# Homeland Security Investigations **Entity class:** Federal criminal-investigative directorate **Domain:** Homeland security / transnational crime / financial investigations **Doc Type:** Agency Component Node **Maturity:** Developed ## Definition **Homeland Security Investigations (HSI)** is the principal criminal-investigative directorate of [[wiki/United States Immigration and Customs Enforcement|ICE]]. It investigates cross-border and transnational offenses by combining authorities inherited from customs and immigration enforcement with contemporary financial, cyber, trade, export-control, and national-security capabilities. ## Why the Name Conceals the Mission HSI's customs lineage gives it authorities that extend well beyond removal proceedings. ICE describes HSI as investigating money laundering, trade fraud, export violations, cybercrime, narcotics smuggling, human trafficking, and other transnational offenses. It also identifies HSI as the largest contributor to FBI-led Joint Terrorism Task Forces and as an agency that targets the people, money, and materials supporting terrorist activity. Financial investigation is therefore not incidental to HSI. Its agents can follow illicit proceeds, trade-based value transfer, bulk cash, unlicensed money transmission, fraud, and procurement networks. This complements—but does not duplicate—the policy, intelligence, reporting, and sanctions functions of the [[wiki/United States Department of the Treasury|Treasury Department]]. ## ICEPIC Lineage [[wiki/ICEPIC|ICEPIC]] was an ICE analytical environment rather than an HSI synonym. It correlated records from DHS operational systems and supported lead analysis, identity resolution, non-obvious relationship discovery, and dissemination. Its retirement did not retire HSI's investigative mission; subsequent systems such as [[wiki/Investigative Case Management|Investigative Case Management]] and the standalone [[wiki/DHS Law Enforcement Information Sharing Service|LEIS Service]] carried different parts of the architecture forward. The 2026 center of gravity is the [[wiki/Case Management and Analytics Platform|Case Management and Analytics Platform]], which unifies case management and investigative analytics over an [[wiki/Enterprise Lakehouse|Enterprise Lakehouse]]. [[wiki/FALCON Search and Analysis|FALCON-SA]] remains documented as a search and link-analysis environment, while [[wiki/Data and Analytical Support Services|Data and Analytical Support Services]], the [[wiki/HSI Cyber Crimes Center|Cyber Crimes Center]], commercial cyber/OSINT tools, and digital-forensics products extend the enrichment and collection planes. ## Sources / Provenance - [[research/Immigration and Customs Enforcement Pattern Analysis and Information Collection (ICEPIC)|ICEPIC research dossier]] - [ICE — mission](https://www.ice.gov/mission) - [ICE — Homeland Security Investigations priorities](https://www.ice.gov/about-ice/hsi/priorities) - [ICE — Financial Investigations Handbook](https://www.ice.gov/doclib/foia/policy/handbookFinancialInvestigations.pdf) ## Relationships - **component of:** [[wiki/United States Immigration and Customs Enforcement|United States Immigration and Customs Enforcement]]. - **institutional ancestor:** [[wiki/United States Customs Service|United States Customs Service]]. - **investigates:** [[wiki/Terrorist Financing|Terrorist Financing]], money laundering, customs fraud, illicit procurement, and trade-based crime. - **uses case-management infrastructure:** [[wiki/Investigative Case Management|Investigative Case Management]]. - **current modernization:** [[wiki/Case Management and Analytics Platform|CMAP]] and [[wiki/Enterprise Lakehouse|Enterprise Lakehouse]]. - **analytical systems and services:** [[wiki/FALCON Search and Analysis|FALCON-SA]] and [[wiki/Data and Analytical Support Services|Data and Analytical Support Services]]. - **specialized center:** [[wiki/HSI Cyber Crimes Center|HSI Cyber Crimes Center]]. - **research:** [[research/ICEPIC Successor Stack - Distributed Case Management Analytics and Information Sharing|ICEPIC Successor Stack]]. - **participates in:** Joint Terrorism Task Forces within the wider [[wiki/Counterterrorism|counterterrorism]] architecture.