CRIMINAL TRIAL IN PAKISTAN

Zafar Iqbal Kalanauri

Advocate Supreme Court of Pakistan, Arbitrator, Mediator
White Collar Crime Investigator Reformist of Legal System & Legal Education and a
Professor of Law
 Criminal Trial in Pakistan
THE PROCESS OF CRIMINAL TRIALS FROM THE REPORTING OF AN ALLEGED OFFENCE TO THE CONVICTION OR ACQUITTAL

OF AN ACCUSED OVER A SUBSEQUENT CHARGE IS AS FOLLOWS: COGNIZABLE OFFENCES ARE EITHER REPORTED TO THE

POLICE OR OTHER LAW ENFORCEMENT AGENCIES OR ANTI-CORRUPTION BODIES, DEPENDING ON THE RELEVANT

JURISDICTION. THE REPORTING OF ANY SUCH OFFENCE TAKES PLACE THROUGH AN APPLICATION WHICH IS EITHER

WRITTEN OR NARRATED ORALLY TO THE COMPETENT AUTHORITY, BY VIRTUE OF SECTION 154 OF THE CODE OF CRIMINAL

PROCEDURE 1898 (CRPC). ACCORDING TO S.154 CRPC, ONCE A COGNIZABLE OFFENCE HAS BEEN COMMITTED, THE

STATION HOUSE OFFICER (SHO), OPERATIONS BECOMES LEGALLY BOUND TO REGISTER A CRIMINAL CASE AGAINST THE

ACCUSED, WHENEVER THE RELEVANT INFORMATION IS REPORTED BEFORE THE SHO. AFTER THE REGISTRATION OF A CASE,

THE INVESTIGATION OFFICER (IO) RECORDS THE STATEMENTS OF WITNESSES AND COLLECTS INITIAL EVIDENCE, BY VIRTUE

OF THE POWERS CONFERRED UNDER S.161 CRPC.

After completion of the initial investigation, a challan is presented before the trial court
under S.173 of the CrPC, following which the trial commences and the court issues notices
to present the accused before the jail superintendent, either if the accused has been
confined to jail or out on bail. For the accused at large, the court declares them proclaimed
offenders, while substitute methods for service of notice are used to summon them, such
as through newspaper, etc. The complainant is also summoned and copies of the challan
are provided within court premises to the complainant and the accused under section 241-
A of CrPc. On the next date of hearing, a formal charge is framed by virtue of section 242 of
CrPC and the accused is asked whether he or she has committed the alleged crime. Upon
admission of the accused, the magistrate, exercising powers conferred under section 243
of the CrPC, may convict the accused.
The framing of charge marks the commencement of trial. The prosecution is summoned for its evidence and
witnesses, which are later cross-examined by the defense, followed by examining any property recovered by
the investigators. Once the prosecution has made out its case, the accused may be examined by the court by
being asked certain questions before being provided with an opportunity to present evidence. According to
Section 342 CrPC: “For the purpose of enabling the accused to explain any circumstances appearing in the
evidence against him, the court may, at any stage of any inquiry or trial without previously warning the
accused, put such questions to him as the court considers necessary.” The defense then submits its evidence
and the prosecution gets a chance to cross-examine the defense’s evidence. The trial is then concluded and
final arguments are heard, after which a judgment is pronounced by the court. Two relevant principles on the
basis of which criminal cases are to be decided include the presumption of innocence (according to which
everyone is presumed innocent unless proven guilty) and the burden of proof (whereby the prosecution has to
prove its case beyond reasonable doubt as opposed to civil cases where the burden of proof is based on a
balance of probabilities).
 PRINCIPLE AND PRACTICE OF CRIMINAL
INVESTIGATION IN PAKISTAN

WHAT IS INVESTIGATION:-

Ø IN LEGAL TERMS INVESTIGATION INCLUDES ALL THE PROCEEDINGS FOR THE COLLECTION OF EVIDENCE

CONDUCTED BY A POLICE OFFICER OR BY ANY PERSON WHO IS AUTHORIZED BY A MAGISTRATE IN THIS BEHALF.

Ø A GOOD INVESTIGATION IS A RIGOROUS PROCESS THAT CONSIST OF IDENTIFICATION, COLLECTION,

PRESERVATION AND PRESENTATION OF EVIDENCE IN COURT OF LAW.

Ø INVESTIGATION MEANS SCRUTINY, SEARCH OR AN INQUIRY INTO A MATTER TO FIND OUT TRUTH, TO KNOW

ABOUT FACTS OR SOLVE CRIME.

Ø Investigation is,-
§ A multidisciplinary approach.
§ Involves systematic and logical thinking.
§ Requires minutes and detailed inspection.
§ Includes observation, examination and fact-finding inquiry of witnesses.
§ A rigorous process based on evidence.
 Ø Code of Criminal Procedure draws distinction between investigation and Inquiry.

Section 4(l) of Code of Criminal Procedure defines Investigation as following:-

“Investigation includes all the proceedings under this code for the collection of evidence conducted by a
police officer who is authorized by a Magistrate in this behalf.”

Whereas,--

Section 4(k) states as under:-

“Inquiry includes every inquiry other than a trial conducted under this Code by a Magistrate or Court.”
Cr.P.C. limits the scope of investigation only to collection of evidence; an investigating officer is confined only to
collect evidence without formulating any opinion as to guilt or innocence of accused.
Another important aspect is authorization. A person cannot assume role of investigator. Investigation can only be done by
a police officer or a person authorized by a Magistrate.
• Evidence means “anything that tends to prove or disprove anything”.
• In strict sense of Qanun-e-Shahdat Order 1984, evidence includes:-
• All statement which the court permits or requires to be made before it by witness in relation to matters of fact
under inquiry; such statements are called Oral Evidence
• All documents produced for the inspection of the court; such documents are called Documentary Evidence.
• In Pakistan investigation of offences under Pakistan Penal Code 1898 is conducted under Part V, chapter XIV of
code of Criminal procedure 1898 and police Rules 1934.
• In case of offences created under special Laws, there is separate law that regulates procedures of
investigation e.g. , anti- corruption and anti-terrorism court, Federal Investigation Agency etc.
• Investigation begins with a response to a reported incident i. e; lodging of FIR u/s 154 Cr.P.C, and ends when it
is closed either with the assessment that there is no sound evidence that the crime was committed (cancellation
report) or with the submission of one or more reports describing what was done (submission of challan in Court
through prosecutor).
 GOALS OF INVESTIGATION:

1. To recognize evidence.
This is done by a detailed survey and research of crime scene. Everything that is present on a crime scene may or may not have a probative value; an investigator must be able
to recognize what evidence can be helpful and what should be collected.
2. To Collect Evidence.
Most of the crime scene involves massive physical evidence that can be collected by the investigator to be later produced in court i-e, empty cartridges, DNA, finger prints and
other trace evidence etc.
Evidence must be labeled properly describing FIR No. No, nature/type of evidence, position and place of its collection, time date and name of witness in whose presence such
evidence was collected.
3. Preservation of Evidence.
It is as essential as collection of evidence because if integrity of evidence is compromised it cannot be made basis for conviction of accused. To achieve this goal chain of custody
must be maintained.
Chain of custody is described as chronological log of handling of evidence from place of seizure/collection to its presentation in the court of law. It implies principle that there
should be no unauthorized handling of evidence at any stage.
4. Documentation of crime and other proceedings.
Recording of statement of eye witnesses must be done at crime scene and witness must be separated before recording their statement eliminating possibility of fabrication.
Crime sketch that can be scaled or unscaled. But it must show North, important landmarks, presence of accused and witnesses if any.
Modern techniques involve crime scene photography at different range, angle and even video graphy can be done.
First inspection note.
Preparation of inquest report, injury statement in cases of murder.
POWERS OF POLICE OFFICERS UNDER CODE OF
CRIMINAL PROCEDURE REGARDING INVESTIGATION

1. Under sec. 156 of the code of Criminal procedure 1898, a police officer is authorized to
conduct investigation in cognizable cases without order of the Magistrate,
2. A police officer may by order in writing require the attendance of any person who from
information given or otherwise appears to be acquainted with the circumstances of the case u/s
160 Cr.P.C.
3. Under Section 161 Cr.P.C. a police officer may examine orally any person supposed to be
acquainted with the facts and circumstances of the case
4. Police officer shall day by day enter his proceedings in investigation diary u/s 172 Cr.P.C.
 DEFECTS IN INVESTIGATION CARRIED OUT IN
PAKISTAN:
Unfortunately, investigation in Pakistan is not conducted properly and thoroughly and is responsible for collapse in Criminal Justice
system. Integrity of investigation is very critical for admissibility of evidence in court of law. Major defects in Criminal investigation in
Pakistan are:
1. Lack of proper knowledge of prescribed procedures to conduct investigation
Investigation is a failure in our country due to lack of knowledge, proper training and development of skills. Common examples
of lack of knowledge and skills that results in failure of investigation are:
1. Lack of knowledge of different provisions of law especially when offence falls under different jurisdictions e.g. provision of
Anti-terrorism Act, or provisions of sec. 5(2) of Prevention of Corruption Act 1947.
2. Lack of knowledge as to offense falls under what jurisdiction and which agency shall hold investigation.
3. Lack of knowledge of proper procedure e.g., procedure for proclamation of accused and seizure of property.
4. Lack of training to collect biological and other evidence at crime scene and due to improper collection important evidence at
crime scene is contaminated before it reaches laboratory for analysis and consequently important evidence is either lost or
compromised at crime scene.
2. Lack of Professionalism:
A major reason for failure of our Justice system is lack of professionalism and irresponsible attitude towards
Criminal investigation. Procedures are not followed and adherence to standards is not in existence. Investigation
process is influenced by media, political pressure and corrupt practices. Investigators mostly
hold panchayats instead of collecting evidence to support charge or establish guilt. Similarly, opinions as to
innocence or guilt are given by police officer without reasoning and in absence of evidence. They do not verify
alibi of accused if claimed and usually give opinion on basis of suspicion without realizing the fact that
determining the guilt or innocence is the duty of the court and investigation is only confined to collection of
evidence.

3. Biased Investigation, Lack of Impartiality:

Impartiality means decisions must be based on sound reasoning and without any undue influence or favor to
anyone. It is an ability of a person to formulate his decision on the basis of facts and without being prejudiced.
Preconceived notions, conjectures, suppositions, presumptions and suspicion are different forms
of [Link] should be no personal belief or intuition or a judgment not founded on proof or certainty.
Prejudice or bias can seriously effect results of investigation. Various elements can affect impartiality of an
investigator. Bias can take various forms e.g., religious bias, racial discrimination, gender, ethnicity, sect, class or
caste, all can influence investigation. However, there is a distinction between holding a bias and acting as bias.
4. Role of Logic, Good Observation and Good Judgment:
Every crime is unique. There is no universal formula to investigate a case. A good investigation requires proper planning. it is a team work that cannot be done in isolation.
Composition of team depends on nature of crime.
Crime scene is a scene of incident irrespective of the whether a Criminal or illegal action has been established.
When arriving at crime scene an officer must determine what offence has been committed and what level of investigation he is required to conduct. It is common that
investigating officers do not apply their own reasoning and are only confined to story narrated to them by witness. Even in that case they even do not bother to corroborate their
testimony, verify presence of witness at the spot and collect other circumstantial evidence, usually police officers acts in mechanical way by recording FIR, statement of witness,
drawing rough sketch, making or planting recovery and then submission of challan. Have they collected evidence properly from crime scene, it can help prosecution to prove their
case. It could also be kept in mind that there is tendency in our country to rope falsely all family members of the accused.
5. Integrity:
Twisting of facts is not very uncommon. It happens in almost in every case. Facts are twisted by parties in order to either involve innocent or to destroy evidence. In unseen
murder case usually witness are planted, in dacoity cases usually identification parade are not held, instead this requirement of law is fulfilled by insertion of supplementary
statement that never discloses source of information.
Observations made are not brought on record. Confession are not recorded before Magistrate and police confession forms part of police diary which is neither admissible
nor can secure conviction.
Injured victim dying declaration is not recorded, or if recorded no independent person is cited in whose presence such dying declaration is recorded. Similarly, statement of
injured witness is recorded without making enquiry from doctor regarding whether such injured is in position to make statement or not.
These are all issues that have impact on integrity of evidence collected and produced during trial. How a court can convict a person when there is no evidence or there is
evidence which is tainted.
6. Improper Documentation:
The gravest defect of our investigation is improper and inadequate documentation. Court can formulate opinion only on basis of those facts that are relevant and are
brought on record. If statement of an important witness is not reduced to writing by a police officer, how court can determine facts that were witnessed by a witness which is not
included in the calendar of witnesses by police officer during submission of challan.
Similarly, omission on part of the police officer to mention the description of crime scene, position of body and articles found on crime scene can seriously destroy
prosecution case.
Usually, police officers do not take into possession crime empties and thus prosecution is deprived of opportunity to prove an important piece of evidence that can establish
link between crime, victim and suspect.
7. Chain Of Custody:
It means documentation of evidence from time to time when it was taken into possession describing time, place or condition, or brief description of item and name of
persons/witnesses in whose presence such articles were taken into possession to its production in laboratory/agency or court. It also signifies that there should be no unauthorized
handling of evidence.
It is very common that proper chain of custody is not maintained and report of expert i-e, ballistic expert, chemical examiner, serologist become inconsequential which
results not only in damage to prosecution case but also amounts to wastage of time and money consumed in obtaining expert opinion.
8. Delay:
Delay which is unnecessary has fatal impact on fate of Criminal case. Delay on part of police in sending corpse for postmortem examination, delay in recording statement of
witness, delay in holding identification parade, delay in sending parcels to laboratory for expert opinion are all considered fatal to prosecution case and this delay is caused by
negligence of police.
REMEDIES:
Following measures can be taken to rectify the above defects:-
1. Reorganization of investigation wing:
An investigator should be authorized to investigate the case on basis of his qualification, experience and training. For major offences like
murder, rape, forgery/fraud, electronic crimes, kidnapping investigator should have relevant expertise to investigate that crime.
An investigator who have never conducted investigation in forgery should not be allowed to investigate that offence instead of this he
should be assigned task according to his expertise and interest and knowledge.
2. Development of investigation protocols:
It is very important to develop various protocols in shape of guidelines and instructions or standard procedures that must be followed in
investigation of different offences. For example, an investigation of a murder case should include more than just formality of injury statement
and inquest report and conducting postmortem. various steps of investigation must be described and there should be a clear policy statement
regarding procedure and proceedings of investigation.
Police trainings must be carried out in letter and spirit rather than being conducted as formality
3. Development of professional attitude:
Police officer should develop professional attitude. Government and our media also plays vital role. Both government and media should stop exploitation and should not interfere with
process of investigation. Media should be briefed only when investigation has been completed. Political parties should not dictate police officers rather they should be allowed to proceed with
investigation without being influenced. Illegal practices of holding panchayats, formulating opinions of investigation on basis of oath, and deciding cases in police station must be stopped. It is
duty of police to collect evidence without compromising its integrity and it is duty of court to determine guilt or innocence on basis of evidence. An investigator is not party to Criminal case. He
must be impartial.
We cannot correct police until we provide honest police officers privilege of not being dismissed on frivolous grounds and stop safarish and baradari system we are facing two problem one is
we promote baradari culture by giving [Link] favors and second honest persons are threatened Of being dismissed from service.
4. Independence of investigation wing
Investigation wing of police must be independent. There should be no interference at level of investigation. It often happens that media causes exploitation of cases and this causes
undue harassment and biased investigation. Similarly political pressure groups must not be allowed to approach the officials. Another important aspect in this respect is frivolous registration of
cases must be strongly discouraged
5. Punishment of investigator for corrupt practices:
Investigators who are properly trained and skilled in investigation if destroy evidence or temper it, they must be punished exemplary to have deterrent effects. However, it must be kept in
mind before punishing an investigator that whether he had willfully caused destruction of evidence or not because parties may often lodge frivolous complaints against police officers and gross
negligence are sometimes remains unchecked. There must be clear and logical criteria for punishment.
6. Proper Training & Continuous Professional Development:
Due to rapid development of technology, investigators must be provided with training and continuous development. Incentive should be given on basis of merits otherwise they shall further
deteriorate the existing system.
 THE SEVEN S'S OF CRIME-SCENE INVESTIGATION

