Case Document 43-1 Filed 03/19/19 Page 1 of 269 so 106(Rev. cans} Application for a Search Warrant UNITED STATES DISTRICT COURT for the Southern District of New York clle MAG 2969 APPLICATIDN FOR A SEARCH WARRANT In the Matter of the Search of rie describe the to be searched [gr enti?r tire persng b??e and address) Four Premises and Turn Electronic Devices, See Attached Af?davit and Riders I, a federal law enforcement of?cer or an attorney for the government, request a search warrant and state under . ?pug-1H1ng of perjury that I have reason to believe that on the following person or property (teams? Iheperscn or describe the ?rst?? altitgi??i??iici? CHBEVECES, See Attached Af?davit and Riders located in the aSouthern District of New York there is now concealed (tdenti?: the person or describe the property to be seized}: PLEASE SEE ATTACHED AFFIDAVIT AND RIDERS. The basis for the search under Fed. R. Crim. P. 41(0) is (check one or more): devidence of a crime; Efcontraband, fruits of crime, or other items illegally possessed; designed for use, intended for use, or used in committing a crime; CI a person to be arrested or a person who is restrained. The search is related to a violation of: O?me Description Conspiracy, false bank entries, Ise statements to a ?nancial institution, wire fraud, bank fraud. and illegal campaign contributions Code Section 18 1.1.8.0. 371, 1005, 1014, 1343 and 1344. and 52 USC 30116 and 30109 The application is. based on these facts: PLEASE SEE ATTACHED AFFIDAVIT AND RIDER. Continued on the attached sheet. CI Delayed notice of days (give exact ending date if more than 3t) days: under 13 U.S.C. 3103a, the basis of which is set forth on the attached sheet. is requested Fretted transit owl-title - .1 . Sworn to before me and signed in. my presence. - - - . Date: I is -. :l Judge ?3 signature - - City and state: 21/ xii-ax fit-'1 tzdiwxi??jl 3' Hart Hanoi. El Pam's?. USS. meditate-Judge Printed name and-title .1. - 1.1 we - . awn-anus: -- .- -. .- . n-n-J-rr-T - - -n _Case Document 43-1 Filed 03/19/19 Page 2 of 269 UNITED STATES DISTRICT COURT SOUTHERN DISTRICT OF NEW YORK In the Matter of the Application of the United States of America for a Search and Seizure 3 Warrant for the Premises Known and Described as (1) 502 Park Avenue, ?.\lew York, New York 10022, (2) Michael Cohen?s Of?ce at 30 Rockefeller Plaza, 23rd Floor, New York, New York 10112, (3) Safe Deposit Box Located at the TD Bank Branch at 500 Park avenue, New York, New York 10019, and (4) -- -- 1723, New York, New York 10065, and Any 5 Closed Containers?tems Contained Therein, and the Electronic Devices Known and Described as (1) an Apple iPhone with Phone Number _and (2) an Apple iPhone with Phone Number: i Reference No. 201131100127 TO BE FILED UNDER SEAL Agent Af?davit in Support of Application for Search and Seizure Warrant SOUTHERN OF NEW YORK) as; _Special Agent, Federal Bureau of Investigation, being duly sworn, deposes and says: Introduction A. Affiant 2. I make this Af?davit in support of an application pursuant to Rule 41 of the Federal Rules of Criminal Procedure for a warrant to search the premises speci?ed below (the ?Subject 2 201103.02 - mu-wrr. arr-v.1- Case Document 43-1 Filed 03/19/19 Page 3 of 269 Premises?) and the electronic devices speci?ed below (the ?Subject Devices?) for, and to seize, the items and information described in Attachments A, B, C, D, and F. This af?davit is based upon my personal knowledge; my review of documents and other evidence; my conversations with other law enforcement personnel; and my training, experience and advice received concerning the use of electronic devices in criminal activity and the forensic analysis of electronically stored information Because this af?davit is being submitted for the limited purpose of '_e?stablisi?ngprobable cause, it'dues not include 'all'theifacts-thatrI-have -- of my investigation. Where the contents of documents and the actions, statements, and conversations of others are reported herein, the)?r are reported in substance and in part, except where otherwise indicated. B. The Subject Premises and Subject Devices 3. Subject Premises-1, Subject Premises-2, Subject Premises-3 and Subject Premises- 4 (collectively, the ?Subject Premises?) are particularly described as: a. Subject Premises-1 is Apartment-located inside the building at 502 Park Avenue, New York, New York 10022. The building located at 502 Park Avenue is a 32- ?oor brick residential building. Subject Premises?1 is located on the-floor of the building. Based on my review of New York City property records, I have learned that Michael Cohen and Laura Cohen own Subject Additionally, as described below, Subject Premises?l is Cohen?s fullutime residence. b. Subject Premises-2 is an office located on the 23rd floor of the building at 30 Rockefeller Plaza, New York, New York 10112. The building located at 30 Rockefeller Plaza 1 As noted I have learned that on or about October 23, 2015, Cohen transferred Subject Premises-1 into a trust. 3 2:31?an ?new - Case Document 43-1 Filed 03/19/19 Page 4 of 269 is a 66-?oor of?ce building that spans the entire block between Sixth Avenue and Rockefeller 'PlaZa. Subject Premises-2 is located on the 23rd ?oor of the building inside of the of?ces of the law ?rm Squire Patton Boggs. The office is assigned to Michael Cohen. As described below, Michael Cohen works and conducts meetings at Subject Premises?2. c. Subject Premises-3 is a safety deposit box located inside the TD Bank branch location at 500 Park Avenue, New York, New York 10019. Based on my review of records ?aintained'by'TD Bank?'have learned ten inches in size, and is marked as box - The safety deposit box is in the name of Michael Cohen and Laura Cohen. d. Subject Premises-4 is Room 1?28 located inside the Loews Regency Hotel at 540 Park Avenue, New York, New York 10065. The building is a luxury hotel located on Park Avenue and 615t Street. Subject Premises-4 is located on the 17th ?oor of the hotel. Based on my review of emails obtained pursuant to search warrants described below, I have learned that on or about January 5, 2018, Cohen received an email from an employee of Loews Regency, which included a price quote for a long-term stay suite based on a three-month stay from January 3 to April 3, 2018.2 On or about January 29, 2018, Cohen sent an email to a Loews Regency employee, stating, in pertinent part: ?Ijust spoke to my wife and she has scheduled the move for Thursday. Please mark down that we will be taking possession on Thursday, February lst.? Based on my review of cell phone location data, I have learned that, over the past 24 hours, two cellular phones used by Cohen have been located in the vicinity of Subject Premises-4. In particular, on or about 2 Although the quoted price contemplated a threeamonth stay from January 3 to April 8, it appears that Cohen did not move in until February 1, and as of today, April 8, cellphone location infonnation demonstrates that Cohen?s cellular phones are in still in the vicinity of Subject Premises--.-. Case Document 43-1 Filed 03/19/19 Page 5 of 269 April 3, 2013, law enforcement agents using a ?trigger?sh? device identi?ed Room 1728 as the room within the hotel in which the Subject Devices are most likely present.3 e. Therefore, I believe that Cohen is temporarily residing in Subject Premises-4. 4. Subject Device-1 and Subject DeviceFZ (collectively, the ?Subject Devices? are particularly described as: Based on my review of records maintained by I have learned that Subject Device?1 is subscribed to Michael Cohen. Based on my review of cellphone location information maintained by I have learned that Subject Device?l is presently located in the Southern District of New York. b. Subject Device?2 is an Apple iPhone serviced by with the telephone number _Based on my review of records maintained by 1 have learned that Subject Device?2 is subscribed to Michael Cohen. Based on my review of cellphone location information maintained by I have learned that Subject Device-2 is presently located in the Southern District of New York. c. Based on my training, experience, and research, and from consulting the manufacturer?s and service providers? advertisements and product technical speci?cations available online, I know that the Subject Devices have capabilities that allow them to, among other things: make and receive telephone calls; save and store contact information; send and receive 3 Based on my conversations with these agents, I understand that it is also possible that the Subject Devices are one floor below, in Room 1628. However, as noted, I understand that Cohen received a price quote for a long-rem] stay suite and is residing there with his family. Based on my conversations with FBI agents conducting surveillance, I understand that Room 1728 appears to be a suite, whereas Room 1623 appears to be a standard room. 5 201103.02 iPhone serviced Case Document 43-1 Filed 03/19/19 Page 6 of 269 emails and text messages; download and run mobile telephone applications, including call and messaging application such as Signal, and Dust; take, send, and receive pictures and videos; save and store notes and passwords; and store documents. C. The Subject Offenses 5. For the reasons detailed below, I believe that there is probable cause to believe that the Subject Premises and Subject Devices contain evidence, fruits, and instrumentalities of ?nancial institution), 1343 {wire fraud), and 1344 (bank fraud) (collectively, the ?Bank Fraud Offenses?), 52 U.S.C. and (illegal campaign contributions) (the ?Campaign Finance Offenses?), and 18 U.S.C. 371 (conspiracy as it pertains to the other Subject Offenses) (collectively, the ?Subject Offenses?). D. Prior Applications 6. The FBI and the United State5 Attorney?s Of?ce for the Southern District of New York have been investigating several courses of criminal conduct by Michael Cohen. Cohen is an attorney who currently holds himself out as the personal attorney for President Donald Trump, and who previously served for over a decade as an executive in the Trump Organization, an international conglomerate with real estate and other holdings. T. In connection with an investigation then being conducted by the Office of the Special Counsel the FBI sought and obtained ?'om the Honorable Beryl A. Howell, Chief United States District Judge for the District of Columbia, three search warrants for emails and other content information associated with two email accounts used by Cohen, and one search warrant for stored content associated with an iCloud account used by Cohen. Speci?cally: 2017.08.02 1? . . . I cd I Case Document 43-1 Filed 03/19/19 Page 7 of 269 a. On or about July 18, 2017, the FBI sought and obtained a search warrant for emails in the account -@gmail.co1n (the ?Cohen Gmail Account?) sent or received between January 1, 2016 and July 18, 2017 (the ?First Cohen Gmail Warrant?). On or about August 3, 2.017, the FBI sought and obtained a search warrant for content stored in the iCloud account associated with Apple ID (the ?Cohen iCloud Account? and the ?Cohen iCloud Warrant?), - Onror-abo ut-November 13:2 O-I-Tg-theeF-B I-- sought and? search warrant for emails in the Cohen Gmail Account sent or received between June 1, 2015 and November 13, 2017 (the ?Second Cohen Gmail Warrant?). d. On or about November 13, 201?, the FBI sought and obtained a search warrant for emails in the account (the ?Cohen Account?) sent or received between the opening of the Cohen Account4 and November 13, 201?? (the ?First Cohen Warrant?). 8. The ECU has since referred certain aspects of its investigation into Cohen to the USAC), which is working with the New York Field Of?ce- As part of that referral, on or about February 8, 2013, the SCO provided the USAO with all non-privileged emails and other content information obtained pursuant to the First Cohen Gmail Warrant, Second Cohen Gmail Warrant, and Cohen Warrant. On or about March 7, 2018, the SCO provided the USAO ?it Based on my review of this warrant and the af?davit in support of it, I know that the warrant did not specify a time period, but the af?davit indicated that, pursuant to court order, the service provider had provided non-content information for the Cohen WCPC Account that indicated that the account contained emails from the approximate period of March 2017 through the date of the warrant. 20110332 3mm?? . .. . -. Case Document 43-1 Filed 03/19/19 Page 8 of 269 with all non-privileged content obtained pursuant to the Cohen iCloud Warrant.5 A ?lter team working with the SCO had previously reviewed the content produced pursuant to these warrants for privilege. 9. On or about February 28, 2018, the USAO sought and obtained search warrants for emails in the Cohen Gmail Account and the Cohen Account, among other accounts, sent or received between November 14, 201? and February 28, 2018 (the ?Third Cohen Gmail Warrant? t0 311155 subject to an ongoing review for privilege by an SDNY ?lter team.?5 10. The emails search warrants described above are referred to collectively as the ?Cohen Email Warrants." 11. On or about April 7, 2018, the USAO and FBI sought and obtained a warrant for prospective and historical cellphone location information for Subject Device-l and Subject Device-2. On or about April 3, 2013, the USAO and FBI sought and obtained authority to employ an electronic technique, commonly lolown as a ?trigger?sh,? to determine the location of Subject Device-1 and Subject Device-2. II. Probable Cause A. Overview 12. The United States Attorney?s Of?ce for the Southern District of New York and FBI are investigating, among other things, schemes by Target Subject Michael Cohen to defraud multiple banks from in or about 2016 up to and including the present, and to make an illegal 5 The SCO had previously provided a subset of this non-privileged content on or about February 2, 2013. ?5 On or about February 28, 2018 and April 7, 2013, the USAO and FBI sought and obtained Rule 41 search warrants authorizing the search of emails and content obtained pursuant to previously issued warrants for additional subject offenses, 8 201103-112 -. Case Document 43-1 Filed 03/19/19 Page 9 of 269 campaign contribution in October 2016 to then-presidential candidate Donald Trump. As noted, Cohen is an attorney who currently holds himself out as the personal attorney for President Donald Trump, and who previously served for over a decade as an executive in the Trump Organization, an international conglomerate with real estate and other holdings. 13. The investigation has revealed that Cohen has made af?rmative misrepresentations in and omitted material information from ?nancial statements and other disclosures that Cohen to?relieve- Cohen of approximately $22 million in debt he owed on taxi medallion loans from the banks. As set forth in detail below, in these fmancial statements, and in his oral and other written statements to these banks, Cohen appears to have intentionally misrepresented his ability to pay cash by failing to disclose cash he began receiving in 2017 from new consulting work; (ii) signi?cantly undeistatcd his total holdings of cash and cash equivalents; failed to disclose tens of thousands of dollars he received in interest income, and (iv) failed to inform the banks from which he was seeking debt relief that he had agreed to make a $3.3 million cash payment to a third party,- _in connection with _1cquisition of the taxi medallions securing Cohen?s debt. By making these misrepresentations and material omissions, Cohen avoided making payments on his loans, and attempted to fraudulently induce the banks to relieve him of certain repayment obligations and personal guarantees that Cohen and his wife had signed. 2?15?.?8.02 -. - . .. Case Document 43-1 Filed 03/19/19 Page 10 of 269 15. Based on my review of emails obtained ?om the Cohen Email Warrants, information obtained pursuant to the iCloud Warrant, and documents produced pursuant to subpoenas, as well as my review of public sources, I have learned that Cohen has used the Subject Gohen? of?his-taxi?m-w? -- medallion debt, receive documents andfor conduct meetings related to his consulting work, receive documents andfor conduct meetings relating to his ?nances and assets, some of which, as noted above and as detailed ?trther herein, he has concealed ?'om the banks in connection with the re?nancing of his taxi medallion debt, - and house and operate electronic devices that were utilized in connection with, among other things, the taxi medallion transaction, Cohen?s consulting work, and 1? Speci?cally, as described below, Subject Premises-1 likely contains evidence concerning Cohen?s taxi medallion loans, his negotiations with banks, his personal ?nances, his consulting work, his tax returns, and_, as well as electronic devices containing such evidence, all of which constitute or contain evidence of the Subject Offenses. Additionally, as described below, Subject Premises-2 likely contains evidence relating to Cohen?s consulting work, his ?nances, and_ as well as electronic devices containing such evidence. Subject Premises-3, as described below, likely contains evidence relating to Cohen?s assets and f'mances, including assets that may not have been disclosed to banks in connection with the re?nancin of Cohen?s taxi medallion debt or documents relatin to such assets, and documents or evidence related to Subject Premises?4 likely contains electronic 10 2017.03.Case Document 43-1 Filed 03/19/19 Page 11 of 269 devices, including Subject Device-l and Subject Device-2, which themselves contain evidence of the Subject Offenses, including concerning Cohen?s taxi medallion loans, his negotiations with banks, his personal ?nances, his consulting work, his tax returns, and Accordingly, and as set forth in more detail below, there is probable cause to believe that the Subject Premises and Subject Devices will include evidence of the Subject Offenses. B. Probable Cause Regarding Subjects? Commission of the Subject Offense57 daSchem (1) Cohen ?s Statements to Sterling National Bank 16. As set forth in detail below, in 2014, Cohen, through LLCs controlled by him and his wife, Laura Cohen, entered into a series of loans from Sterling National Bank (?Sterling?) and the Melrose Credit Union (?Melrose?), secured by taxi medallions, for approximately $20 million. Though entered into by LLCs, the loans were also secured by personal guarantees in the names of both Cohen and his wife. Over time, as the taxi industry weakened and the medallions lost value, Cohen sought to renegotiate the terms of those loans andr?or relieve himself from their obligations, including the personal guarantees. As part of that effort, Cohen made a series of representations to Sterling and Melrose about his net worth, assets, available cash and income, among other things. Speci?cally, based on my review of records maintained by Sterling and Melrcse, and public sources concerning the taxi industry and the value of taxi medallions, as well as my participation in interviews with a Sterling executive vice?president (the ?Sterling Employee-1?) and two other 7 In the following recitation of probable cause, I frequently refer to phone calls or text messages involving Cohen. The text messages described herein as sent or received by Cohen were all sent or received from the telephone numbers associated with Subject Device-d or Subject Device-2. The vast majority of the phone calls described herein made or received by Cohen were made or received by the telephone numbers associated with Subject Device-1 or Subject Device-2, although in certain limited instances Cohen used a landline or other phone. 1 1 2011mm . i- . t. .. Case Document 43-1 Filed 03/19/19 Page 12 of 269 Sterling employees (?Sterling Employee-2? and ?Sterling Employee?3?), have learned, among other things, the following: a. Taxi medallions are small metal plaques af?xed to taxis. Without a medallion, it is illegal to operate a taxi in cities with medallion systems, such as New York City. Cohen and his wife own multiple LLCs that collectively cam 32 taxi medallions (each LLC owns two medallions).E Cohen?s purchase of these New York taxi medallions was originally ?nanced by forwhich-the-medallions operator, and leased his medallions to a third party. That third party made payments to Cohen, who in turn used some of those proceeds to make his loan payments to Capital One. b. In early 2?14, Cohen became a customer of Sterling when he sought to refmance a mortgage on a rental property that he owned. In or around April 2014, Cohen raised with Sterling the prospect ofrefmancing his taxi medallion loans, which were then at Capital One. By in or about September 2014, Cohen began negotiating a lending transaction with Sterling that would allow Cohen to pay off his loans at Capital One and borrow more money from the then-increase in value of the medallions. According to Sterling Employee-1, in 2014, prior to the recent upheaval in the taxi a result of the emergence of ride-sharing services, such as Uber?taxi medallion loans were viewed by banks and investors as safe, shert term credits, as the market value of taxi medallions was consistently rising. Consequently, taxi medallion loans?like the loans held by Cohenmwere frequently re?nanced at increasing amounts as the value of the medallions rose. According to Sterling Employee-1, borrowers typically cashed out the increase in the loan amount 3 One of these companies, Mad Dog Cab Corp, was jointly owned by Sondra Cohen, who I believe is Cohen?s mother. 