When search comes to your door
Search rarely begins with a person who actually committed something. Officers usually arrive for an entirely different reason, and the device owner learns about the case only when policija shows their credentials. It's worth distinguishing between these reasons in advance.
The first reason is a criminal case against the company itself: suspicion of tax fraud, customs violations, money laundering, or labor violations. The second is a case against a counterparty: a supplier, client, partner whose documents or correspondence might be in your company mailbox. The third is a tax or customs file when Valstybinė mokesčių inspekcija or Muitinė suspect underreported turnover or incorrect goods declaration. The fourth is an employee complaint about unpaid wages or working conditions, after which not just the labor inspector but policija becomes involved. And finally, the most often underestimated case: when a company or person figures in a case only as a witness, with no suspicion against them, and search is conducted to obtain documents or devices that confirm or refute someone else's version of events.
Legal advice. The status of "witness" at the moment of search does not guarantee it will remain so. What is found during search often changes a person's procedural status in the following weeks.
Search in Lithuania is not improvisation by a single investigative group, but a decision made in advance, within an already opened ikiteisminis tyrimas — pre-trial investigation led by an investigator under the supervision of a prosecutor. Only the person being searched experiences surprise; the procedure itself is planned.
Who in Lithuania has the right to conduct search and seizure
The circle of bodies that may appear with a search depends on the nature of the case.
Police and prosecutor
policija is the most common executor of search in ordinary criminal cases: fraud, theft, violence, cybercrime. Investigative actions are conducted under the procedural guidance of prokuratūra, which oversees the legality of the investigation.
Financial Investigation Service
FNTT — the financial crime investigation service — becomes involved when there is money laundering, major tax fraud, subsidy abuse, or complex financial schemes involving multiple companies. For businesses with operations in multiple jurisdictions, this is the body to reckon with most.
Tax inspection and customs
Valstybinė mokesčių inspekcija checks income declaration, VAT, and business operations; when discrepancies look systematic rather than accidental, the case is transferred to investigation. Muitinė operates by similar logic at the border: non-declaration, goods undervaluation, movement rule violations.
It is important to understand the difference between inspection and search: inspection is an administrative procedure with its own rules for document access; search is a procedural action within a criminal case with different powers. For transition from ordinary business inspection to criminal proceedings, see the article on business inspections in Lithuania.
The court order that permits search: what to verify at the door
Search — krata — in Lithuania is generally conducted on the basis of ikiteisminio tyrimo teisėjo nutartis, a ruling by an investigative judge. The document must specify the particular case, the address or premises to be searched, and the subject of the search. Search without such a ruling is permitted only in narrow urgent cases, and even then the action is subject to subsequent judicial review.
Separate from broad krata, the law provides a narrower tool — poėmis, seizure of specific, previously known items or documents when the investigation knows exactly what and where something is located.
What to verify right at the door
- Official credentials of the persons who arrived — who they are and which agency they represent.
- Presence of ikiteisminio tyrimo teisėjo nutartis or, in exceptional cases, a prosecutor's decision with subsequent judicial confirmation.
- Whether the address in the document matches where they actually arrived.
- What exactly is listed as the subject of the search — search does not automatically grant the right to review everything indiscriminately beyond stated limits.
Legal advice. Reading the document in full is a lawful right, not an attempt to obstruct the procedure. The content of the ruling shows the limits of what officers may examine and seize.
How to behave during a search
Most mistakes during search occur not because of procedure complexity, but because of panic and the desire to "get it all over with as quickly as possible."
Verify documents and call a lawyer
First, verify the credentials and the document authorizing the action. Second, most importantly, call a lawyer or gynėjas immediately, before the search actually begins. You have the right to contact them from the first minute, and you should use it immediately.
Right to silence and right to witnesses
You have the right not to answer questions about the substance of the case until your lawyer arrives — this applies to both business owners and any employees. You must provide formal information, but you should not comment on documents or speculate aloud about what is being sought before talking to a lawyer. Witnesses are usually involved during search; it's worth remembering who was present.
Record objections in the protocol
Everything is recorded in protokolas — the search protocol, which both investigation and defense will later rely on. If anything happens in violation — items seized beyond the scope of the ruling, property damaged, denial of contact with a lawyer — you must demand that objections be entered in the protocol before signing. Never sign an unread document: this right always exists and does not obstruct the investigation.
Legal advice. Silence on the substance of the case is not a sign of guilt, but normal behavior. What harms most is not silence, but trying to "explain everything on the spot" without a lawyer, when explanations cannot be taken back later.
This is not just about business
Search in Lithuania often does not happen in a company office. It equally often comes to a private apartment, stops a car on the road, or affects someone who has no connection to the company at all.
Home search
Search of a private residence has the same formal requirements — ikiteisminio tyrimo teisėjo nutartis, document, limits of search — but is experienced much harder: family and children are present, as well as personal belongings. The right not to answer questions and the right to a lawyer work at home exactly as in an office, and these rights are most often forgotten at home.
Car, border, phone during crossing
A phone or laptop can be seized not just at an apartment door, but in a car during a road check or at the border when Muitinė is involved. A passenger or driver who is not a party to any case may be only a witness in someone else's proceedings — and it is precisely at this moment that preparation is most lacking.
Family member's device and witness status
A particularly painful case is when the subject of search becomes a device not of the business owner, but of a family member: a shared home computer, a child's phone. Formally, the ruling must specify exactly what and who is to be examined. A person who is only a witness in someone else's case — a former partner, office landlord, outsourced accountant — may also face search, and it is precisely a witness who particularly needs their own lawyer to explain the limits of what can be demanded from them.