• Securing the Scene.

• Separating the Witnesses.
• Scanning the Scene.
• Seeing the Scene.
• Sketching the Scene.
• Searching for Evidence.
• Securing and Collecting Evidence.
 WHAT ARE THE 4 MOST COMMON TYPES OF CRIMINAL INVESTIGATIONS?

Types of Criminal Investigation You’ll Encounter as a Legal Assistant

Cybercrimes

Cybercrimes are a growing concern for law enforcement and the legal profession alike as the methods for both prosecution
and prevention are still being adapted and can change rapidly with advances in how these crimes are committed.

Common cybercrimes include identity theft, illegal firearms sales, online drug trafficking, and online harassment.

However, there are other elements of law, such as legal jurisdiction and extradition that are intertwined with cybercrimes as
many cybercriminals launch their attacks from overseas or from behind proxies that are located in different jurisdictions.
Fraud
In law, fraud is intentional deception to secure unfair or unlawful gain, or to deprive a victim of a
legal right. Common types of fraud include insurance fraud, mortgage fraud, identity theft, credit
card fraud, and forgery.

Fraud can also be a civil matter, a criminal matter, or may cause no loss of money, property, or
legal right but still be an element of another civil or criminal wrong, making it a complicated crime.
Crimes Against Property
Another crime that can be pursued in both civil and criminal courts, crimes against property often
include burglary, theft, arson, and vandalism.

In civil court, a person or entity might pursue recompense for damages caused while in criminal
court the defendants might be prosecuted for committing a felony, especially in cases of burglary,
theft, and arson.
Forensic Investigations

Forensic science, also known as criminalistics, is the application of science to criminal and civil laws, mainly on the
criminal side, during criminal investigation, as governed by the legal standards of admissible evidence and criminal
procedure.

Criminal forensic scientists collect, preserve, and analyze scientific evidence during the course of an investigation.

.
While some forensic scientists travel to the scene of the crime to collect the evidence themselves, others occupy a
laboratory role, performing analysis on objects brought to them by other individuals
What are the steps of criminal case in Pakistan?

STEP-BY-STEP PROCESS (Criminal Justice System CJS)

Step 1: Register the FIR. The process begins with registering the FIR (First Information Report). ...
Step 2: Police Investigation & Inquiry. ...
Step 3: Criminal Prosecution and Trials. ...
Step 4: Adjudication. ...
Step 5: Implementation of Verdict.
What are the 5 elements of investigation?

The five key elements

• Define the scope of the investigation.
• Plan the Investigation.
• Collect relevant evidence.
• Review and analyse the information.
• Document the findings.
• Summary.
Necessary Precautions for the Preservation of Evidence

Physical evidence is any object associated with a crime and which tends to prove or disprove a point regarding the
crime, victim, or perpetrator. The chain of custody is an unbroken chronicle of proof relating to the possession and
analysis of the evidence until its appearance in court. Evidence may be fixed or movable. The first step in the chain of
events related to physical evidence is the crime scene search, while laboratory analysis is the second significant
step. The investigator should place primary emphasis on protection of the crime scene and secondary emphasis on
collection of evidence. Photography and sketches are the best way of protecting the crime scene.
The five steps recommended by the Federal Bureau of Investigation for collecting and preserving
evidence are (1) obtaining it legally; (2) describing the evidence in detailed notes; (3) identifying it
accurately and positively; (4) packaging it properly for identification, storage, or shipment to the
laboratory; and (5) establishing and maintaining the chain of custody. Specific precautions should be
taken in handling weapons used in an attack, clothing, firearms, blood stains, seminal stains, fingernail
scrapings, hairs, fibers, drugs, and poisons. The investigator's equipment should include fingerprint
accessories, a vacuum sweeper with special filters, containers, tools, magnifiers, casting equipment, and
ultraviolet light equipment. The success of the laboratory technician's analysis depends directly on the
investigator for the quality of the physical evidence.
What do crime scene investigators do?

Crime scene investigators document the crime scene. They take photographs and physical measurements of
the scene, identify and collect forensic evidence, and maintain the proper chain of custody of that evidence.
Qualities Of A Successful Investigator
Investigative work is a complex and crucial aspect of various fields, including law enforcement, journalism, corporate
security, and scientific research. Successful investigators possess a unique blend of skills, traits, and qualities that
enable them to navigate intricate puzzles, uncover hidden truths, and solve intricate problems.

1. Curiosity and Inquisitiveness

A cornerstone of successful investigation is an insatiable curiosity and a natural inclination to question. Investigators
who ask probing questions and are driven by an inherent desire to understand the root causes of situations are often
the ones who unearth critical information. Their thirst for knowledge pushes them to explore uncharted territory,
unravel complexities, and seek out hidden connections that might be missed by others.
2. Analytical Thinking
Analytical thinking is a fundamental skill that enables investigators to process large volumes of information, identify
patterns, and draw meaningful conclusions. Successful investigators have the ability to break down complex
problems into manageable components, discern relevant details from noise, and piece together a coherent narrative
from scattered clues. This skill is particularly valuable when dealing with intricate cases or situations with limited
data.
3. Attention to Detail
Meticulous attention to detail is paramount in investigative work. Successful investigators have a knack for spotting
subtle anomalies, inconsistencies, and discrepancies that others might overlook. They understand that the smallest
piece of information could hold the key to unraveling a mystery, and they are committed to thoroughly examining
every aspect of a case to ensure that nothing is missed.
4. Persistence and Determination

Investigations often involve navigating through obstacles, dead ends, and setbacks. Successful investigators display
unwavering persistence and determination in the face of challenges. They are not easily discouraged by roadblocks
but rather use them as opportunities to rethink their approach, gather new insights, and forge ahead with renewed
vigor. This resilience is essential for tackling complex cases that require time and effort to crack.

5. Strong Communication Skills

Effective communication is a hallmark of a successful investigator. Investigators need to convey complex information,
share findings, and collaborate with colleagues, clients, and stakeholders. Whether through written reports, verbal
briefings, or interpersonal interactions, skilled investigators can distill complex concepts into understandable terms
and convey their findings in a clear and concise manner.
6. Problem-Solving Abilities
Investigative work is essentially about solving puzzles, and successful investigators excel in this regard. They approach
problems methodically, breaking them down into manageable components and exploring different angles to find
solutions. Creative problem-solving is often required when faced with unique or unexpected challenges that don't have
straightforward answers.

7. Ethics and Integrity

Integrity is a non-negotiable quality for any investigator. Successful investigators operate with a strong sense of ethics,
upholding principles of honesty, objectivity, and fairness throughout their work. Upholding integrity is crucial not only
for maintaining credibility but also for ensuring that the investigation process remains unbiased and focused on
uncovering the truth.
8. Technological Savviness
In the modern world, technological advancements have transformed the investigative landscape. Successful investigators are comfortable
using a variety of tools and technologies, from digital forensics software to data analytics platforms. They stay up-to-date with the latest
technological trends and adapt their skills to leverage these tools effectively in their investigations.
9. Emotional Intelligence
Investigative work often involves dealing with sensitive and emotionally charged situations. Successful investigators possess emotional
intelligence, enabling them to navigate such situations with empathy and tact. They can establish rapport with witnesses, victims, and
suspects, making them more likely to share crucial information and cooperate during the investigation.
10. Adaptability
No two investigations are exactly the same, and circumstances can change rapidly. Successful investigators are adaptable and flexible in their
approach. They can pivot their strategies when new information emerges, and they remain open to adjusting their methods based on the
evolving needs of a case.
11. Time Management

Investigations come with deadlines and time-sensitive aspects. Successful investigators are skilled at managing their
time efficiently, prioritizing tasks, and allocating resources effectively. They understand the importance of meeting
deadlines without compromising the quality and integrity of their work.

12. Domain Knowledge

Depending on the field of investigation, having a solid foundation of domain-specific knowledge is essential. Whether
it's law, science, finance, or any other area, successful investigators understand the nuances and intricacies of their
domain, allowing them to approach investigations with the necessary expertise.
In conclusion, the qualities of a successful detective agency are multifaceted and interwoven. These qualities
encompass a combination of cognitive skills, personal traits, and ethical principles that enable investigators to excel in
their pursuit of truth and justice. Whether it's solving crimes, uncovering corporate misconduct, or conducting
scientific research, these qualities serve as the bedrock upon which successful investigative careers are built. Curiosity,
analytical thinking, attention to detail, persistence, communication skills, problem-solving abilities, ethics,
technological proficiency, emotional intelligence, adaptability, time management, and domain knowledge collectively
define the essence of a successful investigator.
What does an Investigator do?
Investigators work with law enforcement agencies, individuals, and businesses to investigate and solve crimes to
secure a successful conviction. They conduct detailed investigations of complex criminal activities and other violations
of local, federal, or state law and collect, analyze, and preserve evidence. They direct crime scene investigators and
other law enforcement members while at crime scenes and utilize deductive reasoning and analysis to make informed
decisions and conclusions that lead to prosecution.

Investigators write detailed case reports, file and maintain records, coordinate search and arrest warrants, arresting
suspects as needed. They operate firearms and electronic surveillance equipment and testify in court regarding case
evidence and findings to secure a conviction. Investigators undergo continuous training and development as required
and must maintain strict confidentiality. Investigators need a bachelor's degree in criminal justice or related fields and
equivalent training at a federal law enforcement college.
What responsibilities are common for Investigator jobs?
• Administer and/or make referrals for drug testing as appropriate.
• Specific duties or tasks may vary and be documented separately.
• Obtain facts or statements from complainants, witnesses and suspects.
• Child Protective Services (CPS) investigators investigate claims of child abuse and neglect.
• Prepare court documents such as petitions, affidavits and court reports
• The field inspector is responsible for perform inspections at residential development sites.
• Curate signatures, tune systems/tools, and develop scripts and correlation rules.
• Incumbent will be required to furnish a personal vehicle for carrying out assignments which may include transporting clients including children.
• Participate and assisting in preparation for settlement negotiations and trial.
• Prepare and present information and evidence to the prosecuting attorney.
• Own the outcome of ongoing improvement activities.
• Assist in obtaining fieldwork in a rapid, time-sensitive work environment.
• Work on audits, reviews and special projects as assigned by management.
• Provide investigative support to public safety entities.
• Communicate inefficiencies to job superintendents and educate them and their trades on correction items.
• Investigate and reply to correspondence regarding hearings, accidents, and other legal matters.
• Coordinate with administrative support staff to best serve the needs of the client and case.
What are the typical qualifications for Investigator jobs?
• Bachelor's or Graduate's Degree in business, computer science, engineering or business administration, or
equivalent experience.
• A quick learner with an eye on critical thinking and problem solving.
• Experience running operating systems and software programs.
• Skilled at paying attention to detail.
• Demonstrated professionalism and ability to prioritize tasks.
• Can maintain composure in high-stress situations.
• A leader and advocate with demonstrated skills at collaboration.
 HERE ARE SOME GUIDELINES FOR INVESTIGATORS IN PAKISTAN:
1. Legal Knowledge: Investigators should have a strong understanding of Pakistani laws related to investigation procedures, evidence collection, and the
rights of both suspects and victims. Familiarity with the Pakistan Penal Code, Criminal Procedure Code, and relevant case laws is essential.
2. Ethical Conduct: Investigators must adhere to ethical standards and conduct their investigations impartially, without bias or prejudice. They should respect
the dignity and rights of all individuals involved in the investigation.
3. Evidence Collection: Proper collection, preservation, and documentation of evidence are crucial for building a strong case. Investigators should follow
standard procedures to ensure that evidence is admissible in court.
4. Interviewing Techniques: Effective interviewing techniques are essential for obtaining accurate information from witnesses, victims, and suspects.
Investigators should be trained in techniques such as active listening, rapport building, and open-ended questioning.
5. Interagency Cooperation: Collaboration with other law enforcement agencies, government departments, and relevant organizations can enhance the
effectiveness of investigations. Investigators should be able to coordinate with other stakeholders to gather information and resources.
6. Technology Skills: In today's digital age, investigators should be proficient in using technology for gathering and analyzing evidence. This includes
knowledge of digital forensics, cybercrime investigation techniques, and the use of surveillance tools.
7. Cultural Sensitivity: Pakistan is a diverse country with various cultural norms and practices. Investigators should be culturally sensitive and respectful in
their interactions with individuals from different backgrounds.
8. Continuing Education: The field of investigation is constantly evolving, with new techniques, technologies, and legal precedents emerging regularly.
Investigators should engage in ongoing training and professional development to stay updated on the latest developments in their field.
9. Documentation and Reporting: Thorough documentation of all aspects of the investigation, including evidence collected, interviews conducted, and
actions taken, is essential for building a comprehensive case file. Investigators should maintain accurate records and prepare detailed reports for use in court
proceedings.
10. Safety Precautions: Investigating criminal activities can sometimes be dangerous. Investigators should prioritize their safety and take appropriate
precautions when conducting fieldwork, especially in high-risk situations. This includes working in teams, wearing protective gear when necessary, and
following established safety protocols.
By following these guidelines, investigators in Pakistan can conduct thorough and effective investigations while upholding the principles of justice and fairness.
Collecting evidence in criminal cases is a critical aspect of the investigative process. Here's a comprehensive guide on how evidence is collected:

