How Is Chain of Custody Proven in Sabotage Cases?
Introduction
In sabotage cases, physical evidence may include explosives, firearms, ammunition, tools, electronic devices, damaged components, or other objects allegedly used in the commission of the offense. The prosecution must do more than show that an object was recovered. It must establish that the item presented in court is the same item seized during the investigation and that its identity and condition were preserved.
This requirement is commonly described as the chain of custody. A break in the chain may create reasonable doubt, particularly where the physical object is indispensable to proving the offense or linking the accused to the alleged sabotage.
What Is the Chain of Custody?
Chain of custody refers to the documented and testimonial account of an item’s movement and handling from the time it is recovered or seized until its presentation in court. It identifies the persons who possessed the evidence, the time and place of each transfer, the item’s condition, and the safeguards used to prevent substitution, contamination, loss, or tampering.
In People of the Philippines v. Togon, Jr., G.R. No. 247501, 2021, the Supreme Court emphasized that every person who handled or examined physical evidence must be accounted for. The prosecution must show continuity of possession and compliance with procedures for marking, recording, safekeeping, laboratory examination, and courtroom presentation.
The same principle applies to physical evidence in sabotage prosecutions. Although the specific offense may be charged under a special law or the Revised Penal Code, the prosecution remains bound by the constitutional requirement of proof beyond reasonable doubt and the rules on authentication and admissibility of evidence.
Why Chain of Custody Matters in Sabotage Cases
Sabotage cases often depend on circumstantial and physical evidence. A recovered explosive, detonating device, firearm, tool, or damaged component may be offered to prove the means, method, or identity of the offender.
If the prosecution cannot establish that the object examined by an expert is the same object recovered from the scene, the evidentiary value of the expert’s findings may be substantially weakened. The issue is not merely whether the object exists, but whether the object has remained identifiable and unchanged throughout the investigation.
In People v. Javier, G.R. No. 245334, 2023, the Court explained that authentication requires evidence concerning every link in the chain. The witnesses should describe from whom the item was received, where it was kept, what happened while it was in their possession, its condition upon receipt and delivery, and the precautions taken to prevent alteration.
Primary Handling Protocols
1. Recover and Secure the Evidence
The first officer or investigator who encounters the physical evidence should secure the area and prevent unauthorized persons from handling the item. Photographs should be taken before unnecessary movement, particularly when the position or condition of the object may be relevant to the reconstruction of the incident.
Potentially dangerous items, such as explosives or improvised incendiary devices, should be handled only by personnel trained and authorized to neutralize, collect, and transport them. The safety procedure must not eliminate the ability to identify the item recovered from the scene.
2. Mark the Evidence Immediately
Marking is the starting point of the custodial link. The identifying mark should be placed as soon as reasonably possible and should be made in a manner that does not destroy or materially alter the item.
The marking should be recorded in the evidence inventory, seizure receipt, investigation report, and turnover documents. Where the item cannot safely be marked directly, the container or packaging should be marked, sealed, photographed, and clearly linked to the recovered object.
In People v. Javier, the Supreme Court stated that marking separates the evidence from other similar objects and helps prevent switching, planting, and contamination. Delayed or undocumented marking may therefore raise doubts about whether the item presented at trial is the same object allegedly recovered during the investigation.
3. Prepare a Complete Evidence Inventory
The inventory should identify the item with sufficient specificity. Depending on the evidence, the record should include its description, quantity, serial number, dimensions, color, identifying features, condition, location of recovery, and the date and time of seizure.
For explosive or weapon-related evidence, the inventory should also record the type of device or weapon, component parts, markings, ammunition, apparent defects, and any visible residue or damage. Photographs should accompany the written description whenever feasible.
4. Document Every Turnover
Each transfer should be supported by a receipt, custody form, logbook entry, or equivalent record. The document should state:
- the name, rank, and signature of the person releasing the evidence;
- the name, rank, and signature of the person receiving it;
- the date, time, and place of transfer;
- the reason for the transfer; and
- the condition of the item and its packaging.
