When the BEB Comes: Search and Seizure — What Businesses Must Do

A search by the Bureau of Economic Security is a form of stress in which the most valuable thing you can lose is not money but the first half hour, when decisions are made in a rush. As a forensic economic expert, I regularly see the consequences of those minutes: original accounting records carried out the door, servers seized without any real need, protocols signed “without reading.” This article is about how to act calmly and within the law, so that you protect both your documents and your own position in the case.

Who the BEB is and why they come

The Bureau of Economic Security of Ukraine (BEB — Bureau of Economic Security) is a law enforcement body that investigates economic crimes, primarily tax and financial offenses. The range of cases falling under the BEB’s jurisdiction is defined by Article 216 of the Criminal Procedure Code of Ukraine (KPK). Materials for such proceedings often arrive from the State Tax Service (DPS), and, in money-laundering cases, from the State Financial Monitoring Service (Derzhfinmonitoring).

In practice, BEB detectives most often work with articles of the Criminal Code concerning:

• evasion of taxes, duties, and other mandatory payments (Art. 212);
• legalization (laundering) of property obtained through crime (Art. 209);
• illegal manufacture, storage, and sale of excisable goods (Art. 204);
• fraud involving financial resources (Art. 222);
• deliberate bankruptcy (Art. 219) and bringing a bank to insolvency (Art. 218-1).

The key thing to understand is that the visit itself does not mean guilt has been proven. A search is an investigative action to gather evidence. Your task is not to “outplay” the investigation, but to prevent its procedural violations from becoming your problem.

Two different procedures — don’t confuse them

Business owners tend to call any visit for documents a “search.” Legally, these can be two fundamentally different procedures, and your actions depend on which one you are facing.

Feature	Search	Temporary access to items and documents
KPK provision	Art. 234	Arts. 159–166
Basis	investigating judge’s ruling	investigating judge’s ruling
Essence	locating and seizing	examination, copying, and seizure where needed
Surprise	usually without warning	often with a summons to a set date

Search — only by an investigating judge’s ruling

A search of a home or other property of a person (and an office, warehouse, or car also counts as “other property”) is conducted only on the basis of a ruling by an investigating judge (Art. 234 KPK). The law allows narrow exceptions for urgent cases — entry into property without a ruling, followed by judicial review of its legality (Art. 233 KPK) — but these are exceptions, not the rule.

Temporary access to items and documents

Very often the “seizure” of documents happens not through a search but through temporary access to items and documents (Arts. 159–166 KPK). This is a separate procedure: an investigating judge, by ruling, permits examination of specified documents, the making of copies, and, in the cases provided for by law, the seizure of originals (this is precisely what the law calls a seizure). Here, too, there is a ruling, a validity term, and a clear list of what is permitted.

What to check in the ruling before letting them in

While the officer is still at the door, you have the right to calmly read the document being presented. Pay attention to five things:

1. Who issued it — which court, the name of the investigating judge, the date and number. By its number, the ruling can be verified against the Unified State Register of Court Decisions.
2. The address of the object — whether it matches yours exactly. Actions at an address not named in the ruling go beyond the scope of the permission.
3. The list of items and documents that may be searched for and seized. This list sets the boundaries — anything outside it is open to challenge.
4. The validity term of the ruling. An expired ruling has no force.
5. The details of the investigator/detective and prosecutor assigned to conduct it, and whether these people are actually among those who came.

A practical tip: ask for a photocopy or write down the key details before the action begins. This violates nothing, but it disciplines the other side.

Your rights during a search

Composure and documentation are your main tools. The law gives you specific rights:

• Lawyer. The investigator has no right to forbid you from using the legal assistance of a lawyer during the search (Art. 236 KPK). Do not begin the action without first trying to reach your defense counsel.
• Attesting witnesses (poniati). A search is conducted with the participation of at least two attesting witnesses (Art. 223 KPK). These must be disinterested persons, not employees of the same body.
• Video recording. A search of a home or other property of a person must be continuously recorded by audio and video (Art. 236 KPK). Interruption or absence of the recording may lead to the collected evidence being ruled inadmissible.
• Copy of the protocol and inventory. On completion, you are handed a copy of the protocol and an inventory of the seized items and documents. Nothing can simply be “taken” without an inventory.
• Remarks to the protocol. You have the right to enter written remarks before signing (Art. 104 KPK) — and this is the best moment to record everything that went wrong.