1. Initial Assessment: Upon receiving a report of a crime, law enforcement officers conduct an initial assessment of the scene. This involves securing the area to prevent
contamination or tampering of evidence.
2. Documentation: Investigators document the scene through photographs, sketches, and notes. They record observations about the layout, any visible evidence, and
potential points of entry or exit.
3. Evidence Identification: Investigators identify and collect physical evidence relevant to the case. This can include weapons, fingerprints, DNA samples, bloodstains, clothing,
documents, and any other items that may be linked to the crime.
4. Chain of Custody: Proper documentation of the chain of custody is essential to ensure the admissibility of evidence in court. Investigators document each person who
handles the evidence and maintain a log of its movement from the crime scene to the forensic laboratory.
5. Forensic Examination: Collected evidence is submitted to forensic laboratories for analysis. Forensic experts examine the evidence using specialized techniques to extract
information that can be used in the investigation, such as DNA analysis, fingerprint comparison, ballistics testing, and toxicology screening.
6. Witness Interviews: Investigators interview witnesses to gather information about the crime. Witness statements can provide valuable insights into the sequence of events,
the identity of suspects, and other relevant details.
7. Surveillance and Electronic Evidence: In cases involving surveillance footage or electronic evidence, investigators collect and analyze digital data such as CCTV recordings,
phone records, emails, social media posts, and computer files.
8. Search Warrants: In cases where evidence may be located at a specific location, investigators obtain search warrants from a judge or magistrate to conduct searches. Search
warrants authorize law enforcement officers to enter premises and seize evidence related to the investigation.
9. Confession or Admissions: In some cases, suspects may voluntarily confess to committing the crime. Investigators document confessions or admissions through recorded
interviews or written statements, ensuring that they are obtained legally and voluntarily.
10. Expert Testimony: Forensic experts may testify in court to explain their findings and the significance of the evidence collected during the investigation. Their testimony
helps the jury or judge understand the scientific basis of the evidence presented.

By following these steps and procedures, investigators can systematically collect, preserve, and analyze evidence to build a strong case against the perpetrator(s) of the crime.
EXPLORING THE CRIMINAL INVESTIGATION PROCESS: TECHNIQUES AND
PROCEDURES EXPLAINED
Have you ever been captivated by a mystery novel or crime thriller, marveling at the investigator’s ability
to solve seemingly unsolvable cases? The world of criminal investigations is just as complex and
fascinating as fiction, relying on a range of techniques and strategies to uncover the truth and bring
justice to light. Let’s look at the various aspects of the investigation process, from the vital role of
physical evidence and the dynamics of investigation teams to the intricacies of financial investigations
and the importance of learning from past incidents.
Key Takeaways

• Criminal investigation is a process of gathering and evaluating evidence to identify suspects and
establish reasonable grounds for suspicion.
• It involves techniques such as physical evidence collection, data analysis, theory development, suspect
identification, adapting to changing circumstances and securing the crime scene.
• An effective investigation team requires reliable members with diverse skillsets who can work together
through open communication & prompt resolution of conflicts.
 The Role of Physical Evidence in Investigations
• Physical evidence is the backbone of criminal investigations, providing objective and dependable
data that can corroborate or refute investigative theories. As the saying goes, “the proof is in the
pudding,” and in the world of criminal investigations, the proof is in the relevant evidence.
• Maintaining the integrity and usefulness of evidence in the investigation requires understanding
the specifics of the case and familiarizing oneself with all permissible investigative measures,
including the management and analysis of gathered evidence. Moreover, investigators must be
adaptable to changing circumstances, as sticking to only flexible general rules may not be
sufficient in every case. Proper acquisition and handling of evidence are crucial for a successful
forensic investigation, ultimately building a strong case against the suspect with the evidence
obtained.
 COLLECTION AND PRESERVATION

• In criminal investigations, even a single error in the collection and preservation of evidence can
determine the outcome of a case. Adhering to the correct protocols for collecting and preserving
evidence, such as documenting the scene, gathering and securing the evidence, and preserving the
chain of custody, is vital for forming reasonable grounds for suspicion or belief in the investigative
process. It is crucial to preserve evidence effectively to ensure a fair and accurate outcome.
• The procedure for gathering physical evidence must be thorough. It includes:
1. Documenting the scene
2. Recognizing and safeguarding the evidence
3. Obtaining trace materials and DNA evidence
4. Properly preserving and transporting the evidence.
• Adherence to these guidelines helps investigators maintain the integrity and admissibility of evidence
in court, which is crucial for the successful resolution of the case.
• Analyzing Evidence
• Once the evidence is collected and preserved, it’s time for the investigation team to roll up their
sleeves and dive into the world of analysis. Techniques employed to examine and interpret physical
evidence include microscopy, chromatography, and DNA analysis. The primary components of an
investigation involve gathering documents and administering interviews, with covert surveillance playing a
key role in obtaining a variety of data, including location, activities, health status, and potential evidence
for legal proceedings.
• As the investigation unfolds, newly revealed information may call for multiple interviews and
adjustments to investigative strategies. Hence, investigators must keep a clear grasp of the purpose of
the interviews and overarching investigation objectives.
Presenting Evidence in Court

• After all the hard work of collecting and analyzing evidence, the final hurdle is presenting the evidence
in court. To do this effectively, investigators must:
• Maintain an accurate record of all activities related to the investigation
• Document and authenticate the chain of evidence
• Employ strategies such as organizing the evidence, utilizing visual aids, and preparing witnesses
• Presenting physical evidence in court encompasses labeling the evidence, presenting it to witnesses,
having witnesses offer it, and securing its admissibility based on the judge’s ruling. Ultimately, the
successful presentation of evidence in court hinges on the investigator’s ability to clearly and
convincingly demonstrate its relevance and reliability.
 Investigation Team Dynamics

• Behind every successful criminal investigation, there is a skilled and cohesive investigation team. The role of
an investigation team is to:
• Gather pertinent facts, data, and evidence
• Establish the chronological order of events that transpired leading up to a particular incident or crime
• Have a team leader who directs the investigation and liaises with stakeholders and external parties
• Comprise specialists with specialized insights and experience in investigating specific types of incidents or
crimes
• Successful investigations hinge on:
• Effective communication and coordination
• Role understanding and collaborative efforts among team members
• Resolving conflicts within the team
• Maintaining focus on the investigation’s objectives
• Ensuring a swift and efficient conduct of the investigation.
 ASSEMBLING THE TEAM

• Assembling a skilled investigation team is like putting together a puzzle – each piece must fit together
perfectly to create a complete picture. The success of an investigation depends on the diversity of skills
and expertise within the team. To form an investigation team, individuals with the requisite skills,
expertise, and qualifications must be carefully selected, ensuring that they can provide their unique
perspectives and expertise to the investigation process.
• Team members should possess reliability, trustworthiness, and the ability to work together to acquire
data and evaluate evidence. In some cases, outside counsel or experts may be engaged to provide
specialized knowledge or guidance during the investigation.
 COMMUNICATION AND COORDINATION

A well-oiled machine runs smoothly and efficiently, and the same applies to an investigation team. Clear
and effective communication among team members is essential to ensure a successful investigation
process. The role of communication and coordination in investigations involves keeping all team members
up-to-date and exchanging information in an organized and expeditious manner. This can result in
enhanced collaboration, more effective decision-making, and augmented efficiency.

Examples of effective communication and coordination in investigations include:

• Utilizing a shared document system to store and share information
• Holding regular team meetings to discuss progress
• Employing a common language to communicate.
 RESOLVING CONFLICTS

In any team, conflicts can arise due to divergent perspectives, misunderstandings, and inadequate
communication. Open communication is essential when addressing conflicts within the team, as it
facilitates the exchange of ideas and perspectives, ensuring that all team members are aligned.
Addressing issues promptly is also crucial, as it prevents the situation from worsening and facilitates a
more effective resolution. In some cases, considering the complexity of the situation or the team’s
inability to reach a resolution, it may be prudent to seek outside assistance when addressing conflicts
within the team.
 The Investigative Thinking Process

• The investigative thinking process is the beating heart of criminal investigations, pumping life into the collection and
analysis of data, the development of theories, and the identification of suspects. Like a mental map guiding investigators
through the twists and turns of a case, the investigative thinking process encompasses:
• Data collection and analysis
• Theory development and validation
• Suspect identification
• Adapting to changing circumstances.
• The ultimate aim of investigative thinking is to provide sufficient evidence to substantiate a belief, identify potential
suspects, and lead to an arrest and formal charges. This process is a mental exercise that requires investigators to critically
evaluate the evidence at hand, sift through the data, and draw meaningful conclusions. It’s a journey through the maze of
information, where each turn could lead to a new discovery or a dead end. The goal is not just to find the truth, but to
meticulously construct a case that can withstand the scrutiny of the legal system. It’s a delicate balancing act of being
thorough yet efficient, skeptical yet open-minded, and persistent yet adaptable. Every piece of evidence, every testimony,
and every clue is a part of the puzzle that can lead to the resolution of the crime.
DATA COLLECTION AND ANALYSIS

• Data collection and analysis form the foundation of the investigative thinking
process. This involves gathering and examining information from various sources,
such as witnesses, documents, and physical evidence, to support investigative
theories. The procedure for data collection and analysis entails gathering data
from multiple sources and evaluating it to validate investigative theories. Data
collection and analysis are essential for criminal investigations, as they assist in
identifying and analyzing evidence, formulating investigative theories, and
constructing a case against a suspect.
• Examples of data collection and analysis include gathering and analyzing
physical evidence, interviewing witnesses, and analyzing financial records.
 DEVELOPING THEORIES AND IDENTIFYING SUSPECTS

• Once data is collected and analyzed, it’s time to put on the detective hat and develop theories to
explain the evidence. Formulating theories and pinpointing potential suspects in the investigative
reasoning process involves analyzing the collected information and constructing hypotheses based on the
evidence.
• The analysis of evidence is critical in the investigative thought process, as it facilitates the recognition
of patterns and correlations between distinct pieces of evidence, which can then be utilized to devise
theories and pinpoint potential suspects. The procedure for identifying suspects involves collecting and
examining evidence, interviewing witnesses, and performing background checks. Once a suspect is
identified, additional evidence must be obtained and validated to ascertain the suspect’s participation in
the offense.
 ADAPTING TO CHANGING CIRCUMSTANCES

• As the saying goes, “The only constant in life is change,” and this holds true for criminal investigations as well. Adapting to
changing circumstances is crucial for investigators, as it allows them to:
• Adjust their investigative strategies and theories when new information is obtained
• Modify behavior or strategy to better suit the situation
• Improve the effectiveness of investigations
• Achieve better outcomes
• Adapting to changing circumstances involves:
• Accepting the shift
• Maintaining a positive attitude
• Gaining a different outlook
• Concentrating on what can be controlled
• Acknowledging the alteration
• Making preparations when feasible
• Calming the mind
• Being compassionate to oneself
• Conversing about it.
 INCIDENT INVESTIGATION PROCEDURES

• Conducting a thorough and effective criminal investigation involves following a series of steps and
procedures. These include securing the crime scene, collecting data and questioning witnesses, and
preparing investigation reports.
• By following such procedures, investigators can ensure that they are conducting a comprehensive and
successful criminal investigation that leads to the identification of the perpetrator and the collection of
sufficient evidence to support legal proceedings in cases of criminal incidents.
 SECURING THE CRIME SCENE

Establishing a secure perimeter around the crime scene is the first and most crucial step in any criminal
investigation. Securing the crime scene serves to safeguard evidence and ensure safety. This involves several
steps, such as:
1. Officer safety
2. Clearing the scene
3. Documenting movements
4. Establishing security
5. Planning and communicating
6. Conducting a primary survey
7. Searching for evidence
8. Securing and collecting evidence.
By following these steps, investigators can guarantee the integrity and admissibility of evidence in court,
ultimately contributing to the successful resolution of the case.
 GATHERING INFORMATION AND INTERVIEWING WITNESSES

• Gathering information and interviewing witnesses play a vital role in criminal investigations. Collecting information
from witnesses, documents, and other sources supports the investigation and helps build a strong case against the
suspect. This process is a cornerstone of any successful investigation, as it allows investigators to piece together the
sequence of events, identify potential suspects, and understand the motives behind the crime. Witnesses can provide
first-hand accounts of the crime, offering invaluable insights that may not be apparent from physical evidence alone.
Moreover, documents such as financial records, emails, and phone records can help investigators trace the suspect’s
activities leading up to the crime. By meticulously collecting and analyzing this information, investigators can construct
a compelling narrative that can stand up in court, increasing the chances of a successful prosecution.
• Gathering information and conducting interviews involve:
• Reviewing relevant case details and witness information
• Structuring productive interviews
• Asking open-ended questions for comprehensive information acquisition
• Careful planning of the interview, creating a comfortable atmosphere for the interviewee, and having a clear
understanding of the purpose of the interview are all important for successful interviews. Open-ended queries enable
the interviewee to furnish comprehensive details regarding the event or subject under discussion.
 PREPARING INVESTIGATION REPORTS

After the hard work of collecting and analyzing evidence and interviewing witnesses, it’s time to
document the findings and conclusions in an investigation report. Composing an investigation report
involves including an introduction, detailing the incident, delineating investigation methods, presenting
discoveries, offering analysis, making suggestions, and guaranteeing clarity and comprehensiveness. By
creating a clear and organized report, investigators can effectively communicate the results of the
investigation and support the prosecution in their pursuit of justice.
FINANCIAL INVESTIGATIONS: UNCOVERING FRAUD AND DECEPTION
• Uncovering financial fraud and deception is a complex and critical aspect of criminal investigations.
Financial investigations serve to recognize and record the movement of funds during criminal activities,
such as money laundering, terrorist financing, and other serious offenses.

