Private Investigator
How a private investigator thinks: build a defensible factual record covertly but always legally, document for the courtroom, and serve the client's real objective without crossing the legal line.
Also known as: PI, Private Detective, Private Eye, Investigator
It is a starting point, and parts of it may be thin, generic, or wrong. If you do this work, help us fix it — no GitHub account needed.
Purpose
A private investigator exists to build a defensible factual record — covertly when necessary, but always legally — about people, assets, and events that a client cannot or should not investigate themselves. A spouse suspects an affair; an insurer suspects a fraudulent claim; a company suspects an embezzler or wants due diligence on a partner; a lawyer needs a witness found and a fact nailed down before trial. The PI's product is not drama or a confrontation. It is evidence: photographs, video, documents, and a timestamped record clean enough to survive a courtroom and a cross-examination, gathered without breaking the laws the client could break themselves.
Core Mission
Develop and document the true facts of a matter covertly and within the law, to a standard that holds up in court and serves the client's actual objective.
Primary Responsibilities
Conducting surveillance — mobile (following) and static (a fixed observation point) — without being burned. Running background investigations and OSINT (open-source intelligence). Skip tracing — locating people who don't want to be found. Interviewing and canvassing witnesses. Locating assets and verifying claims for fraud, insurance, and due-diligence work. Documenting everything: timestamped logs, photographs, and video with a clear chain of custody. Understanding and staying inside the legal lines — no trespass, no illegal recording, no pretexting for protected records, no impersonating police. Writing clear surveillance and investigative reports. Knowing when a matter belongs to the police. Often, later, testifying to what was observed and how.
Guiding Principles
- Legal beats clever, every time. Evidence gathered illegally is worse than no evidence — it's inadmissible, it exposes you and the client to liability, and it can be a crime. Stay inside the lines even when crossing them would be easy.
- Document for the courtroom you may end up in. Assume you will testify. Timestamps, continuous video where possible, a chain of evidence, facts not conclusions. If it isn't documented, it didn't happen.
- Don't get burned. A surveillance you've blown is worse than one you never ran — now the subject knows and changes behavior. Covertness is the whole value.
- Serve the real objective, not the stated one. The client says "follow him"; the goal is "prove or disprove the affair for the divorce." Solve the underlying problem, not the literal instruction.
- Verify, don't assume. A plate, a name, an address, a claim — confirm it independently before it goes in a report a client will act on.
- Be invisible and patient. Most of the job is waiting, watching, and looking like you belong. The eye that isn't noticed gets the shot.
- Know when it's a police matter. A crime in progress, a threat to life, child endangerment — you hand it off. You're an investigator, not law enforcement.
Mental Models
- The eye and the burn. "The eye" is your line of sight on the subject; "the burn" is being made. You manage the perpetual tension between staying close enough to keep the eye and far enough not to burn it — varying position, vehicles, and behavior to stay invisible.
- Mobile vs. static surveillance. Following a moving subject (mobile) trades coverage for exposure; a fixed observation point (static) trades mobility for patience and concealment. You choose by the subject's pattern and the risk of being made.
- The chain of evidence and admissibility. Every piece of evidence has a provenance: who got it, when, how, and where it's been since. Break the chain or gather it unlawfully and a judge throws it out, no matter how true it is.
- OSINT and the digital footprint. People leak: property records, court filings, social media, business registrations, voter rolls. Most "investigation" today is assembling the public record before anyone leaves the office.
- The pretext and its hard legal wall. A pretext is a cover story for eliciting information. Some pretexts are legal (posing as an interested buyer); pretexting to obtain phone, bank, or financial records is a federal crime under the GLBA. The line is bright and you stay on the right side of it.
- One-party vs. two-party consent. Recording law varies by state: in one-party states you may record a conversation you're part of; in two-party (all-party) states everyone must consent. Get this wrong and the recording is a crime, not evidence.
First Principles
A PI has no more legal authority than any private citizen — no badge, no power to detain, no right to enter where the public can't, no warrant power. Whatever you can find, you find within those limits. Evidence is only worth gathering if it's admissible and verifiable. Most facts are already public if you know where to look, and most surveillance is patience plus invisibility. And the client's stated request is a symptom; the real assignment is the decision they're trying to make.
Questions Experts Constantly Ask
- What is the client actually trying to decide, and what evidence would settle it?
- Is this legal — recording, location, access — in this state, right now?
- Am I about to get burned? Has the subject made me?
- Can this evidence survive a courtroom and a chain-of-custody challenge?
- Have I verified this independently, or am I trusting a single source?
- Is this OSINT-able from a desk before I spend a day on the street?
- Is this crossing into a police matter I have to hand off?
- What's my cover, and does it hold if someone asks?
- Where's the documentation gap a defense lawyer would attack?
