Behavioural Evidence Analysis: MO, Signature and Staging

Modus operandi is the offender's working method. It exists to solve four problems: how to find a victim, how to gain access, how to control them, and how to leave without being caught. Everything that contributes to those four functions is MO. Everything that doesn't is somewhere else on the spectrum (signature, staging, or random scene noise).

MO is not stable. It changes for three reasons.

• Experience. An offender who fumbled a first offence and got close to being caught will tighten their MO on subsequent attempts. A glove gets added. A different time of night gets chosen. The risk-reward calculation gets sharper.
• Feedback. If a control technique didn't work (the victim screamed loudly), the next offence may include pre-emptive gagging. If the entry method failed (the lock didn't pick), the next attempt may use a different tool.
• Opportunity drift. An offender whose target environment changes (moving cities, changing jobs, online targeting becoming easier) adapts MO to the new environment.

A MO match between two offences is therefore suggestive but not conclusive. Two separate offenders can converge on similar MOs (especially for high-frequency offence types like residential burglary), and a single offender can show different MOs across a series as they learn. The CCM warns explicitly against treating MO as identification.

Signature is the behaviour an offender brings to the scene that is not required to complete the offence. Robert Ressler's formulation: MO is what the offender has to do; signature is what the offender wants to do.

Concrete examples of signature behaviour:

• Posing the body. Arranging the victim in a particular position after death. Doesn't help complete the offence; doesn't help the offender escape. Reflects a psychological need (often related to control, shaming, or a fantasy script).
• Ritual acts. Specific sequences performed before, during, or after the offence that have meaning to the offender (washing the victim, arranging objects in a pattern, leaving items in a specific configuration).
• Trophy-taking. Removing an item that has no instrumental value to the offender (a piece of clothing, a small personal object). Distinct from theft, which has instrumental value.
• Communication. Leaving messages, contacting media or police, returning to the scene. The Zodiac and Mad Bomber cases are textbook examples internationally; in India, anonymous calls and notes have appeared in a handful of high-profile cases without being a stable national pattern.

Signature is more stable than MO because it reflects underlying psychological needs that don't change as fast as practical methods do. An offender who fantasises about a particular post-mortem arrangement will repeat that arrangement across offences even as their entry methods, control techniques, and disposal methods evolve. The 1990s FBI position, since softened, was that signature, when present, could reliably link offences across a series. The modern position is that signature is a strong signal when distinctive but a weak one when the behaviour is common (like a single defensive wound, which is just part of the offence dynamics, not a signature).

Staging is deliberate post-offence modification of the scene to mislead investigators. The category is narrow: the offender is consciously trying to make the scene appear to be something it is not.

Several patterns appear consistently in the BEA literature.

• Staging is almost always done by an inner-circle offender. A stranger has no reason to stage; they're already an unknown person in an unrelated location. An intimate partner, family member, or close associate stages because they're the obvious first suspect and they're trying to redirect attention. This is why a staged scene is itself diagnostic of relationship.
• Staging is almost always overdone. Offenders who stage tend to imagine what investigators expect rather than what an actual unrelated offender would produce. Common overdone patterns: too many drawers open in a "burglary" with nothing valuable taken, ligatures applied post-mortem in a "stranger assault", entry damage from the inside, defensive wounds on the wrong side of the body.
• Staging tends to leave inconsistencies between what the staged narrative requires and what the physical evidence shows. A "robbery gone wrong" should have signs of struggle and a hurried exit; a staged scene often shows neither. A "break-in" should have outward-facing damage and unfamiliar prints; a staged scene often shows the opposite.

The single most useful BEA question on staging: what would an actual unrelated offender have done here, and is that what I'm looking at? The staged scene almost never survives that question.

Undoing: a special case

Undoing is a sub-category of post-offence behaviour where the offender symbolically reverses the act, usually by covering the victim. The classic patterns are placing a sheet over the body, washing the body, dressing the victim, or arranging the body in a peaceful position. Undoing is not staging in the strict sense (the goal isn't to mislead investigators) but reads similarly diagnostic: it usually indicates an emotional relationship between offender and victim, and it's almost never seen in stranger offences.

The Crime Classification Manual, first published in 1992, organised the FBI's accumulated behavioural-pattern data into a working taxonomy. The major categories are homicide, arson, sexual assault, and (in later editions) computer crimes. Each category is sub-divided by behavioural patterns rather than by criminal statute.