• Techniques utilized to detect financial fraud and deception include tracing illicit transactions,
examining financial records, and collaborating with regulatory agencies. By employing these techniques,
investigators can identify new leads and uncover fraud and deception that might otherwise go unnoticed.
 TRACING ILLICIT TRANSACTIONS

• Tracing illicit transactions is a fundamental aspect of financial investigations. Identifying and

tracking potentially suspicious financial transactions helps to uncover criminal activity and track the
movement of illegal funds. The direct method of tracing illicit transactions involves examining the
subject’s books and records to comprehend the correlation between their receipts and expenditures.
The indirect method entails calculating the subject’s net worth by taking into account their liabilities
and assets and then analyzing any changes over time.

• By tracing illicit transactions, investigators can gain valuable insight into the financial aspects of
criminal activities. This process allows them to follow the money trail, revealing patterns of
suspicious activity, identifying potential fraud, and exposing the hidden financial networks that
criminals use to launder their ill-gotten gains. Tracing illicit transactions is often a complex task that
requires a deep understanding of financial systems and regulations. It is a crucial part of financial
investigations that can shed light on the scale and nature of criminal operations, helping law
enforcement agencies to dismantle criminal organizations and bring those responsible to justice.
 ANALYZING FINANCIAL RECORDS

Examining financial documents and records is another essential component of financial investigations.
The procedure for obtaining financial statement information involves obtaining and examining financial
documents, including balance sheets, income statements, and cash flow statements. Calculating ratios,
such as the debt-to-equity ratio, return on assets, and current ratio, can help evaluate a company’s
performance and detect signs of fraud or deception. By analyzing financial records, investigators can
identify potential risks and areas of vulnerability, ultimately uncovering financial fraud and deception.
 WORKING WITH REGULATORY AGENCIES

• Collaborating with regulatory agencies is a crucial aspect of financial investigations. Working with regulatory agencies
involves:
• Rulemaking
• A transparent public process
• Implementation
• Compliance
• Rulemaking facilitates the creation, amendment, or repeal of rules and regulations to ensure clarity and consistency. The
open public process allows members of the public to voice their opinions on proposed rules and regulations, ensuring that the
regulations are equitable and effective. In the implementation and compliance process, investigators must:
• Ensure adherence to the regulations
• Monitor compliance
• Provide guidance and assistance to those impacted by the regulations
• Take appropriate enforcement action when necessary
• By working with regulatory agencies, investigators can gather information and enforce laws related to financial crimes more
effectively.
 LEARNING FROM PAST INCIDENTS

The saying “history repeats itself” holds true in criminal investigations, as lessons learned from past
incidents can greatly improve future investigative efforts. By analyzing case studies, implementing
corrective actions, and providing training and development opportunities, investigators can enhance their
skills and knowledge, ultimately leading to more successful investigations.
 REVIEWING CASE STUDIES

• By examining past investigations, police investigators can identify successful strategies and areas for
improvement, ultimately enhancing their ability to solve complex cases. This process, often referred to as
“learning from experience,” allows investigators to reflect on their past actions and decisions, identify what
worked and what didn’t, and then apply these lessons to future investigations. It’s like a form of self-
evaluation, where investigators take a step back and objectively assess their performance. This can lead to the
development of new techniques, the refinement of existing strategies, and the avoidance of past mistakes. The
ultimate goal of this process is to constantly improve and evolve, ensuring that investigators are always at the
top of their game and ready to tackle the next big case with increased efficiency and effectiveness.
• Reviewing case studies involves analyzing the evidence, interviewing witnesses, and evaluating the outcomes
of the investigation. This process can be challenging due to the complexity of obtaining accurate information,
the possibility of bias, and the necessity to consider the context of the investigation. Nevertheless, the insights
gained from reviewing case studies can be invaluable in improving future investigative efforts.
 IMPLEMENTING CORRECTIVE ACTIONS

• Applying lessons learned from past incidents can greatly enhance current and future investigations, as
well as help prevent future incidents. Implementing corrective actions involves analyzing the existing
system, recognizing areas for enhancement, and devising a plan to tackle those areas.
• Conducting a root cause analysis involves:

1. Pinpointing the issue’s origin

2. Devising a resolution plan
3. Implementing corrective actions to address the underlying causes of past failures
4. Ensuring that they do not recur in future investigations.
 TRAINING AND DEVELOPMENT

• Providing ongoing training and development opportunities for investigators is essential to ensuring
their continued growth and improvement. The process for identifying and assessing needs involves
analyzing the current skills and knowledge of the investigators, determining any gaps therein, and
creating a plan to address those gaps. The instructional design is the process of constructing a program
for training and development that encompasses the objectives, content, activities, and assessments. The
delivery method for the training and development can be provided through in-person, online, or a
combination of both.

• By participating in training and development, investigators can improve their skills and knowledge,
ultimately leading to more effective investigations.
WHAT IS AN INVESTIGATION IN A CRIMINAL INVESTIGATION?
 WHAT IS THE PROCESS OF CRIMINAL INVESTIGATION?

The criminal investigation process encompasses multiple key steps, which together form the overall
investigative process:
1. Evidence collection and preservation
2. Communication and coordination within the investigation team
3. Utilization of the investigative thinking process for data gathering and analysis
4. Theory formation
5. Suspect identification
6. Adaptation to changing circumstances.

In addition, the process involves securing the crime scene, gathering information and interviewing witnesses,
and preparing investigation reports.
How do financial investigations help uncover fraud and deception?

Financial investigations can reveal hidden connections, trace illicit

transactions, and uncover criminal activities. This process involves
examining financial records and working with regulatory agencies to detect
fraud and deception.
 WHAT IS AN INVESTIGATION IN A CRIMINAL INVESTIGATION?

In criminal investigation, the term ‘investigation’ refers to the act of gathering and evaluating evidence to
back investigative theories and identify suspects. The purpose of investigation in the criminal justice
system is to:
• Collect evidence
• Evaluate data
• Construct and validate hypotheses
• Establish reasonable grounds for suspicion
• Ultimately arrest and accuse a suspect.
The process of investigation in criminal investigation involves various steps, such as gathering
information, conducting interviews, examining crime scenes, and identifying suspects and victims.
 GUIDELINES FOR EVIDENCE COLLECTION, PRESERVATION AND TRANSPORTATION

• Audio-Visual Analysis
• All items should be packaged in containers of suitable size.
• All items should be packaged in containers that will prevent contamination or deleterious change.
• Ensure that all evidence collected is properly documented, labeled, marked, photographed and inventoried before it is packaged.
• Remember that evidence may also contain latent, trace, or biological evidence so take appropriate steps to preserve it.
• Package all digital evidence in anti-static packaging to prevent it from static electricity. Only paper bags and envelopes, cardboard boxes and antistatic containers should be used for
packaging of digital evidence.
• The video evidence should be collected in its original format as it is recorded on the recording device (DVR, VCR, etc.).
• Make sure that the Pin/Pattern/password of the digital device (DVR, Mobile Phone etc.) is being provided by the evidence submitting person / Agency.
• Evidence should be packaged in a manner to avoid getting bent, scratched or otherwise deformed. Plastic material should not be used for packaging.
• Collect all power supplies, cables and adapters for all electronic devices seized.
• Shock resistance packaging material should be used to avoid physical damage to any components of the device(s).
• Label all containers used to package digital evidence clearly and properly.
• The packaging areas should be void of ultraviolet (UV) light (present in some types of fluorescent tubes). UV may hasten the degradation process.
• The packaging environment should have a mild temperature and humidity. An extreme environment can lead to spoliation of potential evidence, for example mold growth.
• All items are packaged in containers that can be sealed.
• The seals must display the initials of the personnel creating the seal.
• The seals must display the date when the seal is created.
• The seals must be made from a material that is tamper evident. The removal of the seal must cause some visible damage to the container that can indicate that the seal has been removed
or tampered with.
• The evidence packaging is labeled with at least the Submitting Agency case number and item number, date and initials of the person who packaged.
• It is advisable that forensic evidence tape shall be used.
• Transportation

• When transporting audio/video evidence:

• Keep the evidence away from magnetic fields such as those produced by radio transmitters, speaker magnets, and magnetic mount emergency
lights. Other potential hazards are seat heaters and any device or material that can produce static electricity.
• Avoid keeping the evidence in a vehicle for prolonged periods of time. Heat, cold, and humidity can damage or destroy the evidence.
• Ensure that computers or electronic devices are packaged and secured during transportation to prevent damage from shock and vibration.
• Document the transportation of the evidence and maintain the Chain of Custody on all evidence transported.
• Storage

• When storing audio/video evidence:

• Ensure that the digital evidence is inventoried.
• Ensure that the digital evidence is stored in a secure, climate-controlled environment or a location that is not subject to extreme temperature or
humidity.
• Ensure that the evidence is not exposed to magnetic fields, moisture, dust, vibration, or any other elements that may damage or destroy it.
 COMPUTER FORENSIC

• All items should be packaged in suitable sized containers that will prevent contamination or deleterious change.
• Ensure that all digital evidence collected is properly documented, labeled, marked, photographed and inventoried before it is packaged.
• Remember that digital evidence may also contain latent, trace, or biological evidence and take the appropriate steps to preserve it.
• Package all digital evidence in anti-static packing to prevent it from static electricity. Only paper bags and envelopes, cardboard boxes and
antistatic containers should be used for packaging of digital evidence.
• Evidence should be packed in a manner to avoid from being bent, scratched or otherwise deformed. Plastic material should not be used for
packing.
• Collect all power supplies, cables and adapters for all electronic devices seized.
• Shock resistance packing should be used to avoid physical damage to any component of the device(s).
• Label all containers used to pack digital evidence clearly and properly.
• Main system units and/or notebooks need to be secured in an appropriate container to avoid tampering or spoliation of the potential digital
evidence that could reside in it.
• The packing areas should be void of ultraviolet (UV) light (present in some types of fluorescent tubes). UV may hasten the degradation process.
• The packing environment should have a mold temperature and humidity. An extreme environment can lead to spoliation of potential evidence,
example mold growth.
• The collected digital device(s) should be stored in a secure environment or location that is not subject to extreme temperature or humidity. It should
not be exposed to magnetic fields, dust, vibration, moisture or any other environmental elements that may damage it.
• Leave Mobile Devices/ Smart Phones in the power state (On or off) in which they are found. If possible, place the
phone in flight or airplane mode.
• Mobile Devices/ smart phones should be isolated from the Network using Network Isolation Techniques i.e.
Faraday Isolation bags, Radio Frequency shielding material, anti-static packing and aluminum foils.
• All items are packed in containers that can be sealed.
• The seals must display the initials of the Submitting Agency Personnel, creating the seal.
• The seals must display the date when the seal is created.
• The seals must be made from a material that is tamper evident. The removal of the seal must cause some visible
damage to the container that can indicate that the seal has been removed or tampered with.
• The evidence packing is labeled with at least the Submitting Agency case number and item number.
• Transportation

• When transporting digital evidence:-

• The Potential Digital Evidence should not be left unattended during the transportation process.
• The Digital Evidence First Responder should maintain the Chain of Custody throughout the transporting process to
prevent possible tampering or spoliation, and maintain the integrity and authenticity of the digital devices and evidence.
• Keep digital evidence away from magnetic fields such as those produced by radio transmitters, speaker magnets, and
magnetic mount emergency lights. Other potential hazards are seat heaters and any device or material that can produce
static electricity.
• Avoid keeping digital evidence in a vehicle for prolonged periods of time. Heat, cold, and humidity can damage or
destroy digital evidence.
• Ensure that computers and electronic devices are packed and secured during transportation to prevent damage from
shock and vibration.
• Document the transportation of the digital evidence and maintain the Chain of Custody on all evidence transported.
 FIREARMS AND TOOL MARKS

• In order to minimize safety risks and contamination of evidence the following measures should be followed while packing the evidence:
• Every evidence exhibit must be packaged separately.
• Every firearm must be packaged in unloaded condition with safety on.
• There must not be live rounds in the chamber of the firearm, magazine or in the parcel.
• Every cartridge case and bullet must be packaged separately.
• Evidence submitted for Gun Shot Residue (GSR) analysis must be packaged in hard box instead of cloth bag or paper envelope. Layers of the clothes
containing GSR must not touch with the other layers. Clothes must be wrapped by placing a white paper sheet between the layers of clothes before packing
it in a hard box.
• For serial number restoration of firearms, area containing obliteration should be marked clearly if there is more than one location of obliteration.
• For trajectory analysis, vehicles must not be washed or cleaned at all prior to examination. Suspected bullet holes must be covered with white paper.
• Seals must be intact and as per mentioned in the docket.
• If firearm is recovered from water or any other liquid, then submit the firearm with the same sample of water or liquid from which it has been recovered.
• If any evidence related to a particular case is previously in PFSA custody, clearly mention the link of previous evidence while submitting new evidence.
• If firearm is recovered from water or any other liquid, then submit the firearm with the same sample of water or liquid from which it has been recovered.
• If any evidence related to a particular case is previously in PFSA custody, clearly mention the link of previous evidence while submitting new evidence.
 LATENT FINGER PRINTS