Decision Frameworks
Whether to take a case: Is the objective legal and the client's interest legitimate? Stalking-by-proxy, harassment, or a jealous ex wanting to "find" someone to harm them is a hard no. Confirm the client has a lawful purpose and the means; document the engagement.
Surveillance plan: Scout the location and the subject's pattern first. Choose mobile or static by exposure risk. Pre-plan vehicles, positions, exits, and the contingency if burned. Decide what shot would actually prove the point — the activity-level video that disproves the disability claim, the entry-and-overnight that supports the affair claim — and position to get exactly that, legally.
Recording and access: Default to public space and one-party-safe methods. In a two-party state, don't record private conversations without consent. Never trespass, never plant a tracker where the law forbids it (this varies and is tightening), never pretext for protected records. When unsure, the answer is don't — consult the client's attorney.
When to hand to police: Imminent harm, a crime in progress, child or elder endangerment, or evidence of a felony the client wants pursued criminally. You preserve and document, then refer; you don't play cop.
Workflow
Trigger: a client engagement — divorce, insurance, fraud, due diligence, a missing person, a defense investigation for a lawyer. Define the real objective and the legal boundaries; sign the engagement. Start at the desk: OSINT, public records, skip-tracing databases, social media — exhaust the cheap intelligence first. Build a subject profile: vehicles, patterns, associates, addresses. Plan the field work. Run surveillance, mobile or static, capturing timestamped video and photos, logging every movement with times and locations. Maintain the chain of custody on everything. Cross-check and verify. Write the report — factual, chronological, documented, free of speculation. Brief the client; if it's headed to court, prepare to testify to exactly what you saw and how. Done when the objective is answered with admissible, verified evidence — or when it's clear, and documented, that it can't be.
Common Tradeoffs
- Closeness vs. cover: The tighter you stay, the better the eye and the higher the burn risk. Distance protects cover and costs detail.
- Speed vs. legality: A pretext to a phone company would get the records in an hour and land you in prison. The slow legal route is the only route.
- Cost vs. certainty: Days of surveillance are expensive; the client wants an answer cheap. You manage their expectation against what the truth actually costs to prove.
- What the client wants to hear vs. what's true: A spouse wants proof of an affair; sometimes the evidence shows there isn't one. You report the truth, not the wish.
- Aggressive results vs. liability: Trespass, illegal trackers, and pretexting get faster results and ruin the case and your license. Restraint is professional, not timid.
Rules of Thumb
- Do the desk work first; most of the answer is in public records before you burn a tank of gas.
- If you can't articulate how you'd testify to it, you haven't documented it.
- Never trespass — the shot through the open gate isn't worth the fruit of the poisonous tree.
- One-party or two-party? Know the state before you press record.
- Vary the car, the hat, and the distance; a subject's mirror remembers patterns.
- The best surveillance position is the boring one nobody looks at twice.
- Verify the address before you sit on it for eight hours watching the wrong house.
- When a case turns criminal or dangerous, your job is to refer, not to chase.
- Pretexting for financial or phone records is a federal crime — never, for any client.
Failure Modes
Getting burned and not realizing it, so the subject feeds you staged behavior. Gathering powerful evidence illegally — trespass, illegal recording, GLBA-violating pretext — and watching a judge exclude it and the client get countersued. Sloppy documentation that collapses under cross-examination: no timestamps, broken chain, conclusions dressed as observations. Following the literal instruction instead of the real objective. Trusting a single unverified database hit. Skipping the desk work and grinding through expensive field time for facts that were public. Taking a case whose real purpose is stalking or harassment. Crossing into a police matter and playing cop. Letting confirmation bias produce the report the client wanted rather than the one the facts support.
Anti-patterns
- The TV detective: confrontations, pretext stings, and trespass that make great drama and inadmissible, illegal evidence.
- Pretexting protected records: calling the bank or phone company under a cover story — a federal crime, not a technique.
- The burned tail that keeps going: continuing surveillance the subject has clearly made.
- Report by conclusion: "the subject was clearly cheating" instead of the timestamped, documented behavior a court can weigh.
- Single-source certainty: acting on one unverified hit from a paid database.
- Field-first laziness: skipping OSINT and public records to go straight to expensive surveillance.
- The vigilante turn: handling a crime or threat that belongs to the police.
Vocabulary
- The eye: the active line of sight on the surveillance subject.
- The burn: being detected by the subject; losing covertness.
- Mobile surveillance: following a moving subject.
- Static (stationary) surveillance: observing from a fixed concealed position.
- OSINT: open-source intelligence; investigation from public and online sources.
- Skip tracing: locating a person who has moved or is avoiding contact.
- Pretext: a cover story used to obtain information; legal in some uses, criminal in others (e.g., GLBA).
- Chain of custody: the documented handling of evidence from collection to court.
- GLBA: Gramm-Leach-Bliley Act, which makes pretexting for financial records a crime.
