On April 15, 2013, two bombs exploded near the finish line of the Boston Marathon, killing three people and injuring hundreds. Within hours, Reddit users on r/findbostonbombers began combing through photographs of the crowd, trying to identify the perpetrators before law enforcement could.
They identified the wrong person.
Sunil Tripathi, a Brown University student who had been reported missing weeks earlier, was publicly accused by Reddit users of being one of the bombers. His name and photograph were circulated across social media. His family, already dealing with his disappearance, was bombarded with threats and harassment. Sunil was later found dead -- he had taken his own life before the bombing, and had nothing to do with the attack.
This is the cautionary tale that every citizen investigator needs to internalize before opening a case file. The impulse to help is real. The potential for harm is equally real. The difference between productive investigation and destructive vigilantism comes down to discipline, ethics, and methodology.
Rule 1: Use Only Public Records and Publicly Available Information
The foundation of ethical citizen investigation is the use of legally accessible information. This includes:
- Court records and filings available through PACER or state court systems
- Documents obtained through FOIA requests
- Published news reports and investigative journalism
- Public property records, business filings, and corporate registrations
- Publicly posted social media content (not private accounts or messages)
- Published academic research and government reports
What this excludes: hacking, social engineering, accessing private databases, impersonating law enforcement or journalists, purchasing stolen data, or using surveillance equipment. These activities are not only unethical -- they are illegal, and any evidence obtained through them is useless in a legal proceeding.
Rule 2: Never Contact Suspects, Witnesses, or Persons of Interest
This is non-negotiable. Citizen investigators do not have the legal authority, training, or institutional backing to conduct interviews or confrontations. Contacting a suspect can:
- Alert them to destroy evidence
- Give them grounds for a harassment claim
- Contaminate the evidentiary chain, making prosecution more difficult
- Put the investigator in physical danger
- Traumatize innocent people who are wrongly suspected
If your investigation identifies a person of interest, report your findings to the appropriate law enforcement agency. Document everything. Provide your sources. Then step back. The arrest and prosecution are not your job.
Rule 3: Fact-Check Everything Before Sharing
The Boston Marathon case did not fail because Reddit users were investigating. It failed because they treated speculation as fact and broadcast it to the world. The standard for sharing findings should be high:
- Can you cite a primary source? If not, it is speculation.
- Has the information been corroborated by a second independent source? If not, note that it is single-sourced.
- Are you distinguishing between what the evidence shows and what you think it means? A flight log shows someone was on a plane. It does not show why they were there.
- Could this information harm an innocent person if it is wrong? If yes, raise the threshold for sharing it.
On Coldcase Bureau, we require that all evidence submissions include source attribution. We categorize evidence by confidence level: verified, corroborated, single-source, and speculative. This is not bureaucracy -- it is the difference between investigation and rumor.
Rule 4: Respect Victims and Their Families
Cold cases are not puzzles. They are real tragedies involving real people. The victims had names, families, dreams, and lives that were taken from them. The families of victims live with grief that does not diminish with time.
Ethical investigation means:
- Never using graphic crime scene details gratuitously
- Never contacting victims' families unless they have publicly indicated they welcome public help
- Never speculating about victims' behavior in ways that imply they were responsible for what happened to them
- Remembering that the person at the center of the case was a human being, not a character in a story
Some families actively seek public help in solving their loved one's case. Others want privacy. Both positions are valid. The family's wishes should guide your approach.
Rule 5: Report Findings to Authorities
If your investigation produces a genuine lead -- a connection that was not previously documented, a person of interest that was not previously identified, evidence that contradicts the official record -- report it to the law enforcement agency responsible for the case.
Do this in writing. Include your methodology, your sources, and your evidence. Be clear about what is fact and what is inference. Do not expect an immediate response -- cold case units are understaffed, and evaluating citizen tips takes time.
If the local agency is unresponsive, there are alternatives: the FBI's tip line, the National Center for Missing and Exploited Children, state attorneys general offices, and investigative journalists who cover criminal justice.
The point is: your findings should enter the official record. Posting a theory on social media is not the same as submitting evidence to investigators. Do both, but do the official submission first.
Rule 6: Know Your Limits
Citizen investigators are valuable precisely because they bring fresh perspectives and diverse expertise. But they are not trained detectives, forensic scientists, or prosecutors. Knowing where your competence ends is as important as knowing where it begins.
Do not attempt to interpret forensic evidence (DNA, ballistics, toxicology) without expert guidance. Do not attempt to reconstruct crime scenes. Do not attempt to provide psychological profiles of suspects. These activities require specialized training, and amateur attempts can produce misleading conclusions that do more harm than good.
Where citizen investigators excel: document analysis, timeline reconstruction, identifying connections between people and events, filing FOIA requests, conducting open-source research, and maintaining public attention on cases that would otherwise be forgotten.
The Standard We Hold Ourselves To
At Coldcase Bureau, every investigation is governed by a code of conduct. Evidence must be sourced. Theories must be clearly labeled as theories. Harassment of any kind results in immediate removal from the platform. We work with law enforcement, not against them.
We built this platform because we believe citizen investigation can make a real difference. But only if it is done right. The families of victims deserve answers. They also deserve to be treated with dignity. Those two goals are not in conflict -- they are the same goal.
Investigate with rigor. Investigate with empathy. And never forget that every case file represents a person who deserved better.