• Always use Personal Protective Equipment (PPE) while dealing with latent fingerprints evidence. It includes disposable gloves, facemask etc. In many
instances, latent fingerprints can and should be developed at the crime scene by evidence technicians or crime scene search officers using a multitude of
processes on all type of surfaces. Latent prints developed through traditional powder processing methods should be first photographed and then lifted with
transparent tape and submitted to the laboratory. Detailed information concerning the case, date, location and orientation of the latent should be recorded on the
lift card.
• If latent prints at a crime scene appear to be visible (patent prints), or if the lifting process may pose unique challenges, the latent prints should be
photographed. However, if any item of evidence is to be submitted to the lab for processing, it is best not to attempt any field recovery of latent prints.
• Item – Non-porous or Non-absorbent surfaces (Glass, Metal, Tile, etc. may be processed in the field.)
• Method –Generally, fingerprint powders should be used. Black powder is preferred because it produces the best ridge detail and is easier to compare. For
powders to be used, the surface must be dry. Wet items may be processed with small particle reagent (SPR) or should be allowed to fully air-dry. The use of a hair
dryer may produce too much heat causing the moisture in the latent print to evaporate.
• *Reminder: Whenever possible, non-porous items should be processed at the crime scene and the processed latent print(s) photographed / lifted and
submitted to PFSA for further enhancement and comparison.
• Discussion – Unnecessary transportation and handling may damage or even destroy print(s). In some cases, Cyanoacrylate Ester (commonly referred to as
Super Glue Fuming) may be considered. This technique has proven successful in developing latent prints on items such as plastic baggies, Firearms, Styrofoam,
and some types of leather.
• Packaging of Non-Porous Items:
• Non-porous items should be packaged in such a way that they remain in fixed position and should not move freely
inside the package during handling and transportation. Use of cardboard boxes and plastic ties is recommended as
packaging material.
• Item – Porous or absorbent surfaces (Paper, Untreated Wood, Cardboard, etc.)
• Method – Generally, a variety of chemical processes are available. The photography of chemically developed latent
prints is essential. Prints may fade or even completely disappear from the surface.

• Examples of Chemical Processes:

• Indanedione, Ninhydrin, Physical Developer for wet porous surfaces, Amido Black for bloody fingerprints etc.
• Packaging of Dry Paper Items
• Dry paper items can be collected and sealed into plastic bags (zip-lock).

• Packaging of Wet Paper Items

• Wet paper items should be air dried and once dried can be packaged.

• Important considerations for print collection

• For visible prints on small objects, such as a cup, collect the entire object. If the item is fixed and not transportable then it must be
processed for development of latent fingerprints at crime scene. Any bloody fingerprints on door etc. should be photographed with scale,
before and after applying any blood enhancement technique e.g. Amido black etc.
• Discussion – Photographs are important because damage to the impression may occur during attempts to enhance and lift it.
Avoid pressing or touching the impression with your finger or any object to see if the substance is dry or tacky. Doing so may result in
damage to the print.
• Case Submission

• Indicate all requested forensic examinations on the Evidence Submission Form. If it is a re-submission, note the previous PFSA case number in the
appropriate space on the Evidence Submission Form.
• Do not process any item that you are planning to submit to the laboratory and do not place tape over items of evidence where you think there
might be latent prints.
• Ensure that sharp objects such as broken glass or knives are packed safely and are properly labeled.
• NOTE: Paper bags are not considered to be good packing materials for sharp or broken objects. Sharp objects can easily puncture the bag and
cause injury.

• Good quality known prints are important and necessary. Smudged or blurred prints, overlays, too much ink, prints outside the blocks or off-
centered, etc., will reduce the chances for an identification to be affected.
• If suspects are known, please obtain a set of fingerprint and palm print cards and submit them with the evidence.
• Take elimination fingerprints of the victims, family members, caretakers, etc.
• Original questioned document must be submitted for Fingerprint Examination.
• Docket / Cover letter addressed to the Director General, PFSA, Lahore clearly indicating required analysis and details of questioned and reference
thumb impressions shall be required.
• Case Fee is required in Civil Cases hence, Bank Draft/ Pay Order from any bank in favor of DG, PFSA, Lahore must be submitted along with case
(photocopy of bank draft is not acceptable).
• No case fee is required for Criminal Cases from Punjab province but a copy of FIR must be submitted.
• No case fee will be charged from departments under Punjab Govt.
 FORENSIC PATHOLOGY

• Mini Autopsy means examination of all viscera (heart, lungs, liver, spleen, kidneys, gastrointestinal tract and brain
etc.), along with tissues of special interest (e.g. neck tissues in cases of strangulation, tissues around the bullet
tract with tissues from exit and entry wound in gunshot cases, etc.). Mini autopsies constitute a QC and QA
procedure for autopsies conducted in 800 autopsy centers of Punjab and elsewhere, where Forensic
Histopathology services are not available. Approx. 1/3rd of all Medico legal autopsies are referred for
Histopathological examination of the tissues, to reach the final diagnosis as to cause and manner of death, injuries
inflicted during life or after death; and to ascertain the role of various contributory factors in the process of death.
More than 2500 such cases are referred per year. Major problems encountered in such tissues sent from outside,
are briefly mentioned here:
• Poor Fixation
• The tissues are fixed in formalin solution, which is formaldehyde gas dissolved in water. With time, its
concentration declines gradually, especially if the lid of container is not tightly closed.
• If the tissues are sent in formalin which is below 10%, the tissues get autolysed. Therefore, good quality, freshly
prepared formalin should be used to fix the tissues.
• Fixative has to be added even in Exhumation cases
• Every specimen including soft tissues, bones, teeth and fetus etc. should be fixed
• If cytological examination of fluids, secretions and blood is required, then add few drops of 10% Formalin in the
specimen
• Brief medical history of the deceased should be clearly mentioned in the forwarding letter.
• Packing of histopathology (tissue) samples
• Completely immerse the tissues into 10% formalin solution in a plastic jar having screwed lid.
• Quantity of formalin solution should be 3 – 4 times the tissue size.
• Tightly close the lid.
• Place evidence tape around the lid.
• Sign the evidence tape at regular intervals so that half part of the signature is on the evidence tape and the other
half of the signature is on the container.
• Place stamps on the evidence tape in a similar manner. If evidence tape is not available, stamped red wax seals
may be used as an alternative.
• Place the sealed container/jar in a plastic bag and tie the knot.
• Labeling of samples
• Mention following information on the label on sample jars:
• Name of the deceased
• PMR/Case number
• Sample details
• Date and Time of sampling
• Collectors name, designation and signature
• Transportation of samples
• Place the sealed jar/s in an appropriately sized card board box and secure the containers in the box.
• Mention upper side on the box.
• Apply evidence tape at all opening slots of the card board box.
• Sign and stamp the evidence tape as mentioned above.
• Attach chain of custody form with the box.
• The sample jars may be transported individually as well. However, make sure that during transportation, they are
kept in upright position, so that formalin is not drained out. Otherwise, tissues would get dry and autolysed.
• Put postmortem report, all relevant documents such as Report of Death (Report e Marg), FIR/ Application ”Rapat”,
MLC, Road Certificate, Concise Case Details (Mukhtasar Halat e Muqadma), and in cases of Exhumation Legible
copy of Magistrate or Court Order Relative/Family request along with sample of evidence tape and/or sample of
signatures and stamp in an envelope.
• Seal the envelope with evidence tape signature and stamp as described above. If evidence tape is not available,
stamped red wax seal may be used alternatively, as described above.
• Send the histopathology samples and documents to PFSA.
• Polygraph Examination
• Following documents are required for polygraph examination
• Copy of CNIC of suspect or attested photograph of suspect
• Copy of FIR
• Request letter for polygraph examination
• Suspect must have had proper breakfast and sufficient sleep
• Suspect should not have been tortured for last 24 hours
• Suspect should not have used any illegal drugs for at least 24 hours
• Suspect should not have any injury or physical illness
• Suspect hands must be washed
• Do not tell the suspect about polygraph examination
• Investigation officer is supposed to prepare the case fully before briefing
• Questioned Documents
• Package the questioned document evidence in paper envelope of appropriate size and do not fold the questioned
documents.
• Write the necessary information on the envelope before packaging the questioned document evidence in it. Do not write
anything on the envelope after the evidence has been packaged.
• If the questioned document evidence is requested for indented writing/latent fingerprints test, then package the
evidence carefully in such a way that it is not rubbed with other packaged documents.
• Envelopes used for packaging the evidence should protect the evidence from wear and tear and contamination.
• Make sure that all the necessary documents required for the case are attached with and properly documented.
• Case documents should be protected from severe environmental conditions such as moisture and fire.
• If the questioned evidence consists of charred or water-soaked documents, then pack them in a suitable hardboard
box/container packed with cotton cushion so as to protect them from further destruction.
• Dispatch /submit the evidence in properly sealed form.
• Docket / cover letter should be addressed to the Director General, Punjab Forensic Science Agency, Lahore with clear
mention of required examination. The questioned, routine/ admitted and dictated exemplars should be clearly marked
and mentioned in the docket/cover letter.
• The case fee (If applicable) should be submitted only through Bank Draft/Pay Order in favor of the Director General,
Punjab Forensic Science Agency, Lahore.
• In case of extra ordinary large number of questioned exhibits, only probative evidence items, as determined in
consultation with the investigation officer, shall be examined.
• Trace Chemistry
• Due to the wide variety of evidence brought to the Trace Chemistry Department there is no single way to collect and pack the evidence.
Each scene should be carefully examined for the presence and identification of trace evidence. The probative evidence should be collected in
such a manner that it is not contaminated or lost. No harm to the integrity of the evidence should take place.

• Evidence Collection Methods

• Trace evidences like hair, fiber, paint chips, adhesive tapes etc. can be collected by the following methods.
• In all cases, the container must be labeled with at least the case number, exhibit number, date and initials of the concerned person, item
number, and item description.
• Handpicking
• Use forceps or other suitable tool to gently grasp the evidence item and carefully remove the item from the substrate.
• Package and seal the evidence item in a suitable container so that no contamination or deleterious change can occur.
• Tape lifting
• Remove the first several inches of clean transparent adhesive tape from the roll to eliminate any possible environmental contamination.
• Obtain a section of tape from the roll. The size of the section of tape needed depends on the size of the item being examined.
• One or both ends of the tape are folded upon itself to establish handles from which the tape can be pulled away from the storage
backing.
• The section of tape is applied to the item being examined. The adhesive side of the tape will collect any loosely adhering trace evidence.
• The collected tape lift is applied to a storage backing (e.g. clear acetate sheet).
• Package and seal the tape lift in a suitable container so that no contamination or deleterious change can occur.
• Shaking
• A section of examination paper is placed under the item to be examined.
• The evidence item is shaken over the section of examination paper.
• The section of examination paper is visually examined for the presence of evidentiary material (e.g. hair, fibers, and
paint chips). Any evidentiary material observed on the examination paper is removed by handpicking.
• The debris on the section of examination paper is transferred to a container and sealed so that no contamination
or deleterious change can occur.
• Scraping
• A section of examination paper is placed under the item to be examined.
• The evidence item is scraped with a clean scraping tool over the section of examination paper.
• The section of examination paper is visually examined for the presence of evidentiary material (e.g. hair, fibers, and
paint chips). Any evidentiary material observed on the examination paper is removed by handpicking.
• The debris on the section of examination paper is transferred to a container and sealed so that no contamination
or deleterious change can occur.
• Paint Evidence
• Paint samples collected should represent all the layers of the paint present. The sample should be chipped
off down to the unpainted surface.
• If possible, submit the entire object on which the paint is observed, including smears and transfers. DO
NOT attempt to remove paint from clothing, tools or objects where smears and transfers are deposited.
• If it is not feasible to submit the entire object, use a clean knife blade or scalpel to remove the area of
interest including all the layers possible.
• Small samples can be retrieved using forceps or tweezers.
• Place sample in a paper fold or vial. DO NOT use an envelope. Small samples may be lost among the
folds, openings and seals of the envelope.
• Place different samples in separate containers to avoid contamination.
• Be sure to seal the container and record the proper identifying information on the container and exterior
packing.
Reference Comparison Sample for Paint Analysis
Collect a paint standard. A paint standard is a known sample of the undamaged paint collected from the
same area as that of the damaged paint being analyzed.
• Standard paints should be at least ½ square inch of solid paint with all layers represented (down to
the substrate).
• Take standard paint samples from near the damaged areas. Paint may vary in type or composition in
different locations on a vehicle or item even though the color appears to be the same. Therefore, it is
important that known paint standards be collected from each separate panel or area of the object
showing fresh damage.
• Place each paint standard in a different paper fold, seal and label.
• In addition to the case and investigator information, the label must include the specific source of the
sample e.g., make and model of the vehicle, known Paint samples must be collected from every
vehicle or painted object involved in the incident, even if some known paint standard is included
during the removal of questioned transfers.
• Hair Evidence
• For the majority of cases, the Trace Chemistry Department will evaluate human hair evidence to determine the
potential for obtaining a DNA profile. Such an evaluation includes examining the hair characteristics to determine
animal versus human; body origin (scalp, pubic, etc.) and growth phase.
• Hair evidence can be collected in a number of ways including the following methods:
• Picking (For visible hair)
• Tape lifts
• Scraping
• Shaking
• If the entire object, such as an article of clothing, containing possible hair evidence is to be submitted to the lab,
place the object onto clean craft paper and paper fold. Seal the fold and place in a paper bag or envelope. Seal the
container and include the proper identifying information.
• Hair Sample Standards
• Whenever hair is collected, the roots should be included because considerable information can be obtained from
the root material.
• Head or Scalp Hair: The hair should be representative of the center, front, back (including nape of the neck), and
both sides of the scalp. Approximately 50 head hair should be collected. The sample should include both pulled and
combed hair and include any variations in color and length. If additional facial hair are collected (i.e. sideburn or beard
hair), these should be packed separately.
• Pubic Hair: When indicated by the circumstances, collect pubic hair. Approximately20-30 pubic hair should be
collected.
• Animal Hair: Comb and pull hair; pulling is necessary as roots are needed for species identification in some
animals. While a minimum number of hair is difficult to determine, good judgment should be used in collecting
enough hair to represent the various types and colors of hair found on the animal. Hair should be collected from
various areas of the animal including the head, back, belly, tail, etc. Each sample should be packed separately and
labeled with the body area from which it was collected.
• Fiber Evidence
• Fiber evidence may be collected in the same manner as hair evidence. These methods include but not limited to
picking, tape lifts, and scraping. Please refer to “Hair Evidence” section. DO NOT place fiber evidence loose in an
envelope, but in a paper fold.
• Fiber standards should be collected from all the sources that the victim and suspect are suspected of contacting.
Submit the entire item to be used as a fiber standard. If this is not possible cut a small swatch (i.e. for a car seat), or
pull random samples of fibers (i.e. for carpets). When collecting fiber standards from a vehicle, be sure to collect
samples from all areas which may have transferred fibers (i.e. front and rear floorboard carpeting, all mats, front and
rear seat upholstery and any trunk liners). These areas may appear the same but may be manufactured differently
from each other and laboratory analysis may be needed to tell them apart.
• Adhesive Tape
• Tape fragment from the crime scene and/or victim must be packaged in sealed and labeled separate parcels preferably affix on the
plastic sheets.
• The reference tape fragment or tape roll recovered from the suspect in a separate sealed and labeled parcel for comparison.
• Explosive evidence (Pre-blast/Post blast)