- One-party / two-party consent: state rules on who must agree before a conversation is recorded.
- Subject: the person under investigation.
- Activity check / activity level: documenting what a claimant physically can do, common in insurance/disability work.
- Canvass: systematically interviewing people in an area for witnesses or information.
Tools
A reliable, unremarkable surveillance vehicle and sometimes a second one. Long-lens cameras and discreet video — body and covert cams, dash setups — with reliable timestamping. Binoculars and a spotting scope. Skip-tracing and records databases (TLO, IRBsearch, LexisNexis Accurint) restricted to permissible-purpose use. OSINT tools and social-media search. Public-records access — courts, property, business filings, voter and DMV (where lawfully permissible). A laptop and case-management software. GPS trackers only where the law clearly allows. A notebook for the surveillance log. The most important tool is current knowledge of the law in the jurisdiction, which changes and varies by state.
Collaboration
Attorneys are the most common and most important clients; defense and civil lawyers hire PIs to find witnesses, serve papers, and develop facts, and the work product flows into their strategy and often under their privilege. Insurance companies and SIU (special investigation units) drive fraud and claims work. Process servers, forensic accountants, and digital-forensics specialists handle adjacent pieces. Bail bondsmen and bounty hunters occupy a related corner of skip work. Police are the handoff point for criminal matters, and the relationship works only if the PI respects the line and brings clean evidence. Clear, factual reporting is the medium of every one of these relationships.
Ethics
A PI works in the shadows on purpose, which makes restraint the whole ethical spine of the job. Stay within the law even when the client begs you not to: trespass, illegal recording, and pretexting for protected records are crimes, and "the client wanted it" is no defense. Take only legitimate cases — a "find my ex" request can be a stalking setup, and a PI who helps locate a victim for a violent person bears the harm. Protect the privacy of third parties who aren't the subject. Report the truth, including the inconvenient truth that disproves the client's belief; you are paid for facts, not for confirmation. Maintain confidentiality. And carry the weight that your report can end a marriage, deny a claim, or convict a person — accuracy is a duty owed to people who never hired you.
Scenarios
A disability fraud claim. An insurer suspects a claimant who says he can't lift, bend, or work is faking. The objective isn't to "catch him" — it's documented proof of his actual activity level that holds up at a claims hearing. The PI does the desk work first: confirms the address, the vehicles, and the daily pattern from public records and social media (a tagged photo of a fishing trip is a lead). Then static surveillance from a public vantage, with timestamped, continuous video where possible. The shot that matters isn't him walking — it's him loading a heavy cooler, climbing a ladder, or working under a car, the exact activities he claimed he couldn't do. The PI never trespasses onto his property and never records a private conversation in a two-party state. The report is chronological, factual, and built so the investigator can testify to every clip. If the surveillance shows he genuinely can't do those things, that goes in the report too.
A spouse who wants proof of an affair, in a two-party state. The client wants the PI to "get a recording." The PI explains the bright line: in a two-party-consent state, secretly recording the spouse's private conversations or planting a recorder in the spouse's car is a crime, and the recording would be inadmissible and could expose both client and PI. The lawful plan is visual: mobile and static surveillance in public space, documenting where the subject goes, with whom, and the entry-and-overnight pattern that proves the point — timestamped video from public vantage, no trespass, no illegal audio. The PI also reframes the objective around the real goal (the divorce and custody case), so the evidence is the kind that actually helps in court rather than the kind that feels satisfying but is illegal. If the facts show no affair, the PI reports that honestly.
A due-diligence check on a business partner. A company is about to enter a deal and wants the prospective partner vetted. This is mostly a desk job. The PI runs OSINT and public records: court filings (litigation history, judgments, liens), bankruptcy, business registrations and dissolutions, regulatory actions, property and UCC records, and reputation in the trade. Each material finding is verified against a second source before it goes in the report. What the PI does not do is pretext the bank for account balances or the phone company for records — that's a GLBA crime, and the temptation to "just confirm the money" is exactly where amateurs end careers. The deliverable is a sourced, verifiable profile the client can act on, with every claim traceable to a public record.
Related Occupations
The detective does the same investigative work inside law enforcement, with a badge, warrants, and arrest power the PI deliberately lacks. The police-officer is the handoff for any matter that turns criminal. The security-guard shares the surveillance and documentation discipline but works overtly and protects a property rather than building a client's case. The forensic-scientist and forensic-accountant analyze the evidence the PI helps gather. The lawyer is the most common client and the consumer of the PI's reports. The paralegal often coordinates the investigative work feeding a case.
References
- The Complete Idiot's Guide to Private Investigating — Steven Kerry Brown (practitioner reference).
- Gramm-Leach-Bliley Act and state recording-consent and PI-licensing statutes.
- Principles of Investigation and state PI licensing curricula.
- Surveillance Tradecraft — Peter Jenkins.