The CCM's working method provides the procedural backbone of behavioural analysis.

1. 1. Victimology
   Build a full picture of the victim: lifestyle, routines, risk level, relationships, recent changes. Victimology is where behavioural analysis starts because the victim is the most documentable element of the offence.
2. 2. Crime scene indicators
   Catalogue what's present and absent at the scene: location characteristics, evidence type, weapon source, control type, body disposition, and post-offence behaviour. The catalogue is the data set for pattern matching against the taxonomy.
3. 3. Forensic findings
   Integrate medical examiner findings, lab results, and reconstruction inferences. The CCM treats forensics as one input among several rather than as the conclusion.
4. 4. Investigative considerations
   Generate hypotheses about offender characteristics, MO patterns, and search strategy. The investigation runs forward from here.
5. 5. Search warrant and interview strategy
   Use the behavioural inferences to design search and interview tactics. The CCM is explicit that the analysis should produce actionable investigative steps, not just a paper profile.

The discipline of the CCM approach is what survives the methodological critiques of profiling discussed in History of Criminal Profiling. Even when the inferential conclusions are walked back, the procedural framework (victimology first, scene catalogue second, forensics third, investigative actions last) remains a sensible audit trail. NFSU's behavioural forensics curriculum largely follows the CCM sequence.

Staging is one of the most useful BEA findings to cross-reference against a crime scene reconstruction. The reconstruction will catalogue physical inferences (trajectory, BPA, sequencing). BEA asks whether those inferences are consistent with the narrative the scene seems to be telling.

A working checklist:

• Inventory vs damage. Was anything of value actually taken? A "burglary gone wrong" with no missing valuables is a red flag.
• Entry direction. Damage to doors and windows should be consistent with outside-in force for a real intrusion. Insidedirected damage on a frame is a textbook staging marker.
• Body position vs likely cause. If the reconstruction says the victim was attacked from behind but the body is found facing the attacker, something doesn't fit.
• Defensive injuries pattern. Real attacks tend to leave defensive injuries on the radial side of the forearm and on the palms. Staged scenes often have wounds in the wrong distribution.
• Cleaning that's too clean. A scene where blood spatter has been wiped but the wipe pattern survives (or where luminol shows wider distribution than the visible scene suggests) is being told a story that doesn't fit the physical evidence.
• Discovery story coherence. Who found the body, when, and under what circumstances? Staging scenes are often "discovered" by the staging offender themselves under suspiciously specific conditions.

Across most well-documented staging cases, the pattern is consistent: the staging attempts to redirect blame toward a stranger or an alternative narrative (suicide, accident, intruder), but the physical evidence does not support it. Indian appellate jurisprudence on this question is less developed than on chain of custody (see Chain of Custody), but the pattern of trial-court findings is consistent.

Indian appellate jurisprudence on BEA-style arguments is thinner than on chain of custody, but a few cases get cited repeatedly in NFSU lectures.

The Sheena Bora case (2012, surfaced 2015)

The killing of Sheena Bora by her mother Indrani Mukerjea, with the body disposed of in a forested area near Raigad, Maharashtra. The investigation surfaced three years after the fact. From a BEA standpoint, the case is taught for the disposal behaviour (transport of the body to a distant location, partial burning, deliberate misidentification of the victim through statements about her being alive abroad) rather than for scene staging in the classical sense. The disposal pattern is highly consistent with inner-circle offending.

The Aarushi Talwar case (2008)

The double-homicide investigation in Noida. From a BEA standpoint, the case is studied less for what behavioural analysis produced and more for what it didn't: rapid contamination of the scene, ad-hoc retrospective profiling commentary in the press, and a series of incompatible reconstructions that the trial and appellate courts walked back and forth on. The case is a teaching example of how the absence of disciplined BEA at the scene makes everything that comes after harder.

The Nithari killings (2005 to 2006)

Moninder Singh Pandher and Surinder Koli, in Noida. The case is taught for its disposal-behaviour patterns (remains found in a drain behind the residence), the apparent ritual element in some accounts (heavily contested in trial), and the victimology questions it raised about pattern recognition failure (multiple disappearances over an extended period without behavioural analysis being commissioned).

What these three cases share, from a NFSU teaching standpoint, is that none of them produced a formal published profile in real time. The behavioural analysis is retrospective, often press-driven, and methodologically thin. That's not a criticism of the investigators; it's a description of where Indian institutional profiling capacity actually sits in the 2026 landscape.