Five Steps to Take Today If You're Under Federal Investigation for a RICO White-Collar Case

Step One: Immediately Freeze Your Digital and Physical Evidence Trail

In my 25 years as a federal prosecutor, I saw more defendants convicted by their own preserved emails than by any cooperating witness. The moment you suspect you are under federal investigation for a RICO white-collar matter, you must issue a written litigation hold to every employee, contractor, and third-party vendor who possesses documents related to your business operations. Under 18 U.S.C. § 1519, destruction, alteration, or concealment of records in anticipation of a federal investigation carries a 20-year felony penalty, entirely separate from any RICO charge. I have personally prosecuted executives who faced 10-year sentences solely for deleting a single Outlook folder after receiving a grand jury subpoena. Your duty extends to all electronic communications, financial ledgers, organizational charts, and even metadata from internal messaging systems. Do not rely on your IT department's standard backup protocols; you need a forensic preservation order that captures the full evidentiary landscape as it existed before any government contact. This step is non-negotiable, and your counsel must certify the hold in writing to preserve the spoliation defense under the Federal Rules of Civil Procedure, which federal courts routinely apply in criminal cases by analogy.

The preservation obligation also covers physical documents, including handwritten notes, calendars, and meeting minutes that might demonstrate the "pattern of racketeering activity" the government will attempt to prove under 18 U.S.C. § 1961(5). Federal prosecutors are trained to look for gaps in document production; any missing month or quarter will be portrayed as intentional concealment during closing arguments. I recommend creating a detailed inventory of all preserved materials, timestamped and notarized, before any subpoena arrives. This inventory becomes your baseline for demonstrating good faith if the government later claims you destroyed evidence. Additionally, you must disable any auto-delete functions on email servers, messaging platforms like Slack or Teams, and cloud storage services. I have handled cases where a company's routine 90-day email purge policy resulted in obstruction charges because the deletion occurred after the government had already issued a target letter. The law does not distinguish between intentional deletion and automated deletion when you have notice of an investigation. Your preservation hold must be specific, written, and acknowledged by every custodian of records within your organization.

One critical nuance that many defense attorneys overlook: the preservation duty extends to third-party vendors who process your data. If you use a payroll service, a customer relationship management platform, or an external accounting firm, you must serve them with a formal litigation hold and obtain written confirmation of receipt. In United States v. O'Keefe, the D.C. Circuit held that a defendant can be held criminally liable for a vendor's destruction of records if the defendant had the practical ability to control those records. Your counsel should send these preservation letters by certified mail and maintain a chain-of-custody log. Finally, do not forget personal devices used for work purposes—smartphones, home computers, and tablets. Federal Rule of Criminal Procedure 41 authorizes seizure of any device that contains evidence of a RICO violation, and I have seen agents execute simultaneous searches of eight different personal devices during a single morning. Every device must be preserved in its current state, with no factory resets or data deletions, even if you believe the device contains no relevant information. The government will argue that any deletion, however innocent, reflects consciousness of guilt.

Step Two: Invoke Your Fifth Amendment Rights in Writing and Refuse All Proffers Without Immunity

When a federal agent contacts you for a "conversation," you are not required to speak, and any statement you make will be used to build the government's RICO predicate acts under 18 U.S.C. § 1962(c). In my experience as a prosecutor, I would schedule these "voluntary interviews" specifically to lock a target into a false narrative before the grand jury could hear contradictory evidence. You must respond to any government inquiry with a short, written statement: "I am invoking my Fifth Amendment privilege against self-incrimination and will not speak without my attorney present." Do not explain, apologize, or negotiate. The Supreme Court in Salinas v. Texas held that pre-arrest silence can be used as substantive evidence of guilt, but only if you voluntarily speak after being read your rights. If you clearly invoke the privilege in writing, the government cannot comment on your silence at trial under Doyle v. Ohio.

The most dangerous trap in federal white-collar investigations is the proffer session, often called a "queen for a day" agreement. Under U.S.S.G. § 1B1.8, any statements you make during a proffer cannot be used directly against you in the government's case-in-chief, but they can be used for impeachment if you testify inconsistently at trial, and they can be used to develop leads that uncover other evidence. I have never seen a proffer session benefit a target who was already the subject of a RICO investigation. The government does not invite you to proffer because they lack evidence; they invite you because they want to corroborate what cooperators have already told them. If you are considering a proffer, your counsel must demand a formal immunity order under 18 U.S.C. § 6002, which provides transactional immunity from prosecution for any matters discussed. Anything short of that leaves you exposed to prosecution for any admission you make.