• A. General Considerations
• 2 - 5 gram of sample from the suspected explosive material/ bomb device should be received.
• In case of detonating cords like prima cord and safety fuse, only 3-6 inches of the sample cut from the prima cord must be submitted.
• Intact detonators, hand grenades, suicide jackets, mines must not enter to the lab premises and are strictly prohibited to receive.
• Only the 2 - 5-gram chemical/suspected explosive material recovered from the explosive devices [Intact detonators (0.1-0.5 gram), hand
grenades, suicide jackets, mines] and sealed in a labeled parcel should be submitted for analysis.
• No trace evidence case must be sent to PFSA through courier service, all the case evidence item must be submitted by the authorized
person nominated by the submitting agency along with the clear information related to the evidence samples being submitted to PFSA.
• Debris collected from the blast seat/blast scene like soil, metal parts, suspected bomb device parts like deformed metal pieces, plastic
pieces, ball bearings, jagged fabric, broken time devices etc. in SEPERATE sealed and labeled parcels clearly mentioning the location
from where the evidence was collected.
• Intact soil sample mentioning as “control” taken out from the uncontaminated nearby place at blast scene, in separate sealed and
labeled parcel must be submitted.
• B. Essential properties of Container Used for Packaging
• Unused
• Airtight (For all Fire Debris and most Explosives or Chemical Items)
• Clean–no hydrocarbon or other chemical residue
• Inert–will not break down when heated or in contact with solvents
• Will not promote a static electrical charge ( For Explosives)
• C. Seals
• A clean seal is essential.
• Containers must be completely sealed to prevent any passage of vapors or contaminants into or out of the container. Be
certain, can lids are tight all the way around. For plastic bags, they must be heat sealed completely with no flaws in the
seam if they are being used for fire debris samples.
• Tamper evident tape (tamper proof tape) must be placed across the container lid/seam in such a manner that the item
cannot be partially or completely opened without tearing the tape.
• Seals and Tape must be dated with case number and exhibit number and initialed/signed by the investigator of record. The
date of the seal should also be included.
• Acid Examination
• The suspected container of acid recovered from the place of occurrence or from the possession of the
suspect/accused, making it airtight/leak proof or pack in the air tight container.
• Suspected liquid 15-20 ml in a sealed and labeled airtight container.
• Affected clothes of victim in a sealed and labeled airtight container.
• Debris from the place of occurrence suspected to be having traces of acid spillage in sealed and labeled airtight clean
containers, clearly mentioning the place from where the sample was taken out.
• Biological samples like skin, flesh, human remains, blood etc. are not accepted in Trace Chemistry Department.
• Fire/Arson Cases:
• The suspected container of the ignitable liquid recovered from the place of occurrence or from the possession of the
suspect making it air tight or placing in the airtight clean metal paint cane.
• Suspected ignitable liquid 15-20 ml in a sealed and labeled airtight container.
• Semi burnt cloth of victim placed in a sealed and labeled airtight metal container.
• Debris from the place of occurrence suspected to have traces of ignitable liquid residues packaged in sealed and
labeled airtight clean metal containers.
• Control sample from intact place like soil debris, intact carpet piece etc. for comparison purpose.
• Packaging must be Unused.
• Airtight clean (no hydrocarbon or other chemical residue) metal paint can or heat resistant nylon bags. (For all Fire
Debris and most Explosives or Chemical Items)
• Clean–Inert–will not break down when heated or in contact with solvents
• Gunshot Primer Residue
• Sample Required:
• Pure carbon adhesive stubs dabbed from both hands of the shooter preferably one stubs from each hand
including back and palms in a sealed and labeled parcel.
• No cotton swabs or hand washes from the hands of the shooter are accepted.
• At least 2 Adhesive carbon stubs dabbed from (1: right hand & Palm, 2: left hand back & palm)
• GSR sampling must be done within 4- 6 hours of shooting. After that, GSR sample may not be present for
detection and identification.
• HAND WASH is not suitable for GUNSHOT PRIMER RESIDUE analysis.
Footwear/Tire Impression Comparison
•The footwear mold/cast from the place of occurrence placed in a sealed and labeled
cardboard box.
•The mold of the suspect’s shoes preferably along with the shoes of the suspect in a
separate sealed and labeled cardboard box.
•Tire track mold/cast from the place of occurrence in a sealed and labeled cardboard box.
•The reference mold of the tires preferably along the tires of the vehicle.
•Bare foot impressions are not accepted in Trace Chemistry Department.
• Toxicology
• Sample must be submitted in preservative and amount as described below.

• For Medico-legal cases (MLCs):

1. Blood: 10 mL, preserved with sodium fluoride and potassium oxalate, mixed in the ratio 1:3. 20 mg of this mixture is sufficient for preservation of 10 ml of blood.
2. Urine: 20-50 mL, without any preservative.
3. Gastric Lavage: Minimum 20 mL, First undiluted portion without preservative.
• For Postmortem cases:
• 1. Blood: 50-100 mL, preserved with sodium fluoride and potassium oxalate, mixed in the ratio 1:3.

• 100-200 mg of this mixture is sufficient for preservation of 50-100 ml of blood.

• 2. Urine: Shall be submitted all available without preservative.

• 3. Stomach contents: Shall be submitted all available without preservatives.

• 4. Liver: Not more than 100 grams preserved in saturated saline.
• 5. Spleen: Not more than 100 grams preserved in saturated saline if Carbon monoxide poisoning is suspected.
• 6. Abdominal paste: Only in exhumation if above mentioned samples are not available (minimum 100 grams shall be submitted), without preservative.
• 7. Hair: Accepted only in chronic drug exposure (Hair cluster (pulled or collected as near to scalp as possible) having thickness of a pencil shall be submitted).
• Collection, Preservation and Transport of Evidence
• Collect toxicology samples as soon as possible after the offense, in death cases before embalming where applicable. Pack specimens in well-sealed, leak-
proof containers, all samples must be collected in separate containers. For most specimens, disposable hard plastic or glass tubes are recommended. Blood
tubes should be sealed and kept cold, but do not freeze. Never expose specimens to hot temperatures.

• Labeling
• For a valid chain of custody, all items of evidence must be labeled with the following information:
• Name of victim or suspect.
• Case number.
• Type of specimen (i.e., Blood, Urine).
• Site of collection (i.e., Femoral, Heart).
• Amount of specimen.
• Time and date of collection.
• Name(s) of the medical examiner or person collecting the sample
• Finally, tamper-resistant tape with the collector’s initials and the collection date should be placed over the specimen lid and container to document specimen
integrity. Alternatively, all the samples collected for a given case may be placed in a tamper evident container labeled with the case number and name.
• Narcotics
• Evidence must be packed in sealed, neat plastic bag, cloth wrap, paper envelop or box.
• Liquid samples should be packed in leak proof sealed bottle.
• All samples must be packed separately.
• Seal markings on evidence must be same as mentioned on FIR copy.
• Wet plant material should be placed in paper envelop or paper fold to prevent deterioration.
• FIR copy, Analysis Request Letter (e.g. DPO/CPO letter or equivalent) and Road Certificate etc. should be
submitted with the evidence.
• The court’s order for analysis is the least requirement for the cases submitted by courts.
• FIR # and evidence description should be same on all documents and evidence packing.
• Evidence should be submitted by the Investigation Officer or by the person whose name is written on Road
Certificate as submitting person.
• DNA & Serology

• 1-Definition
• Biological evidence refers to the samples of biological material such as hair, tissue, bones, teeth, blood, semen, or
other bodily fluids. Evidence items containing one or more of the aforementioned biological material are also treated
as biological evidence.

• 2-Objective
• The objective of effective collection, packaging and transport of biological material for forensic DNA analysis is to
ensure the safety of personnel handling the evidence, preserve the integrity and quality of biological material and
avoid its contamination, premature destruction or degradation.
• 3-General Guideline for the Collection, Packaging and Transport of Biological Evidence

• 3.1-Biological Evidence Safety and Handling

• Individuals handling any evidence should assume that all of it might contain potentially hazardous biological material. It is not possible to determine if every bodily fluid or stain collected
from crime scenes is contaminated with bloodborne pathogens; therefore, all bodily fluids and tissues are presumed to be contaminated. Common diseases/viruses caused by exposure to
bloodborne pathogens include hepatitis and human immunodeficiency virus (HIV). These raise the most concern because of the potential for lifelong infection and the risk of death associated
with infection once an individual is exposed.
1. The appropriate use of personal protective equipment (PPE) is recommended to protect the individual and the evidence from cross-contamination. PPE includes disposable gloves,
disposable overalls, laboratory coats, masks, and eye protection.
2. PPE should be used in every situation in which there is a possibility of exposure to blood or infectious diseases. Gloves and protective clothing should be worn when conducting medico
legal examination, autopsy or collection of biological evidence, handling soiled materials or equipment, and cleaning up spills of biologically hazardous materials. Face protectors, such
as splash goggles, should be worn to protect against items that may splash, splatter, or spray.
3. PPE must be clean and in good repair. PPE that is torn or punctured, or that has lost its ability to function as an effective barrier, should not be used. Disposable PPE should not be
reused under any circumstances. While using PPE, individuals should not touch their eyes or nose with gloves.
4. PPE must be removed when it becomes contaminated and before leaving the work area. Used protective clothing and equipment must be placed in designated areas for storage,
decontamination, and disposal.
5. Dried blood or other dry potentially infectious material should not be assumed to be safe. PPE should be used when handling these items.
6. When wet material is spilled, the area containing blood or other potentially infectious material should be covered with paper towels or rags, covered with a disinfectant solution (10 %
bleach solution), left for at least 10 minutes, and removed. Materials should then be placed in a waste disposal bag designated for biohazardous material. Appropriate PPE should be
used throughout this process.
7. Biological evidence packages must be appropriately labeled to indicate that they contain biological material, which may potentially be infectious so that other individuals could avoid the
risk of exposure or contamination of the evidence.
8. Any accidental direct exposure to the biological evidence must immediately be reported to an appropriate healthcare provider.
• 3.2-Packaging of Biological Evidence
1. Use paper bags, manila envelopes, cardboard boxes, and similar porous materials for the packaging of all biological evidence.
2. Do not use glass bottles, plastic jars, metal containers, polythene bags or other such like non porous materials for the packaging of
biological evidence. Bacterial growth or mold can irreversibly damage and degrade the biological material in such like packaging.
3. Package evidence and seal the container to protect it from loss, cross-transfer, contamination, and/or deleterious change.
4. For security purposes, seal the package in such a manner that opening it causes obvious damage or alteration to the container or its
seal.
5. Evidence tape or clear scotch tape may be used to seal evidence. Mark across the seal with the sealer’s identification or initials and the
date. Signature of the sealer should be inscribed on the seal such that half of the signature are on the tape and the other half is on the
envelope or container.
6. Package each item separately and avoid comingling items to prevent cross-contamination.
7. Each evidence item packaging must be labeled bold and clear to indicate BIOLOGICAL EVIDENCE.
8. At a minimum, mark each package with a unique identifier, the identification of the person who collected it, and the date of collection.
The unique identifier should correspond to the item description noted on the PMR or MLC, police docket or doctor’s request for test
and the road certificate. Packaging should also be labeled to indicate the unique identity of the evidence within. For example, the name
of patient, FIR Number, MLC Number or PMR Number must be clearly labeled on the packaging.
1. DNA is best preserved in an air-dried, water-free environment. Water can cause instability and breakage in strands that bind DNA, which
would degrade the ability to properly test. Further, the presence of water encourages the growth of yeast, mold, and bacteria, which can
also degrade DNA. Therefore, all biological evidence samples must be in dry form prior to packaging, temporary storage or
transport. Drying wet items of evidence, such as swabs or a blood-soaked or mud-stained garment, should be the first task of anyone
handling wet biological evidence once it has been collected.
2. Blood-draw samples or tissue samples may however be packaged and transported without drying. If drying wet evidence is not possible,
place the evidence in an impermeable, nonporous container and place the container in an ice box or refrigerator that maintains a
temperature of 2 °C – 8 °C and that is located away from direct sunlight until the evidence can be submitted to the laboratory.
3. Unload, make safe, and place all firearms submitted into evidence for biological testing into a new cardboard gun box. As the submitting
individual, seal the box and indicate on the exterior of the box that the weapon was unloaded, made safe, and may contain biological
material.
4. Sharp weapons such as knives, daggers, shovels etc. should be packaged in appropriate sized cardboard box or carton. As the
submitting individual, seal the box and indicate on the exterior of the box that it contains SHARP weapon and may contain biological
material.
5. Maintain the integrity of the item through the package documentation, including all markings, seals, tags, and labels used by all of the
involved agencies. Preserve and document all packaging and labels received by or returned to the agency, because this information is
critical.
• 4- Guideline for the Collection, Packaging and Transport of Evidence in Sexual Assault Cases

