Revenge. Emotionally driven fires targeting a specific person or property after a personal conflict, job termination, or relationship dispute.
- Vandalism. Often involves juveniles targeting abandoned buildings, vehicles, or dumpsters, sometimes under peer pressure.
- Extremism. Fires set to advance a political, religious, or social agenda, including attacks on houses of worship, businesses, or government property.
Investigators build the motive picture through financial records, interviews with the property owner and associates, digital evidence like security footage and phone records, and social media activity. A property owner who removed irreplaceable family photos the week before a fire, or who recently doubled coverage on a money-losing business, will face pointed questions.
Federal Criminal Penalties
Arson involving property used in interstate or foreign commerce is a federal crime under 18 U.S.C. ยง 844(i). The penalties escalate sharply based on the consequences of the fire.
- Property damage only. A minimum of 5 years and a maximum of 20 years in federal prison.
- Personal injury results. A minimum of 7 years and a maximum of 40 years.
- Death results. Imprisonment for any term of years, life imprisonment, or the death penalty.6Office of the Law Revision Counsel. 18 US Code 844 – Penalties
Federal courts interpret the “interstate commerce” element broadly. Hotels, rental properties, restaurants, office buildings, and apartment complexes receiving out-of-state tenants or supplies have all been found to satisfy the requirement. State arson charges carry their own penalties, and most states classify arson as a felony with sentences that increase when the fire involves occupied buildings or causes injury.
Why These Cases Are Hard to Prove
Arson has one of the lowest clearance rates of any serious crime, and the reason is built into the crime itself: fire destroys the evidence. By the time investigators arrive, the ignition source may be consumed, accelerant residues partially evaporated, and structural elements collapsed into an undifferentiated pile of debris. Water from suppression further degrades what survived the flames.
Courtroom challenges compound the difficulty. Expert testimony on origin and cause must meet admissibility standards, and defense attorneys increasingly challenge investigators whose methods don’t align with current NFPA 921 guidelines. The evolving understanding of fire science has revealed that several indicators once treated as definitive proof of arson, such as certain floor burn patterns and crazed glass, actually occur in accidental fires that reach flashover. Cases built on outdated science have been overturned on appeal.
Circumstantial evidence often fills the gaps that physical evidence cannot. Financial motive, opportunity, witness testimony, and digital records become essential when the scene alone doesn’t tell the full story. The strongest prosecutions combine solid scene analysis with thorough criminal investigation, which is why the most effective task forces pair fire investigators with law enforcement detectives from the start.7Bureau of Alcohol, Tobacco, Firearms and Explosives. Arson