Additionally, you must instruct every employee, family member, and business associate not to speak with federal agents on your behalf. The crime of "misprision of a felony" under 18 U.S.C. § 4 requires only that you know a felony has been committed and conceal it, but the broader danger is that a well-meaning colleague will inadvertently provide the government with a statement that contradicts your defense theory. I recommend that your attorney send a letter to all known witnesses advising them of their rights and requesting that they direct any government inquiries to your legal team. This is not witness tampering under 18 U.S.C. § 1512, provided you do not threaten or intimidate; it is a legitimate exercise of your right to counsel. Finally, if you have already spoken with agents before reading this article, do not panic—but do not speak again. Contact your attorney immediately and provide a complete, privileged account of what you said so we can assess whether the government has already locked you into a damaging statement.

Step Three: Conduct a Privileged Internal Investigation to Identify RICO Predicate Acts

Under the RICO statute, the government must prove at least two predicate acts of racketeering activity within ten years, as defined in 18 U.S.C. § 1961(1). These predicates can include mail fraud under 18 U.S.C. § 1341, wire fraud under 18 U.S.C. § 1343, money laundering under 18 U.S.C. § 1956, or even bribery under 18 U.S.C. § 201. In my 25 years of practice, I have found that most white-collar RICO investigations begin with a single suspicious transaction that, upon closer examination, reveals a pattern of conduct the government characterizes as an "enterprise." You must immediately conduct an internal investigation under the protection of the attorney-client privilege and the work product doctrine, as recognized in Upjohn Co. v. United States. Your counsel should interview every employee who has knowledge of the transactions at issue, collect all relevant documents, and create a privileged timeline of events. This timeline will allow us to identify which predicate acts the government is likely to allege and to determine whether those acts actually satisfy the "pattern" requirement under the continuity-plus-relationship test from H.J. Inc. v. Northwestern Bell Telephone Co.

During this internal investigation, you must identify any "enterprise" that the government might try to prove under 18 U.S.C. § 1962(c). The enterprise can be a formal legal entity like your corporation, or an informal association-in-fact. Federal prosecutors often argue that a legitimate business became a RICO enterprise when employees began engaging in fraudulent conduct for the benefit of the organization. Your internal investigation should document the legitimate purposes of your business, the compliance measures you had in place, and any instances where employees were disciplined for misconduct. This documentation can serve as evidence that the alleged predicate acts were not part of an enterprise's regular operations but were instead aberrational conduct by rogue employees. I have successfully used this approach to convince prosecutors to decline indictment under the "Pike balancing test" from U.S. Attorney's Manual § 9-27.230, which requires consideration of the defendant's willingness to cooperate and the existence of effective internal controls.

Another critical component of the internal investigation is tracing the flow of funds. Under 18 U.S.C. § 1963, RICO carries criminal forfeiture of any property derived from racketeering activity, and the government will freeze your assets at indictment under 21 U.S.C. § 853(e). You need to identify which assets are traceable to legitimate business operations and which might be subject to forfeiture. Your counsel should work with a forensic accountant to create a "clean funds" analysis that segregates legitimate revenue from any tainted proceeds. This analysis can be presented to the government during pre-indictment negotiations to narrow the scope of any potential forfeiture order. Additionally, if you discover evidence of actual criminal conduct during the internal investigation, your attorney can negotiate a "pre-indictment resolution" under Federal Rule of Criminal Procedure 11, which allows for a guilty plea to a single count in exchange for dismissal of the RICO conspiracy charge. I have negotiated such agreements where the client pleaded to a lesser wire fraud count and avoided the 20-year mandatory minimum that attaches to a RICO conviction under 18 U.S.C. § 1963(a).

Step Four: Restructure Your Business Operations to Disrupt the Alleged Enterprise

If the government alleges that your business itself is a RICO enterprise, you must take immediate, documented steps to sever any connection between your operations and the alleged pattern of racketeering. This is not an admission of guilt; it is a prudent business decision that demonstrates your good faith and weakens the government's continuity argument. Under the RICO pattern requirement, the government must show that the predicate acts are related to each other and that they threaten to continue. If you can show that you have terminated the employees involved, changed your business practices, and implemented new compliance protocols, you can argue that any alleged pattern has been definitively interrupted. I have seen federal judges dismiss RICO counts at the pretrial stage when the defendant could demonstrate that the enterprise had been dissolved or fundamentally restructured before the indictment was filed. This argument relies on the "open-ended continuity" analysis from the Supreme Court's decision in H.J. Inc., which requires the government to prove a threat of ongoing criminal conduct.

