What to do when an evidence package is stolen
If a package containing court documents, a storage drive, or a physical exhibit disappears, first determine whether it was stolen, misdelivered, or lost in transit. Then preserve delivery evidence, report the suspected theft, contact the appropriate carrier, and notify your lawyer or prosecutor immediately.
A tracking scan shows what the carrier recorded. It doesn't, by itself, prove that you received the package, identify a thief, guarantee reimbursement, or decide whether evidence can be used in court. This article focuses on U.S. procedures; police reporting, insurance, and evidence rules vary by state and case type.
Immediate steps
1. Confirm what happened
Check the tracking history, delivery photograph, package locker, front desk, mailroom, and nearby delivery locations. Ask household members or neighbors whether they accepted the package. Save screenshots showing:
- The tracking or label number
- The delivery date, time, and location
- The delivery photograph or signature, if available
- Any notes about a locker, reception desk, or safe location
- The sender, recipient, and shipping service
Write down when you last knew the package was in the custody of the sender, carrier, lawyer, investigator, or other authorized person. Also record when you discovered it was missing.
Don't describe a package as stolen if the facts currently show only that it wasn't received. A precise report of a “missing package marked delivered” can be updated if video or other evidence later establishes theft.
2. Preserve the scene and digital records
Take dated photographs of the mailbox, porch, package room, locker, gate, or other delivery location. Preserve the original camera footage rather than relying only on a short screen recording. Export footage from a doorbell or security-camera account, note when it was downloaded, and keep a copy in a secure location.
Ask neighbors, building management, and nearby businesses to preserve relevant footage before their systems overwrite it. Obtain contact information for witnesses, but don't publicly accuse a neighbor or post confidential case details on social media.
Keep the mailing envelope, box, seal, label, packing material, and any contents that arrived. The USPS domestic claims guidance and Domestic Mail Manual rules specifically address retaining packaging and proof for claims involving loss, damage, or missing contents.
3. Report it promptly
For an immediate threat or crime in progress, call 911. Otherwise, use the local police department's non-emergency number or reporting portal for the location where the package was delivered.
If USPS handled the package, file a suspected mail-theft complaint with the U.S. Postal Inspection Service. USAGov's postal complaint guidance identifies the Postal Inspection Service as the federal law-enforcement agency that protects the mail system.
For UPS, FedEx, Amazon, or another private delivery service, report the incident to local police and start an inquiry with the carrier, seller, shipper, or platform. The shipper or account holder may be the party required to open a carrier claim.
Ask for an incident or report number. Keep the officer's name, the carrier case number, the claim reference, and the date of every call or submission.
4. Tell the case team
Notify your lawyer, prosecutor, public defender, legal investigator, or case manager the same day. Include the possible custody break, the court or filing deadline, and whether the package contained personal, confidential, or privileged information.
If the evidence belongs to an employer, agency, client, or another person, notify its designated security or privacy contact as well. Don't remotely wipe a stolen drive or account before asking counsel or an appropriate forensic professional how to preserve evidence. You may still need to change passwords, revoke sessions, or protect financial accounts if the package exposed sensitive information.
What to include in an evidence-package theft complaint
A useful complaint is factual and chronological. Gather:
- Your name and contact information
- The delivery address and location where the package was expected
- Carrier name, tracking number, shipping date, and delivery record
- Sender and recipient information
- A neutral description of the package, label, seal, and contents
- The last confirmed custodian of the evidence
- The date and time the package was marked delivered or last observed
- When and how you discovered it was missing
- Photographs, video, delivery records, and witness information
- The case name or number and the next relevant court deadline
- An honest estimate of monetary value, if known
- A list of documents or files that can be reconstructed from backups
Describe the legal importance without exaggerating it. For example:
“I am reporting a package marked delivered by [carrier] under tracking number [number] on [date and time]. I did not receive it and discovered it missing at [time]. The package contained [brief description] intended for [court case or legal matter]. Its disappearance may interrupt the documented chain of custody. I have attached [delivery record, photographs, video, and witness details].”
