How Experienced Investigators Think

Investigators rarely begin with certainty. They begin with an allegation, a report, an anomaly or a body of material that may support several explanations. Their task is to decide what legal proposition may matter, what the available material permits them to infer and which reasonable enquiry may distinguish one explanation from another.

The defence gains little by assuming that every investigator is either neutral and infallible or committed to guilt. The useful discipline is to audit the reasoning. What is known? What is inferred? How reliable is the source? What reasonable alternative remains? What enquiry could test it?

1. Begin with the proposition that must be proved

An investigation can accumulate a large volume of material while remaining weak on the element that matters. Conduct may be admitted while knowledge, intention, dishonesty, attribution or causation remains disputed. The first discipline is therefore legal: identify the proposition that a charging decision or eventual conviction would require, then test whether the evidence actually proves it.

2. Separate material from inference

A message, payment, location record or witness account is material. Its meaning is an inference. The distinction is elementary but operationally powerful. A payment may show transfer, not dishonest purpose. A device may contain an item without proving who placed it there or knew of it. Presence may establish opportunity without participation.

3. Corroboration is about independence

Repetition is not necessarily corroboration. Five statements derived from the same conversation may be one source repeated five times. Screenshots of a later summary do not become independent merely because they appear on different devices. Corroborative value depends on genuine independence, proximity to events, integrity and the proposition for which the material is used.

4. Credibility is not a verdict on truth

Demeanour, confidence and detail can mislead. A truthful person may be inconsistent through stress, memory or misunderstanding; a rehearsed account may appear polished. A reasoning audit tests internal consistency, external support, opportunity to know, timing, stability and response to fair challenge. None is a substitute for proof.

5. State of mind must usually be inferred

Knowledge, intention and dishonesty are commonly inferred from conduct, communications, sequence, concealment and the absence of an innocent explanation. The defence response should not merely assert a different state of mind. It should identify what contemporary material supports it, what conduct is genuinely ambiguous and which adverse fact must be confronted.

6. Conduct after the event

Deletion, delay, flight, concealment or a changing account may be relied upon as evidence of consciousness of guilt. Context still matters. Panic, privacy, shame, fear of employment consequences or an unrelated reason may explain conduct. The alternative must be evidenced where possible, not manufactured after the event.

7. Bias and investigative momentum

The CPIA framework requires investigators to pursue reasonable lines of enquiry towards and away from the suspect. That does not eliminate cognitive risk. Early labels may anchor later interpretation; memorable material may be overweighted; a team can reinforce a shared theory. Equally, the duty is reasonable, not limitless: investigators need not pursue speculative possibilities unsupported by the case.

The strongest challenge is therefore specific. Identify the proposition, show the unsupported inferential step and propose a proportionate enquiry capable of testing it.

8. The anomaly

Experienced investigators often look for the point that does not fit. A transaction outside the alleged pattern, an impossible timing, an independent record or a communication inconsistent with alleged knowledge may require the theory to change. The defence should treat an anomaly as a lead to be tested, not as a rhetorical flourish.

9. Two practical examples

In one investigation, the conduct itself was not seriously disputed. The decisive issue was knowledge. By separating what the client did from what the client could then have known, and locating contemporary records bearing on that question, the defence redirected attention to the missing mental element.

In another, the apparent question was whether the client had been present. Presence was provable. The material issue was whether presence established participation. Reframing the proposition exposed the gap between opportunity and criminal involvement and identified the enquiry that mattered.

10. The defence reasoning position

1. State the legal proposition precisely.
2. Identify the material relied upon and recover the best available source.
3. Separate what the material shows from the inference drawn.
4. Assess reliability, independence, completeness and context.
5. Identify a reasonable alternative that fits the known material.
6. Propose or undertake a lawful, proportionate testing enquiry.
7. Record how the result changes the next decision.