The clearest way to know if the feds are watching you is to watch for the concrete events a federal investigation produces: a target letter from a U.S. Attorney’s office, a grand jury subpoena, agents at your door with a search warrant, a notice from your bank about a government request for your records, or word from colleagues and family that the FBI came asking questions. Most people under federal scrutiny find out through one of these signals rather than by spotting surveillance. Some federal tools, especially electronic ones, are designed so you never find out at all. Recognizing the signs that do surface — and knowing what not to do once you see them — is what shapes how the next months go.
A Target Letter Is the Most Direct Sign
A target letter is an official letter from a U.S. Attorney’s office informing you that you are the target of a grand jury investigation. It means prosecutors already have substantial evidence linking you to a crime and consider you a likely defendant. Department of Justice policy requires a target letter whenever a target is subpoenaed to testify before a grand jury. The letter advises you of your right to obtain a lawyer, your right to decline to answer questions that could incriminate you, and the fact that anything you say can be used against you later.1United States Department of Justice. Justice Manual 9-11.000 – Grand Jury
DOJ sorts people involved in federal investigations into three categories, and knowing which one you’re in changes everything. A target is someone prosecutors believe committed a crime and plan to charge. A subject is someone whose conduct falls within the investigation’s scope but who hasn’t been identified as a likely defendant. A witness has relevant information but isn’t personally under suspicion. These categories move: a subject can become a target as evidence develops, and a witness can be reclassified.1United States Department of Justice. Justice Manual 9-11.000 – Grand Jury
If you receive a target letter, get an experienced federal defense attorney immediately. Prosecutors have already invested significant resources and believe they can build a case. Initial retainer fees for federal criminal defense typically range from $5,000 to $50,000 depending on complexity and the attorney’s experience.
A Grand Jury Subpoena Means They’re Building a Case
A grand jury subpoena compels you to produce documents, testify before a grand jury, or both. The legal threshold is lower than for a search warrant: prosecutors only need to show the information is relevant to the investigation, not probable cause that you committed a crime. So a subpoena doesn’t automatically make you a target — witnesses and subjects get them too. But it does mean federal prosecutors are actively building a case and believe you have something they need.
Ignoring a subpoena is a serious mistake. A court can hold you in contempt for failing to comply without a valid legal excuse.2Cornell Law Institute. Federal Rules of Civil Procedure Rule 45 – Subpoena
The Fifth Amendment protects you from being forced to give testimony that incriminates you, and you can invoke it for specific questions whose answers could expose you to criminal liability. Documents are more nuanced. The contents of records you already created generally aren’t protected, but the Supreme Court has recognized that the act of producing documents in response to a subpoena can itself be protected, because handing over specific records confirms they exist, that they’re authentic, and that you had control over them.3United States Department of Justice. Civil Resource Manual 154 – Appeal Brief Required Records A lawyer can tell you when that distinction matters and whether to challenge the subpoena’s scope.
Agents at Your Door
Federal agents showing up at your home or business with a search warrant is unambiguous. A judge only issues one after finding probable cause that evidence of a crime will be found at the specific location to be searched. The Fourth Amendment demands that the warrant describe both the place to be searched and the items to be seized with specificity.4Legal Information Institute (LII) / Cornell Law School. Fourth Amendment
Agents typically arrive early in the morning and present the warrant at the door. The warrant and its supporting affidavit outline what they’re authorized to search for and where they can look. You cannot stop a valid search. You do have the right to observe, to remain silent, and to contact a lawyer. Do not physically interfere, argue with agents, or try to move or hide anything. Each of those can produce separate criminal charges.
Federal agents also sometimes visit without a warrant, hoping you’ll voluntarily let them in or agree to talk. You are under no obligation to do either. The Fourth Amendment’s protections against warrantless searches remain fully intact at your door, and consent is one of the recognized exceptions to the warrant requirement — meaning if you invite agents inside or agree to a search, whatever they find is fair game.4Legal Information Institute (LII) / Cornell Law School. Fourth Amendment Politely declining and asking to speak with a lawyer first is almost always the better choice.
Notices from Your Bank
Notifications from your bank about unusual account activity, account restrictions, or government requests for your records can signal federal interest in your finances. Several reporting and notice systems can be in play, and they behave differently.
Banks and other financial institutions must file Suspicious Activity Reports with the federal government when they detect transactions that look like they could involve money laundering, fraud, or other financial crimes. Transactions as low as $5,000 can trigger a SAR if the bank suspects illegal activity. Here’s the catch: SARs are confidential. Your bank is legally prohibited from telling you that a SAR was filed or even that one exists. If the government follows up on a SAR by requesting your records, that’s when signs may surface. The SAR itself stays hidden.5eCFR. 12 CFR 208.62 – Suspicious Activity Reports
Separately, any business that receives more than $10,000 in cash, whether in a single payment or in installments over the course of a year, must report it to the IRS and FinCEN on Form 8300. This covers real estate purchases, car sales, loan repayments, rental payments, and similar transactions.6Internal Revenue Service. IRS Form 8300 Reference Guide These filings alone aren’t a sign of investigation. A pattern of cash transactions can draw attention, though, especially if they appear structured to stay just under the $10,000 threshold, which is a federal crime called structuring.