Don't submit privileged legal strategy, passwords, or unnecessary copies of sensitive evidence to a public reporting portal. Ask your lawyer or the investigating agency how those materials should be transferred.
Choose the correct complaint and claim route
A theft complaint and a reimbursement claim serve different purposes:
| Situation | First reporting route | Separate money or delivery step |
|---|---|---|
| Package marked delivered but absent from a porch or mailbox | Local police; USPIS if USPS handled it | Carrier, seller, or platform delivery inquiry |
| Package appears lost before delivery | Carrier and shipper | Carrier claim under the applicable service terms |
| Box arrived opened or contents are missing | Police if theft is suspected; carrier | Preserve all packaging and file an eligible claim |
| USPS package may have been taken from the mail stream | USPIS and local police | USPS claim if the service and facts qualify |
| Private-carrier package is missing | Local police and carrier or shipper | Follow the carrier, seller, or marketplace process |
A police report documents an allegation and starts an investigation. It doesn't automatically establish liability or require a carrier to pay. A carrier claim addresses the shipping contract or available insurance; it doesn't replace a court filing or repair a chain of custody by itself.
USPS claims, Postal Inspection Service reports, and deadlines
For a qualifying domestic USPS item that arrives damaged or with missing contents, USPS says a claim may be filed immediately and no later than 60 days after the mailing date. Other services and types of loss can have different filing periods, so check the applicable service terms rather than assuming every USPS shipment has the same deadline.
Retain:
- The original mailing container and label
- All packaging and any contents received
- Proof that the relevant insurance or qualifying service was purchased
- Proof of value, such as an invoice, receipt, appraisal, or replacement estimate
- Tracking and delivery records
- The police or Postal Inspection Service report number
USPS says claim decisions are usually sent within five to 10 days. If a claim is denied or only partly paid, the official claims guidance provides a 30-day appeal period, with a possible second appeal within 30 days of the appeal denial.
A USPS compensation claim is separate from a mail-theft complaint. If you suspect someone stole the package, report the suspected crime to the Postal Inspection Service even if you also file a claim. If you suspect misconduct by a postal employee or contractor, the USPS Office of Inspector General contact page provides the appropriate hotline route. The OIG is not the ordinary reporting channel for a porch theft by an unrelated person.
UPS, FedEx, Amazon, and other private deliveries
Private-carrier deadlines aren't interchangeable with USPS deadlines. They can depend on the service, shipper account, declared value, contract, and whether the shipment was marked delivered. Start with the seller or shipper if it arranged the delivery, then ask whether the carrier has opened a trace or claim.
Request the carrier's available delivery records, including:
- Delivery photograph
- GPS or scan information, if provided
- Signature or name of the recipient
- Locker, mailroom, or access records
- Driver notes
- The date a claim or investigation must be submitted
For an Amazon order or another marketplace purchase, use the order's delivery-support process and contact the seller or platform. A delivered-package policy may treat post-delivery theft differently from a package lost in transit. Don't assume a refund is required or guaranteed; ask which policy applies to the specific order and preserve the response in writing.
If the carrier or seller says the package was delivered, respond with the police report number, video, delivery discrepancy, or other concrete evidence. Avoid describing an authorized purchase as an “unauthorized transaction” merely because the package was stolen. If you contact a card issuer, explain accurately whether the dispute concerns the payment, the merchant's delivery, or theft after delivery, and ask which process applies.
Protecting the chain of custody
Chain of custody is the documented history of who collected, possessed, transferred, stored, and examined evidence. A stolen package creates a gap in that history, but a gap doesn't automatically make every related item inadmissible. The court will apply the evidence rules and facts of the specific proceeding.
Digital files require particular care because photographs, text files, and other computer artifacts can be changed without obvious physical signs. Research on modern forensic custody describes authenticity and documented handling as central concerns and distinguishes breaks that occur during the relevant custody period from events outside it. See the research on chain of custody and digital data.