1 2 2011mm 'T'mw'a'sm-nr: .--.- - .1 - Case Document 43-1 Filed 03/19/19 Page 13 of 269 and used the additional funds for other purposes. Cohen appears to have followed this approach in 2014, when he agreed to refinance his medallion loans for approximately $22 million, which?? according to letters from Capital One in Sterling?s ?les?was greater than his previous debt at Capital One Bank ($21 million, of which $14.6 million was a line of credit to Cohen). This allowed Cohen to cash out the proceeds from the transaction. c. Based on my review of records maintained by Sterling, I have learned that on or 8:20 ?1?4?;each?0f Cohen? ssixteen-taXi-me'dallion-ELCs entere dainto-lo anagreements and promissory notes with Sterling for the principal sum of $1,375,000, with repayment due on December 8, 2016. Each loan was signed by Michael or Laura Cohen, depending on who was the sole shareholder of the LLC. The address listed for each of the LLCs was the address for Subject Premises-l. The loans were also each secured by a security agreement, dated the same day, making the medallions collateral for the notes. To give Sterling additional security, Michael and Laura Cohen signed personal guarantees and confessions of judgment, giving Sterling the right to pursue collection against the Cohens? personal assets were their corporations to default under the loan agreements. The personal guaranty agreements stated that the LLCs had of?ces at the address for Subject Premises?l, and contained a notice provision that stated that any notices required by the agreements should be mailed to Subject Premises?l. In total, Sterling agreed to lend approximately $22 million to the Cohens? companies. (1. Pursuant to participation agreements, Sterling transferred 45 percent of Cohen?s taxi medallion debt to Melrose.9 9 Melrose, which had a business principally focused on taxi medallion loans, is now in conservatorship by the National Credit Union Administration 13 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 14 of 269 e. In evaluating Cohen?s requested re?nancing of the taxi medallions, Sterling (and Melrose, consistent with its participation in the deal) conducted due diligence. At Sterling?s request, Cohen provided Sterling with a statement of ?nancial condition, dated August 1, 2014 (the ?August 2014 Financial Statement?), which indicated that Cohen had $100,740,000 in total assets, $23,550,000 in total liabilities, and a net worth of $77,190,000.10 From my review of a Sterling credit memorandum, dated September 29, 2014, I know that Sterling viewed the transaction tavorablybecause, accounting projected to be positive, the value of the collateral (as estimated by Sterling) exceeded $42 million, and the net worth of Cohen?who was the direct obligor under the guarantee agreements?was over $77 million. An internal Sterling credit and risk rating analysis report, dated October 20, 2014, recommended approval of the loans for substantially the same reasons. f. Based on my review of records maintained by Sterling and public sources, I have learned that over time, the collateral backing Cohen?s loans (taxi medallions) lessened in value due to the rise in ride-sharing companies. Additionally, Cohen began falling behind on loan payments to Sterling and Melrose. Iknow from records maintained by Sterling and an interview with Sterling Employee?2 that, beginning in or around September 2015, Cohen told Sterling, in sum and substance, that the individual leasing Cohen?s medallions had fallen behind in making payments to Cohen, and that as a result, the cash ?ow ?rom his taxi medallions had been reduced, leaving him with a shortfall of approximately $16,000 each month. For instance, I have reviewed an email from Sterling Employee?2, dated September 9, 2015, summarizing a call with Cohenr? which according to the email and toll records for Cohen?s cellphone occurred on September 8, 10 Cohen subsequently provided Sterling with a revised statement of ?nancial condition, also dated August 1, 2014, which reported assets of $99,420,000, total liabilities of $23,550,000, and a net worth of $75,870,000. 14 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 15 of 269 201 5?during which Cohen told Sterling Employee-2, in sum and substance, about his cash flow problems and a shortfall of approximately $16,000. In that same email, Sterling Employee?2 conunentcd that despite Cohen?s statements, his personal ?nancial information ?indicate[d] a strong ability to make up the difference in payments.? Cohen, however, according to Sterling Employee?2, pushed the bank for a reduction in Cohen?s payments. g. From my review of records maintained by Sterling and my participation in an have?learned?that- Gohen?and-Sterling?Employee?Z spoke. . again on September 23, 2015, and that during the call Cohen stated, in sum and substance, that the individual to whom Cohen leases the medallions had again reduced payments to Cohen. 1 know from my review of records maintained by Sterling that between in or about September 2015 and November 2015, Sterling raised the possibility?both internally and with Cohen?of Cohen postng his real estate holdings, personal residence, or some other collateral as additional security for the banks.11 According to these records, however, Cohen resisted these requests. From my review of loan documents and records maintained by Sterling, I know that in or about November 2015, as a result of I Cohen?s representation that he was not earning suf?cient returns on his medallions to cover interest payments, Sterling and Melrose agreed to amend their loans with Cohen by, among other things, reducing the interest rate Cohen paid to Melrose and extending the loan maturity date to December 8, 2017. h. I know from interviews with Sterling Employee-1 and Sterling Employee-2, as well as emails 1 have reviewed, that in or about October 2016, Cohen told Sterling Employee-1 that Cohen had a potential buyer of his taxi medallions, named ?Wh0 ?gTee 10 1" Based on my review of property records, I know that on or about October 23, 2015, around the time period when Sterling raised the possibility of Cohen posting his personal residence? Subject Premises-le collateral, Cohen transferred Subject Premises?1 into a trust. 15 2017.03.02 erl-rlrl'l: an: .--. x. -- -- - Case Document 43-1 Filed 03/19/19 Page 16 of 269 assume Cohen?s debt with Sterling and Melrose. Based on my review of records maintained by Sterling, as Well as the interviews with Sterling Employee-l and Sterling Employee-2 referenced above, Ilmow that by or before October 2016, Cohen had entered into negotiations to sell his sixteen corporate taxi medallion entities to_. for the balance of the loans, which at the time was $21,376,000. I know from my review of records maintained by Sterling, and my participation in an interview with Sterling Employee?2, that as a _-Sterling requested that Cohen make a substantial principal payment on the loan, of approxhnately one million dollars, prior to the transfer. Cohen rejected this request initially. But on or about lanuary 31, 2017, Cohen told Sterling Employee-l, in sum and substance, that he would make a one million dollar principal reduction payment in order to move forward with the medallion transfer deal with Indeed, in an email sent by Cohen to Sterling Employee-2 on or about February 22, 2017, Cohen confirmed that he ?agreed to pay down 1 million ?'om the loan amoun 1. Pursuant to the participation agreements between Sterling and Melrose, Sterling was required to secure Melrose?s agreement to participate in the transfer of the taxi medallion debt from Cohen to On or about April 1?7, 201?, Sterling sent a memorandum to Melrose summarizing the terms of the proposed transaction, and noting the requirement that Melrose agree to the terms. On or about May 2, 2017, Sterling Employee-l told that Melrose had agreed to the deal in principle, and that Sterling would be sending the parties a term sheet shortly. j. In order for the banks to conduct diligence and evaluate the proposed transaction fully, they requested ?nancial information from the parties. On or about June 7, 201'}, Sterling 16 2017.11an - --.-. -. - - Case Document 43-1 Filed 03/19/19 Page 17 of 269 Employee-1 emailed Cohen to request an ?updated personal ?nancial statement,? completed jointly with Cohen?s wife, and Cohen?s most recent federal income tax return. On or about June 8, 2017, Cohen emailed Sterling Employee-l a Sterling personal ?nancial statement form that had been ?lled out by hand, which referenced a Statement of ?nancial condition, dated May 1, 201? (the ?May 201 Financial Statement") that was also attached. The May 2017 Financial Statement included a cover letter from Cohen?s accountant, stating, in sum and substance, that the information in the" or completeness. The May 2017 Financial Statement stated that Cohen had total assets of $41,955,000, total liabilities of $39,130,000, and a net worth of $2,325,000. The May 2017 Financial Statement indicated that Cohen?s assets were comprised of $1,250,000 in cash, $26,155,000 in closely held companies (such as the taxi medallion entities and his real estate holdings), $3,200,000 in real estate investments, and his $11,000,000 personal residence.12 it. Based on my review of reports of law enforcement interviews of Sterling Employee-l, Ihave learned that Sterling Employee-1 reviewed the May 2017 Financial Statement with Cohen to, among other things, verify its accuracy, and Sterling Employee-l asked Cohen about speci?c line items on the ?nancial statement, including the cash amount, value of medallions, and total liabilities. Cohen stated to Sterling Employee-1, in sum and substance, that the May 2017 Financial Statement was accurate. 1. On or about-August 16, 2017, Sterling Employee?1 emailed Cohen and l- attaching a non-binding term sheet memorializing the potential transaction between 12 Based on my review of Cohen?s fmancial statements, I know that the precipitous decline in assets from his 2014 ?nancial statement to his 2017 ?nancial statements can be explained primarily by reported deprcciation in the value of Cohen?s real estate assets and medallion investments. 17 2017.03.11": Case Document 43-1 Filed 03/19/19 Page 18 of 269 Sterling, Melrose, Cohen, and The term sheet included a cover letter addressed to Cohen at Subject Premises-1. The parties negotiated the provisions of the term sheet and, on or about September 5, 201?, Sterling Employee?i sent J_md Cohen a copy of the executed term sheet. According to the term sheet?would borrow $20,000,000 from Sterling and Melrose, to be secured by the medallions that -vas to acquire ?'om Cohen. is what would remain after the $20,000,000 payment on the outstanding loan balance) would be repaid by Cohen and the two banks, with Cohen paying ?fty percent and the banks dividing the remaining half of the balance. Based on my review of an internal Sterling credit memorandum, dated October 4, 2017, the parties reached a preliminary agreement that Cohen would pay $632,956 of the remaining $1,265,912 principal loan balance, and Sterling and Melrose would absorb $357,167 and $275,789, respectively, in the form of charge?offs. According to Sterling Employee- 1, Sterling was willing to divide the_1epayment of the outstanding principal balance?despite its prior insistence that Cohen make a principal pay-down of at least one million dollars?because Cohen represented on a telephone call with Sterling Employee-l in sum and substance, that he had insuf?cient liquidity to pay the full outstanding principal balance. As part of the agreement, Sterling and Melrose also agreed to relieve Cohen and his wife of the personal guarantees that they made on behalf of the LLCs. Thus, after completing the "-transaetion, Cohen would no longer have had any outstanding obligations to Sterling or Melrose. 11. Based on my review of emails sent by Sterling employees, I have learned that because the transaction between the parties was subject to ?ll] credit underwriting by Sterling and Melrose (as well as Melrose?s regulators at NCUA), in August and September 2017, Sterling 13 2017.93.02 -- .. .. . Case Document 43-1 Filed 03/19/19 Page 19 of 269 required and requested additional ?nancial statements and tax returns for Cohen and for its credit underwriting process. In response to Sterling?s requests, on or about September 25, 2017, Cohen emailed Sterling Employee-2 a copy of his 2016 tax return. The tax return listed Cohen?s mailing address as Subject Pmmises?l . Additionally, on or about October 5, 2017, Cohen re-sent Sterling Employee-2 a copy of his May 2017 Financial Statement. A day later, on October 6, 2017, Cohen emailed Sterling Employee-2 a statement of ?nancial condition, dated September o. Like the May 2017 Financial Statement, the September 2017 Financial Statement included a cover letter Cohen?s accountant, stating, in sum and substance, that the information in the statement came from Cohen, and that -1ad not con?rmed its accuracy or completeness. The September 2017 Financial Statement stated that Cohen had total assets of $3 3,43 0,000, total liabilities of $45,630,000, and a negative net worth of ".512,200,000.13 Notably, unlike Cohen?s May 2017 Financial Statement, the September 2017 Financial Statement represented to Sterling that Cohen had a negative net worth. The September 2017 Financial Statement indicated that Cohen?s assets were comprised of $1,250,000 in cash, $17,630,000 in closely held companies (including the taxi medallion entities and his real estate holdings),M $3,200,000 in real estate investments, and his $11,000,000 personal residence (which, for the ?rst 13 Based on my review of Cohen?s ?nancial statements, I know that this ?irther decline in assets can be explained primarily by reported depreciation in the value of Cohen?s real estate assets and medallion investments. 1? Notably, the September 2017 thancial Statement valued each of Cohen?s New York taxi medallions at approximately $130,187.50, which was considerably less than the $650,000 valuation ascribed to each medallion in the Cohen-5 term sheet. 19 2011.03.02 - Case Document 43-1 Filed 03/19/19 Page 20 of 269 time, he indicated was held by a trust).15 The September 2017 Financial Statement included assets and liabilities not held in Cohen?s name, such as various entities associated with his taxi medallions and some of his real estate investment entities. p. From my participation in an interview with Sterling Employee~2, and my review of records maintained by Sterling, have also learned that around the time Cohen provided Sterling with these ?nancial statements?Le, in or around September stopped paying taxi-medallion-loans altogether: 2, Cohen informed Sterling, in sum and substance, that he had insufficient funds to pay the principal and interest payments on his medallion loans. By in or about December 2017, Sterling and Melrose had not been paid approximately $276,937.92 in principal and interest payments on the medallion loans. Based on Cohen?s ?nancial condition as conveyed in the September 2017 Financial Statement, and his delinquency in making payments to Sterling, among other things, the bank?s credit underwriting committee determined (and memorialized in a December 2017 memorandum) that the Cohen-?- transaction was favorable for the bank that is, that-would be a better borrower than Cohen. I q. 011 or about December 26, 2017, Sterling sent Cohen a demand letter requesting the immediate receipt of past-due loan payments. The demand letter was addressed to Cohen at Subject Premises-1. On December 29, 2017, Sterling sent Cohen a letter stating that he was in default under the loans between Sterling and Cohen?s medallion corporations. The notice of default was addressed to Cohen at Subject Premises?1. Cohen did not make an immediate payment on the loans, but instead sent an e-mail to Sterling Employee-I on or about January 24, 2013, 15 Based on my review of property records maintained by the City of New York, and my participation in an interview with- I know that in 2015, Cohen transferred his residence to a trust. He did not disclose that transaction to -or Sterling until in or about September 2017. 20 2017.?8.52 - .. .. :u - Case Document 43-1 Filed 03/19/19 Page 21 of 269 stating that during the closing of the Cohen-- transaction, Cohen would ?bring all payments up to date as well as deposit the payoff differential.? Cohen also requested by email on January 24, 2013, that at the closing of the {Sakai-transaction, Sterling provide a letter stating that all of Cohen?s debts have been satis?ed and that Cohen?s personal guarantees of the medallion loans had been terminated. r. The Comm-transaction, however, did not close. 011 or about January there is no deal with Michael Cohen. Some of the numbers have changed and we are not prepared to go fonvard.? - s. Based on my participation in the interview with Sterling Employee-2 and my review of records maintained by Sterling, I lcnow that after the Cohen--:leal fell apart, Sterling assigned Cohen?s loans to Sterling Employee?3, who specializes in collecting on defaulting loans. From my participation in an interview with Sterling Employee-3, my review of telephone call notes taken by Sterling Employee-3, and my review of telephone records, I know that Sterling Employee-3 spoke several times to Cohen on or about January 30, 201 8 about paying down andfor restructuring Cohen?s outstanding taxi medallion loans. On the calls, which in total lasted more than an hour, Cohen stated in sum and substance that he did not have more than $1,250,000 to pay toward the medallion loans. On the call, in the course of reviewing the failed Cohen?- transaction, Sterling Employee-3 questioned Cohen about the price -vas to have paid for each medallion, and whether there was a side agreement between Cohen and Cohen denied that there was any side agreement with t. On or about January 31, 2018, Cohen emailed Sterling Employee-3 and proposed paying $500,000 to bring the loans current and $750,000 to bring the principal balance to 2 1 2011433132 - I w-v-nw - Case Document 43-1 Filed 03/19/19 Page 22 of 269 $20,500,000. Cohen also suggested revised interest payment amounts. The signature block on the email indicated that Cohen?s address was the address for Subject Premises-2. On or about January 31, 2013, Sterling Employee-3 responded to Cohen and stated, in sum and substance, that Cohen would need to pay the entirety of the overdue payments and pay down the principal balance of the loan to $20,000,000 {in total, a payment of approximately $1,750,000), and would need to make larger interest payments. 11. On or about?Febrnw ?[p]ayment of $1.2501n which ALL can be used to pay down principal, if [Sterling] will waive past due amounts,? but stated do NOT have more than the $1.250m-? (Emphasis in original.) Cohen also stated, in sum and substance, that he had insuf?cient fmancia] resources to post additional collateral or pre-fund payments- The signature block on the email indicated that Cohen?s address was the address for Subject Premises-2. Based on my participation in an interview with Sterling Employee?3, I have learned that since January 30, 2013, Sterling has continued to renegotiate the medallion loans with Cohen based on Cohen?s representations about his current ?nancial position. In particular, according to Sterling Employee-3, Cohen and Sterling have an agreement in principal to restructure Cohen?s loans based in part of Cohen?s agreement to make a principal payment of approximately $350,000, to make a payment of $500,000 to become current on interest payments, and to post $192,000 in cash collateral for his ?lture payments on the loan. Cohen also agreed to pledge an interest he had in a property. Sterling Employee-3 has stated that had Cohen indicated he had more than $1,235 0,000 available to him, Sterling would have, among other things, negotiated for a larger reduction to the principal amount of the loan. 22 201103.02 .