When federal agencies want your bank records directly, the Right to Financial Privacy Act generally requires them to notify you. For a subpoena or court order, the government must serve you with a copy and a written notice explaining what records are being sought and why, and give you an opportunity to challenge the request in court. For a search warrant, the government has up to 90 days after executing the warrant to mail you a copy and a notice of your rights.7Office of the Law Revision Counsel. 12 USC Ch. 35 – Right to Financial Privacy Getting either notice means the government has already accessed, or is actively seeking, your financial records.
Word That People You Know Were Interviewed
When colleagues, business partners, employees, friends, or family tell you that federal agents came asking questions about you, that’s a strong indicator of an active investigation. Agents interview people in the target’s orbit to gather information, corroborate evidence, and identify additional witnesses, all without tipping off the person they’re actually focused on.
These interviews are carefully designed. Agents will often frame the conversation as routine fact-finding to encourage cooperation and won’t reveal the full scope of the investigation. They may show up at workplaces, which can create professional complications long before any charges are filed. If someone tells you agents came around, resist the urge to contact other people who might have been interviewed. That can look like witness tampering, which carries its own federal penalties.
Anyone approached by federal agents should know they have no obligation to speak without a lawyer present. Being cooperative doesn’t require being unrepresented. And anything said to a federal agent, even in a casual-seeming conversation, can be used in the investigation and can form the basis of separate charges if the statements turn out to be false.
Physical Surveillance You Might Notice
Physical surveillance is resource-intensive. Federal agencies don’t deploy teams to follow someone unless the investigation is serious and other methods haven’t produced what they need. If you’re noticing the same unfamiliar vehicles parked near your home or workplace on different days, or the same unfamiliar faces in unrelated locations, those could be signs of surveillance. They are also the kinds of things anxiety can amplify into patterns that aren’t there.
Federal agents conduct physical surveillance in public spaces where the law doesn’t require a warrant because there’s no reasonable expectation of privacy. They may use unmarked vehicles, set up observation points near locations you frequent, or follow you on foot. For location tracking using your cell phone, the Supreme Court ruled in Carpenter v. United States that the government generally needs a warrant to obtain historical cell-site location records from your wireless carrier, because those records reveal an intimate picture of your movements over time.8Supreme Court of the United States. Carpenter v. United States, 585 U.S. 296 (2018)
DOJ policy also requires federal law enforcement to obtain a search warrant before using cell-site simulators — devices sometimes called “Stingrays” that mimic cell towers to identify and locate nearby phones. The only exceptions are genuine emergencies like imminent threats to life or national security.9United States Department of Justice. DOJ Cell-Site Simulator Policy You won’t know a cell-site simulator was used against you unless it surfaces during later court proceedings.
Electronic Monitoring You Usually Can’t See
Electronic surveillance is where federal investigations get the most invasive, and the hardest to detect. The tools vary depending on whether investigators want the content of your communications or just the metadata around them.
Wiretaps
A wiretap lets federal agents listen to your phone calls and read your electronic messages in real time. Getting a wiretap order is deliberately difficult. Under Title III of the Electronic Communications Privacy Act, prosecutors must convince a judge that there’s probable cause of a specific listed federal crime and that normal investigative methods have been tried and failed, are reasonably unlikely to succeed, or would be too dangerous to attempt.10Office of the Law Revision Counsel. 18 U.S. Code 2518 – Procedure for Interception of Wire, Oral, or Electronic Communications That necessity requirement is what separates wiretaps from other surveillance tools; they’re meant to be a last resort.
A wiretap order lasts up to 30 days and can be renewed. You won’t know about it while it’s active. But within 90 days after the order expires or is denied, the judge must serve an inventory notice on the people named in the order, telling them their communications were intercepted, when, and whether interceptions actually occurred. The judge can delay this for good cause, but the statute creates a clear expectation that you’ll eventually be told.10Office of the Law Revision Counsel. 18 U.S. Code 2518 – Procedure for Interception of Wire, Oral, or Electronic Communications If you receive an inventory notice from a federal court, a wiretap was either used on you or attempted.
Email and Stored Communications
Emails and other stored electronic communications are governed by the Stored Communications Act. For emails in storage for 180 days or less, the government needs a warrant. For older stored communications or files held by a remote computing service, the government can use either a warrant with no notice to you or a subpoena or court order with prior notice, though it can seek to delay that notice.11Office of the Law Revision Counsel. 18 U.S. Code 2703 – Required Disclosure of Customer Communications or Records Many email providers now require a warrant for content regardless of age, but the statute still controls what the government is legally entitled to demand.