1. PFSA Sexual Assault Evidence Collection Kits (SAECK) are designed for the effective collection of evidence from the victims of sexual assault. PFSA SAECKs
must always be used for the collection and packaging of evidence in rape cases. The PFSA SAECK contains sterile swab sticks, distilled water and comb for the
collection of evidence; a pair of sterile gloves to be used while collecting and handling biological material for the safety of evidence collector and prevention of
samples from contamination; paper envelopes of various sizes for the packaging of evidence and tamper proof tape for appropriate sealing of evidence for
submission.
2. Victim’s underwear and garments worn at the time of assault should be collected and packaged in the envelope provided in the sexual assault evidence kit.
3. Evidence should be collected after a thorough evaluation of the assault and background history are obtained, if possible. Documentation typically referred to as
medico legal examination report or certificate (MLC) should contain specific information about the assault, what items were collected during the exam, and
personal information from the victim.
4. Prior to collection of evidentiary items, medico legal examiners must consider several factors to assist in guiding their collection and treatment efforts. These
factors may include the assault activity, time elapsed since the assault, post assault activities, the age and gender of the assault victim, and mental capacity, to
name a few. History written in the MLC should incorporate descriptive notes on the aforementioned factors.
5. Evidence collection should be guided by the background history, focusing specifically on the suspect’s actions during the assault. However, if the victim is
unable to recollect a complete background history due to trauma or pre-existing mental in capacity, a full range of samples should be collected assisted by the
physical assessment.
6. Additional considerations prior to sample collection must include the activities of the victim following the assault. Activities that may impact evidence collection
include bathing, brushing of teeth, mouthwash, vomiting, douching, urination and defecation. Careful consideration of the assault activities and post assault
activities prior to sample collection is vital. For example, the analysis of swabs collected by swabbing from areas that are kissed, licked, sucked or bit may be
impacted if the victim has showered or bathed between the assault and the time of collection. The victim should therefore be carefully interviewed to record
appropriate observations about these post assault activities and findings should be documented on the MLC.
1. Internal swabs such as from the vagina, mouth or rectum may still be viable for collection even after showering o
bathing by the victim, dependent upon the length and thoroughness of the cleansing and time since the assaul
Internal and external swabs should still be collected even if the victim has bathed, as the bathing may not have bee
vigorous enough to remove the fluids or DNA from the victim.
2. Potential biological evidence deposited onto a substrate such as clothing, towels, paper towels or tissue papers d
not have the same time restrictions as biological evidence deposited on, or within, the victim’s body. Therefore
garments and wipes etc. must always be collected and submitted for DNA analysis regardless of the time elapse
since sexual assault.
3. Evidential items are collected with the perspective of recovering as much DNA foreign to the victim as possibl
during the collection process. Measures should therefore be taken to concentrate the foreign material by using th
fewest number of swabs necessary for the collection site.
4. If multiple swabs are used during the collection, they should be collected concurrently.
5. If swabs are not taken concurrently, then the order of the swabs collected must be noted, appropriately labeled o
the swab packaging and documented. When more than one swab is collected from an area then these swabs shoul
also be collected in a consistent fashion. For example, if one moistened swab was used for evidence collection, the
the second swab should also be moistened.
6. Only sterile standard cotton tip swabs, provided in PFSA SAECK or otherwise commercially available, can be use
for collection of evidence from the body of victim. Homemade swabs and cotton balls etc. should never be used fo
evidence collection.
7. Swabs should always be properly air dried prior to packaging. Swabs should never be packed in any liquid o
preservative.
8. Garments, if blood stained or wet, should be dried prior to packaging.
5- Guideline for the Collection, Packaging and Transport of Biological Evidence in Dead Body Identification Cases
Sample Submission Form for Dead Body Identification through DNA Profiling

6- Reference Samples
Buccal swab are collected at PFSA Lahore as standard reference for DNA profiling, in accordance with the ERU SOPs.
 WHAT IS WHITE COLLAR CRIME INVESTIGATION?

White-collar crime is the range of crimes that are committed by professionals who are either
in business or government. It is a term that refers to crimes that involve deceit, concealment
or some abuse of trust rather than the use or threat of physical violence.
WHAT IS CONSIDERED A WHITE COLLAR CRIMINAL?

White-collar crime is generally non-violent in nature and includes public corruption, health
care fraud, mortgage fraud, securities fraud, and money laundering, to name a few.
WHAT IS THE MOST COMMON WHITE COLLAR CRIME?

A few of the most common types of white collar crimes include: Embezzlement: This crime
occurs when an individual or organization allegedly misappropriates funds or assets that
have been entrusted to them. This can include taking money from a company or stealing
property or investments.
 COMMON CHARACTERISTICS

Although white-collar crimes are quite varied, most have several characteristics in common. First, they involve the
use of deceit and concealment, rather than the application of force or violence, for the illegitimate gain of money,
property, or services. A defendant convicted of making false statements in order to obtain a government contract,
for example, is considered a white-collar criminal.
Next, white-collar crimes typically involve abuse of positions of trust and power. Public officials who solicit and
accept bribes, or corporate officers who fix prices to drive competitors out of business, are engaging in such
abuse of their positions. White-collar crime is also often more difficult to detect than other types of crime, in part
because losses may not be immediately apparent to victims but also because the crimes can
involve sophisticated schemes and cover-ups. Many white-collar crimes require concerted criminal activity by
coconspirators. For example, a case of real-estate fraud may involve the knowing participation of an escrow
officer, a buyer, an appraiser, and a bank officer, all of whom were willing to sign false documents to perpetrate a
fraud for personal gain.
Fraud, the most common type of white-collar crime, involves obtaining money or services by making false
representations or promises. The key question in these cases is ordinarily whether the defendant intended to
deceive the victims or merely failed in an honest business venture. One of the most common types of fraud
involves telemarketing schemes that misrepresent the value, the terms of sale, or the use of the goods or
services being sold.
Perjury, obstruction of justice, false statements, and witness tampering are also considered
white-collar crimes. Although the goal is not necessarily to obtain money or services, these
crimes are illegal because they interfere with the proper functioning of the justice system.
Bribery and extortion are more general, in that they constitute illegal means of influencing
persons in power in public or private institutions. Bribery involves the giving of something of
value in exchange for an official’s exercise of power. Extortion is a threat made to obtain a
benefit from either a public official or a private individual. Money laundering is a relatively
new type of white-collar crime that is utilized by criminals wishing to conceal profits gained
through illegal activities. Drug dealers and purveyors of counterfeit goods and currencies will
create money-laundering schemes to hide the source of their earnings.
A wide variety of regulatory offenses are also considered to be white-collar crimes. These
may include violation of tax laws, avoidance of currency-reporting requirements, securities
violations, and environmental crimes. In addition to criminal punishment, those convicted of
regulatory violations may also be subject to civil and administrative penalties. Such
violations, unlike common-law crimes, may not require any criminal intent by the defendant.
Instead, they may be seen as “strict liability” crimes for which mere failure to comply with the
legal standards is sufficient grounds to establish criminal liability.
Computer crimes represent one means by which white-collar criminals exploit technology. Common examples cover
a wide variety of criminal activity, including using a computer as a mechanism for committing securities fraud, credit-
card fraud, and identity theft. Computer crimes also may involve illegally accessing and tampering with other users’
computer files.
Cost to society
White-collar crime represents one of the fastest-growing types of crime in the world. Nearly every category of white-
collar crime has increased in incidence in recent years. For example, over the course of two years in the early 21st
century, annual losses from fraudulent use of identity rose by more than $300 million in the United States. Likewise,
while the number of almost every other type of civil lawsuit in the United States decreased around the turn of the
21st century, the number of government and private lawsuits for white-collar crimes more than doubled in the same
time period.
 ENRON SCANDAL

Former Enron employees sitting with their belongings after layoffs by the bankrupt energy-trading company.(more)
This represented a trend, begun in the late 20th century, of a number of highly visible white-collar prosecutions in the
United States. They included the prosecution of financiers Ivan Boesky (1986) and Michael Milken (1990) for billions
of dollars in securities fraud, the convictions of banker Charles Keating (1992 and 1993) for having looted his
own savings and loan (S&L), ultimately touching off what became known as the “S&L Crisis,” and the guilty plea
entered by Enron Corp.’s chief financial officer, Andrew Fastow (2004), on charges of having manipulated off-
balance-sheet transactions (in this case, of having concealed the company’s debt obligations by transferring them to
offshore partnerships), which led to Enron’s collapse. In an associated case, Enron’s accounting firm, Arthur
Andersen LLP, was convicted of obstruction of justice (2002; overturned in 2005), which caused the firm to go out of
business.
Similar cases have occurred throughout the world. In February 1995, Barings Bank in London collapsed as a result
of deceptions practiced over three years by one of its futures traders. In Canada, two people pleaded guilty in 2001
to having bilked financial institutions, including the Royal Bank, out of $92 million by creating 52 fake leases for
nonexistent medical equipment.
Although white-collar crime has traditionally been viewed as less serious than other types of crime (largely because
it does not involve physical violence), by the late 20th century there was a growing recognition of the significant harm
it causes. In a single year, for example, nearly $500 million in restitution was awarded to victims of white-collar
crimes.
What's the difference between white collar crime and crime?
White collar crime refers to financial crimes like embezzlement and insider trading, whereas
blue collar crime refers to street crimes like assault, burglary, and drug crimes. The terms
“white collar” and “blue-collar” originally referred to different types of jobs.

Is cyber crime a white collar crime?

A cyber crime may simply involve use of the internet to carry out traditional white collar
crimes such as the following: Fraud — An example of fraud on the internet is selling fake or
non-existent goods or services.
Identity theft has become an epidemic in Washington state and across the United States, claiming over 10 million
victims last year alone. It's also one of the most costly crimes to consumers and businesses, and is the fastest
growing white collar crime in America according to the FTC. Identity theft has become an epidemic in Washington
state and across the United States, claiming over 10 million victims last year alone. It's also one of the most costly
crimes to consumers and businesses, and is the fastest growing white collar crime in America according to the
FTC.

It involves analyzing any information that might help identify suspicious patterns and potential sources of illicit
funds: financial transactions, customer behavior, and other relevant data. Sometimes an AML investigation will
conclude that no money laundering activities are taking place.
•
It involves analyzing any information that might help identify suspicious patterns and potential sources
of illicit funds: financial transactions, customer behavior, and other relevant data. Sometimes an AML
investigation will conclude that no money laundering activities are taking place.

How is money laundering a white-collar crime?

Money laundering is a relatively new type of white-collar crime that is utilized by criminals wishing to
conceal profits gained through illegal activities. Drug dealers and purveyors of counterfeit goods and
currencies will create money-laundering schemes to hide the source of their earnings.
How can I be a good AML investigator?

The most important skills needed to be a good anti-money laundering analyst include:

1. Attention to detail.
2. Analytical skills.
3. Critical thinking skills.
4. Organizational skills.
5. Adaptability.
6. Time management skills.
7. Communication skills.
8. Computer literacy.
What is AML Analytics and How Can It Help?

An Anti-Money Laundering (AML) analyst - sometimes referred to as an investigator -

essentially monitors and investigates suspicious financial activity. Typically empowered with
an end-to-end anti-money laundering solution or software, AML analysts can use digital tools
to better understand financial transactions and identify trends.

Sorting the 'legitimate' transactions from the 'bad' can be a major challenge for financial
firms, which is why investment in the technology required to support AML analysts is the key
to efficient and effective detection and investigation.
Why it's time to support your AML analysts
The impact of not having these tools or a comprehensive AML analysis process is terribly apparent. Despite having
"appropriate measures" in place, for four years, major British banks unknowingly processed hundreds of millions of pounds
believed to be linked to criminals and corrupt officials. Evidence obtained by the UK Government indicated that several of
the UK’s biggest banks were involved in processing money from a Russian scam, believed to involve upto $80bn (£65bn).
Although a small portion of that amount was routed through UK banks, £600m, the report indicates that it was done
through 1,920 transactions, highlighting that more needs to be done to identify illegitimate transactions.

Despite this being what AML analysts are brought in to prevent, money laundering continues to be a huge problem for
financial institutions and governments across the world. Estimates suggest that global money laundering transactions are
about 2 to 5% of global GDP, roughly $1-2 trillion annually.

Monitoring and identifying illegitimate transactions manually is becoming more and more difficult for financial firms, but
there is a solution: a combination of sophisticated transaction monitoring tools and effective AML analysts.
What does an AML analyst do?
The AML analyst role can be diverse, including investigation of cases highlighted by, typically, a
transaction monitoring system; but roles can also extend to include system tuning / improvement.

What AML analysts are routinely required to explain to regulators, examiners and auditors are their
strategies for monitoring and prioritising risks. AML analysts must know their clients inside out,
document information on clients using a variety of research sources, liaise with compliance teams on
specific requirements and review data to ensure AML regulations are met.

Advanced analytics continue to support AML compliance processes: final decisions require human
intervention, and AML analysts form a key part of the compliance process for the firm.
What skills make an exceptional AML analyst?

