Federal Charges (18 U.S.C. § 1519): When Your Records Policy Becomes a Federal Crime

Under 18 U.S.C. 1519, destroying, altering, concealing, or falsifying any record, document, or tangible object with the intent to impede a federal investigation carries up to 20 years in federal prison.

The statute does not require that a formal investigation be underway at the time of the destruction. It does not require that the destroyed records were material to a conviction. 

And it does not require that the government suffer any actual harm. If prosecutors can persuade a jury that document destruction was motivated even in part by the desire to obstruct a federal matter, the charge stands.

For companies and individuals facing a federal audit or regulatory inquiry, understanding exactly where lawful records management ends and criminal obstruction begins is not a compliance exercise.

 Contact Eisner Gorin LLP today for a confidential consultation.

What 18 U.S.C. § 1519 Actually Prohibits

18 U.S.C. § 1519, enacted as part of the Sarbanes-Oxley Act of 2002, was enacted to combat corporate fraud and protect the integrity of federal investigations and bankruptcy proceedings. 

Congress created it after the Arthur Andersen scandal, when Enron-related documents were shredded once an SEC inquiry was expected.

The law closed a loophole in earlier obstruction statutes by covering destruction done in contemplation of future investigation, even before a formal proceeding begins.

The statute broadly prohibits knowingly altering, destroying, concealing, falsifying, or making false entries in records, documents, or tangible objects with the intent to impede, obstruct, or influence any federal matter or bankruptcy case.

This can include shredding papers, deleting emails, changing financial records, hiding documents from auditors, or moving records to avoid discovery.

What makes § 1519 especially powerful is its pre-investigation reach: prosecutors can charge conduct intended to prevent scrutiny, even if no official inquiry has begun.

The Three Elements the Government Must Prove

To convict under § 1519, the government must establish three elements beyond a reasonable doubt:

1. The defendant knowingly altered, destroyed, concealed, or falsified a record, document, or tangible object used to record or preserve information.
2. The defendant acted with the intent to impede, obstruct, or influence an actual or contemplated investigation of a matter within federal jurisdiction.
3. And the conduct was connected to a matter within the jurisdiction of a federal department, agency, or bankruptcy court.

Two features of this framework deserve close attention. The first is the intent element.

The government doesn't need to prove that the defendant's sole or even primary intention was to obstruct justice, so long as the government proves beyond a reasonable doubt that one of the defendant's intentions was to obstruct justice.

A mixed motive, part legitimate records management, part concern about federal scrutiny, can be enough for a conviction if the government can establish that the obstructive purpose was present.

The second critical feature is the scope of "tangible object." The Supreme Court states that a tangible object within § 1519's scope is "one used to record or preserve information."

The ruling narrowed the statute's broadest potential reach, confirming that § 1519 is focused on file keeping rather than the destruction of physical evidence in general.

For corporate defendants, the practical scope remains sweeping: emails, financial statements, spreadsheets, databases, audit workpapers, compliance records, and backed-up electronic files all fall squarely within the statute.

Also notable: the conduct need not be successful in hindering the proceeding; it is only purposeful in attempting to do so. An unsuccessful attempt to delete a file that investigators later recover through forensic analysis is still a completed crime under § 1519.

Why Routine Business Practices Create Acute 18 USC § 1519 Risk

The statute's "in contemplation of" language is where legitimate corporate document management and federal criminal exposure most dangerously overlap.

Any business that operates a records retention and destruction policy, which is to say virtually every regulated company in the country, faces potential § 1519 exposure the moment it learns of, or reasonably should anticipate, a federal inquiry.

The triggers are more common than most executives recognize:

• A regulatory inquiry or subpoena: Once a company receives a document preservation demand, a civil investigative demand, or a grand jury subpoena, any document destruction that follows, regardless of how routine, can be characterized as obstruction.
• An audit notification from a federal agency: IRS audit notices, SEC comment letters, DOJ Civil Division inquiries, and healthcare regulatory audits all constitute notice of a federal matter.
• Internal communications referencing legal exposure: Intent is typically inferred from circumstantial evidence such as the timing of destruction, misleading statements, or prior warnings about potential legal exposure.
• Automated deletion systems running after a litigation hold should have been issued: Many companies operate automatic email or data purge systems that delete records after a set period. When those systems continue running after a preservation obligation has attached, the company's IT infrastructure becomes the instrument of an obstruction charge.
• Selective destruction: Destroying some records within a category while preserving others of the same type.