- Case Document 43-1 Filed 03/19/19 Page 23 of 269 (if) Cohen Made Materiel Misrepresentation: About His Finances to Banks Cohen Concealed from Sterling and Melrose Cash Derived from Consulting Work 17. As set forth in detail below, despite multiple written and oral representations by Cohen to Sterling (and, by extension, Melrosel?) that he had insuf?cient funds to pay down the principal balance of the medallion loans, make interest payments, or pay past-due amounts, it appears that between 2016 and the present, Cohen opened and maintained bank accounts atgF-irsLRepublimB anlc. therL received_millions__of_dollars- in consulting payments in these accounts, which he did not disclose to Sterling. Cohen set up these accounts and received these funds during the very period in which he made disclosures to Sterling about his personal ?nances [including his assets and liabilities) and his ability to make payments on the medallion loans. In these disclosures to Sterling?and despite being asked about these bank accounts by his accountant?Cohen misled the bank by claiming he had insuf?cient liquidity to satisfy his obligations or meet the bank?s demands, while withholding information about these ongoing revenue streams and liquid ?nancial assets at First Republic. 13. Speci?cally, based on my review of documents and bank records produced pursuant to a subpoena by First Republic, and my participation in and review of reports of interviews with a First Republic sales manager (?First Republic Employee-1 and a First Republic senior managing director (?First Republic Employee?2?), I have learned, among other things, the following: ?5 Based on my review of a report of an interview conducted with an employee of Melrose, I have learned that, pursuant to the participation agreement between Sterling and Meh'ose, Cohen? 5' ?nancial statements and other records in Sterling?s possession were forwarded to Melrose so that Melrose could make a determination as to whether to approve of the Cohen; transaction. Based on my review of reports of interviews with Melrose employees, I also Know that Cohen called employees at Melrose regarding the 23 2017.03.Case Document 43-1 Filed 03/19/19 Page 24 of 269 a. Cohen and his wife have been customers of First Republic since approximately June 2011. Cohen controls several checking and loan accounts at First Republic, some in his own name and others in the names of corporate entities. According to First Republic?s know?vouc- customer records on Cohen,? his primary physical address is the address for Subject Premises-1. b. On or about October 26, 2016, in Manhattan, New York, Cohen opened a new checking account at First Republic in the name of Essential Consultants LLC (the ?Essential Consultants account opening documents, the primary address for Essential Consultants LLC was the address for Subject Premises-1. When Cohen opened the Essential Consultants Account, First Republic Employee?1 conducted an in-person interview of Cohen. In response to a series of know-your- customcr questions about the purpose of the account?the answers to which First Republic Employee-v1 entered into a fo1m13-Cohen stated, in sum and substance, that he was opening Essential Consultants as a real estate consulting company to collect fees for investment consulting work, and all of his consulting clients would be domestic individuals based in the United States. Cohen also stated, in sum and substance, that his purpose in setting up the account was to keep the revenue from his consulting business?which he said was not his main source of income?separate from his personal ?nances. As set forth below, there is probable cause to believe that Cohen?s statements about the intended purpose of the account and source of funds for the account were false. Speci?cally, as described below, the account was not intended to receive??and does not 17" Certain ?nancial institutions are required to conduct such procedures pursuant to the Bank Secrecy Act and its implementing regulations. See 31 U.S.C. 5318; 31 C.F.R. 1020.220. 13 First Republic Employee-l ?rst ?lled out the form on the day he interviewed Cohen, October 26, 2016. On or about December 19, 2016, at the request of bank compliance personnel, First Republic Employee-1 updated the form to add more detail about Cohen?s statements. 24 2017.03.02 - arr-rmw?mml?J- 7.1m --.- .. . . . .. .. .. Teen wiInluh .. Case Document 43-1 Filed 03/19/19 Page 25 of 269 appear to have received?money in connection with real estate consulting work; in addition, the account has received substantial payments from foreign sources. 0. 1 know from my review of First Republic bank records that were scheduled by an FBI forensic accountant that after Cohen opened the Essential Consultants Account, Cohen received payments into that account from foreign businesses and entities that do not re?ect the stated client pro?le for the residential and commercial real?estate consulting services. Speci?cally, ?om .. following: i. Beginning on or about January 31, 2017, Cohen began receiving payments of $83,333 into the Essential Consultants Account from an entity called Columbus Nova LLC. According to public sources, Columbus Nova is an investment management ?rm controlled by Renova Group, an industrial holding company based in Zurich, Switzerland that is controlled by Russian national Vilctor Vekselberg. From January 201?? to August 2017, the Essential Consultants Account received seven payments totaling $5 83,332.98 from Columbus Nova LLC. ii. Beginning on or about April 5, 2017, the Essential Consultants Account began receiving payments from Novartis Investments, SARL, which I believe to be the in-house ?nancial subsidiary of the Swiss pharmaceutical company Novartis International AG (?Novartis?). Between April 2017 and February 2013, the Essential Consultants Account received eleven wire payments from a Swiss bank account held in the name of Novartis, each in. the amount of $99,930, for a total of $1,099,? 80. Beginning in or about April 2017, the Essential Consultants Account started receiving wire payments from a bank account associated with the telecommunications company Inc. Speci?cally, on or about April 14, 2017, sent $100,000 to the 25 201108.02 151353.13; mym-Case Document 43-1 Filed 03/19/19 Page 26 of 269 Essential Consultants Account and, from in or about June 201?? to in or about January 2018, the Essential Consultants Account received ten $5 0,000 payments from In total, sent $600,000 to the Essential Consultants Account. iv. On or about May 10, 201?, June 9, 201?, July 10, 2017, and November 2017, the Essential Consultants Account received four deposits in the amount $150,000 (totaling $600,000) from a bank account in South Korea. The account holder from which the money was sent is Korea Aerospace Industries produces and sells ?xed-wing aircraft, helicopter aircraft, and satellites to the United States Department of Defense, among other customers. v. On or about May 22, 2017, the Essential Consultants Account received a $150,000 deposit from an account at Kazkommertsbank, a Kazakhstani bank. The listed account holder at Kazkommertsbanlc was a second Kazakhstani bank named BTA Bank, A0. A message accompanying the wire payment indicated that the payment was a consulting fee as per Inv ETA-101 DD May 10, 201';' consulting agreement WIN DD 03 05 2017 CNTR WENDD 08f05f2017.? vi. In total, from on or about January 31, 201'? to on or about February 1, 2018, the Essential Consultants Account received approximately $3,033,112.98 in transfers and checks ?om the aforementioned entities. As of on or about January 10, 2018, the balance in the Essential- Consultants Account was $1,369,474.23. Cohen?s withdrawals from the Essential Consultants account reveal that it was used for largely personal purposes, including to pay, among other things, Anierican Express bills and fees from ?the Core Club,? a private social club in New York. d. On or about April 4, 2017, Cohen opened another new checking account at First Republic, this one in the name of Michael D. Cohen (95 Associates, PC. (the Account?). 26 2017.03.02 ?rmwarwmem-r-u Case Document 43-1 Filed 03/19/19 Page 27 of 269 Cohen was the only authorized signatory on the account. According to account opening documents, the primary address for Account Was the address for Subject Premises-1. Among other things, the Account received ten wire transfers and one check from an account in the name of Squire Patton Boggs, a law ?rm. As noted above, Subject Premises-2 is located inside the New York of?ce of Squire Patton Boggs. In total, ?om on or about April 5, 2017, to on or about January 2, 2013, the Account received $426,097.70 in deposits, and never disclosed any of the balance in the Essential Consultants or MDCECA accounts to Sterling during the negotiations with respect to the - transaction or the subsequent loan re?nancing negotiations, including in his May 2017 Financial Statement and September 2017 Financial Statement. 19. Based on my review of emails that were seized pursuant to the Cohen Email Warrants, and my review of reports of interviews with employees of and Novartis, it appears that the aforementioned payments to the Essential Consultants Account and MDCECA Account were for political consulting work, including consulting for intemational clients on issues pending before the Trump administration. Speci?cally, from my review of emails from the Cohen .. .. .. . .. Gmail Account, the Cohen Account, and public sources, I have learned the following: a. On or about April 28, 2017', Cohen sent an email to an individual whom I believe is af?liated with KAI. In the email, Cohen attached a ?Consulting A greement? between KAI and Essential Consultants dated as of about May 1, 2017. The agreement indicates that Essential Consultants had the address of Subject Premises?2. The document indicates that Essential Consultants would render ?consulting and advisory services, as requested? by KAI, and that KAI "'wwr would pay Essential Consultants ?a consulting fee of One Million Two Hundred Thousand 27 2010.03.02 Case Document 43-1 Filed 03/19/19 Page 28 of 269 US Dollars,? disbursed through eight $150,000 installments between May 2017 and December 2017. I have also reviewed invoices in amounts of $150,000 that Cohen emailed to an individual whom I believe is af?liated with KAI. At the top of the invoices the address listed for Essential Consultants is the address for Subject Premises?2. b. On or about May 8, 2017, Cohen sent an email to an individual whom I believe is af?liated with BTA Bank. The signature block on Cohen?s email listed ?Essential Consultants and ect~Premisech 2. In the email, Cohen attached a document purpofting to be a ?Consulting Agreement? between BTA Bank and Essential Consultants dated as of about May 8, 2017. The agreement indicates that Essential Consultants had the address of Subject Premises?2. The document indicates that Essential Consultants would render ?consulting and advisory services? to BTA Bank, and that BTA Bank would pay Essential Consultants ?a consulting fee of One Million Eight Hundred Thousand US Dollars,? disbursed through payments of $150,000. On or about May 10, 2017, Cohen sent an email to an employee of BTA Bank, and attached to the email an invoice to BTA Bank in the name of Essential Consultants, with the address of Subject Premises- 2. The invoice contemplated a $150,000 payment to Essential Consultants for a consulting fee.? 0. On or about January 23, 2017, Cohen appears to have entered into a consulting agreement with which contemplates that Essential Consultants ?shall render consulting and advisory services to and that would ?advise [Essential Consultants] of those issues . and matters with respect to which ATSLT Services desires [Essential Consultants]?s assistance and advice.? The agreement indicates that Essential Consultants had the address of Subject Premises- 1. The contract calls for ?to pay the Consultant for his services . . . a consulting fee of Fifty 28 2017.08.02 Case Document 43-1 Filed 03/19/19 Page 29 of 269 Thousand ($50,000) Dollars . . . per mon Based on my review of reports of interviews with employees, I have learned that retained Cohen to consult on political issues, including net neutrality, the merger between and Time Warner, and tax reform. d. On or about March 1, 2017, Cohen appears to have entered into a contract between Novartis and Essential Consultants, which provides that Essential Consultants will ?provide consulting and advisory services to Novartis on matters that relate to the repeal and replacement of the Affordable Care Act [Essential Consultants] and Novartis.? The contract provides for a ?consulting fee of One Million Two Huadred Thousand ($1,200,000) US dollars,? to be paid to Essential Consultants in equal installments over the course of a year. Based on my review of reports of interviews with Novartis employees, I have learned that Novartis retained Cohen to provide political consulting services and to gain access to relevant policymakers in the Trump Administration. e, In or about February 2017, Cohen began negotiating the terms of a ?strategic alliance" with Squire Patton Boggs. On or about March 4, 2017, Squire Patton Boggs emailed Cohen a ?strategic alliance agreement.? Under the terms of the agreement, Cohen agreed to generate business for the law ?rm, and Squire Patton Boggs agreed to pay to Cohen ?an annual strategic alliance fee of $500,000, payable in twelve (12) equal installments.? Squire Patton Boggs also agreed to provide Cohen with ?dedicated and segregated of?ce space in [Squire Patton Boggs?s] New York and Washington DC. offices, which of?ce space shall be physically separate from [Squire Patton Boggs?s] of?ces and have locked doors and its own locked ?le cabinets.? On or about April 3, 2017, Squire Patton Boggs announced on its website that is had formed a ?strategic alliance? with Michael D. Cohen 3.: Associates and would ?jointly represent clients.? 29 2011.03.-.-. Case Document 43-1 Filed 03/19/19 Page 30 of 269 20. Despite the signi?cant amount of money that Cohen received into the Essential Consultants Account and the Account, and the cash balance both accounts, Cohen did not disclose that information to Sterling or Melrose. Speci?cally, based on my review of documents provided by - (as noted above, Cohen?s accountant at the time), my participation in an merr- Wet?'1 have learned the following: - 'In' or?about?May- 20-107- met?with?Gohemat? meeting, Cohen told in sum and substance, that he had set up a law practice called Michael I). Cohen 3.: Associates P.C., and a consulting company called Essential Consultants LLC. Cohen told in sum and substance, that he expected to earn $75,000 per month in connection with his law practice, and that he expected gross revenues for the consulting business to be between five and six million dollars annually. b. In or about October 201?, if not earlier, -vas preparing a personal ?nancial statement for Cohen. On or about October 6, 2017, -sent an email to Cohen in which 1. wrote that ?[a]ttached is a draft of the new PFS as of September 30, 2017? and attached a draft of the September 2017 Financial Statement. The draft statement re?ected that as of September 30, 201?, Cohen had only $1,250,000 in cash, total assets of approximately $3 3,430,000 (comprised of taxi medallion interests, real estate interests, and his personal residence and property), and liabilities of approximately 045,63 0,000, leaving him purportedly over $12 million in debt. In thesame email, -1uestioned Cohen, in sum and substance, about the fact that the ?nancial statement did not list any value associated with either the Essential Consultants Account or the Account: did not add any value for you[r] two operating entities Michael D. Cohen 35 Associates 30 201103.02 14'llh?'?'n??r?w?H . .. .. rs- -- Case Document 43-1 Filed 03/19/19 Page 31 of 269 POC [sic] and Essential Consultants LLC. Please advise whether or not these should be disclosed and what value.? On or about October 6, 2017, Cohen called -0y telephone?which is re?ected on toll records for Cohen?s cellphone?and told - in sum and substance, not to include Essential Consultants or in the September 2017 Financial Statement because they had no value. On or about October 6, 2017, following the call with- Cohen, using the Cohen Account, good-toemer?LGohen-never directed -to make any changes to his cash position as listed in the September 2017 Financial Statement. In a letter dated October 6, 2017, addressed to -, Cohen stated, have reviewed the attached statement of ?nancial condition and ?nd it to be correct and consistent with the representations that I made to your ?rm. The attached is an accurate re?ection of my assets, liabilities and net worth (de?cit) as of September 30, 2017.? Attached to that letter was the September 2017 Financial Statement, which, as noted above, was then transmitted to Sterling in connection with the proposed taxi medallion transaction between Sterling, Cohen, and 21. Based on my review of a report of an interview with Sterling Employee-1, I have learned that Cohen did not disclose his income stream ?'om Essential Consultants to Sterling Employee?1 or, to his knowledge, anyone else at Sterling. According to Sterling Employee-1, knowledge of such an income stream would have affected Sterling?s demands during the negotiations, particularly with respect to the amount of a principal paydown of Cohen?s debt. Cohen Understated His Available Cash 22. In addition to withholding the existence of his Essential Consultants income ?om Sterling and Melrose, it appears that Cohen also substantially understated his available cash and cash equivalents in his fmancial disclosures. Speci?cally, I know ?om my review of the September 31 2017.08.02 Case Document 43-1 Filed 03/19/19 Page 32 of 269 2017 Financial Statement that Cohen provided to Sterling that Cohen represented that he had $1,250,000 in cash as of September 30, 2017. I also know that on or about January 30, 2013, in a telephone call with Sterling Employee-3, and on February 1, 201 S, in an email to Sterling Employee-3, Cohen represented that he did not have more than $1,250,000 in cash. But, from my review of a summary of bank records that were scheduled by forensic accountants, I have learned that Cohen had approximately $5,000,000 in cash and cash equivalents as of September 30, 2017. Additionally, as of ?F?bruary 1, mm equivalents. Speci?cally, from my review of the account schedule and bank records, Ihave learned the following: a. Cohen has three checking andfor savings accounts at Capital One Bank, one of which is in his wife?s name. As of September 30, 2017, Cohen had $1,105,680.35 in his savings account, and $1,262,982.29 in total in the three accounts at Capital One Bank. As of February 1, 2018, Cohen had a total of $1,339,245.73 in these accounts. b. Cohen has three accounts at Morgan Stanley in his name. As of September 30, 2017, the combined total in cash and cash equivalents in those three accounts was $1,220,600.41. As of February 1, 2013, Cohen had $1,284.996.13 in these accounts. c. As of September 30, 2017, Cohen had $260,689.18 in an account at Signature Bank. As ofFebruary 1, 2018, Cohen had $261,517.55 in this account. d. in addition to the Essential Consultants Account and Account at First Republic, Cohen also had two joint checking accounts with Laura Cohen at First Republic. in total, as of September 30, 2017, Cohen had at least $1,876,209.27 in total in his four accounts at First Republic. As of February 1, 2018, Cohen had $3,332,992.95 in these accounts. 32 2017.03.02 - .- E, i Case Document 43-1 Filed 03/19/19 Page 33 of 269 e. Cohen has an account at Bethpage Credit Union with $25,931.39 in it as of September 30, 2017. f. As of September 30, 2017, Cohen had $17,542.54 in accounts at Sterling. g. Cohen has two accounts at TD Bank?one in his name and one held jointly with his wife. Cohen also has a safety deposit box at Bank?Subject Premises?3. The safety deposit box was opened on December 13, 2017 in the names of Michael and Laura Cohen. at Capital One Bank, City National Bank, Signature Bank, Sterling Bank, Bethpage Credit Union, First Republic, and Morgan Stanley. As of February 1, 2018, Cohen had $6,268,732.59 in his accounts at Capital One Bank, City National Bank, Signature Bank, First Republic, and Morgan Stanley.? 