What can be seized and how to document it

The following are most often subject to seizure:

• originals of primary documents — contracts, delivery notes, acts, cash and bank documents, as well as stamps and draft notes;
• computer equipment and media — system units, laptops, servers, flash drives, external disks;
• mobile phones of company officials.

A particular pain point for business is servers and equipment: their physical removal can bring the enterprise to a standstill. The law therefore orients officers toward copying information, and the seizure of the original equipment must be justified.

How to document what is seized:

• keep your own parallel list of everything taken, alongside the official inventory;
• demand that the inventory include identifiers: make, serial number, number of pages, file or media names;
• where the law allows, insist on copies instead of originals, and for electronic data — on copying the information without seizing the media itself;
• record the sealing of seized items and demand that this be noted in the protocol;
• where possible, take your own photos of the process (where this is not prohibited by the terms of the action).

Typical violations — note them immediately

In my expert work, the same investigative mistakes recur again and again. Noticed violations should be entered into the remarks to the protocol at once — later they become grounds for a complaint to the investigating judge, or an argument about the inadmissibility of the evidence:

• seizure of items not on the list in the ruling;
• denial of a lawyer, or starting the action before their arrival despite a request to wait;
• “attesting witnesses” who are interested persons or actual employees of the body;
• interruption or absence of video recording;
• seizure of items without entering them in the inventory or without identifiers;
• psychological pressure, demands to “sign without reading,” refusal to hand over a copy of the protocol.

Do not argue emotionally and do not physically obstruct the action — that can carry its own consequences. Your weapon is a precise written record of the facts.

Why an economic expert matters already at the pre-trial stage

Many directors think about forensic economic examination only once the case is already in court. That is too late. Involving an economic expert at the pre-trial investigation stage offers several advantages:

• Assessing the validity of the amounts. In tax and financial cases, the key question is whether the amount of unpaid taxes or losses has been calculated correctly. Often it is a methodological error in the calculation that destroys the accusation.
• Reviewing another expert’s opinion. If the investigation has ordered its own examination, an independent specialist can prepare a review (retsenziya) of that opinion and point out its methodological flaws.
• Help in formulating questions. Defense counsel does not always command accounting terminology. An expert helps to pose correct questions for the forensic examination — and the outcome depends directly on their wording.
• Systematizing documents. Properly organized primary records, together with explanations of the economic substance of transactions, often remove part of the claims before the case ever reaches trial.

The legal grounds for forensic economic examination are laid down in the KPK and the Law of Ukraine “On Forensic Examination,” while the procedure for ordering and conducting it is defined by the Instruction on the ordering and conducting of forensic examinations and expert studies, approved by Order of the Ministry of Justice of Ukraine No. 53/5. The main thing is not to lose time: the earlier a professional economic assessment appears in the case file, the less room there is for arbitrary figures.

A short algorithm for the first steps

1. Stay calm, do not obstruct, but do not rush to sign either.
2. Read the ruling and check the five details (court, address, list, term, persons).
3. Call a lawyer immediately; if possible, wait for their arrival.
4. Watch the attesting witnesses and the continuity of the video recording.
5. Keep your own list of seized items and demand identifiers in the inventory.
6. Enter every violation into written remarks before signing the protocol.
7. Get a copy of the protocol and the inventory in hand.
8. Right after the action, contact a lawyer and an economic expert to assess your prospects.

A search or seizure of documents is not a verdict, but a procedure in which the prepared side wins. If they have already come to you, or you sense that they might, seek a consultation: the joint work of defense counsel and a forensic economic expert at the pre-trial stage often decides the fate of a case long before it reaches the courtroom.