A querying agency that locates a missing person, arrests a wanted person, or recovers stolen property through another agency's record must send written notice back to the entering agency — typically within a short window such as 24 hours — and arrange for the entering agency to either confirm or cancel the record. The controlling versions of this rule appear in the FBI's Criminal Justice Information Services (CJIS) Security Policy and the user manuals for the FBI's National Crime Information Center (NCIC) and the National Missing and Unidentified Persons System (NamUs), which place the confirmation obligation on the entering agency but require the querying agency to trigger it. Get this handoff wrong and a cleared warrant can stay live for weeks, which is exactly how people get arrested on warrants that were already served.
Who Counts as the Querying Agency Versus the Entering Agency
The querying agency is the criminal justice agency that ran the hit — the officer at a traffic stop, a jail booking clerk, a dispatcher, a detective checking a name against a database — while the entering agency is the one that created and maintains the original record. That distinction matters because the hit itself doesn't clear the record; only the entering agency can cancel, clear, or modify what it entered.
Three record types dominate this scenario. A missing person record in NCIC carries a "MKE" (missing) category, plus a separate "EBS" category for a person who escaped from custody or failed to appear. A wanted person record is a "Wanted Person File" entry, often abbreviated WPF, and may be for a felony, misdemeanor, or a parole or probation violation. A stolen property record could be a vehicle (VIF), a gun (GIF), a boat, a license plate, or a general article. Each file has slightly different post-hit handling in the NCIC Operating Manual's "hit confirmation" procedures, but the core handshake is the same.
Confusing a "hit" with a "confirmation" is the most common reader mistake. A hit means the querying agency's search matched a record; a confirmation means the entering agency has been notified and has verified that the record is still valid and the subject is still being sought or the property still reported stolen. Those are two separate events with two separate paper trails.
Automated name searches, sometimes called "QH" or "QW" transactions in older NCIC terminology, are the mechanism. The querying agency transmits the record identification number and receiving agency identifier, NCIC returns a hit, and the querying agency must then contact the entering agency through its 24-hour contact point. If the entering agency suspects the hit is a false positive — a common name, a wrong date of birth — it says so during that call and the querying agency releases the person.
Written Notice to the Entering Agency: Names, Fields, and Deadlines
The core obligation is a documented "hit confirmation" communication that identifies the querying agency, the entering agency, the record, the person or property recovered, and the date and time of the event. The NCIC Operating Manual and most state CJIS manuals (for example, California CLETS, Texas TCIC, and New York DCJS) require the querying agency to make direct contact with the entering agency "without delay," with 24 hours as the outer bound in many state policies.
What goes in that notice is not decorative. A usable notice includes the NCIC or state record number, the entering agency's ORI (Originating Agency Identifier), the querying agency's ORI, the name and date of birth of the person found or arrested, the charges or category, where the person is being held or where the property is stored, and the name and phone number of the querying officer or dispatcher. Jail booking sections typically add a booking number and a court date if one exists.
The 24-hour number is the operational linchpin. Every agency with an ORI has a designated 24-hour contact phone number on file with NCIC and its state CJIS system. The querying agency must call that number, not a general business line, and reach a live person who can verify the record. Emailing a detective who happens to be on vacation doesn't satisfy the requirement.
If the querying agency cannot reach the entering agency inside the required window, the standard failure path is escalation to the state CJIS systems agency, which maintains after-hours contact channels. Documenting the attempt matters — date, time, number dialed, name of anyone reached — because the audit trail is what CJIS auditors review. Skipping the notice isn't a technicality; it can leave a live warrant attached to a person already in custody and trigger a misidentification at the next traffic stop.
What Happens When the Person Found Is a Missing Person
When the querying agency finds a missing person, the first thing to do after ensuring the person is safe is call the entering agency's 24-hour contact and confirm whether the record is still active. The NCIC Missing Person File is cleared only by the entering agency, and NCIC policy expects cancellation "immediately" once the person is located — but the entering agency can't act on information it doesn't have. The querying agency's job is to deliver that information.
The handoff also interacts with NamUs, the federally supported National Missing and Unidentified Persons System run under the Department of Justice. Because NamUs and NCIC are separate systems, a person confirmed found and cleared from NCIC does not automatically drop out of NamUs in every jurisdiction. The querying agency's written notice should prompt the entering agency to check both. As of the writing of the NCIC manuals and the DOJ's NamUs guidance, agency responsibility for the corresponding NamUs entry rests with the investigating agency, not the finder.
Run the mandatory reporting rules in parallel. If the found person is a minor, many states have statutes requiring the finder to notify child protective services or a juvenile court within a set number of hours, and that obligation sits alongside the NCIC notice. If the person is an adult who was reported missing by a family member, some agencies require the finder to notify the reporting family member's local law enforcement even if the entering agency is different from the reporting agency.