23. Accordingly, based on the foregoing, it appears that Cohen?s written and oral representations to Sterling and Meh'ose that he did not have more than $1,250,000 were false, and that Cohen withheld information regarding approximately $5 million in funds from Sterling and Melrose in order to secure favorable terms in his renegotiation of his medallion loan. Based on my participation in an interview with Sterling Employee=~2, and my review of reports of interviews with Sterling Employee-1 and two Meh?ose employees, it is my understanding that that Sterling and Melrose would view Cohen?s understating of his assets as material to its decision whether to renegotiate Cohen?s medallion loans and on what terms, or to its decision whether approve of the transfer of those loans to - 19 Based on my review of the account schedules described above, Iknow that, as of the date of this af?davit, the account balances for TD Bank have not yet been included in the schedule for either date and the account balances for Sterling National Bank and Bethpage Credit Union have not yet been included in the schedule for February 1, 2018. Thus, to the extent that these accounts have positive balances, Cohen?s total balances in fact were even higher on these dates. 33 2017.08.02 hf?In-totalg asofS eptemberS 0 8-rinehisr accountsmewwi err- Case Document 43-1 Filed 03/19/19 Page 34 of 269 Cohen Has Unreported Interest Income "arm-manna? .: 24. It appears that Cohen also hid ?'om Sterling interest income that he was receiving in connection with a six million dollar loan he made to another individual. Speci?cally, I know from my review of the May 2017 Financial Statement and September 2017 Financial Statement that Cohen provided to Sterling that Cohen did not disclose that he had made a note receivable in the amount of approximately $6 million, or that he was earning approximately $60,000 per month in -- -- -- - that were reviewed by another law enforcement agent, my review of property records and ..: documents obtained pursuant to the Cohen Email Warrants, and my participation in an interview with-I have learned the following: a. Based on my review of property records, I have learned that on or about March 12, 2012, Cohen agreed to lend $2,000,000.20 It appears that the promissory note was unsecured by any real property. On or about April 23, 2014, Cohen and- amended the promissory note, and restructured the loan to increase the principal amount to approximately $5,000,000. Under the terms of the amended promissory note, the loan was secured by_ apartment in Florida. On or about April 3, 2015, Cohen and -restated the promissory note to increase the principal amount to $6,000,000.21 b. Based on my review of a copy of the restated note, which was obtained pursuant to the Cohen Email Warrants, I have learned that under the terms of the amended and restated 2? learned from Gees that 2.1 The note states that the loan is to hqua-?d and Wife: jointly and severally. For ease of reference, Irefer simply to ?-1erein. 34 201108.02 Case Document 43-1 Filed 03/19/19 Page 35 of 269 promissory note, Cohen?s loan to _s an interest-only loan, and that the principal balance of the loan bears interest at an annual rate of 12.25 percent. I also know that the amended and restated promissory note includes a schedule of payments that require -to pay Cohen approximately $61,250 per month beginning in April 2015 and ending in April 2019. The note also requires that-'epay the principal balance of $6,000,000 on April 23, 2019. c. Based on my review of bank records, 1 have learned that, consistent with the terms approximately $61,250 since April 2015. Speci?cally, based on my review of records maintained by Capital One Bank, I have learned that ?om April 2015 to October 2015, Cohen received checks from an entity called?. totaling $61,250 per month, which he deposited into his personal bank account at Capital One Bank.23 It appears from my review of bank records and public sources that :_is the owner of i? From my review of records maintained by Capital One Bank, I have also learned that since October 2015, Cohen has received checks from an entity called totaling $61,250 per month, which he deposited into his personal bank account at Capital One Bank. It appears from my review of bank records and public sources that - also the owner of r- ?In total, it appears that Cohen receives approximately $735,000 per year in interest payments from - d. Based on my review of Cohen?s May 2017r and September 2017 Financial Statements, my review of his 2015 and 2016 tax returns obtained via subpoena and ??om the Cohen Email Warrants, and my participation in an interview with - I have learned that Cohen did 22 In April 2015, Cohen received a pro-rated payment. For all months thereafter, the total payment equaled $61,250, but _)fben made the payment in multiple checks. 35 newness 1 I- entree-7.71177? .-. . -..- . Case Document 43-1 Filed 03/19/19 Page 36 of 269 not disclose this interest income he was receiving from -to Sterling or Melrose, or list it on his tax returns. I have also learned that while this interest income is taxable, Cohen did not tell -?his accountant-about the income, and -only learned about the income because he began doing _taxes in 2017?.23 25. I Accordingly, based on the foregoing, it appears that Cohen?s representations to Sterling and Meirose that he did not have more than $1,250,000 were false, and that Cohen withheld hifonnation relating to the secure favorable terms in his renegotiation of his medallion loan. Cohen Had a Side Agreement With 26. As set forth in detail below, during the course of Cohen?s negotiations to sell his interest in taxi medallions 'and the associated debt to C?hen not 001}? misrepresented his ?nancial position to Sterling, but also failed to disclose a side agreement he had negotiated with_: it appears that _greed to pay an above-market price for Cohen?s taxi cab medallions, and in exchange, Cohen agreed to pay _Lpprosimately $3 .8 million in cash- Speci?cally, ?orn my review of documents produced pursuant to a subpoena by Sterling, and my participation in interviews with Sterling Employee-l, Sterling Employee-2, and Sterling Employee?3, I have learned, among other things, the following: a- On or about September 5, 2017, an executed term sheet was circulated by Sterling Employee-1 to Cohen and - The term sheet listed Cohen?s address as the address for Subject Premises?l. According to the term sheet, ?would borrow $20,000,000 ?om Sterling and Melrose, to be secured by the medallions that _was to acquire from 23 Accordingly, this interest income?which should have been reported as such on Cohen?s tax returns?is included herein in calculations of Cohen?s true cash position. 36 2017.03.02 -. Case Document 43-1 Filed 03/19/19 Page 37 of 269 Cohen. At a price of $20 million for thirty-two taxi medallions, the proposed transaction valued each medallion as worth $625,000. The term sheet also contemplated a $1,265,913 pay?down of the principal balance of the loan. The term sheet made no mention of a $3.8 million payment from Cohen to or any other form of payment or ?nancial transaction between the parties. b. Additionally, an internal Sterling credit memorandum, dated October 4, 2017, describing the terms of the and the new loan to i?did not mention any payments from memorandum also noted that the ?loan amount of indicates a purchase price per medallion? but ?it is recognized that this is not in line with current market values.? Indeed, according to an internal Sterling memorandum dated February 5, 2018, in the month of January 2018, taxi medallions sold for amounts ranging from $120,000 to $372,000. According to Sterling Employee-1 and Sterling Employee-2, they were never told that -1greed to a purchase price of $625,000 in exchange for a lump sum payment from Cohen, or that Cohen would make any payment to c. On or about January 30, 2018, Sterling Employee-3 asked Cohen whether Cohen had a side agreement with pay -a sum of money for entering into the medallion transaction, Sterling Employee-3 asked Cohen about such an arrangement because, according to Sterling Employee-3, the price that -was paying for each medallion appeared to be well above the market price. Cohen stated, in sum and substance, that he had no side agreement?and never had a side agreementH?with - 27. While Cohen and_ did not disclose any payment from Cohen to _in communications with Sterling, it appears that such a payment was contemplated. Indeed, based on my review of records maintained by -and my participation in an interview 37 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 38 of 269 with - I have learned the following, in substance and in part, regarding the proposed side payment from Cohen to_ I a. On or about September 19, 2017,- prepared a memorandum for Cohen entitled, ?Sale of NYC Medallion Entities and Debt Assumption?i? {the The -Memorandum summarised the proposed transaction between Cohen and in part, as follows: ?Michael and Laura Cohen will transfer ownership of their 13 NYC medallion entities to a Buyer who will assume their"ank?indebtednes?t?UPm the [GOhGHE'il'paying'down'th? debt portfolio of the 13 entities by $500,000 and a cash payment to the Buyer of b. According to -Cohen told him the parameters of the deal, including the payment of $3,800,000 to -but-:lid not know where Cohen was going to obtain $3,300,000 to pay As noted above, Cohen had more than $5,000,000 in cash and cash equivalents as of September 2017, but had only disclosed in his September 2017 Financial Statement that he had $1.25 million in cash. 23. Based on my review of records maintained by Sterling {as well as Melrose, the bank with the participating interest in the loans) and reports of interviews of representatives of Sterling (and Melrose), 1 have seen no evidence that Sterling, Melrose, or any other ?nancial institution involved in the potential deal with Cohen and -Wa5 aWare of the planned $3.8 million side payment from Cohen te- The Illegal Campaign Contribution Scheme 2? The reference to thirteen medallions appears to be an error by - Cohen and his wife together owned sixteen corporations, which in turn owned 32 tar-1i medallions. 38 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 39 of 269 201108.02 Case Document 43-1 Filed 03/19/19 Page 40 of 269 Case Document 43-1 Filed 03/19/19 Page 41 of 269 Case Document 43-1 Filed 03/19/19 Page 42 of 269 101193.62 Case Document 43-1 Filed 03/19/19 Page 43 of 269 Case Document 43-1 Filed 03/19/19 Page 44 of 269 252.117.03.02 Case Document 43-1 Filed 03/19/19 Page 45 of' 269 201103.01! Case Document 43-1 Filed 03/19/19 Page 46 of 269 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 47 of 269 201103.112 Case Document 43-1 Filed 03/19/19 Page 48 of 269 2017.08.02 Case Document 43-1 Filed 03/19/19 Page 49 of 269 EMIURHE Case Document 43-1 Filed 03/19/19 Page 50 of 269 201103.02 Case Document 43-1 Filed 03/19/19 Page 51 of 269 201163.02 Case Document 43-1 Filed 03/19/19 Page 52 of 269 201?.03?2 Case Document 43-1 Filed 03/19/19 Page 53 of 269 281103.132 Case Document 43-1 Filed 03/19/19 Page 54 of 269 Case Document 43-1 Filed 03/19/19 Page 55 of 269 20110 3.01 Case Document 43-1 Filed 03/19/19 Page 56 of 269 201103.02 Case Document 43-1 Filed 03/19/19 Page 57 of 269 C. Probable Cause nstifying Search of the Subject Premises and Subject Devices 45. Based on the foregoing, my review of records produced pursuant to subpoenas and the Cohen Email Warrants, and the iCloud 1titiarrant, and my training and experience, there is probable cause to believe that the Subject Premises and Subject Devices have been used in furtherance of the Subject Offenses and are likely to contain instrumentalities, evidence, and fruits of the Subject Offenses. Speci?cally, there is probable cause to believe that Cohen permanently resides at Subject Premises-1 and, at least in part, vvorks at both Subject Premises-1 and Subject Premises-2, and that those locations contain evidence relating to the Sterling taxi medallion transaction, Cohen?s assets, Cohen?s consulting work for Essential Consultants LLC, and his Additionally, there is probable cause to believe that Subject Premises-3 contains evidence of Cohen?s assets and 1311131133 there is 03113? to believe that Subject Premises-4, in which Cohen is temporarily residing, contains electronic 57 2017.03.02 "Wu-Put". i-u Case Document 43-1 Filed 03/19/19 Page 58 of 269 devices, including Subject Device-1 and Subject Device-2, which, in turn, contain evidence of the Subject Offenses, such as evidence relating to the Sterling taxi medallion transaction, Cohen?s assets, Cohen?s consulting work for Essential Consultants LLC, and 46. First, there is probable cause to believe that Cohen lives and operates his businesses, at least in part, at Subject Premises-l. Speci?cally, from my review of property records, 1 know that Michael Cohen and Laura Cohen own (in trust) Subject Premises-1. From my review of ?WI-Cohen?s tax returns, 1 know l?list's?his primary?residence as Subject-Premises-l. from my review of emails produced pursuant to the Cohen Email Warrants, 1 know that Cohen routiner refers to Subject Premises-1 as his home. For example, on or about September 23, 201?? . and October 6, 2013?, Cohen emailed individuals that his home address is the address for Subject Premises-l. I also know from my review of emails that Cohen receives package delivery notifications that list Cohen?s address as the address for Subject Premises-1. Cohen has also provided the address of Subject Premises-1 as the address for Essential Consultants and Michael D. Cohen 35 Associates, PC. For example, the certi?cates of incorporation and account opening documents at First Republic for both entities list their addresses as the address for Subject Premises-l. See supra 11'? 18(b), 18(d). The consulting agreement between Essential Consultants and also indicated the address for Essential Consultants is the address for Subject Premises? I 1. See supra 1] 19(c). There is also probable cause to believe that Subject Premises?1 is liker to contain instrumentalities, evidence, and fruits of the Subject Offenses. Specifically, from my review of emails produced pursuant to subpoena and the Cohen Email Warrants and iCloud Warrant, as well as my training and experience, I know the following201108.02 Case Document 43-1 Filed 03/19/19 Page 59 of 269 a. According to records maintained by Sterling, the address for all of Cohen?sltaxi medallion ILLCs is the address for Subject Premises-1. See supra 1i 16(c). Additionally, the medallion loan documents indicate that any mailings related to the loans should be sent to Subject Pmmises?l. See id. Based on my training and experience, as well as my review of public sources, I know that individuals keep records of properties and assets in which they have ownership interests. Accordingly, I submit that Subject Premises-1 liker contains evidence of Cohen?s medalliWEECs?,? transaction with Sterling in 2014 to re-finance the medallion loans that were then with Capital One Bank. b. From my review of records maintained by Sterling, I also know that Sterling addressed documents relating to the -transaction and Cohen?s attempts to modify the terms of the medallion loans to Subject Premises?1. For instance, Sterling addressed the transaction term sheet, see supra 16(1), and its demand letter and notice of default, see supra 16(q), to Subject Premises-1. Accordingly, Subject Premises?1 likely contains evidence concerning the -transaction and Cohen?s negotiations with Sterling. Some of those recordse-such as records relating to a payment from Cohen to -?were concealed from Sterling and cannot be obtained via subpoena to Sterling. Additionally, even where documents were sent to Cohen by Sterling (and therefore are available from Sterling via subpoena), the fact that they may be found in Subject Premises-1 will be relevant to Cohen?s possession or knowledge of the documents. c. From my review of records maintained by First Republic, I know that Cohen provided the address for Subject Premises?l as the mailing addresses for the Essential Consultants Account and Account. See supra lstb), 13(e). Accordingly, it is likely that Subject 59 2017.03.02 - .m-rve Case Document 43-1 Filed 03/19/19 Page 60 of 269 Premises-1 contains records relating to the Essential Consultants Account and Account, including, among other things, account opening documents, bank statements, documents provided as part of the know-your?customer process, any notes made by Cohen when he was opening the accounts, wire transfer records, and canceled checks. Even where these records can be obtained from First Republic, the fact that they may be found in Subject Premises-1 will be relevant to, among other things, Cohen?s ownership of the accounts, or his knowledge of transactions or the existence Er? attests accounts. d. Based on my review of records maintained by Capital One Bank, TD Bank, Morgan Stanley, City National Bank, Signature Bank, and Bethpage Credit Union, I know that Cohen provided the address for Subject Premises-l as the mailing for his accounts at each of these ?nancial institutions. Accordingly, it is likely that Subject Premises-1 contains records relating to these accounts, including, among other things, bank statements that list account balances. The existence of these records in Subject Premises-1 will be relevant to, among other things, Cohen?s ownership of the accounts and his knowledge of the balances in these accounts. e. Additionally, Cohen may have records of other bank accounts or assets that were not disclosed to Sterling and are not presently known by law enforcement. For example, as described above, Cohen has received interest income since 2015 that he has not disclosed to Sterling or paid taxes on. Also, on Cohen?s August 2014 Financial Statement, see supra 1 16(e), he disclosed $10,000,000 in ?investments in overseas entities?? The value of these investments was omitted from subsequent ?nancial statements. However, for the reasons outlined above, there is probable cause to believe that Cohen omitted the value of those investments from his 2017 3" Based on my participation in an interview with Sterling Employee-3, I have learned that Cohen told Sterling Employee?3 that the reference to ?hivestments in overseas entities? on his 2014 Financial Statement was to serve merely as a ?placeholder? for potential future investments. 60 2011.08.02 -.- - "x "r -.- Case Document 43-1 Filed 03/19/19 Page 61 of 269 fmancial statements in order to understate his assets. As Subject Premises?1 is Cohen?s primary ..