Complete understanding of the firm’s business

Good AML analysts have typically worked in multiple parts of the business. They have a great understanding of the
firm’s products and services; and understand transaction types, including the typical customer level interactions.

Excellent communication skills

An AML analyst must know the firm’s business well enough, and also be supported by appropriate systems and
infrastructure, to allow detection and presentation of suspicious cases. This is particularly important if they are involved
in tuning existing systems or scenarios.

The ability to work together with multiple compliance teams and interpret regulations
A big part of what an AML analyst does is supporting multiple compliance teams with the interpretation of regulations
and meeting requirements driven by external and internal parties. This can include assisting on changes in regulations,
modifying the transaction monitoring system to reflect those changes, through to highlighting the implications of new
products or services, as well as the possible issues from a compliance perspective.
Consistency and insight
As more information is presented to AML analysts, it is essential to be able to consistently
interpret and assess the details for risk. A standardised approach to evaluating risk not only
considers activities such as KYC (Know your customer), but also understanding the details
being presented in terms of AML risks. If AML analysts are using differing methods of
investigation, it becomes difficult to explain and validate cases objectively.

Can interpret new compliance requirements

Continuing development of new regulations mean that AML analysts need to be able
to understand and apply those to existing systems. At a high level, this can be supporting the
creation of additional scenarios for monitoring purposes through to the definition of
investigation processes.
A comprehensive understanding of data sources
Legacy data from differing sources/systems can be vital to building a comprehensive profile of client
activities to allow transactional risk assessment. In some instances, transaction monitoring systems may not
have all elements of data provided on a scheduled basis. Missing data could mean the difference
between identifying a case of money laundering or failing to flag it. Understanding where to identify
additional data within existing systems, and integrate it into their investigation processes is a key AML
analyst role.

Supporting AML Analysts with technology

In order to develop a comprehensive, firm-wide strategy in relation to fraud and money laundering, financial
firms need to invest more into sophisticated fraud detection, anti-money laundering solutions and AML
analysts. Technology plays a key part in the data collation and assessment process, but it is up to the
AML analyst to validate that information in light of compliance regulations.
How long does it take to investigate money laundering?
As you can see, with many factors to consider, this entire process can take anywhere from 1 day to 1
week, depending on how quickly and accurately both firm and client collect and provide information and if
any additional measures need to be taken, as well as the process and software used to detect fraud or
verify.

Why do you want to be an AML investigator?

The heart of being an AML Analyst is to prevent money laundering. Money laundering is a major risk to
society. It gives criminals the financial ability to pay for and continue to commit crimes. You'll follow
procedures for requiring identification to verify new and existing customers.

What are AML regulations?

The purpose of the AML rules is to help detect and report suspicious activity including the predicate
offenses to money laundering and terrorist financing, such as securities fraud and market manipulation.
What is AML documents?
Definitions. AML - Anti Money Laundering. KYC - Know Your Client. AML/KYC regulations require
that all clients clearly identify themselves and provide proof of residential address.

What is the most important thing for an AML investigator to know?

A comprehensive understanding of data sources

Missing data could mean the difference between identifying a case of money laundering or failing to
flag it. Understanding where to identify additional data within existing systems, and integrate it into
their investigation processes is a key AML analyst role.
How do you investigate suspicious transactions?

If you are suspicious about a transaction

1. Transaction monitoring.
2. Suspicious matter reports (SMRs)
3. AML/CTF programs.
4. Money laundering/terrorism financing risk assessment.
5. Enhanced customer due diligence (ECDD) program.
Which is the easiest stage to detect money laundering?

the placement stage

It is during the placement stage that money launderers are the most vulnerable to being caught. This is due to
the fact that placing large amounts of money (cash) into the legitimate financial system may raise suspicions
of officials.

At what stage is money laundering most difficult to detect?

• The Layering Stage

Layering is the second stage of money laundering. Its purpose is to make the money as hard to detect as
possible, further moving it away from its illegal source(s). It can often be the most complex stage of the
laundering process.
 INTERVIEW QUESTIONS FOR AML ANALYST
• Are you familiar with the different types of money laundering methods?
• What are some of the most common money laundering methods you have encountered?
• How would you approach the investigation of a suspicious financial transaction?
• What is your process for identifying and addressing regulatory violations?
• Are you familiar with the type of data that financial institutions are required to collect from their customers?
• What are some of the most important factors that you consider when evaluating the legitimacy of a financial transaction?
• How would you approach the analysis of a suspicious financial transaction if you were unable to access the full context
of the situation?
• What is your process for conducting a thorough and complete risk assessment for a financial institution?
• Provide an example of a time when you identified a vulnerability in a financial institution’s systems and implemented a
solution to resolve the issue.
• If you were unable to find evidence of malicious activity in a financial transaction, how would you approach the situation
and communicate your findings to others?
• Are you familiar with the Patriot Act and other legislation that impacts financial regulation?
• What are some of the most important skills an AML analyst should have?
• How would you approach a situation where you suspect a company or individual of money laundering, but you don’t
have enough evidence to prove it?
• What is your process for identifying and reporting suspicious activity?
• Provide an example of a time when you used your critical thinking skills to solve a problem at work.
If you discovered that one of your coworkers was involved in money laundering, how would you handle it?
Are you familiar with the different types of money laundering methods?
This question is a great way for the interviewer to assess your knowledge of AML and how you apply it in your work.
Use examples from past projects where you identified different types of money laundering methods and analyzed
them.
ANSWER EXAMPLE: “Yes, I am familiar with the different types of money laundering methods. I have experience
analyzing transaction data for suspicious activity, which helps me identify different types of money laundering
methods. For example, in one project, I identified several wire transfers from a foreign country that were sent to
multiple accounts in the U.S. This led me to conclude that the organization was likely involved in layering money
laundering.”
What are some of the most common money laundering methods you have encountered?
This question can help the interviewer understand your experience with AML and how you approach problems.
Use examples from your past to explain what you do when you encounter money laundering methods, and how
you solve them.
ANSWER EXAMPLE: “In my experience, some of the most common money laundering methods involve shell
companies, cash transactions and digital currencies. Shell companies are companies that exist only on paper
and are used to hide the identity of the true owner of an account. Cash transactions are another common
method because they are easy to conceal and hard to trace. Digital currencies like Bitcoin are also becoming
more popular for money laundering because they can be transferred quickly and anonymously.”
How would you approach the investigation of a suspicious financial transaction?
This question can help the interviewer assess your investigative skills and how you apply
them to a real-world scenario. Use examples from past experiences where you investigated
suspicious transactions, analyzed evidence and determined whether or not the transaction
was legitimate.
ANSWER EXAMPLE: “When investigating a suspicious financial transaction, I first look at
the context of the transaction itself. Who is the sender? Who is the receiver? What is the
amount being transferred? What is the purpose of the transaction? These questions help me
understand the intent behind the transaction and whether or not it is legitimate.”
What is your process for identifying and addressing regulatory violations?

This question can help the interviewer understand how you apply your knowledge of AML
regulations to your work. Use examples from past experiences where you identified and
addressed regulatory violations, and explain what steps you took to complete these tasks.
ANSWER EXAMPLE: “I first assess the severity of the violation by reviewing the transaction
records and other relevant information. If it’s a minor violation, I may simply contact the
customer to remind them of the company’s policies and ask them to correct the issue. For
more serious violations, I will file a suspicious activity report with the appropriate government
agency.”
Are you familiar with the type of data that financial institutions are required to collect from their
customers?
This question is a great way for the interviewer to assess your knowledge of AML regulations and how
they apply to financial institutions. Your answer should include a specific example of the type of data that
financial institutions are required to collect from their customers, as well as why this information is
important.
ANSWER EXAMPLE: “Yes, I am familiar with the type of data that financial institutions are required to
collect from their customers. In my previous role as an AML Analyst, I worked on projects where we had
to create customer profiles in order to ensure we were meeting all of the necessary requirements. For
example, one of our clients was required to collect information such as name, address, date of birth, and
social security number when opening an account.”
What are some of the most important factors that you consider when evaluating the
legitimacy of a financial transaction?
This question can help the interviewer determine your analytical skills and how you apply
them to real-world situations. Use examples from previous experiences where you applied
critical thinking skills to analyze financial transactions and determine their legitimacy.
ANSWER EXAMPLE: “When evaluating the legitimacy of a financial transaction, I consider
several factors. First and foremost, I look at the customer’s profile to ensure that they are not
engaging in any suspicious activity. For example, if a customer has a history of making large
transactions, then a small transaction like the one they are attempting to make would likely
be legitimate.”
How would you approach the analysis of a suspicious financial transaction if you were
unable to access the full context of the situation?
This question can help interviewers understand how you would approach a challenging situation
and use your problem-solving skills. In your answer, explain what steps you would take to complete
the analysis without access to all of the information.
ANSWER EXAMPLE: “I would first look at the transaction itself, including the amount, the recipient
and any other relevant details. Then, I would attempt to contact the person who made the
transaction to get more information about why they were making the transaction and who the
recipient was. If I still couldn’t access all of the context, I would at least try to gather as much
information as possible so that I could make an educated guess about the situation.”
What is your process for conducting a thorough and complete risk assessment for a financial
institution?
This question can help the interviewer understand how you approach your work and determine whether
you have the necessary skills and experience to complete a risk assessment successfully. Your answer
should include a step-by-step process for conducting a risk assessment, including any tools or software
you use to complete the task.
ANSWER EXAMPLE: “I start by reviewing the client’s AML policy and procedures to gain an
understanding of their current level of compliance. Then, I conduct a thorough review of all customer
records to look for any red flags or suspicious activity. Next, I use data analysis tools like Excel or Python
to analyze customer data and compare it to similar banks or financial institutions. Finally, I present my
findings to the client and discuss ways we can improve their AML policies and procedures.”
Provide an example of a time when you identified a vulnerability in a financial institution’s
systems and implemented a solution to resolve the issue.
An interviewer may ask this question to learn more about your problem-solving skills and how you
apply them in the workplace. Use examples from previous roles that highlight your ability to analyze
data, identify vulnerabilities and develop solutions to resolve them.
ANSWER EXAMPLE: “In my last role as an AML Analyst, I noticed that one of our client’s transactions
appeared suspicious. After investigating the transaction, I discovered that the customer had entered
their account number incorrectly when making the transaction. This led me to believe that someone
may have stolen the customer’s information and used it to make a fraudulent transaction. To resolve
the issue, I contacted the customer and explained what happened. They confirmed that their account
number was incorrect, so I removed the suspicious transaction from their records.”
If you were unable to find evidence of malicious activity in a financial transaction, how would
you approach the situation and communicate your findings to others?
This question can help the interviewer understand how you approach challenges in your work and
how you communicate your findings. Use examples from past experiences to explain how you would
approach this situation and who you would communicate your findings to.

ANSWER EXAMPLE: “If I were unable to find evidence of malicious activity in a financial
transaction, I would first make sure that I had thoroughly searched through all available data. If I still
couldn’t find any evidence of suspicious activity, I would discuss my findings with my supervisor or
manager to ensure that we were looking at all possible angles. Depending on the situation, I may
also consult with other
Are you familiar with the Patriot Act and other legislation that impacts financial
regulation?
The interviewer may ask this question to assess your knowledge of AML regulation and how
it impacts financial institutions. Your answer should show that you are familiar with the Patriot
Act and other relevant legislation, such as the Dodd-Frank Act.
ANSWER EXAMPLE: “Yes, I am very familiar with the Patriot Act and other legislation that
impacts financial regulation. I have been an AML Analyst for five years, and during that time I
have been responsible for researching and understanding all relevant legislation. I am
confident in my ability to identify potential risks within a bank’s operations and ensure
compliance with federal laws.”
How would you approach a situation where you suspect a company or individual of money
laundering, but you don’t have enough evidence to prove it?
This question can help the interviewer understand how you would make decisions about evidence
and what steps you would take to gather more information. Your answer should show that you are
willing to investigate further when you need to, even if it means spending more time on a case.
ANSWER EXAMPLE: “If I suspected someone of money laundering but didn’t have enough
evidence to prove it, I would first try to gather more information about their transactions. I would look
at past records, compare them to current ones and talk to other employees who may have more
knowledge about the situation. If I still didn’t have enough evidence after all of this, I would consult
with my supervisor about what else we could do to get more proof.”
What is your process for identifying and reporting suspicious activity?
This question can help the interviewer understand how you use your analytical skills to
complete important tasks. Use examples from your experience to explain the steps you take
when identifying and reporting suspicious activity.
ANSWER EXAMPLE: “I first look at the transaction itself, such as the amount being
transferred or the originator’s location. Then I check for any red flags in the customer’s
profile, such as recent transactions or changes in their profile information. If there are no
apparent issues with the customer, I will then check their account history for any unusual
activity. Finally, I will file a report with the appropriate department so they can take action.”
Provide an example of a time when you used your critical thinking skills to solve a problem
at work.
Employers ask this question to assess your problem-solving skills and how you apply them in the
workplace. When answering, think of a time when you used your critical thinking skills to solve a
problem or challenge at work. Consider describing the steps you took to solve the issue and
highlight any specific skills you used in order to achieve success.
ANSWER EXAMPLE: “I recently had a client who was suspected of money laundering. The client
was a large corporation with many branches across the country. I used my critical thinking skills to
analyze the data collected from the client’s financial transactions. After reviewing the information, I
determined that the company was not engaging in any illegal activity.”
If you discovered that one of your coworkers was involved in money laundering, how
would you handle it?
This question can help the interviewer understand how you would handle a challenging
situation. Use your answer to highlight your problem-solving skills and ability to work with
others.
ANSWER EXAMPLE: “I would first try to talk to my coworker about their involvement in
money laundering. If they were willing to cooperate, I would work with them to identify the
source of the funds and develop a plan to report it to the appropriate authorities. If they
refused to cooperate, I would report them to my manager so that they could take appropriate
action.”