Legal advice. If your name appears in a case you have no direct connection to, don't wait for an official summons. Clarify your actual procedural status in advance, not after a conversation with an investigator.
Devices, laptops, servers, cloud: lawful protection in advance
The most can be done not at the moment of search, but long before it — by establishing in your company and personally those work habits with devices that protect confidential and privileged information while lawful procedure determines what may be reviewed. This is not about obstructing the investigation, but about ordinary corporate hygiene that equally protects business against laptop theft or data breach.
Encryption, two-factor authentication, data separation
Full disk encryption on laptops and servers and encryption of individual devices is a basic practice for a company working with client data or financial information; this is also required by cyber insurance policies and partners during due diligence. Two-factor authentication on email and cloud storage reduces the risk that access to one device opens access to everything else. It is important to separate work and personal data: a separate account for work and for private life is a standard that protects both employee and company.
Less on the device, backups separately
The less sensitive data physically stored on a laptop or phone, the less depends on whether the device ends up in someone else's hands. Managed backups separately — in cloud under company control — mean that seizure of one device does not stop business: system access is restored from another source while the device situation is resolved through legal channels.
Protection from spyware and smaller public footprint
Protection from spyware and stalkerware — an underestimated part of hygiene, especially for business owners whose devices interest not just investigators but unscrupulous competitors. Regular device checks and system updates reduce this risk, as does reducing the public digital footprint of owners — contact details and personal life details in open sources.
Legal advice. Data protected by encryption, access control, and managed backups remains confidential until lawful procedure — with a judge's ruling, protocol, and possibility of appeal — determines what may be reviewed. The purpose of such preparation is not to obstruct the investigation, but to protect what does not concern the case.
What happens to seized property
Everything seized — devices, documents, media — is entered into protokolas with an inventory: what exactly, in what quantity, in what condition. This description should be read carefully and corrections demanded on the spot if the inventory does not match reality.
Copies of work data and storage period
With lawful grounds, you can raise the question of obtaining copies of work data necessary for the company's continued operation — with investigation's agreement. Seized devices do not remain with the investigation indefinitely: they are held exactly as long as needed for investigation purposes, and further storage without justified necessity can be challenged.
Return and appeal
The question of property return arises when the need for it as evidence ceases, and it is at this stage that an active lawyer position accelerates the process. The investigator's or prosecutor's actions can be appealed through skundas — a complaint reviewed by ikiteisminio tyrimo teisėjas, the investigative judge: the subject may be both exceeding the ruling's scope and unjustifiably prolonged property retention. Separately, the law protects materials covered by advokato profesinė paslaptis — attorney-client privilege: documents and correspondence with a lawyer have a special regime even after seizure.
How a firm prepares a client for search and supports them after
Search rarely catches a company that is prepared for it, and the costliest mistake usually becomes not the search itself, but what is done or said in the first half hour without a lawyer present. The firm's work begins long before anyone knocks on the door, and continues long after the last officer leaves.
Readiness audit and staff training
The first step is an audit: where sensitive data is stored, who has access to it, how consistently encryption is applied, whether there is a written action plan for search. Next is a brief staff briefing: who to call first, what can be said, what waits for the lawyer. A company where reception knows who to call in the first minute, and a company that learns about search after the fact, experience this situation very differently.
Lawyer on site and work with counsel
When search has already begun, the presence of a firm lawyer on site provides concrete benefit: monitoring that seizure stays within the ruling's scope, recording objections in the protocol before signing, real-time communication with the client and lawyer. In criminal cases that search may grow into, the client talks to the firm's lawyer in plain language about what really happened, and the lawyer translates that story into Lithuanian legal process language for gynėjas, puts the right questions to them, and controls case pace. More on this work in the article on court and criminal cases in Lithuania.
Device protection and business recovery
After search, the firm helps implement or strengthen the same lawful device hygiene described above, so that next time seizure of one device does not paralyze the company. In parallel, work is done on returning seized property, appealing unjustifiably prolonged device retention, and restoring operational activities: system access, work with banks, communication with partners who learned of the search. For owners whose business is registered in Lithuania or connected with migration status in Lithuania, support covers these issues too — search itself does not automatically affect residence permit, but the criminal case it may grow into could have consequences worth calculating in advance with a lawyer in Lithuania.
Frequently asked questions
Can you refuse police entry without a judge's court order?
If search is conducted on the basis of a properly issued ikiteisminio tyrimo teisėjo nutartis, you cannot obstruct lawful entry — this only worsens your position. Instead, verify the document, record the scope of action, and immediately call a lawyer — this is your lawful right.
Must you unlock your phone or laptop on demand during search?
The scope of what can be demanded on the spot depends on the specific ruling and your status in the case, and that is exactly why you should have a lawyer on the line at this moment. Silence on the substance of the case until your defender arrives is a lawful right.
Does search affect only company management?
No. Search and device seizure can affect anyone whose device is mentioned in the ruling or connected with the case subject — a regular employee, accountant, family member of the business owner, or even a witness in someone else's proceedings.
How long can seized devices be held?
Exactly as long as needed for investigation purposes; unjustifiably prolonged retention can be challenged through skundas to the investigative judge, especially when it paralyzes company operations.
Are documents you exchanged with your lawyer protected?
Yes, materials covered by advokato profesinė paslaptis have special legal protection and cannot be used against the client as freely as other seized documents — this status should be declared immediately and recorded in the protocol.
Search in Lithuania is a procedure with clear rules, and knowledge of these rules gives a person and business real protection: the right to a lawyer from the first minute, the right to silence on the substance, the right to record objections in the protocol, and the right to appeal what exceeded the law.
Матеріал має інформаційний характер і не замінює юридичну консультацію.