-: residence and he uses Subject Realises?l as the mailing address for bank records, there is probable cause to believe that account statements for unknown bank accounts or assets concealed from Sterling are likely to be found Subject Premises?1 - f. Based on my review of records maintained by and produced pursuant to the Cohen Email Warrants, I know that the address Cohen provided to for Essential Consultants 'Sse supra 1H9 . .. believe that Subject Premises-1 will contain evidence concerning the operation of Essential Consultants or money that Cohen received, through Essential Consultants, from Additionally, because Cohen used the address for Subject Premises-1 for at least one consulting arrangement involving Essential Consultants, there is probable cause to believe that Subject Premises-1 may contain records of other consulting arrangements that Cohen, through Essential Consultants, has with other individuals or entities. g. Based on my review of records maintained by -iccounting ?rm, and emails produced pursuant to the Cohen Email Warrants, 1 have learned that I-accounting firm sent - - documents to Subject Premises-1 and used the address for Subject Premises-1 as the address listed on Cohen?s personal and corporate tax returns. See supra 11 16(n). For instance, on or about October 6, 2017, an employee at-accounting firm emailed Cohen that she had sent Cohen?s September 2017 Financial Statement by FedEx to Cohen?s attention. Accordingly, Cohen?s tax records are likely to be found in Subject Premises-1. I. h. Based on my review of bank records and publicly-available documents, I know that 61 f, - Document 43-1 Filed 03/19/19 Page 62 of 269 my review of emails produced pursuant to the Cohen Email Warrants and i. Based on iCloud Warrant, I know that Cohen used at least one Apple iPhone, an Apple iPad Mini, and a MacElook Pro to access his iCloud account. Apple pursuant to the iCloud Warrant, I know that electronic devices linked to Cohen?s iCloud account were used at Subject Premises-i to, among other things, place telephone calls and backup ?les to Cohen?s iCloud account. Accordingly, there is probable cause to believe that Subject Premises-1 contains electronic devices, including certain Apple products, that for reasons discussed below are likely to contain evidence of the Subject Offenses. j. Based on my review of emails produced pursuant to the Cohen Email Warrants, I understand that Subject Premises-l recently sustained water damage to certain parts of the premises, and that Cohen has engaged contractors to perform certain remediation work on the premises. In addition, as set? forth above, I believe that Cohen and his famin are temporarily residing at Subject Premises-4 in the Loew?s Regency Hotel, which is approximately two blocks from Subject Premises-1. However, based on my review of a work order sent to Cohen?s email by a contractor, I understand that the ?rst phase of the work order called for the contractor to ?Pack 8: Remove all items 3r: furnishings in Living Room, Kitchen, Sons Room Er. Dining Room? and store them off-site. In addition, based on my review of drawings sent to Cohen by the contractor, it appears that the work is primarily being done in these rooms. Thus, I believe that the construction to the extent it is still ongoing would not necessarily have caused Cohen to move 62 BasEdEn??'Case Document 43-1 Filed 03/19/19 Page 63 of 269 all documents or evidence responsive to the warrant out of Subject PIemises?l, because it does not appear that work is being clone to the portion of Subject Premises-1, such as a home of?ce or Cohen?s own room, where such documents or evidence would most likely be found.31 43. Second, there is probable cause to believe that Cohen uses Subject Premises?2 as of?ce space, and also that Subject Premises-2 contains certain electronic devices. Speci?cally, from my review of the ?strategic alliance agreemen between Squire Patton Boggs and Cohen, and my'revi'ew ot the'press release on of?ce at Subject Premises-2. See supra ?i?i 18(d), 19(e}. Indeed, I have learned that pursuant to Cohen?s agreement with the law ?rm, he has ?dedicated and segregated of?ce space? in Squire Patton Boggs?s of?ces on the 23rd floor of 30 Rockefeller Plaza, and that the space is ?physically separate" from the ?rm?s of?ces and has ?locked doors and its own locked ?le cabinets.? See supra '51 19(e). Additionally, I know that under the terms of the agreement, Cohen agreed to ?arrange for [his] own computer server system that is not connected to [Squire Patton Boggs?s] computer network system.? I [mow from my participation in an interview with _who met Cohen at Subject Premises-2 in 2017, that Subject Premises-2 is an of?ce with a door, it appears to be used only by Cohen, and it contains, among other things, a computer and paper ?les. According to - when .saw Cohen at Subject Premises-2, he had two cellular telephones in Subject Premises-2. I also know from my review of emails produced pursuant to the Cohen Email Warrants that Cohen uses the address for Subject Premises-2 in the signature block 31 As noted below, based on my training and experience, I believe that individuals who travel or stay in hotels for short-term periods commonly bring some items with them, such as portable electronic devices or sensitive items, meaning that Cohen has likely taken some evidence from Subject Premises-1 to Subject Premises-4. Nevertheless, given the temporary nature of Cohen?s stay at Subject Premises-4 and the scope of the work being done at Subject Premises-1, I believe it is unlikely that Cohen has taken all evidence that would be subject to seizure out of Subject Premises-1. 63 zulvnacs mnmun?Case Document 43-1 Filed 03/19/19 Page 64 of 269 on his emails. Based on my review of notes of" a call between Cohen and First Republic Employee- 2 (which notes were taken by another First Republic employee, who was participating in the call and taking notes), I know that, on or about November 15, 2017, Cohen told First Republic Employee?2 that he had a new office at 30 Rock. Moreover, I know from an article in Vanity air published on or about February 14, 2013, that Cohen was interviewed by the magazine in Subject Premises-2 in or about February 2018. ig'also pf?h?lile iS'likelvto'contajn? evidence, and fruits of the Subject Offenses. Speci?cally, from my review of emails produced pursuant to subpoena and the Cohen Email Warrants and iCloud Warrant, as well as my training and experience, I know the following: a. According to records maintained by Sterling, when Cohen was emailing with Sterling Employec~3 in 2018 about a modi?cation to his existing loan from Sterling, Cohen listed his address in his email as the address for Subject Premises-2. See supra 1] 16(t}, 1601). Accordingly, Subject Premises-2 liker contains evidence concerning Cohen?s loan modi?cation negotiations with Sterling. 13. Based on my review of records obtained pursuant to the Cohen Email Warrants, I know that the address Cohen provided to KAI and BTA for Essential Consultants is the address for Subject Premises?2. See supra 1m 19(a), 1903}. Therefore, there is probable cause to believe that Subject Premises-2 will contain evidence concerning the operation of Essential Consultants or money that Cohen received, through Essential Consultants, from KAI and ETA, among other entities with which Cohen had a consulting arrangement. Additionally, based on my review of emails sent in 2013 that were obtained pursuant to the Cohen Email Warrants, I know that Cohen continues to enter into consulting arrangements through Essential Consultants, and agreements 64 2011.03.02 Th- . .- - Case Document 43-1 Filed 03/19/19 Page 65 of 269 relating to those arrangements indicate that Essential Consultants is located at Subject Premises- 2. Additionally, because Cohen used the address for Subject Premises-2 for multiple consulting arrangements involving Essential Consultants, there is probable cause to believe that Subject Premises-2 may contain records of other unknown consulting arrangements that Cohen has with other individuals or entities. c. Based on my review of records maintained by -1ccounting ?rm; and emails maimed 1311,5115, E??gtbhen Emau'wa?ms, as -I have learned that -visited Subject PIemises-Z to meet with Cohen about his taxes. See supra 1i 20(a). At that meeting, -:liscussed with Cohen whether Cohen should disclose Essential Consultants on his personal ?nancial statement to banks. According, there is probable cause to believe that Subject Premises-2 will contain evidence relating to Cohen?s taxes, or notes of his conversation with - Moreover, the fact that Cohen used Subject Premises-2 for a meeting regarding his personal fmancial matters provides probable cause to believe that documents and information regarding his ?nances will be found in Subject Premises-2. d. Based on my participation in an interview with .1 know that Cohen maintains a computer in Subject Premises?2. From my review of data produced pursuant to a subpoena and pen register to Google, it appears that Cohen is logging into his Gmail account from Subject Premises~2. Accordingly, there is probable cause to believe that Subject Premises-2 contains electronic devices, that for reasons discussed below are likely to contain evidence of the Subject Offenses. e. Based upon my training and experience, I have learned that individuals who maintain businesses typically keep records relating to the business?such as contracts with clients and records of payments?at the business3 identi?ed location. I am not aware of any addresses 65 201103.132 - - .u Case Document 43-1 Filed 03/19/19 Page 66 of 269 associated with Essential Consultants other than Subject Premises?1 and Subject Premises-2. Accordingly, there is probable cause to believe that Subject Premises-l and Subject Premises-2 will contain business records for Essential Consultants. 50. Third, there is probable cause to believe that Subject Premises-3 is likely to contain instrumentalities, evidence, and fruits of the Subject Offenses. In particular: a. As noted above, Cohen has two bank accounts at TD Bank. In or about November 'm Eta?ammas receiving to Sterling?Cohen opened the safety deposit box at TD Bank, which is Subject Premises-3. In light of the aforementioned evidence that Cohen conceals assets, including assets at TD Bank, . . . there is probable cause to believe that Subj ect Premises-3 contains financial assets, objects of value andfor documents relating to such assets or objects of value that Cohen liker did not disclose to Sterling. Indeed, based on my training and experience, I am aware that people often conceal valuable items in safety deposit boxes. Accordingly, there is probable cause to believe that Subject Premises-3 will contain evidence of the Bank Fraud Offenses. 201168.02 Case Document 43-1 Filed 03/19/19 Page 67 of 269 - 51. Based on my review of emails obtained pursuant to the Cohen Email Warrants and cell phone location mfonnation, I believe that Cohen is telnpolarily residing in Subject Premises- 4. See supra There is also probable cause to believe that Subject Premises-4 contains instrumentalities and evidence of the Subject Offenses, including, the following: .. 33 As noted above, Subject Premises-3 is approximately ?ve inches by ten inches. Accordingly, I do not believe that it would fit a large volume of hard copy documents; however, a small number of hard-copy documents, or a large volume of documents contained on a ?ash drive or other portable storage device, would ?t in Subject Premises-3. 67 3.112 Case Document 43-1 Filed 03/19/19 Page 68 of 269 b. As described above, at the time Cohen moved to Subject Premises-4, he was also in the midst of ongoing negotiations with Sterling regarding the re?nancing of his medallion debts. For example, on January 30, 21318, Cohen had a phone call with Sterling Employee-3 about his ?nances and the proposed restructuring, and on February 1, 2013, Cohen sent an email to Sterling Employee-3 claiming that he did not have more than $1.25 million in cash. See supra 16(u). Thus, there is probable cause that Cohen took at least some documents and evidence relating to his Ong??lg?eg?t?i??s WifWSE?iiEvitli?im to Subject consult them in connection with these negotiations. c. As described above, Cohen used at least one Apple iPhone, an Apple iPad Mini, and a MacBook Pro to access his iCloud account, and these electronic devices linked to Cohen?s iCloud account were used at Subject Premises-1 Cohens? permanent residence to place telephone calls and backup ?les to Cohen?s iCloud account. See supra {Hi 47(i). Although Cohen?s stay at Subject Premises-,4L is temporary, based on my training and experience I know that individuals who travel or stay in hotels for short-term periods commonly bring portable electronic devices with them, such as cellular phones, tablets, or laptops. Accordingly, there is probable cause to believe that Subject Premises-4, where Cohen currently appears to be residing, contains electronic devices, including Subject Device-l, Subject Device-2, andfor certain Apple products, that for the reasons discussed herein are likely to contain evidence of the Subject Offenses. (1. Moreover, as set forth above, based on cellphone location information Iknow that Subject Device-1 and Subject Device-2 Were in the vicinity of Subject Premises?4 as recently as this morning (April 8, 2018). As set forth above, there is probable cause to believe that Cohen used the Subject Devices in furtherance of the Subject Offenses, including to communicate with Sterling employees regarding the medallion transaction, with First Republic employees regarding 63 2011mm 1Case Document 43-1 Filed 03/19/19 Page 69 of 269 the Essential Consultants Account, with his accountant regarding his ?nances, and with 52. Although Cohen appears to be residing currently in Subject Premises-4, it is unknown whether Cohen will be physically present within Subject Premises-4 at the moment the warrant sought herein are executed. If Cohen is within Subject Premises-4 at that moment, Subject Device-l and Subject Device-2 his cellphones will likely also be within Subject Premises~4. If Cohen is not within. assessment: that woman'uieasviees will wherever he is located (which, based on location data for Subject Device-l and Subject Device?2 as recently as today, is likely to be in the Southern District of New York). As such, this Warrant seeks separate authority to seize Subject Device?l and Subject Device-2, in the event that those devices are not located within Subject-Premises-J: (or another Subject Premises] at the moment the warrants sought herein are executed. D. Probable Cause ustifying Search of E81 53. Based on the foregoing, there is probable cause to believe that Subject Premises-1, Subject Premises-2 and Subject Premises-4 contain electronic devices that are likely to contain evidence, fruits, and instrumentalities of the Subject Offenses (and, as set forth above, that Subject Device-1 and Subject Device-2 are themselves electronic devices that are likely to contain evidence of the Subject Offenses). Speci?cally, based on my review of information produced- pursuant to the Cohen Email Warrants, the iCIoud Warrant, and subpoenas, as well as pen register data, I submit that there is probable cause that Subject Premises?l contains an Apple iPad Mini, a MacBook Pro, and has, at various times, contained Apple cellphones; similarly, there is probable cause that Subject Premises-2 contains a computer and has, at various times, contained Apple 69 2017.03.02 .J. :1 Case Document 43-1 Filed 03/19/19 Page 70 of 269 cellphones. These devices are liker to include evidence, ??uits, and instrumentalities of the Subject Offenses for the following reasons: a. As described throughout this af?davit, Cohen used email to send and receive communications related to the Subject Offenses. In particular, Cohen used email to send and receive communications Twith Sterling, First Republic,- the entities to which he is providing consulting services?among others. While some of these emails have I I know from that individuals can and do delete emails from their Internet-based inboxes but retain copies of those emails on their hard drives. I also know that individuals often have multiple email accounts, some of which may not be known to law enforcement, and as a result electronic devices can be a unique repository of all emails relevant to certain Subject Offenses. Indeed, from my involvement in this investigation, I know that Cohen had an email account 1.vith the Trump Organization, but the USAO and FBI have not been able to obtain the contents of that account to date. Thus, emails relevant to the Subject Offenses are liker stored on electronic devices in Subject Premises-1, Subject Premises-2 and/or Subject Premises?4. b. Additionally, Subject Premises-l, Subject Premise-2 and Subject Premises-4 liker contain electronic copies of documents relevant to the Subject Offenses. Indeed, I lcnovv from my training and experience that individuals often retain copies of important documents on their computers or other electronic devices capable of storing information, including cellphones (such as the Subject Devices) and tablets. Here, there are a number of documents that Cohen has liker retained that will be relevant to the Subject Offenses. For example, electronic devices may include documentation of Cohen?s true net vvorth, a listing of his assets, an accounting of his available 70 .. .--. . a . rma-?ex-n- According-lyithere is'probabl'ehcause to Case Document 43-1 Filed 03/19/19 Page 71 of 269 cash, consulting agreements with third parties, and among other evidence of the Subject Offenses. c. Third, I know ?-om my review of emails obtained pursuant to the Cohen Email Warrants that Cohen sent up online banking with First Republic. Based on my training and experience, I know that individuals who set up online banking often receive electronic notices concerning ?nancial transactions and, on occasion, save records of their ?nancial transactions to contain evidence of banking activity, including the existence of bank accounts or assets that Cohen did not disclose to Sterling or Meirose. 1" d. Fourth, from my review of records produced by Apple, I know that Cohen communicates using text message as well as communications applications. These applications that Cohen has downloaded onto a phone include, but are not limited to, WhatsApp, Signal, and Dust. I know from my review of toll records and text messages that, in particular, 'a '5 Cohen communicated with -Lsing these applications. Accordingly, there is probable cause to believe that Cohen?s cellphones the Subject Devices will contain messages that are not otherwise accessible relating to the Subject Offenses. 54. Based on my training and experience, I know that individuals who engage in ?nancial crimes commonly use computers to communicate with rec-conspirators, keep ?nancial ledgers, and retain fraudulent documents. As a result, they often store data on their computers I .. . .. related to their illegal activity, which can include logs of online or cellphone-based ?chats? with co?conspirators; email correspondence; contact information of eo-conSpirators, including telephone numbers, email addresses, and identi?ers for instant messaging and social medial accounts; bank account numbers; andfor records of uses of funds. 71 Case Document 43-1 Filed 03/19/19 Page 72 of 269 55. Based on my training and.experience, I also know that, where computers are used in furtherance of criminal activity, evidence of the criminal activity can often be found months or even years after it occurred. This is typically true because: 0 Electronic ?les can be stored on a hard drive for years at little or no cost and users thus have little incentive to delete data that may be useful to consult in the future. 9 Even when a user does choose to delete data, the data can often be recovered months or years later with the appropriate forensic tools. When a ?le is ?deleted? on a home compu_te_r, the data contained in thb?l??t?S??ll actually disappear,_but instead remains on the hard drive, in ?slack space,? until it is overwritten tyaew?daa that cannot at? stored elsewhere on the computer. Similarly, ?les that have been viewed on the Internet are generally downloaded into a temporary Internet directory or ?cache,? which is only overwritten as the ?cache? ?lls up and is replaced with more recently viewed Internet pages. Thus, the ability to retrieve from a hard drive or other electronic storage media depends less on when the ?le was created or viewed than on a particular user?s operating system, storage capacity, and computer habits. I In the event that a user changes computers, the user will typically transfer files ??om - the old computer to the new computer, so as not to lose data. In addition, users often keep backups of their data on electronic storage media such as thumb drives, ?ash memon cards, or portable hard drives. 56. Based on the foregoing, I respectfully submit there is probable cause to believe that Cohen engaged in the Subject Offenses, and that evidence of this criminal activity is likely to be found in the Subject Premises, on computers and electronic media found in the Subject Premises, and on the Subject Devices. In particular, there is probable cause to believe that the Subject Premises and Subject Devices will contain evidence, fruits, and instrumentalities of violations of the Subject Offenses, as more fully described in Section II of Attachments A, B, C, D, and to the proposed warrants, including the following: a, Evidence necessary to establish the occupancy or ownership of the Subject Premises, including without limitation, utility and telephone bills, mail envelopes, addressed correspondence, bank statements, identi?cation documents, and keys. b. Evidence relating to Sterling, Melrose, andfor taxi medallions. 72 2011mm Case Document 43-1 Filed 03/19/19 Page 73 of 269 c. Evidence relating to a plan, proposal, or agreement for Cohen andfor entities associated with him to transfer any interest in taxi medallions, and any associated debts or liabilities, to others, including to _nd!or entities associated with him. d. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling andfor Melrose. e. Evidence relating to Essential Consultants, LLC, including any documents that indicate the nature and purpose Eff payments made to whom of any work done by Cohen or any other individuals in connection with Essential Consultants. f. Evidence of income to Michael D. Cohen Associates, including any documents that indicate the nature and purpose of payments made to or ?om Michael D. Cohen 3: Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen 35 Associates. g. Evidence relating to Cohen?s net worth, available cash and cash equivalents, and annual income, income sources, and other assets, whether held personally or through entities, including tax renuns, personal ?nancial statements, and ban]: records. h. Evidence relating to agreements, loans, andfor ?nancial transactions between Cohen and_ and any payments by-:o Cohen. 