Typical custodial links in a sabotage investigation may include the transfer from the recovering officer to the investigator, from the investigator to the evidence custodian, from the custodian to the explosives or forensic unit, from the laboratory or examining officer back to the custodian, and from the custodian to the court.
5. Preserve the Packaging and Seals
Evidence should be placed in appropriate packaging and sealed in a manner that reveals unauthorized opening. The seal, label, and identifying marks should be photographed and described in the custody records.
If the packaging is opened for examination, the person who opened it should record the reason, date, time, procedure, and condition of the item. The evidence should then be repackaged and resealed, with the new seal and identifying information documented.
6. Record Laboratory Examination
The forensic or explosives laboratory should document the receipt, condition, examination, testing, storage, and release of the evidence. The examining expert should be able to identify the item received and explain how it corresponds to the item described in the seizure and turnover records.
Where testing consumes or alters part of the evidence, the examiner should state the quantity or component used, the method of examination, the remaining material, and the manner in which the remainder was preserved. These details are important when the physical object or its residue is later presented in court.
7. Maintain Evidence Until Trial
The evidence custodian must maintain secure storage and an accurate log of all subsequent access. Temporary removal for court proceedings, further examination, inspection, or inventory should be recorded as another custodial event.
At trial, the prosecution should present the persons necessary to explain the chain. A witness who merely identifies an item without knowing how it was handled between seizure and trial may not be sufficient to establish its integrity.
What the Prosecution Must Prove
The prosecution must establish, through competent testimony and records, that the object presented is the same object allegedly recovered and that its condition was sufficiently preserved. The required showing ordinarily includes:
| Stage | Evidence to Establish |
|---|---|
| Recovery or seizure | Who found or seized the item, where and when it was recovered, and its condition at that time |
| Marking | When, where, and by whom the item or its container was marked |
| Initial turnover | How the item was transferred to the investigator or evidence custodian |
| Technical examination | Who received and examined the item, what tests were performed, and whether the evidence was altered |
| Safekeeping | Where the item was stored and who had access to it |
| Court presentation | How the item was brought to court and identified as the same evidence recovered from the scene |
Documentary and Testimonial Proof
Both documents and testimony are relevant. The prosecution may rely on seizure receipts, inventory forms, photographs, evidence logs, turnover receipts, laboratory reports, examination records, storage records, and court markings.
Documents alone may not cure a material gap if no witness can explain an unexplained transfer or alteration. Conversely, testimony may be inadequate where the records show unexplained inconsistencies in the item’s description, markings, packaging, or movement.
In People of the Philippines v. Togon, Jr., the absence of a chain-of-custody form and the failure to prove how the seized hand grenade moved from one custodian to another created a break in the chain. The Court treated the failure as fatal because the integrity of the alleged explosive was not preserved.
When a Procedural Deviation May Be Excused
Not every irregularity automatically requires exclusion. The legal consequence depends on the nature of the deviation and whether the prosecution satisfactorily explains it while proving that the identity and evidentiary value of the item remained intact.
For drug evidence, People v. Estabilo, G.R. No. 252902, 2021, recognizes that noncompliance with witness requirements may be excused when the prosecution establishes a justifiable ground and demonstrates preservation of the seized item’s integrity. This statutory rule specifically concerns Section 21 of R.A. No. 9165, as amended by R.A. No. 10640, and should not be mechanically extended to every type of physical evidence in sabotage cases.
For explosives, weapons, tools, and other non-drug evidence, the prosecution must still satisfy the ordinary rules on authentication, relevance, and proof beyond reasonable doubt. A vague assertion that the evidence was “properly handled” is generally weaker than specific testimony supported by contemporaneous records.
Distinguishing Drug Evidence from Other Physical Evidence
The special inventory and witness requirements under Section 21 of R.A. No. 9165, as amended by R.A. No. 10640, principally govern seized dangerous drugs, controlled precursors, essential chemicals, and related laboratory equipment. They are not the universal procedure for every item recovered in a sabotage investigation.