A specific failure case is worth memorizing. Suppose a juvenile reported missing from one county is found by officers in another county. The finder books the juvenile temporarily, calls the entering agency, and is told by a records clerk that the file was "cleared last week." If the finder accepts that verbal statement without a confirmation number and cancels nothing, the record stays live in NCIC and the child may be flagged as a runaway at a school or hospital later. The fix: ask the entering agency to send a written cancellation and log the time of that confirmation.
What Happens When the Person Arrested Is Wanted
A wanted person hit is the highest-risk scenario for the querying agency, because the person is now in custody and the clock is running against every procedural guarantee the subject has. The querying agency should notify the entering agency within the window set by its state CJIS manual, confirm that the warrant is still active, arrange extradition or pickup, and forward the arrest paperwork to the entering agency and the local prosecutor.
The confirmation step includes a critical question the querying officer must ask: is this warrant still valid, and was it already served? Warrants get served in one jurisdiction and left active in NCIC because nobody sent the cancellation. The FBI CJIS Security Policy requires the entering agency to cancel or modify records "promptly" after service, but prompt is not automatic and depends on the entering agency's record updating. The querying agency's confirmation call is often the first opportunity for anyone to notice the mismatch.
The identity verification standard is the second check. NCIC's "hit confirmation" protocol requires the querying agency to match on additional identifiers — date of birth, Social Security number, physical descriptors, and sometimes a photograph — before treating the hit as confirmed. False positives from common names are common enough that some state manuals require the querying agency to note which identifiers matched and which did not. If only the name matches and the date of birth is different, the querying agency should not treat the hit as confirmed and should ask the entering agency before booking.
Extradition is a separate question from confirmation. A confirmed warrant does not automatically mean the entering jurisdiction will pay to extradite. Many jurisdictions place a "no extradition" or "limited extradition" limitation on warrants for misdemeanors and local ordinances. The querying agency's notice should ask the entering agency about extradition as part of the call, and the answer goes in the booking paperwork. If extradition is declined, the person is typically released on the local charges or the local booking process, and the warrant remains active elsewhere.
What Happens When Recovered Property Is Stolen Property
For stolen property, the querying agency's notice should identify the article, the record number, and a description of the physical article including serial numbers, VIN, or other identifiers, and it must reach the entering agency's 24-hour number before the property is released or stored long term. The property itself is evidence in the entering agency's case until the entering agency says otherwise.
Serial number verification is the check that governs this whole section. NCIC's stolen vehicle and stolen gun files carry serials and VINs, and a recovered vehicle's VIN should match the entered VIN exactly — not "approximately," not "off by one digit." Recovered firearms are often checked against both NCIC and the Bureau of Alcohol, Tobacco, Firearms and Explosives' (ATF) tracing system, and those are separate processes with separate forms. The querying agency's notice is not a substitute for the ATF trace.
Custody and return of the property is a separate decision from the notice. The entering agency, not the querying agency, decides what happens to the recovered property — usually release to the rightful owner, release to the insurer after a claim, or retention as evidence. Releasing a recovered vehicle to a purported owner before the entering agency confirms the record is a common failure, particularly at tow yards and impound lots where a records clerk handles hundreds of calls per shift.
Property records also need to be cleared or updated, not just confirmed. If the recovered item was already returned to its owner and the entering agency simply forgot to clear NCIC, the querying agency's notice is what closes the loop. If the item has been altered or damaged, the entering agency may need to modify the record rather than cancel it. The querying agency's notice should include condition notes on the property, current location, and whether the property is being held as evidence in a separate case.
A Step-by-Step Handoff Workflow the Querying Agency Can Follow
Here's the sequence the querying agency follows once a hit clears the initial verification. Read the whole list before starting the call; the steps overlap and a records clerk who works out of order tends to miss step 4.
1: Verify the hit against at least two independent identifiers — name plus date of birth, or VIN plus serial number — and note which identifiers matched and which did not. 2: Pull the entering agency's 24-hour contact number from the NCIC or state CJIS system, not from a general agency directory. 3: Call the entering agency and state the record number, category, subject (or property), and location. Ask the entering agency to confirm or deny the record. 4: Log the call in the NCIC hit confirmation log with the date, time, number dialed, person reached, and the entering agency's answer. 5: If the entering agency denies the hit, release the subject or property per local policy and note the denial in the case file. 6: If the entering agency confirms the hit, follow its requested handling — hold for pickup, begin extradition, keep property as evidence — and forward the written arrest or recovery report to the entering agency. 7: If the entering agency cannot be reached, escalate to the state CJIS systems agency and document the escalation time. 8: Follow up in writing to the entering agency with a copy of the notice, and ask the entering agency to confirm the cancellation or modification in writing once it's completed.