7 3 201103.02 I .. 21?. . .. Case Document 43-1 Filed 03/19/19 Page 74 of 269 p. Communications with others, including-andfor other accountants, relating to Cohen?s bank accounts, taxes, debts, andfor ?nances; q. Communications, records, documents, and other ?les re?ecting false representations to a fmancial institution related to the intended purpose of an account or loan at that ?nancial institution; the nature of any business or entity associated with an account at a ?nancial institution; the source of ?inds ?owing into an account; or the purpose or nature of any financial transactions involving that ?nancial institution; r. Evidence ofCoh-enis as it relates to under investigation. Procedures for Searching ESI A. Execution of Warrant for E81 57. Federal Rule of Criminal Procedure provides that a wan'ant to search for and seize property ?may authorize the seizure of electronic storage media or the seizure or 74 connect: -- 'r .-.- -. Case Document 43-1 Filed 03/19/19 Page 75 of 269 copying of electronically stored information . . . for later review.? Consistent with Rule 41, this application requests authorization to seize any computer devices and storage media and transport them to an appropriate law enforcement facility for review. This is typically necessary for a number of reasons: a First, the volume of data on computer devices and storage media is often impractical for law enforcement personnel to review in its entirety at the search location. a Second, because computer data is particularly vulnerable to inadvertent or intentional modi?cation or destruction, cemputer d?ices are ideally examined";in' abonti?oll'ed environment, such as a law enforcement laboratory, where trained personnel, using specialized software, can make a forensic copy of the storage media that can be subsequently reviewed in a manner that does not change the underlying data. a Third, there are so many types of computer hardware and software in use today that it can be impossible to bring to the search site all of the necessary technical manuals and specialized personnel and equipment potentially required to safely access the underlying computer data. 0 Fourth, many factors can complicate and prolong recovery of data ?om a computer device, including the increasingly common use of passwords, or other features or con?gurations designed to protect or conceal data on the computer, which often take considerable time and resources for forensic personnel to detect and resolve. 58. As discussed herein, Squire Patton Boggs is a functioning law ?rm that conducts legitimate business unrelated to Cohen?s commission of the Subject Offenses. Subject Premises- 2 is an of?ce located inside of Squire Patton Boggs?s New York of?ce. In order to execute the warrant in the most reasonable fashion, law enforcement personnel will attempt to investigate on the scene of what computers or storage media, if any, must be seized or copied, and what computers orcopied. Law enforcement personnel will speak with Squire Patton Boggs personnel on the scene as may be appropriate to determine which ?les and electronic devices within Subject Premises-2 belong to or were used by Cohen. While, based on the foregoing, it does not appear that Cohen shared electronic devices or a server with Squire Patton Boggs, where appropriate, law enforcement personnel will copy data, rather than physically seize 75 2017.08.02 Case Document 43-1 Filed 03/19/19 Page 76 of 269 computers, to reduce the extent of any disruption of Squire Patton Boggs?s operations. If, after inspecting the seized computers off?site, it is determined that some or all of this equipment is no longer necessary to retrieve and preserve the evidence, the Government will return it. 59. Additionally, because Cohen is an attorney, and claims to serve as a personal attorney for Trump, the review of evidence seized from the Subject Premises and Subject Devices will be conducted pursuant to established screening procedures to ensure that the law enforcement personnel involved in the investigation, including in a manner reasonably designed to protect any attorney-client or other applicable privilege. When appropriate, the procedures will include use of a designated ??lter team,? separate and apart from the investigative team, in order to review potentially privileged communications and determine which communications to release to the investigation and prosecution team. B. Accessing ESI on the Subject Devices 60. As described above, the Subject Devices are both Apple brand devices. 61. I know from my naming and experience, as well as from information found in publicly available materials including those published by Apple, that some models of Apple -- - devices such as iPhones and iPads offer their users the ability to unlock the device via the use of a fmgerprint or thumbprint (collectively, ?ngerprint?iJ in lieu of a numeric or alphanumeric passcode or password. This feature is called Touch ID. I also know that the Apple iPhone offers its users the ability to unlock the device via the use of facial recognition (tlnough infrared and I visible light scans) in lieu of a numeric or alphanumeric passoode or password. This feature is called Face 1D. 62. If a user enables Touch 1D on a given Apple device, he or she can register up to 5 ?ngerprints that can be used to unlock that device. The user can then use any of the registered 76 2017mm . f; Case Document 43-1 Filed 03/19/19 Page 77 of 269 ?ngerprints to unlock the device by pressing the relevant ?nger(s) to the device?s Touch 1D sensor, which is found in the round button (often referred to as the ?home? button) found at the bottom center of the front of the device. If a user enables Face on a given Apple device, he or she can unlock the device by raising the iPhone to his or her face, or tapping the screen. In my training and experience, users of Apple devices that offer Touch 1D or Face ID often enable it because it is considered to be a more convenient way to unlock the device than by entering a numeric or alphanumeric passcode or password, as well as ail-more secure way to protect the device?s contents. 63. In some circumstances, Touch ID or Face ID cannot be used to unlock a device that has either security feature enabled, and a passcode or password must be used instead. These circumstances include: (1) when the device has just been turned on or restarted; (2) when more than 48 hours has passed since the last time the device was unlocked; (3) when the passcode or password has not been entered in the last 6 days, and the device has not been unlocked via Touch 1D in the last 8 hours or the device has not been unlocked via Face ID in the last 4 hours; (4) the device has received a remote lock command; or (5) ?ve unsuccess?ll attempts to unlock the device via Touch ID or Face ID are made. 64. The passcodes or passwords that would unlock the Subject Devices are not known to law enforcement. Thus, it will likely be necessary to press the fingers of the user of the Subject Devices to the devices? Touch ID sensor, or hold the Subject Devices in ?'ont of the user?s face to activate the Face 1D sensor, in an attempt to unlock the devices for the purpose of executing the search authorized by this warrant. Attempting to unlock the relevant Apple devices via Touch ID with the use of the ?ngerprints of the user, or via Face ID by holding the device in front of the user?s face, is necessary because the government may not otherwise be able to access the data contained on those devices for the purpose of executing the search authorized by this warrant. 77 2017.08.02 an! Case Document 43-1 Filed 03/19/19 Page 78 of 269 65. Based on these facts and my training and experience, it is likely that Cohen is the user of the Subject Devices, and thus that his ?ngerprints are among those that are able to unlock the Subject Devices via Touch ID or his face is able to unlock the Subject Devices via Face ID. 66. Although I do not know which of a given user?s 10 fmgerprints is capable of unlocking a particular device, based on my training and experience I know that it is common for a user to unlocks Touch lD?enabled Apple device via the ?ngerprints on thumbs or index ?ngers. Ef?e?even?lm?tlaw enforcement 15 unable to unlock the Subject Devieeg as?d?e'scrihed abevs?? within the five attempts permitted by Touch ID, this will simply result in the device requiring the entry of a password or passcode before it can be unlocked. I also know ?-om my training and experience, and my review of publicly available materials published by Apple that Apple brand devices, such as the Subject Devices, have a feature that allows a user to erase the contents of the device remotely. By logging into the Internet, the user or any other individual who possesses the user?s account information can take steps to completely wipe the contents of the device, thereby destroying evidence of criminal conduct, along with any other information on the device. The only means to prevent this action is to disable the device?s ability to connect to the Internet immediately upon seizure, which requires either access to the device itself to alter the settings, or the use of specialized equipment that is not consistently available to law enforcement agents at every arrest. 63. Due to the foregoing, I request that the Court authorize law enforcement to press the ?ngers (including thumbs) of Cohen to the Touch ID sensors the Subject Devices, or hold the Subject Devices in front of Cohen?s face, for the purpose of attempting to unlock the Subject Devices via Touch ID or Face in order to search the contents as authorized by this warrant. 78 anneal}: on?. I- .. return-.rforz-m- - . Case Document 43-1 Filed 03/19/19 Page 79 of 269 C. Review of E81 69. Following seizure of any computer devices and storage media andi'or the creation of forensic image copies, law enforcement personnel (including, in addition to law enforcement of?cers and agents, and depending on the nature of the E51 and the status of the investigation and related proceedings, attomeys for the government, attomey support staff, agency personnel assisting the government in this investigation, and outside technical experts under government revisitii'the ESI contained warrant. 70. In conducting this review, law enforcement personnel may use various techniques to determine which files or other ESI contain evidence or ?nits of the Subject Offenses. Such techniques may include, for example: surveying directories or folders and the individual ?les they contain (analogous to looking at the outside of a ?le cabinet for the markings it contains and opening a drawer believed to contain pertinent tiles); a conducting a ?le?by-?le review by ?opening? or reading the first few ?pages? of such files in order to determine their precise contents (analogous to performing a cursory examination of each document in a file cabinet to determine its relevance); ?scanning? storage areas to discover and possibly recover recently deleted data or deliberately hidden ?les; and a performing electronic keyword searches through all electronic storage areas to determine the existence and location of data potentially related to the subject matter of the investigation?; and reviewing metadata, system information, con?guration ?les, registry data, and any other information re?ecting how, when, and by whom the computer was used. 3? Keyword searches alone are typically inadequate to detect all relevant data. For one thing, keyword searches work only for text data, yet many types of ?les, such as images and videos, do not store data as searchable text. Moreover, even as to test data, there may be information properly subject to seizure but that is not captured by a keyword search because the information does not contain the keywords being searched. 79 201108.02 1 i ii i. -. Case Document 43-1 Filed 03/19/19 Page 80 of 269 71. Law enforcement personnel will make reasonable e?orts to restrict their search to data falling within the categories of evidence speci?ed in the warrant. Depending on the circumstances, however, law enforcement personnel may need to conduct a complete review of all the E81 from seized devices or storage media to evaluate its contents and to locate all data responsive to the warrant. D. Return of ESI 3'1 to retrieve and preserve the data, and the devices themselves are not subject to seizure pursuant to Federal Rule of Criminal Procedure 41(0), the Govermnent will return these items, upon request. Computer data that is or unreadable will not be returned unless lavv enforcement personnel have determined that the data is not an instrumentality of the offense, (ii) a fruit of the criminal activity, contraband, (iv) otherwise unlawfully possessed, or evidence of the Subject Offenses. 3t] saunas: If ?WtCase Document 43-1 Filed 03/19/19 Page 81 of 269 IV. Conclusion and Ancillary Provisions 73. Based on the foregoing, I respectfully request the court to issue a warrant to seize the items and information speci? Search and Seizure Warrants. 74. In light of the con?dential nature of the continuing investigation, I respectfully requ at that this af?davit and all papers submitted herewith be maintained under seal until the Court orders otherwise. Special Agent FBI Sworn to before me on 8th day of April, 2013 PITWJJ -. 9? UNITED stares MAGISTRATE JUDGE EV {qu Hi We WE: If"- 31 2011.03.02 ed in Attachments A, B, C, D, and to this affidavit and to the - ummrr Case ocument 43-1 Filed 03/19/19 Page 82 of 269 ATTACHMENT A I. Premises to be Searched?Subject Premisesdl The premises to be searched (?Subject Premises?1?) are described as follows, and include electronic devices, and all locked and closed containers found therein: Apartment .located inside the building at 502 Park Avenue, New York, New York 10022. The building located at 502 Park Avenue is a 32-floor brick residential building. Subject Ptarnises-l is located on the _3f the building. 11. Items to Be Seized A. Evidence, Fruits, and Instrumentalities of the Subject Offenses The items to be seized from Subject Premises-+1 are evidence, fruits, and instrumentalities of violations of 18 UIS.C. 371 (conspiracy, as it pertains to the other Subject Offenses), 1005 (false bank entries), 1014 (false statements to a ?nancial institution), 1343 (wire hand), and 1344 (bank fraud), and 52 U.S.C. 30 and 30109(d)(l)(A)(1) (illegal campaign contributions) (the ?Subject Offenses?), described as follows: a. Evidence relating to Sterling National Bank, Melrose Credit Union, andfor taxi medallions, from January 1, 2013 to the present. b. Evidence relating to a plan, proposal, or agreement for Michael Cohen andr'or entities associated with him to transfer any interest in taxi medallions, and any associated debts or liabilities, to others, including to andfor entities associated with him. c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling andfor Melrose. d. Evidence relating to Essential Consultants, LLC, including any documents that indicate the nature and purpose of payments made to or from Essential Consultants or the nature of any work done by Cohen or any other individuals in connection with Essential Consultants. e. Evidence of income to Michael D. Cohen Associates, including any documents that indicate the nature and purpose of payments made to or from Michael D. Cohen Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen 8; Associates. Evidence relating to Cohen?s net worth, available cash and cash equivalents, and annual income, income so urces, and other assets, whether held personally or through entities, includingtas returns, personal ?nancial statements, and bank records, ?forn January 1, 2013 to the present. g. Evidence relating to a greements, loans, andfor financial transactions between Cohen and?andfor entities controlled by the? 2017.03.02 2 1.61 Case Document 43-1 Filed 03/19/19 Page 83 of 269 ?andanmymentsa -to Cohen WW 1, 2012 to the present. o. Conununications with others, including?and/?t O?l?r ace?u?ta?t?i relating to Cohen?s bank accounts, taxes, debts, andfor ?nances, from January 1, 2013 to the present. p. Communications, records, documents, and other ?les re?ecting false representations to a ?nancial institution related to the intended purpose of an account or loan at that ?nancial institution, the nature of any business or entity associated with an account at a ?nancial institution; the source of funds ?owing into an account; or the purpose or nature of any ?nancial transactions involving that ?nancial institution, from January 1, 2013 to the present. Evidence of Cohen? 5 intent as it relates to the Subject Offenses under investigation. B. Search and Seizure of Electronicaily Stored Information The items to be seiZed from Subject Premises-l also include any computer devices and storage media that may contain any electronically stored information falling within the categories set forth in Section 11A of this Attachment above, including, but not limited to, a MacBook Pro, any other desktop and-laptop computers, any Apple iPhone or other cellphone or smartphone 3 3.Case Document 43-1 Filed 03/19/19 Page 84 of 269 belonging to Michael Cohen or in his possession, an Apple iPad Mini, portable hard drives, disk drives, thumb drives, and personal digital assistants. In lieu of seizing any such computer devices or storage media, this warrant also authorizes the copying of such devices or media for later review. The . computer items to be seized from Subject Premises-l also include: Any items or records needed to access the data stored on any seized or copied evices or storage media, including but not limited to any physical keys, devices, or records of login credentials, passwords, private keys, or similar information. 2. devices or 3. Any items or records that may facilitate a forensic examination of the computer storage media, including any hardware or software manuals or other information the-configuratien?of?the seized-or-copied?computer. mg__ Any evidence concerning the identities or locations of those persons with access to, control over, or ownership of the seized or copied computer devices or storage media. C. Review of ESI Following seizure of any computer devices and storage media andfor the creation of forensic image copies, law enforcement personnel (which may include, in addition to law enforcement of?cers and agents, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the E81 contained therein for information responsive to the' warrant. In conducting this review, law enforcement personnel may use various techniques to locate information responsive to the warrant, including, for example: 201103.02 surveying various flle ?directories? and the individual ?les they contain (analogous to looking at the outside of a file cabinet for the markings it contains and opening a drawer believed to contain pertinent ?les); opening or cursorin reading the first few ?pages? of such files in order to determine their precise contents; scanning storage areas to discover and possibly recover recently deleted files or deliberately hidden ?les; performing key word searches through all electronic storage areas to determine whether occurrences of language contained in such storage areas exist that are intimately related to the subject matter of the investigation; and reviewing metadata, system information, con?guration ?les, registry data, and any other information re?ecting how, when, and by whom the computer was used. . Case Document 43-1 Filed 03/19/19 Page 85 of 269 Law enforcement personnel will make reasonable efforts to search only for ?les, documents, or other electronically stored information within the categories identi?ed in Sections ILA and 11.13 of this Attachment. However, law enforcement personnel are authorized to conduct a complete review of all the E31 from seized devices or storage media if necessary to evaluate its contents and to locate all data responsive to the warrant. Additionally, review of the items described in this Attachment shall be conducted pursuant to established procedures designed to collect evidence in a manner reasonably designed to protect any attorney-client or other applicable privilege. When appropriate, the procedures shall include use of a designated ??lter team,? separate and apart from the investigative team, in order to address potemial privileges. .. .., . 2017.03.02 .. m?J?qwmnu?w-n L'c. ..