Nevertheless, the underlying concern is similar: the prosecution must demonstrate that the evidence was not substituted, contaminated, planted, or materially altered. The four-link analysis commonly applied in drug cases may serve as a useful checklist, but the controlling requirements for explosives and other objects arise from the applicable substantive law, the Rules of Court, constitutional due process, and the facts of the case.
People v. Valencia et al., G.R. No. 250610, 2023, describes the four commonly examined links in drug cases: seizure and marking; turnover to the investigating officer; turnover to the forensic chemist; and submission to the court. In sabotage cases, the corresponding custodians and examining personnel may differ, but every material transfer must still be accounted for.
Electronic Intercepts and Related Records
Some sabotage investigations may involve recorded communications or other surveillance materials. These are subject to distinct statutory and judicial requirements and should not be confused with the custody rules for a recovered physical object.
Section 21 of R.A. No. 11479 requires the joint affidavit of the law enforcement agent or military personnel to state the number of tapes, discs, or recordings; the dates and times covered; and the chain of custody or list of persons who possessed them. The affidavit must also address duplicates or copies and their inclusion in the sealed package deposited with the Court of Appeals.
Rule 4, Section 12 of A.M. No. 22-2-19-SC requires intercepted and recorded communications, including copies and records of surveillance activities, to be deposited with the Court of Appeals in a sealed envelope or package within forty-eight hours after expiration of the surveillance period or its extension. These safeguards are separate from, but consistent with, the broader requirement that evidence be preserved and authenticated.
Common Breaks in the Chain
- The item was not marked immediately or the reason for delay was not recorded.
- The description in the seizure report differs from the laboratory report or courtroom exhibit.
- A transfer occurred without a receipt, logbook entry, or witness who could explain it.
- The evidence was stored in an unsecured location or accessed by unidentified persons.
- The packaging or seal was opened without documentation.
- The prosecution failed to present the evidence custodian or the examining personnel.
- The laboratory report does not identify the markings or packaging of the item received.
Typical Example
Suppose investigators recover an improvised explosive device near a damaged facility. The arresting officer photographs and marks the device, then turns it over to an investigator. The investigator delivers it to an evidence custodian, who later releases it to the explosives laboratory.
The prosecution should present evidence showing each transfer, the condition of the device and its packaging, the examination conducted, the storage arrangements, and the identity of the object brought to court. If the records show that the device remained sealed and consistently marked, the chain is substantially supported.
By contrast, if the device was left in an unsecured vehicle, later delivered without a turnover receipt, and examined under a different identifying number, the defense may argue that the prosecution failed to establish the identity and integrity of the corpus of the offense.
Recommendations for Investigators and Prosecutors
- Prepare a written evidence-handling plan before collecting hazardous or technically complex objects.
- Mark, photograph, inventory, package, and seal the evidence as soon as circumstances reasonably permit.
- Use a separate custody record for every transfer and require complete signatures and timestamps.
- Preserve original packaging, seals, photographs, laboratory notes, and examination records.
- Identify every person who handled the evidence and secure testimony from witnesses who can explain each material link.
- Address any deviation specifically rather than relying on a general statement of regularity.
- Compare the physical exhibit, photographs, inventory, laboratory report, and custody log before filing the case and before trial.
Conclusion
Establishing chain of custody in sabotage cases requires a coherent account of the evidence from recovery to courtroom presentation. The prosecution must prove not only that an object was found, but also that the object examined and presented at trial is the same object recovered and that reasonable safeguards prevented tampering or substitution.
Investigators should treat every transfer, opening, examination, and storage event as a material part of the evidence record. Prosecutors should evaluate the chain before filing or presenting the case, while defense counsel should test inconsistencies in markings, custody records, packaging, testimony, and laboratory handling. Where an unexplained break creates reasonable doubt about the identity or integrity of the physical evidence, conviction should not rest on that item alone.
About Nicolas and De Vega Law Offices
Nicolas and de Vega Law Offices is a full-service law firm in the Philippines. You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines. You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com.