Create a dated incident memorandum containing:
- What the evidence was and how it was packaged
- Who possessed it before shipment or delivery
- The tracking and delivery history
- The last confirmed transfer
- When the loss was discovered
- Every report, claim, and preservation step taken afterward
- The location of any duplicate, backup, photograph, or related record
- The names of people who can authenticate the evidence or the replacement record
Label the theft as an interruption in custody. Don't backdate a log, recreate a missing signature as if it were original, or silently substitute a copy for the missing item.
Give the memorandum and supporting records to the lawyer or prosecutor. If you're representing yourself, ask the court clerk about the required filing and service process, but don't ask the clerk to decide whether the evidence is admissible. Your lawyer can determine whether to seek a continuance, disclose the loss, request substitute evidence, subpoena another copy, or explain the custody gap through testimony or other records.
Reconstructing stolen physical and digital evidence
Start with the original source, not a rewritten summary. Possible sources include:
- The sender's retained copy
- A lawyer's or investigator's case file
- A cloud account, email attachment, or approved backup
- A laboratory, expert, hospital, employer, or agency record
- Photographs, scans, serial numbers, and inventory records
- Witness testimony about collection, packaging, or transfer
- A replacement sample or newly collected exhibit, when legally authorized
For a stolen USB drive, computer, or other device, don't open, edit, rename, or re-save files that remain available on another device. Keep the original export and make a working copy. Record who made the copy, when it was made, which device or account supplied it, and where it is stored.
Ask a qualified digital-forensics professional whether a forensic image and an integrity hash are appropriate. Those steps can help show that a working copy has not changed after collection, but they don't alone prove who created the file, what was on the stolen device, or that the replacement is identical in every legally relevant respect.
If the evidence contains personal or confidential information, secure the account and preserve relevant access logs at the same time. Tell the case team before using a remote-wipe feature because it may destroy information that investigators or the court need.
Criminal investigation and possible federal involvement
The correct jurisdiction depends on how the package was handled and what happened to it. Suspected theft from USPS mail can be reported to the Postal Inspection Service. A theft from a private carrier's delivery route is not automatically a federal mail-theft case and is commonly handled first by local or state law enforcement.
The fact that a package contains court evidence may increase its importance to the case, but it doesn't guarantee a federal investigation, FBI involvement, or a particular criminal charge. There is no universal value threshold that automatically sends every evidence-package theft to a federal agency. Give investigators the facts, evidence of a wider pattern, and any connection to identity theft, organized theft, or postal employees without guessing at the legal classification.
Keep the same description and timeline in every report. Inconsistent accounts can create more questions about the custody gap than the theft itself.
Insurance and recovery limits
Separate the package's monetary value from its importance to a legal case. A carrier claim or insurance policy may evaluate the item's covered value and proof of loss, not the cost of a delayed hearing, weakened case, or replacement investigation.
For USPS claims, the Domestic Mail Manual requires proof related to insurance and value and instructs customers to retain relevant packaging and contents. For private carriers, review the shipment's declared-value terms and ask whether the shipper or recipient must file.
Check homeowners or renters insurance only if the policyholder, ownership, deductible, and exclusions make it relevant. If the evidence belonged to a law office, employer, client, or public agency, that organization may need to handle the insurance inquiry.
Keep receipts for replacement media, forensic examination, re-collection, shipping, and other expenses. Reimbursement isn't automatic, so obtain a written explanation for any denial and note the applicable appeal or review deadline.
A practical follow-up file
Create one secure folder containing:
- Police and Postal Inspection Service report numbers
- Carrier inquiries, claims, decisions, and appeals
- Tracking records and delivery photographs
- Original security footage and working copies
- The evidence inventory and custody memorandum
- Witness names and statements
- Insurance correspondence and receipts
- Notices to counsel, the prosecutor, or the court
- The upcoming hearing, discovery, or filing deadline
Start by preserving the tracking record and camera footage, then file the correct theft report and notify the person responsible for the case. Those steps protect both the recovery effort and the explanation of what happened to the evidence.