- - Case Document 43-1 Filed 03/19/19 Page 86 of 269 ATTACHMENT I. Premises to he SearchedH?Subj ect Premises-2 The premises to be searched (?Subject Premises-2") are described as follows, and include electronic devices, and all locked and closed containers found therein: An office belonging to or assigned to Michael Cohen located on the 23rd ?oor of the building at 30 Rockefeller Plaza, New York, New York 101 12, inside of the o?ices of the law ?rm Squire Patton Boggs. The building located at 30 Rockefeller Plaza is a 66~floor of?ce building that spans the entire block between Sixth Avenue and Rockefeller Plaza. II. Items to Be Seized A. Evidence, Fruits, and Instrumentalities of the Subject Offenses The items to be seized from Subject Premises-2 are evidence, fruits, and instrumentalities of violations of 18 U.S.C. (conspiracy as it pertains to the other Subject Offenses), 1005 (false bank entries), 1014 (false statements to a fmancial institution), (bank fraud), and 52 U.S.C. 30116(a)(1)(A) and 30109(d)(1)(A)(1) (illegal campaign contributions) (the ?Subj ect Offenses?) described as follows: a. Evidence relating to Sterling National Bank, Melrose Credit Union, andlor taxi medallions, from January 1, 2013 to the present. b. Evidence relating to a plan, proposal, or agreement for Michael Cohen andfor entities associated with him to transfer any interest in taxi medallions, and any associated debts or liabilities, to others, including to or entities associated with him. c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling andz?or Melrose. d. Evidence relating to Essential Consultants, LLC, including any documents that indicate the nature and purpose of payments made to or from Essential Consultants or the nature of any work done by Cohen or any other individuals in connection with Essential Consultants. c. Evidence of income to Michael D. Cohen 8e: Associates, including any documents that indicate the nature and purpose of payments made to or from Michael D. Cohen Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen 35 Associates. f. Evidence relating to Cohen?s net worth, available cash and cash equivalents, and annual income, income sources, and other assets, whether held personally or through entities, including tax returns, personal financial statements, and bank records, from January 1, 2013 to the present. sf Evidence relating to agreements, loans, andfor financial transactions between Cohen and?ind? entities ?01??th by 6 suitcase 1343 (wire ?aud), and 1344 re?ne ..--.-.-. -- -- Tr. . .. rue-am ., I Case Document 43-1 Filed 03/19/19 Page 87 of 269 1, 2612 to the present. . o. Communications with others, including?andfor other accountants, relating to Cohen?s bank accounts, taxes, debts, anda?or ?nances, from January 1, 2013 to the present. p. Communications, records, documents, and other ?les re?ecting false representations to a ?nancial institution related to the intended purpose of an account or loan at that ?nancial institution; the nature of any business or entity associated with an account at a ?nancial institution; the source of ?inds ?owing into an account; or the purpose or nature of any ?nancial transactions involving that ?nancial institution, from January 1, 2013 to the present. q. Evidence of Cohen?s intent as it relates to the Subject Offenses under investigation. 3. Search and Seizure of Electronically Stored Information The items to be seized from Subject Premises-2 also include any computer devices and storage media that may contain any electronically stored information falling within the categories set forth in Section ILA of this Attachment above, including, but not limited to, any desktop and laptop computers, any Apple iPhone or other cellphone or smartphone belonging to Michael Cohen 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 88 of 269 or in his possession, portable hard drives, disk drives, thumb drives, and personal digital assistants. In lieu of seizing any such computer devices or storage media, this warrant also authorizes the copying of such devices or media for later review. The items to be seized from Subj eet Premises-2 also include: 1. Any items or records needed to access the data stored on any seized or copied computer devices or storage media, including but not limited to any physical keys, devices, or records of login credentials, passwords, private keys, or similar information. 2. Any items or records that may facilitate a forensic examination of the computer devices or storage media, including any hardware or so?ware manuals or other information concerning the satin?grammar the seized'or?cop'ied' computer deviees-or-sterage--media. r? 3. Any evidence concerning the identities or locations of those persons with access to, control over, or oumership of the seized or copied computer devices or storage media. C. Review of ESI Following seizure of any computer devices and storage media andfor the creation of forensic image copies, law enforcement personnel {which may include, in addition to law enforcement of?cers and agents, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the E31 contained therein for information responsive to the warrant. In conducting this review, law enforcement personnel may use various techniques to locate information responsive to the warrant, including, for example: 4! surveying various ?le ?directories? and the individual ?les they contain (analogous to looking at the outside of a ?le cabinet for the markings it contains and opening a drawer believed to contain pertinent ?les); 9 opening or cursorin reading the ?rst few ?pages? of such ?les in order to determine their precise contents; . scanning storage areas to discover and possibly recover recently deleted ?les or deliberately hidden ?les; a performing key word searches through all electronic storage areas to determine whether occurrences of language contained in such storage areas exist that are intimately related to the subject matter of the investigation; and reviewing metadata, system information, con?guration ?les, registry data, and any other information re?ecting how, when, and by whom the computer was used. 2017.03.02 . Case Document 43-1 Filed 03/19/19 Page 89 of 269 Law enforcement personnel will make reasonable efforts to search only for ?les, documents, or other electronically stored information within the categories identi?ed in Sections ILA and ILB of this Attachment. However, law enforcement personnel are authorized to conduct a complete review of all the E51 from seized devices or storage media if necessary to evaluate its contents and to locate all data responsive to the warrant. Additionally, review of the items described in this Attachment shall be conducted pursuant to established procedures designed to collect evidence in a manner reasonably designed to protect any attorney-client or other applicable privilege. When appropriate, the procedures shall include use of a designated ??lter team,? separate and apart from the investigative team, in order to address potential privileges. 201103.02 . . ..-. -. 'rorm??r?w'fnr?': Case Document 43-1 Filed 03/19/19 Page 90 of 269 ATTACHMENT I. Premises to he Searched?Subject Premises-3 The premises to be searched (?Subject Premises-3?) are described as follows, and include all locked and closed containers found therein: A safe deposit box located inside the TD Bank branch location at 500 Park Avenue, New York, New York 10019, marked as box it- The safe deposit box is in the name of Michael Cohen and Laura Cohen. . 11..--.1tems to Re?ned . A. Evidence, Fruits, and Instrumentaiities of the Subject Offenses The items to be seized from Subject Premises-3 are evidence, ?nits, and instrumentalities of violations of 18 1.1.8.0 371 (conspiracy as it pertains to the other Subject Offenses), 1005 (false bank entries), 1014 (false statements to a fmancial institution), 1343 [wire ?end), and 1344 (bank fraud), and 52 U.S.C. 30116(a)(1)(A) and (illegal campaign contributions) (the ?Subject Offenses?), described as follows: 1. Evidence relating to Michael Cohen?s net worth, available cash and cash equivalents, assets, and annual income, and income sources, from January 1, 2013 to the HPPQ Pni? 10 201103.02 .. Case Document 43-1 Filed 03/19/19 Page 91 of 269 9. Any portable electronic storage device. B. Search of Seized Electronic Devices Probable cause exists to search any seized electronic storage device for the items set forth in Section above. 0f E31. Following seizure of any electronic storage device, law enforcement personnel (which may include, in addition to law enforcement officers and agents, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorised to review the E51 contained therein for information responsive to the warrant. In conducting this review, law enforcement personnel may use various techniques to locate information responsive to the warrant, including, for example: a surveying various ?le ?directories? and the individual ?les they contain (analogous to looking at the outside of a ?le cabinet for the markings it contains and opening a drawer believed to contain pertinent ?les); I opening or cursorin reading the ?rst few ?pages? of such ?les in order to determine their precise contents; 1. scanning storage areas to discover and possibly recover recently deleted ?les or deliberately hidden ?les; in performing key word searches through all electronic storage areas to determine whether occurrences of language contained in such storage areas exist that are intimately related to the subj eet matter of the investigation; and - reviewing metadata, system information, con?guration ?les, registry data, and any other information re?ecting how, when, and by whom the computer was used. Law enforcement personnel will make reasonable efforts to search only for ?les, documents, or other electronically stored information within the categories identi?ed in Sections ILA and ILB of this Attachment. However, law enforcement personnel are authorized to conduct a complete review of all the E51 from seized devices if necessary to evaluate its contents and to locate all data responsive to the warrant. Additionally, review of the items described in this Attachment shall be conducted pursuant to established procedures designed to collect evidence in a manner reasonably designed to protect 1 1 201103.112 earn-r" Case Document 43-1 Filed 03/19/19 Page 92 of 269 -.- any attomey-client or other applicable privilege. When appropriate, the procedures shall include use of a designated ??lter team,? separate and apart from the investigative team, 111 order to address potential privileges. i i 12 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 93 of 269 ATTACHMENT Premises to be SearchedFSuhj eet Premises-4 The premises to be searched (?Subject Premises-4?) are described as follows, and include electronic devices, and all locked and closed containers found therein: Room 1728 located inside the Loews Regency Hotel at 540 Park Avenue, New York, New York 10065. The building is a luxury hotel located on Park Avenue and 61st Street. Subject Premises-4 is located on the 17th ?oor of the hotel. It. lea-stir Be . A. Evidence, Fruits, and Instrumentalities of the Subject Offenses The items to be seized from Subject Premises-4 are evidence, fruits, and of violations of 18 U.S.C. 371 (conspiracy, as it pertains to the other Subject Offenses), 1005 (false bank entries), 1014 (false statements to a financial institution), 1343 (wire fraud), and 1344 (bank fraud), and 52 U.S.C. 30116(a)(1)(A) and 30109(d)(1)(A)(1) (illegal campaign contributions) (the ?Subject Offenses"), described as follows: a. Evidence relating to Sterling National Bank, Melrose Credit Union, andr'or taxi medallions, from January 1, 2013 to the present. b. Evidence relating to a plan, proposal, or agreement for Michael Cohen andfor entities associated with him to transfer anv interest in taxi medallions, and any associated debts or liabilities, to others, including to 1ndfor entities associated with him. c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling andi?or Melrose. d. Evidence relating to Essential Consultants, LLC, including any documents that indicate the nature and purpose of payments made to or from Essential Consultants or the nature of any work done by Cohen or any other individuals in connection with Essential Consultants. e. Evidence of income to Michael D. Cohen 35 Associates, including any documents that indicate the nature and purpose of payments made to or ?ow. Michael D. Cohen Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen 83 Associates. f. Evidence relating to Cohen?s net worth, available cash and cash equivalents, and annual income, income sources, and other assets, whether held personally or through entities, including tax retmns, personal fmancial statements, and bank records, from January 1, 2013 to the present. g. Evidence relating to agreements, loans, andfor financial transactions between Cohen and?Mm entities controlled Iv l3 2017.03.02 . . m?n?c . .- -.-- - i --.- -- .- -.1 Case Document 431 Filed 03/19/19 Page 94 of 269 ?and any payments by _t0 Cohen, from January 1,5612 a; the present. o. Communications with others, including ?andi?or other accountants, relating to Cohen?s bank accounts, taxes, debts, andfor ?nances, from January 1, 2013 to the present. p. Communications, records, documents, and other ?les re?ecting false representations to a ?nancial institution related to the intended purpose of an account or loan at that financial institution; the nature of any business or entity associated with an account at a ?nancial institution; the source of funds ?owing into an account; or the purpose or nature of any ?nancial transactions involving that ?nancial institution, from January 1, 2013 to the present. q. Evidence of Cohen? 5 intent as it relates to the Subject Offenses under investigation. B. Search and Seizure of Electronically Stored Information The items to be seized ?om Subject Premises-4 also include any computer devices and storage media that ma).I contain any electronically stored information falling within the categories set forth in Section HA of this Attachment above, including, but not limited to, a MacBook Pro, any other desktop and laptop computers, any Apple iPhone or other cellphone or smartphone 14 cottage: . 1.: . Case Doc_ument 43-1 Filed 03/19/19 Page 95 of 269 belonging to Michael Cohen or in his possession, an Apple iPad Mini, portable hard drives, disk drives, thumb drives, and personal digital assistants. In lieu of seizing any such computer devices or storage media, this warrant also authorizes the copying of such devices or media for later review. The items to be seized ?'om Subject Premises?4 also include: 1. Any items or records needed to access the data stored on any seized or copied computer devices or storage media, including but not limited to any physical l-teys, devices, or records of login credentials, passwords, private keys, or similar information. 2. Any items or records that may facilitate a forensic examination of the computer devices or storage media, including any hardware or software manuals or other information concerning the configuration or the media.? 3. Any evidence concerning the identities or locations of those persons with access to, control over, or ownership of the seized or copied computer devices or storage media. (3. Review of Esr Following seizure of any computer devices and storage media andfor the creation of forensic image copies, law enforcement personnel (which may include, in addition to law enforcement officers and agents, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the contained therein for information responsive to the warrant. In conducting this review, law enforcement personnel may use various techniques to locate information responsive to the warrant, including, for example: 201108.92 surveying various ?le ?directories? and the individual ?les they contain (analogous to looking at the outside of a ?le cabinet for the markings it contains and opening a drawer believed to contain pertinent files); opening or cursorily reading the ?rst few ?pages? of such ?les in order to determine their precise contents; scanning storage areas to discover and possibly recover recently deleted ?les or deliberately hidden ?les; performing key word searches through all electronic storage areas to determine whether occurrences of language contained in such storage areas exist that are intimately related to the subject matter of the investigation; and reviewing metadata, system information, con?guration files, registry data, and any other information reflecting how, when, and by whom the computer was used Document 43-1 Filed 03/19/19 Page 96 of 269 Law enforcement personnel will make reasonable efforts to search only for ?les, documents, or other electronically stored information within the categories identi?ed in Sections and ?.13 of this Attachment. However, law enforcement personnel are autholized to conduct a complete review of all the E81 from seized devices or storage media if necessary to evaluate its contents and to locate all data responsive to the warrant. Additionally, review of the items described in this Attachment shall he conducted pursuant to established procedures designed to collect evidence in a manner reasonably designed to protect any attorney-client or other applicable privilege. When appropriate, the procedures shall include use of a designated ??lter team,? separate and apart from the investigative team, in order to address potential privileges. 16 201103.Case Document 43-1 Filed 03/19/19 Page 97 of 269 ATTACHMENT 1. Device Subject to Search and Seizure Subject Device-1 The device that is the subject of this search and seizure warrant (?Subject Device-l?) is described as follows: An Apple iPhone serviced by with the telephone number- During the execution of this search warrant, law enforcement personnel are authorized to depress the ?ngerprints andfor thumbprints of Michael Cohen onto the Touch ID sensor of Subj eet Device-1, or hold Subject Device-l in front of Cohen?s face to activate the Face 11) sensor, in order to gai? access to the contents of any'such by this II. Review of ESI on the Subj eet Device Law enforcement personnel (including, in addition to law enforcement of?cers and agents, and depending on the nature of the E31 and the status of the investigation and related proceedings, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the BSI contained on Subject Device-l for evidence, fruits, and instrumentalities of violations of 18 U.S.C. 371 (conspiracy as it pertains to the other Subject Offenses), 1005 (false bank entries), 1014 (false statements to a ?nancial instimtion), 1343 (wire and 1344 (bank fraud), and 52 U.S.C. and 30109(d)(1)(A)(1) (illegal campaign contributions) (the ?Subject Offenses?) described as follows: a. Evidence relating to Sterling National Bank, Melrose Credit Union, andfor taxi medallions, from January 1, 2013 to the present. b. Evidence relating to a plan, proposal, or agreement for Michael Cohen andfor entities associated with him to transfer any interest in taxi medallions, and any associated debts or liabilities, to others, including to andfor entities associated with him. c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling andfor Melrose. d. Evidence relating to Essential Consultants, LLC, including any documents or communications that indicate the nature and purpose of payments made to or from Essential consultants or the nature of any work done by Cohen or any other individuals in connection with Essential Consultants. e. Evidence of income to Michael D. Cohen Associates, including any documents or communications that indicate the natune and purpose of payments made to or from Michael D. Cohen Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen 85 Associates. 17 201?.?3.02 rpm?: f: . r? ,trrauh ,0 "w . Case Document 43-1 Filed 03/19/19 Page 98 of 269 f. Evidence relating to Cohen?s net worth, available cash and cash equivalents, and annual income, income sources, and other assets, whether held personally or through entities, including tax returns, personal ?nancial statements, and bank records, from January 1, 2013 to the present. 1-.-, Evidence relating to agreements, loans, andfor ?nancial transactions between I. Cohen and ?ancvor entities controlled by and any payments by Cohen, ??om January 1, 2012 to the present. o. Communications with others, including?andfor other accountants, relating to Cohen?s bank accounts, taxes, debts, andfor ?nances, from January 1, 2013 to the present. p. Communications, records, documents, and other ?les re?ecting false representations to a ?nancial institution related to the intended purpose of an account or loan at that ?nancial institution; the nature of any business or entity associated with an account at a ?nancial institution; the source of funds ?owing into an account; or the purpose or nature of - any ?nancial transactions involving that ?nancial institution, from January 1, 2013 to the present2017.03.02 Case 1:18-cr-00602-lel? Document 43-1 Filed 03/19/19 Page 99 of 269 If the Government determines that Subject Device-1 is no longer necessarj?,r to retrieve and preserve the data on the device, and that Subject Device-1 is not subject to seizure pursuant to Federal Rule of Criminal Procedure 4103), the Govermnent will return Subject Device?1, upon request. Additionally, review of the items described in this Attachment shall be conducted pursuant to established procedures designed to collect evidence in a manner reasonany designed to protect any attorney-client or other applicable privilege. When appropriate, the procedures shall include use of a designated ??lter team,? separate and apart from the investigative team, in order to address potential privileges. 