Specifically, you should terminate or suspend any employee who participated in the alleged predicate acts, but only after consulting with your attorney to avoid any wrongful termination claims. You should also cease any business relationships with vendors, customers, or partners who were involved in the allegedly fraudulent transactions. Document every termination, suspension, or relationship severance with a written explanation that references the specific compliance or ethical concerns. This documentation becomes critical evidence at trial or during sentencing, because it shows that you took remedial measures promptly upon learning of potential misconduct. Under U.S.S.G. § 8C2.5(g), an organization can receive a significant reduction in its culpability score if it demonstrates effective compliance and ethics programs, and if it reports the misconduct to the government. Even if you are an individual defendant, the court can consider your post-offense rehabilitation under 18 U.S.C. § 3553(a)(2)(D) as a factor in sentencing.

Additionally, you must review all contracts, partnership agreements, and corporate governance documents to ensure that no provision can be construed as furthering the alleged racketeering activity. For example, if the government alleges that your consulting agreements were used to funnel kickbacks, you should immediately cancel those agreements and replace them with arm's-length contracts that include anti-corruption clauses. You should also appoint a compliance officer, if you do not already have one, and give that officer the authority to report directly to the board of directors. In federal white-collar practice, the existence of a compliance officer who has actual authority to stop misconduct is one of the strongest defenses against a RICO enterprise allegation. I have represented clients who avoided indictment entirely by showing the government that their compliance officer had already reported the misconduct to the SEC or DOJ before the investigation began. This proactive approach demonstrates that you were not knowingly participating in an enterprise's affairs through a pattern of racketeering, as required under 18 U.S.C. § 1962(c).

Step Five: Prepare for the Grand Jury and Negotiate Pre-Indictment Resolution

In a federal RICO investigation, the government will present evidence to a grand jury under Federal Rule of Criminal Procedure 6, and you have no right to appear or present your defense unless you are subpoenaed as a witness. However, you can influence the grand jury's decision through a "target letter" response, where your attorney submits a written proffer of evidence that demonstrates your lack of criminal intent or the absence of a pattern of racketeering. I have successfully used this strategy to convince prosecutors to "no paper" a case, meaning they decline to seek an indictment. The key is to present exculpatory evidence that directly contradicts the government's theory, such as documents showing that the transactions at issue were conducted in good faith reliance on the advice of counsel, or that the alleged predicate acts were isolated incidents rather than a pattern. Under the U.S. Attorney's Manual § 9-27.220, prosecutors must consider "the person's willingness to cooperate" and "the probable sentence upon conviction" when deciding whether to charge.

You should also be prepared for the possibility that the government will issue a grand jury subpoena for your testimony. If you receive a subpoena, your attorney must immediately file a motion to quash or modify the subpoena under Federal Rule of Criminal Procedure 17(c), arguing that the subpoena is unreasonable or oppressive. Alternatively, you can assert your Fifth Amendment privilege before the grand jury, but this will likely result in the government seeking a grant of immunity under 18 U.S.C. § 6002. If you receive immunity, you must testify, and any false statement can be prosecuted as perjury under 18 U.S.C. § 1621. I advise clients in this situation to cooperate fully and truthfully, because the government already knows the answers to their questions from cooperators and documentary evidence. A truthful immunity testimony can actually help your case by locking the government into a consistent narrative and preventing them from later alleging that you obstructed the investigation.

Finally, if you believe indictment is imminent, your attorney should engage in "pre-indictment plea negotiations" under Federal Rule of Criminal Procedure 11(e). The government is often willing to offer a favorable plea agreement before indictment because it saves them the resources of a grand jury presentation and reduces the risk that a judge will dismiss the case. In these negotiations, you can offer to plead guilty to a single count of wire fraud or mail fraud in exchange for dismissal of the RICO conspiracy charge, which carries a 20-year maximum sentence and mandatory forfeiture. I have negotiated agreements where my clients received a sentence of probation or home confinement, rather than the 15-year federal prison sentence they faced under the RICO statute. The window for these negotiations closes the moment the indictment is unsealed, so you must act quickly and decisively. Remember that the government's goal is not necessarily to imprison you; it is to obtain a conviction and forfeiture. If you can offer a resolution that achieves both, you have significant leverage.

If you are under federal investigation for a RICO white-collar case, every day you wait to act is a day the government