The close of the sequence is the part that most often gets skipped. The querying agency's duty does not end when the call is made; it ends when the record is either canceled or confirmed in writing. If the entering agency is slow to cancel, the querying agency's written follow-up is what proves the notice went out on time.
Timing, Documentation, and the 24-Hour Rule in State CJIS Manuals
The 24-hour rule shows up in multiple state CJIS manuals — California's CLETS Policies, Practices, and Procedures, Texas's TCIC/NCIC policies under DPS, New York's DCJS CJIS manual, and the FBI's CJIS Security Policy — usually as "without delay, and in any event within 24 hours." The 24-hour figure is a ceiling, not a target, and some manuals shorten it to "immediately" for wanted person hits where the subject is already in custody.
What a CJIS auditor actually checks is the log. The querying agency's NCIC hit confirmation log should show the record number, the date and time of the hit, the date and time of contact with the entering agency, the name of the person reached, and the outcome. Missing that last field is a common finding. The log is usually retained for a set period (three to five years is common in state manuals, though the exact retention varies), and the FBI's CJIS Division can audit it.
Fines and sanctions are not theoretical. The FBI CJIS Security Policy describes suspension of access for agencies that fail to follow hit confirmation procedures, and state CJIS systems agencies can suspend an ORI until corrective action is taken. Read literally, a records clerk who forgets one notice can cost the agency its access to NCIC, which effectively ends its ability to run warrants at traffic stops. That's why the workflow should live on a card at every dispatch station and booking desk.
The five-year audit trail also means the querying agency's log is a public records question. Many states treat NCIC hit confirmation logs as criminal justice records subject to disclosure rules, with the usual exemptions for active investigations. The querying agency's log should be written as if it will be read in a courtroom six months later, because it sometimes is.
Where Local Practice Diverges From the Model Manual
Federal manuals are the baseline, but the actual rules a querying agency follows come from its state CJIS systems agency, and state rules differ in ways that affect the workflow. California's CLETS manual, for instance, includes specific hit confirmation procedures and requires California agencies to use the CLETS system's own confirmation fields. Texas's TCIC system operates alongside NCIC and has its own hit confirmation requirement that some Texas agencies describe as running in parallel.
The difference matters for agencies that work across state lines. A city police department near a state border may query NCIC and get a hit from an agency in a different state, which then points to a different state's CJIS manual. The querying agency's obligation doesn't change — it's still the hit confirmation call and the written log — but the entering agency's cancellation timeline may be governed by its own state's manual, which could be "immediately" or could be "within 48 hours."
Missing-person cases add another layer because of NamUs and the separate DOJ-run unidentified persons database. The DOJ's NamUs guidance says agencies should enter and update records in both NCIC and NamUs, and the two systems do not always synchronize. A querying agency that finds a missing person and relies on an NCIC cancellation to also clear NamUs may be wrong. Local practice in some jurisdictions is to call the entering agency and specifically ask whether the NamUs entry has been updated.
The divergence that trips up new officers is the ORI structure. Some states assign multiple ORIs to one agency — one for dispatch, one for records, one for warrants — and the "entering agency" on the record may be a specific ORI within a larger department. Calling the department's main number won't reach the ORI. The ORI on the record is the identifier to look up in NCIC/state system to find the 24-hour contact.
Recognition and Error Traps: Common Ways the Handoff Goes Wrong
The most common error is treating the entering agency's "yes, it's active" as the end of the process. It's the middle. The record still has to be canceled or updated by the entering agency, and the querying agency's written follow-up is what ensures that happens. A verbal "we'll get to it" without a follow-up is how a subject gets arrested on a served warrant weeks later.
A second error is calling the on-duty number instead of the 24-hour number. The 24-hour number is usually a dispatch or communications center, not a records section. Records sections are open business hours; dispatch is open always. If the agency's 24-hour number is a pager service or after-hours voicemail in the state CJIS database, that's a separate problem for the entering agency to fix — but the querying agency still has to log the attempt and escalate.
A third error is calling the wrong agency entirely. NCIC records carry the entering agency's ORI, and the ORI maps to a contact; the agency named in the record isn't always the one that created it. Multiple agencies in one county can share the same physical building, and the "entering agency" may be the sheriff's office while the "reporting agency" is the municipal department. The ORI on the record is authoritative.
False-positive handling deserves a paragraph of its own because it's the failure with the most direct human cost. A common name with a matching date of birth can still be a false positive if other identifiers don't match. NCIC's hit confirmation protocol expects the querying agency to note which identifiers matched and which didn't; if a subject's physical descriptors don't match, the querying agency should ask the entering agency to confirm before treating the hit as a hit. The person who's wrongly arrested on someone else's warrant is a real consequence of skipping that step.