Metadata and National Security Letters
A pen register or trap-and-trace order lets investigators collect metadata — the envelope information around your communications rather than the content. For phone calls, that’s the numbers you dial and receive, call duration, and timestamps. For internet activity, it can include IP addresses and session logs. In foreign intelligence investigations, these orders also authorize collection of subscriber names, addresses, payment methods, and telephone records.12Office of the Law Revision Counsel. 50 U.S. Code 1842 – Pen Registers and Trap and Trace Devices for Foreign Intelligence and International Terrorism Investigations The government only needs to certify that the information is relevant to an ongoing investigation. You won’t be notified.
In national security and counterterrorism investigations, the FBI can bypass normal judicial authorization entirely by issuing a National Security Letter directly to your phone company or internet service provider. An NSL compels the provider to hand over subscriber information, billing records, and call records, though not the content of communications. The FBI director or a senior designee simply certifies in writing that the records are relevant to an authorized investigation.13Office of the Law Revision Counsel. 18 U.S. Code 2709 – Counterintelligence Access to Telephone Toll and Transactional Records
What makes NSLs particularly opaque is the built-in gag order. If the FBI certifies that disclosure would harm national security, the provider is legally prohibited from telling you, or anyone, that the FBI requested your records.13Office of the Law Revision Counsel. 18 U.S. Code 2709 – Counterintelligence Access to Telephone Toll and Transactional Records The provider can challenge the gag in court, but most comply silently. NSLs are one of the few surveillance tools where you may never learn your records were accessed.
Mail Covers
Federal investigators can also monitor your physical mail through a mail cover. A mail cover involves the U.S. Postal Service recording the information visible on the outside of your mail — return addresses, postmarks, destination — without opening it. No warrant is required because the exterior of mail doesn’t carry the same Fourth Amendment protection as its contents. Mail covers are authorized administratively through the Postal Inspection Service and can run for weeks. You won’t receive any notification, and there’s no judicial oversight. Opening your mail, by contrast, does require a warrant.
Two Mistakes That Create New Crimes
This is where people turn a survivable situation into a catastrophe. Two federal statutes catch people who might otherwise have walked away without charges.
Making a false statement to a federal agent is a separate federal crime punishable by up to five years in prison, even if the underlying investigation never results in charges against you. The statute covers any false, fictitious, or fraudulent statement made in any matter within the federal government’s jurisdiction. It applies to conversations with FBI agents, IRS investigators, and any other federal officials, whether or not you’re under oath.14Office of the Law Revision Counsel. 18 U.S. Code 1001 – Statements or Entries Generally The safest approach when federal agents want to talk is to say nothing beyond identifying yourself and asking to speak with a lawyer. Silence isn’t a crime. Lying is.
Destroying, altering, or concealing any record or document to obstruct a federal investigation carries up to 20 years in prison. You don’t even need to know about a specific pending case. The statute covers actions taken “in contemplation of” a federal matter.15Office of the Law Revision Counsel. 18 U.S. Code 1519 – Destruction, Alteration, or Falsification of Records in Federal Investigations and Bankruptcy Shredding financial records because you think an investigation might be coming, deleting emails after receiving a subpoena, asking someone else to hide documents — any of these can produce obstruction charges that carry far more prison time than many of the underlying offenses being investigated. Once you suspect federal scrutiny, preserve everything.
What to Do If You See Any of These Signs
Call a federal criminal defense lawyer before you do anything else. Not a general practitioner, and not a state-court criminal lawyer without federal experience. The rules, the players, and the stakes are different in federal court.
Beyond that, you have a few tools of your own. The Freedom of Information Act lets you request records from any federal agency, including records that may pertain to you. You can submit a FOIA request to the FBI, DEA, IRS, or any other agency you believe may have investigated you.16FOIA.gov. FOIA.gov – Freedom of Information Act: How to Make a FOIA Request The Privacy Act of 1974 gives you a separate right to access records federal agencies maintain about you and to request corrections. Agencies must acknowledge amendment requests within 10 business days and complete review within 30 business days.17Office of the Law Revision Counsel. 5 U.S. Code 552a – Records Maintained on Individuals The practical reality is that both run into law enforcement exemptions. Agencies routinely withhold records connected to open investigations, classified intelligence programs, and information that could reveal confidential sources or techniques. You’re more likely to receive meaningful records after an investigation has closed.
And if a wiretap inventory notice arrives in the mail and no charges ever came, that’s worth a call to a lawyer too. It means your communications were monitored, and the surveillance may be worth examining for a legal challenge.