NCIS Special Agent common mistakes
NCIS Special Agent · Understand the traps and how to avoid them.
Treating a custodial interview as a conversation and continuing questioning after the subject unambiguously invokes counsel or silence, then defending it as 'just clarifying.'
Candidates trained on TV portrayals assume interrogation is about persistence; they do not track the moment Miranda rights attach or that invocation must stop questioning until counsel is present or the subject reinitiates.
What to do instead
Before any custodial interview, write the trigger checklist: custody plus interrogation, valid waiver, and the exact words that would count as invocation. Practice scripted scenarios where you must stop mid-question, document the invocation verbatim, and articulate why no further questions were asked. Cite the governing rule in your case notes.
Labeling a lead, tip, or anonymous call as 'verified fact' in a report or affidavit, and omitting the source and the corroboration status.
Candidates compress under time pressure and want a clean narrative; they confuse 'information received' with 'information established,' which is the classic probable-cause and Brady trap.
What to do instead
Use a fixed attribution sentence for every fact: who said it, when, how, and whether it was independently corroborated. Separate 'known,' 'reported,' and 'assessed' in distinct paragraphs. In affidavits, state the affiant's basis of knowledge and the corroboration steps taken.
Writing reports in chronological stream-of-consciousness that bury the elements of the offense and the officer's observations in a long narrative.
Candidates draft as they remember events and never restructure; they mistake length and detail for thoroughness, so a reader cannot find the who, what, when, where, how, and the specific facts satisfying each element.
What to do instead
Adopt a fixed report architecture: synopsis, parties, chronology, evidence, elements matrix, and actions taken. Draft the elements matrix first, then write the narrative to feed it. Read the report aloud to a peer who must answer 'what crime, and which facts prove each element' in under two minutes.
Collecting digital devices or accounts without documenting chain of custody, preserving volatile data, or specifying the legal authority for the search.
Candidates treat a phone or laptop as ordinary physical evidence and forget that power state, network connectivity, remote wiping, and account-level data all require immediate decisions and documented authorization.
What to do instead
Memorize and rehearse a device-seizure protocol: isolate from networks, photograph the screen and power state, record time, seize with documented authority, log every transfer with names, dates, and seals, and specify the scope of the search warrant or consent. Practice writing a device-specific warrant attachment.
Confusing the military and federal justice tracks: applying Article 31 rights where Miranda governs, or vice versa, and citing the wrong forum for the offense.
Candidates learn one doctrine and over-apply it; the UCMJ, Manual for Courts-Martial, and federal criminal procedure overlap but differ on rights warnings, charging authority, and who may convene a court.
What to do instead
Build a two-column comparison table for each scenario: authority (UCMJ article versus federal statute), rights warning required, who prefers charges, and review path. For every practice scenario, state the forum and the authority before discussing evidence or statements.
Confusing 'reasonable suspicion' with 'probable cause' when justifying a stop, a search, or an arrest, and giving a conclusion without the underlying facts.
Candidates memorize labels but not the factual density each standard requires, so they write 'the subject acted suspiciously' instead of the specific observations, timing, and inferences that a court can evaluate.
What to do instead
For each standard, write the minimum factual showing as a template: observations, source reliability, corroboration, and the inference drawn. Practice converting vague conclusions into fact sentences, then test each against the question 'would a neutral reviewer reach the same conclusion from these facts alone?'
Handling physical evidence at a scene before documenting and photographing it in place, or moving items without recording original position and condition.
Candidates want to 'secure' the item quickly and underestimate how position, packaging, and contamination affect later interpretation and admissibility.
What to do instead
Use a strict sequence: secure the scene, photograph and sketch before touching, record position and condition, then collect with gloves and proper packaging, label, seal, and log. Rehearse a scene walk-through where you narrate each item's location before any movement.
Accepting a confession at face value without testing it against independent evidence, and failing to document the subject's mental state, intoxication, or coercive conditions.
Candidates equate admission with resolution and stop investigating; they also omit the contextual facts that determine voluntariness and reliability.
What to do instead
After any admission, list the corroborating and contradicting facts and pursue the contradictions. Document sleep, food, medication, intoxication, duration, breaks, and the exact words used. Treat a confession as a lead to be verified, not a conclusion.
Ignoring integrity and conflict-of-interest pressures: accepting a gift, using a position for a personal favor, or staying silent about a colleague's misconduct because of loyalty.
Candidates answer situational questions with the outcome that seems most loyal or least disruptive, and they underestimate reporting duties and the appearance standard that applies to federal agents.
What to do instead
For integrity scenarios, apply a fixed sequence: identify the rule or duty, disclose to the proper channel, document, and recuse where impartiality is compromised. Practice writing the disclosure memo and identify the specific reporting obligation rather than a vague 'tell someone.'
Rushing to a conclusion in logic and analytical questions by anchoring on the first plausible answer and skipping the elimination of alternatives.
Timed exams reward speed, and candidates mistake familiarity with a scenario for proof; they also fail to separate correlation from causation in evidence summaries.
What to do instead
Use a disciplined method: restate the question, list the assumptions, test each option against the evidence given, and identify what would falsify your choice. For inference questions, mark the exact sentence supporting the answer. Practice short timed sets and review every wrong answer for the reasoning error, not just the correct option.