f1cb68ba_rime_Toolkit_for_Investigators__Step
[What Happens] Through victim’s consent or through subpoena/court order, investigators will need documentation from financial institutions and government agencies. The investigator will begin creating a paper and digital trail of physical evidence. Do not overlook the traditional investigative skills learned through training and experience. Not all documents in the trail will be digital. Paper document evidence will exist and is subject to forensic treatment. Security surveillance video of the target and surrounding businesses still exists and suspect photo arrays still need to be shown to witnesses. The investigator/detective still needs to hit the streets and look for witnesses and other physical evidence that may put a subject at the scene where an ATM skimmer may have been employed, or a computer used at an Internet café. [Step] 
Gather Evidence – Be Timely and Careful with It17
Investigative Steps | Identity Crime Toolkit for Investigators
Step