How Banks and Other Querying Agencies Fit the Same Rules
Many readers arrive at this question from a financial institution, insurer, pawn shop, or other "querying agency" that runs checks against stolen property databases — not from a police department. The same structural logic applies, though the specific legal obligation is different and should be checked with the database operator. The general principle: the querying party must notify the entering party, and the entering party must clear the record.
The NCIC database is restricted to criminal justice agencies, so a bank or insurer usually queries a commercial version of stolen-vehicle or stolen-property data (for example, through a data reseller that mirrors national law enforcement records). If that commercial query returns a hit, the querying party must contact the local police non-emergency line and let the responding agency run the law enforcement check, since commercial records can lag behind NCIC updates. Two days of lag is common in commercial mirrors, and a lot can change in two days.
Insurers handling a recovered stolen car or a recovered piece of jewelry face a slightly different problem. The insurer is not the entering agency and is not usually the querying agency; the police are. The insurer's job is to cooperate with the police agency that made the recovery, provide its loss report to the entering agency, and coordinate with the entering agency about whether the property goes to the owner or the insurer. That coordination should be in writing and should reference the NCIC record number, if the police share it.
Commercial and financial readers should also watch the legal scope boundary. This article is general educational information about agency procedures, not a legal opinion and not a recommendation for any specific action in a given jurisdiction. Database-access rules are governed by the FBI CJIS Security Policy, state CJIS manuals, and the specific contract a commercial reseller operates under. Any bank, insurer, or private party with a live recovery should consult its own counsel and the police agency handling the recovery before acting on a hit.
FAQ
How fast must the querying agency contact the entering agency after a hit?
Twenty-four hours is the outer bound in most state CJIS manuals, and many states use "without delay" as the working requirement. In practice, communications centers call within minutes for wanted person hits and within hours for property hits. The exact figure is set by your state's CJIS systems agency, not by NCIC directly.
Does the querying agency cancel the record, or does the entering agency?
Only the entering agency can cancel, clear, or modify the record it created. The querying agency's obligation is to notify the entering agency and document the notice. If a querying officer promises a subject "we'll get that cleared," the promise is hollow unless the entering agency acts.
What if the entering agency won't confirm the record within the window?
Escalate to the state CJIS systems agency, which maintains after-hours channels and can push the entering agency to respond. Document the escalation time. If the recidivism risk is high — a wanted person in custody, a missing child found — most state systems agencies treat the escalation as urgent.
How many identifiers must match before a hit is treated as confirmed?
NCIC's hit confirmation protocol expects multiple identifiers — name plus date of birth is the minimum, with physical descriptors and photographs expected for high-risk categories. The specific standard is set by your state CJIS manual and can require additional identifiers for wanted person hits. A single-name match should not be booked as a confirmed hit.
What happens if the entering agency's record was already served and it forgot to clear it?
The querying agency's confirmation call is often the only chance to catch this. The subject is held until the entering agency confirms the record is valid; if it isn't, the entering agency should cancel immediately and the subject is released per local policy. Waiting for the record to "sort itself out" is how served warrants stay live for months.
Do NamUs and NCIC records clear together?
No. NamUs is a Department of Justice-supported system separate from NCIC, and a person cleared in one does not automatically clear in the other. The entering agency must update both. A querying agency that finds a missing person should ask the entering agency to confirm both records were updated.
What if the entering agency says it has no extradition on the warrant?
Extradition is separate from confirmation. A confirmed warrant can carry a "no extradition" or "limited extradition" limitation, usually for misdemeanors and local ordinances. The querying agency's notice should ask about extradition as part of the call, and the answer goes in the booking paperwork. The warrant may still be active in NCIC even where the entering jurisdiction won't pay to extradite.
What penalties can an agency face for missing the notice?
The FBI CJIS Security Policy allows suspension of access to NCIC for agencies that fail to follow hit confirmation procedures, and the state CJIS systems agency can suspend an ORI until corrective action is taken. The NCIC hit confirmation log is auditable for a multi-year retention window that varies by state, commonly three to five years. A suspension effectively ends the agency's ability to run warrants at traffic stops, which is why the workflow lives on a card at every dispatch station.
This article is general educational information about agency procedures and is not a legal opinion. The specific obligations of a querying agency — and the deadlines for notifying an entering agency — are set by the FBI CJIS Security Policy, by your state CJIS systems agency, and by your agency's own policies, and can vary in ways this article can't capture. Any agency, bank, insurer, or individual handling an actual hit should consult the state CJIS systems agency and a locally qualified attorney before relying on the procedures described here. If a person is in immediate danger, contact local emergency services.