The Ninth Circuit Model Jury Instructions make clear that federal jurisdiction under 18 USC § 1519 is broad: the defendant need not know that the matter in question falls within the jurisdiction of a federal department or agency. Ignorance of the federal character of the matter is not a defense.

How Federal Investigators Build an 18 USC § 1519 Case

Federal document destruction investigations are built from metadata, not memory.

By the time prosecutors approach a target, they have typically already obtained a forensic image of the defendant's systems through a search warrant, a third-party subpoena to a cloud provider, or compelled production from a cooperating employee.

The investigative toolkit for these cases includes:

• Deletion timestamps and access logs: Every file system records when a document was created, accessed, modified, and deleted. Forensic examiners reconstruct this timeline and compare it against the dates of key regulatory communications, audit notifications, or internal legal memos. A cluster of deletions occurring on the same day as a subpoena receipt is extraordinarily difficult to explain as a coincidence.
• Email metadata and server logs: Even after emails are deleted from a user's mailbox, server logs, backup systems, and third-party archival services frequently retain recoverable copies. Prosecutors routinely recover "deleted" communications that document both the destruction activity and the defendant's knowledge of the investigation it was meant to conceal.
• Witness testimony from IT staff and compliance personnel: Employees who carried out destruction on management's instructions are often the government's most valuable witnesses. When an IT administrator receives an email directing them to run a purge of specific folders the day after a regulatory notice arrives, that instruction becomes a primary piece of evidence. Those employees frequently cooperate.
• Comparison with third-party records: When a company's internal records diverge from records held by banks, vendors, auditors, or counterparties, the gaps become evidence of targeted destruction rather than routine disposal.

Federal Penalties for 18 U.S.C. § 1519 Violations

A conviction under this statute carries severe consequences:

Additional consequences may include fines, restitution, and long-term reputational damage.

Related Federal Crimes (With Descriptions)

Charges under 18 U.S.C. § 1519 are often filed alongside other federal offenses:

Wire Fraud (18 U.S.C. § 1343)

Using electronic communications to carry out fraudulent schemes, often tied to falsified records.

Securities Fraud (15 U.S.C. §§ 78j, 78ff)

Manipulating financial disclosures or corporate filings to mislead investors.

Tax Obstruction (26 U.S.C. § 7212)

Interfering with IRS investigations or audits through concealment or destruction of records.

Healthcare Fraud (18 U.S.C. § 1347)

Falsifying medical billing or patient records to obtain improper payments.

Conspiracy (18 U.S.C. § 371)

Agreeing with others to commit obstruction or related offenses.

These charges can significantly increase criminal exposure and penalties.

Defense Strategies for 18 USC § 1519 Charges

The § 1519 defense centers on a single overarching goal: establishing that the document destruction was the product of lawful policy, not criminal intent. Every defense strategy flows from that foundation.

The most powerful defense available is documented proof that the destruction followed a formal records retention schedule that predated any notice of federal interest.

Demonstrating that the destruction or alteration of records was done for a legitimate purpose, such as routine document disposal or compliance with a records retention policy, can be effective.

Lack of Wrongful Intent

Defense attorneys often rely on internal policies, compliance officers' testimony, and electronic metadata to argue that the defendant's actions were not taken with wrongful intent.

The policy must be consistent. Selective application of a retention policy is worse than having no policy at all, because it suggests the policy was used as cover for targeted destruction.

Intent under the statute requires that the defendant contemplated a federal investigation at the time of the destruction. If the defense can credibly establish that the defendant had no reason to anticipate federal scrutiny, the "contemplation" element fails.

This requires a careful reconstruction of what the defendant actually knew, and when, based on contemporaneous communications, meeting records, and the absence of legal hold instructions.

Scheduled Destruction Event

Additionally, prosecutors rely heavily on the proximity between an audit notice and a destruction event. Defense counsel builds a counter-chronology demonstrating that the destruction was scheduled, automated, or otherwise predetermined, not triggered by the federal inquiry.

Automated system logs, IT maintenance records, and the company's broader data lifecycle documentation are the foundation of this argument.

Unrelated to a Federal Investigation

The defense might also argue that the records in question were unrelated to a federal investigation or bankruptcy case.

If the prosecution cannot establish a clear link between the destroyed records and a federal matter, the charges under 18 U.S.C. § 1519 might not stand.

Not every document in a company's possession is relevant to the specific matter under investigation. If the destroyed records were outside the scope of the inquiry, the § 1519 charge may fail for lack of materiality.

Suppression of Evidence

Another defense under this statute involves suppressing evidence obtained through improper searches. Federal document investigations frequently involve search warrants executed against company servers, cloud accounts, and third-party custodians.

Warrants that exceed their authorized scope, that rely on stale probable cause, or that were obtained through misrepresentation of the underlying facts are subject to challenge.

A successful suppression motion can eliminate the forensic evidence on which the prosecution's entire timeline depends.

Sever Client from Co-Defendants

And finally, under 18 USC § 1519 is almost always charged alongside other counts, including securities fraud, wire fraud, healthcare fraud, or tax obstruction.

In multi-defendant cases, the government attempts to attribute the document destruction to all members of an alleged scheme.

Defense counsel moves aggressively to sever the client from co-defendants whose conduct is far more egregious, preventing prejudicial spillover that contaminates the jury's view of the document management facts.

Hypothetical Case Study: Automated Email Purge During an IRS Audit

A healthcare technology company received an IRS audit notice covering its research and development tax credit claims for a three-year period.

The company's general counsel issued a litigation hold memo to the finance and IT departments specifying that all records related to the R&D program must be preserved.

One week later, the company's automated email archival system executed a scheduled 90-day purge of the engineering team's inboxes, consistent with the company's written data retention policy. Several thousand emails were deleted, including some that the IRS later determined were relevant to the audit.

The government opened a § 1519 investigation, arguing that the deletion occurred after the preservation obligation attached and that engineering leadership was copied on the general counsel's hold memo, thereby establishing knowledge.

Defense counsel was engaged before the government issued a formal subpoena.

Counsel immediately obtained the company's full IT system documentation, the data retention policy dating back four years, all scheduled purge records, and the distribution list for the litigation hold memo. The forensic review revealed three critical facts.

• First, the 90-day purge cycle had been running on an automated schedule for 22 months before the audit notice, with documented purge events logged every quarter.
• Second, the engineering team's inbox addresses were not individually named in the litigation hold distribution list; only the finance and legal department heads were explicitly included.
• Third, the general counsel's memo did not specifically reference engineering records or email preservation, focusing instead on financial documentation.

Defense counsel presented these findings to the Assistant U.S. Attorney in a pre-indictment proffer.

The defense argued that the automated purge was the product of a consistently applied and pre-existing policy, that engineering leadership had no specific notice that their email archives were subject to the hold, and that the company had affirmatively cooperated with the audit in all other respects.

The government declined to bring § 1519 charges. The IRS audit was resolved through a civil settlement.

The lesson: A documented, consistently applied records retention policy, combined with early defense engagement before indictment, can convert a criminal obstruction theory into a civil compliance matter.

Frequently Asked Questions (FAQs)

What is considered obstruction under 18 U.S.C. § 1519?

Obstruction includes destroying, altering, concealing, or falsifying records with the intent to interfere with a federal investigation or matter.

Do I need to know about an investigation to be charged?

No. You can be charged if actions were taken in anticipation of a possible federal investigation, even if no formal proceeding had begun.

Can deleting emails be a federal crime?

Yes. Deleting emails or digital records with the intent to obstruct a federal matter can result in criminal charges under 18 U.S.C. § 1519.

What if the deletion was part of a normal business policy?

Routine deletion may serve as a defense if it was consistent, pre-existing, and not motivated by an intent to obstruct a federal matter.

What is the maximum penalty under § 1519?

A conviction under 18 U.S.C. § 1519 can result in up to 20 years in federal prison, along with fines and other penalties.

Can businesses be charged under this law?

Yes. Both individuals and organizations can face criminal liability for records destruction or falsification.

How can I defend against these charges?

Common defenses include lack of intent, compliance with established records-retention policies, absence of a foreseeable federal investigation, and challenges to the manner in which evidence was obtained.

When should I contact an attorney?

You should contact a criminal defense attorney immediately if you suspect an investigation, receive a subpoena, or become aware of potential federal scrutiny.

Key Takeaway

18 U.S.C. § 1519 is a powerful federal statute that makes improper recordkeeping a serious criminal offense. Understanding when routine practices cross into obstruction is essential for individuals and businesses facing potential federal scrutiny.

Federal Defense for Document Destruction and Obstruction Charges

Federal obstruction investigations run in parallel to the underlying inquiry that triggered them.

By the time a company learns it is being investigated specifically for document destruction, the government has often already executed search warrants, obtained forensic images, and developed cooperating witnesses from within the organization.

The window for effective pre-indictment intervention is narrow and closes fast.

Eisner Gorin LLP's federal defense team represents executives, companies, compliance officers, and IT professionals facing § 1519 investigations and charges. Contact Eisner Gorin LLP today for a confidential consultation.

Related Content

• Destruction of Audit Records
• Public Money Embezzlement