19 2017.03.Case Docnment 43-1 Filed 03/19/19 Page 100 of 269 ATTACHMENT 1.. Device Subject to Search and Seizure Subject Device?2 The device that is the subject of this search and seizure warrant (?Subject Device-2?) is described as follows: An Apple iPhone serviced by with the telephone number- During the execution of this search warrant, law enforcement personnel are authorized to depress the fingerprints andfor thumbprints of Michael Cohen onto the Touch ID sensor of Subject or ho?subject Device?2 in front of Cohen? face to activate the Face ID sensor, in order to gain access to then-contents of any such device as authorized by this warrant? IL Re?ew of on the Subject Device Law enforcement personnel (including, in addition to law enforcement of?cers and agents, and depending on the nature of the E51 and the status of the investigation and related proceedings, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the E31 contained on Subject Device-2 for evidence, fruits, and msu'tnnentalities of violations of 3 U.S.C. 371 (conspiracy as it pertains to the other Subject Offenses), 1005 (false bank entries), 1014 (false statements to a ?nancial institution), 1343 (wire fraud), and 1344 (bank hand), and 52 U.S.C. 30116(a)(1)(A) and 30109(d)(1)(A)(l) (illegal campaign contributions) (the ?Subject Offenses?) described as follows: a. Evidence relating to Sterling National Bank, Melrose Credit Union, andfor taxi medallions, from January 1, 2013 to the present - b. Evidence relating to a plan, proposal, or agreement for Michael Cohen andi?or entities associated with him to transfer any interest in taxi medallions, and any associated debts or liabilities, to others, including to andfor entities associated with him. c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling andfor Melrose. d. Evidence relating to Essential Consultants, LLC, including any documents or communications that indicate the nature and purpose of payments made to or from Essential Consultants or the nature of any vvorlt done by Cohen or any other individuals in connection with Essential Consultants. e. Evidence of income to Michael D. Cohen 35 Associates, including any documents or communications that indicate the nature and purpose of payments made to or from Michael D. Cohen Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen Associates. 20 201103.02 . an mus?w- . - Case Document 43-1 Filed 03/19/19 Page 101 of 269 f. Evidence relating to Cohen?s net worth, available cash and cash equivalents, and annual income, income sources, and other assets, whether held personally or through entities, including tax returns, personal t'mancial statements, and bank records, ?'orn January 1, 2013 to the present. a. Evidence relatina to agreements, loans, andfor ?nancial transactions between andfor entities controlled by and any payments by Cohen, from January Cohen and 1, IO 1311336111,. UUJlLlIUlluUll leUL ?115 lELiLlLl mm unnuycusu o. Communications with others, including andfor other accountants, relating to Cohen?s bank accounts, taxes, debts, andr?or ?nances, from January 1, 2013 to the present. p. Communications, records, documents, and other ?les re?ecting false representations to a ?nancial institution related to the intended purpose of an account or loan at that ?nancial institution; the nature of any business or entity associated with an account at a financial institution; the source of funds ?owing into an account; or the purpose or nature of any ?nancial transactions involving that financial institution, from January 1, 2013 to the present, 2 1 201?.?8.?2 .- 1. Case Document 43-1 Filed 03/19/19 Page 102 of 269 es that Subject Device-2 is no longer necessary to retrieve and ubject Device-2 is not subject to seizure pursuant to the Goveniment will return Subject Device-2, upon If the Government determin preserve the data on the device, and that 3 Federal Rule of Criminal Procedure 41(c), request. Additionally, review of the items described in this Attachment shall be conducted pursuant nably designed to protect to established procedures designed to collect evidence in a manner reaso any attorney?client or other applicable privilege. 1When appropriate, the procedures shall include use of a designated ?filter team,? separate and apart from the investigative team, in order to address potential privileges. 22; 2011mm .- :Case Document 43-1 Filed 03/19/19 Page 103 of 269 I AD 106 (Rev. cores) Application for a Search Warrant UNITED STATES DISTRICT COURT for the Southern District of New York In the Matter of the Search of deserih re be search {origg??' the addrefs) Case N0. Four Premises and Two Electronic Devices, See I Attached Af?davit and Riders APPLICATION FOR A SEARCH WARRANT I, a federal law enforcement of?cer or an attorney,r for the government, request a search warrant and state under . -penalty. of perjury that Ihayereason to believe thatonthe following personer property {ideas}? the person or describe the Dir See Attached Af?davit and Riders located in the Southern District of New York there is now concealed (Merino; the person or describe the proper-at to be seized): PLEASE SEE ATTACHED AFFIDAVIT AND RIDERS. The basis for the search under Fed. R. Grim. P. 41(0) is (check one or more): lifevidence of a crime; if contraband, fruits of crime, or other items illegally possessed; Efproperty designed for use, intended for use, or used in committing a crime; a person to be arrested or a person who is unlawfully restrained. The search is related to a violation of: Code Section Ojf?anse Deserrpn'on 13 U.S.C, 371, 1005, 1014, Conspiracy, false bank entries, also statements to a ?nancial institution, 1343 and 1344, and wire fraud, bank fraud, and 52 use 30116 and some illegal campaign contributions The application is based on these facts: PLEASE SEE ATTACHED AFFIDAVIT AND RIDER. Continued on the attached sheet. CI Delayed notice of days (give exact ending date if more than 3U days: is requested under 18 3103a, the basis of which is set forth on the attached sheet. Printed name and ride Sworn to before me and signed in my presence, Date: 04i08i2018 P1323 . Jddge 's signature Cit)r and state: \{cr K, 7/ Hon. Henry B. Pitinan. U.S. Magistrate Judge I I Printed name and title .. Case Document 43-1 Filed 03/19/19 Page 104 of 269 ?Tl UNITED STATES DISTRICT COURT SOUTHERN DISTRICT OF NEW YORK . . . the Matter of the Application of the United To BE men UNDER SEAL States of America for a Search and Seizure i Warrant for the Premises Known and DeSeribed 5 Agent A?'idavit in Support of as (1) 502. Park Avenue, ?\1ew Application for Search and Seizure York, New York 10022, (2) Michael Cohen?s i Warrant Of?ce at 30 Rockefeller Plaza, 23rd Floor, New 5 York, New York 10112, (3) Safe Deposit Box Located at the TD Bank Branch at 500 Park 3 New York, New York 10019, and (4) teem Regency -- - . 1723, New York, New York 10065, and Any Closed Contained Therein, and the Electronic Devices Known and Described as an Apple iPhone with Phone Number _and (2) an Apple iPhoue with Phone Number . Reference No. 2018R00127 SOUTHERN DISTRICT OF NEW YORK) 35.: _Speeia1 Agent, Federal Bureau of Investigation, being duly deposes and says: I. Introduction A. Af?ant 2. I make this Af?davit in support of an application pursuant to Rule 41 of the Federal Rules of Criminal Procedure for a Warrant to search the premises speci?ed below (the ?Subject 2 2017.03.02 1 Case Document 43-1 Filed 03/19/19 Page 105 of 269 Premises?) and the electronic devices speci?ed below (the ?Subject Devices?) for, and to seize, the items and information described in Attachments A, B, C, D, and F. This affidavit is based upon my personal knowledge; my review of documents and other evidence; my conversations with other law enforcement personnel; and my training, experience and advice received concerning the use of electronic devices in criminal activity and the forensic analysis of electronically stored information Because this af?davit is being submitted for the limited purpose of ?e?stabl?i?shing probable cause, it'doesnot include all the facts-that I have learned during-the-course: of my investigation. Where the contents of documents and the actions, statements, and conversations of others are reported herein, they are reported in substance and in part, except where otherwise indicated. B. The Subject Premises and Subject Devices 3. Subject Premises~1, Subject Premises-2, Subject Premises-3 and Subject Premises? 4 (collectively, the ?Subject Premises?) are particularly described as: a. Subject Premises-1 is Apartment-located inside the building at 502 Park Avenue, New York, New York 10022. The building located at 502 Park Avenue is a '32? floor brick residential building. Subject Premises-l is located on the-?oor of the building. Based on my review of New York City property records, I have learned that Michael Cohen and Laura Cohen own Subject Additionally, as described below, Subject Premises-l is Cohen?s full?time residence. b. Subject Premises-2 is an office located on the 23rd ?oor of the building at 30 Rockefeller Plaza, New York, New York 10112. The building located at 30 Rockefeller Plaza 1 As noted in?n, I have learned that on or about October 28, 2015, Cohen transferred Subject Premises-1 into a trust. 3 2017.08.02 . HF Case Document 43-1 Filed 03/19/19 Page 106 of 269 is a of?ce building that spans the entire block between Sixth Avenue and Rockefeller Plaza. Subject Premises-2 is located on the 23rd ?oor of the building inside of the of?ces of the law firm Squire Patton Boggs. The of?ce is assigned to Michael Cohen. As described below, Michael Cohen works and conducts meetings at Subject Premises-2. c. Subject l?remises-El is a safety deposit box located inside the TD Bank branch location at 500 Park Avenue, New York, New York 10019. Based on my review of records ?maintained by TBBanquhave learned that-the safety-deposit box is approximately ?ve inches by- - ten inches in size, and is marked as box - The safety deposit box is in the name of Michael Cohen and Laura Cohen. d. Subject Premises~4 is Room 1728 located inside the Loews Regency Hotel at 540 Park Avenue, New York, New York 10065. The building is a luxury hotel located on Park Avenue and 6 lat Street. Subject Premises?4 is located on the 17th ?oor of the hotel. Based on my review of emails obtained pursuant to search warrants described below, I have learned that on or about January 5, 2018, Cohen received an email from an employee of Loews Regency, which included a price quote for a long-term stay suite based on a three-month stay from January 8 to April 8, On or about January 29, 2013, Cohen sentan email to a Loews Regency employee, stating, in pertinent part: just spoke to my wife and she has scheduled the move for Thursday. Please mark down that we will be taking possession on Thursday, February lst.? Based on my review of cell phone location data, I have learned that, over the past 24 hours, two cellular phones used by Cohen have been located in the vicinity of Subject Premises-4- In particular, on or about 2 Although the quoted price contemplated a three?month stay from January 3 to April 3, it appears that Cohen did not move in until February 1, and as of today, April 3, cellphone location information demonstrates that Cohen?s cellular phones are in still in the vicinity of Subject Premises?4. 4 2m 1113.02 Case Document 43-1 Filed 03/19/19 Page 107 of 269 April 8, 2013, law enforcement agents using a ?trigger?sh? device identi?ed Room 1728 as the room within the hotel in which the Subject Devices are most likely present.3 e- Therefore, I belieVe that Cohen is temporarily residing in Subject Premises-4- 4. Subject Device?1 and Subject Device-2 (collectively, the ?Subject Devices? are particularly described as: Subject Deviceil' is an Apple iPhone serviced by with-the?telephone-number- Based on my review of records maintained by 1 have learned that Subject Device?1 is subscribed to Michael Cohen. Based on my review of cellphone location information maintained by I have learned that Subject Device-l is presently located in the Southern District of New York. b. Subject Device?2 is an Apple iPhone serviced by with the telephone number _Based on my review of records maintained by I have learned that Subject Device?2 is subscribed to Michael Cohen. Based on my review of cellphone location information maintained by I have learned that Subject Device-2 is presently located in the Southern District of New York. c. Based on my training, experience, and research, and from consulting the manufacturer?s and service providers? advertisements and product technical speci?cations available online, I know that the Subject Devices have capabilities that allow them to, among other things: make and receive telephone calls; save and store contact hiformation; send and receive 3 Based on my conversations with these agents, I understand that it is also possible that the Subject Devices are one ?oor below, in Room 1628. However, as noted, I understand that Cohen received a price quote for a long-term stay suite and is residing there with his family. Based on my conversations with FBI agents conducting surveillance, I understand that Room 1723 appears to be a suite, whereas Room 1628 appears to be a standard room. 5 2011mm Case Document 43-1 Filed 03/19/19 Page 108 of 269 emails and text messages; download and run mobile telephone applications, including call and messaging application such as WhatsApp, Signal, and Dust; take, send, and receive pictures and videos; save and store notes and passwords; and store documents. C. The Subject Offenses S. For the reasons detailed below, I believe that there is probable cause to believe that the Subject Premises and Subject Devices contain evidence, fruits, and of '??violations of- 1014 (false?statementsto a ?nancial- institution), 1343 (wire fraud), and 1344 (bank fraud) (collectively, the ?Bank Fraud Offenses?), 52 U.S.C. and 3DlO9(d)(1)(A)(l) (illegal campaign contributions) (the ?Campaign Finance Offenses?), and 13 U.S.C. 371 (conspiracy as it pertains to the other Subject Offenses) (collectively, the ?Subject D. Prior Applications 6. The FBI and the United States Attorney?s Of?ce for the Southern District of New York have been investigating several courses of criminal conduct by Michael Cohen. Cohen is an attorney who currently holds himself out as the personal attorney for President Donald Trump, and who previously served for over a decade as an executive in the Trump Organization, an international conglomerate with real estate and other holdings. 7. In connection with an investigation then being conducted by the Of?ce of the Special Counsel the FBI sought and obtained from the Honorable Beryl A. Howell, Chief United States District Judge for the District of Columbia, three search warrants for emails and other content information associated with two email accounts used by Cohen, and one search warrant for stored content associated with an iCloud account used by Cohen. Speci?cally: Case Document 43-1 Filed 03/19/19 Page 109 of 269 a. On or about July 18, 201?, the FBI sought and obtained a search warrant for emails in the account -@g1nail.corn (the ?Cohen Gmail Account?) sent or received between January 1, 2016 and July 18, 2017 (the ?First Cohen Gmail Warrant?). b. On or about August 8, 2.017, the FBI sought and obtained a search warrant for content stored in the iCloud account associated with Apple ID _@gtnail.com (the ?Cohen iCloud Accoun and the ?Cohen iCloud Warrant?). c. Bnror about-November -13 :20 the FBI sought? and? obtained?a?search warrant for emails in the Cohen Gmail Account sent or received between June 1, 2015 and Novamber 13, 2017 (the ?Second Cohen Gmail Warrant?). d. On or about November 13, 2017, the FBI sought and obtained a search warrant for emails in the account (the ?Cohen Account?) sent or received between the opening of the Cohen Account? and November 13, 2017 (the ?First Cohen Warrant?)- 8. The SCD has since t'efen'ed certain aspects of its investigation into Cohen to the USAO, which is working with the New York Field Of?ce. As part of that referral, on or about February 8, 2018, the 300 provided the USAO with all nonuprivileged emails and other content information obtained pursuant to the First Cohen Grnail Warrant, Second Cohen Gmail Warrant, and Cohen Warrant. On or about March 7, 2013, the SCO provided the USAO 4 Based on my review of this warrant and the af?davit in support of it, I lmow that the warrant did not speci?z a time period, but the af?davit indicated that, pursuant to court order, the service provider had provided non-content information for the Cohen Account that indicated that the account contained emails from the approximate period of March 2017 through the date of the warrant. I - Case Document 43-1 Filed 03/19/19 Page 110 of 269 with all non-privileged content obtained pursuant to the Cohen iCloud Warrant.S A ?lter team working with the SCO had previously reviewed the content produced pursuant to these warrants for privilege. 9. On or about February 28, 2013, the USAO sought and obtained search warrants for emails in the Cohen Ganail Account and the Cohen Account, among other accounts, sent or received between November 14, 2017 and February 28, 2018 (the ?Third Cohen Gmail Warrant? and the The?conteut produced-pursuant-ito these-warrantsis? subject to an ongoing review for privilege by an SDNY ?lter tit-am.6 10. The emails search warrants described above are referred to collectively as the ?Cohen Email Warrants.? 11. On or about April 7, 2013, the USAO and FBI sought and obtained a warrant for prospective and historical cellphone location hrformation for Subject Device-l and Subject Device-2. 011 or about April 8, 2018, the USAC) and FBI sought and obtained authority to employ an electronic technique, commonly lmown as a ?trigger?sh,? to determine the location of Subj eet Device-l and Subject Device-2. I II. Probable Cause A. Overview 12.. The United States Attorney?s Of?ce for the Southern District of New York and FBI are investigating, among other things, schemes by Target Subject Michael Cohen to de?'aud multiple banks from in or about 2016 up to and including the present, and to make an illegal 5 The 500 had previously provided a subset of this non?privileged content on or about February 2, 2013- ?5 On or about February 28. 2013 and April 2018, the and FBI sought and obtained Rule 41 search Warrants authorizing the search of emails and content obtained pursuant to previously I issued warrants for additional subject offenses. 8 . snirnacz Case Document 43-1 Filed 03/19/19 Page 111 of 269 campaign contribution in October 2016 to then?presidential candidate Donald As noted, Cohen is an attorney who currently holds himself out as the personal attorney for President Donald Tr'mnp, and who previously served for over a decade as an executive in the Trumn Organization, an international conglomerate with real estate and other holdings. 13. The investigation has revealed that Cohen has made af?rmative ndsrepresentations in and omitted material information from ?nancial statements and other disclosures that Cohen "provided?Wmultiple' 'banltrin?connection with?a?tramaotion of? approximately $22 million in debt he owed on taxi medallion loans item the banks. As set forth in detail below, in these ?nancial statements, and in his oral and other written statements to these banks, Cohen appears to have intentionally misrepresented his ability to pay cash by failing to disclose cash he began receiving in 2017 from new consulting work; (ii) signi?cantly understated his total holdings of cash and cash equivalents; failed to disclose tens of thousands of dollars he received in interest income, and (iv) failed to inform the banks from which he was seeking debt relief that he had agreed to make a $3.8 million cash payment to a third party, - _in connection with _icquisition of the taxi medallions securing Cohen?s debt. By making these misrepresentations and material omissions, Cohen avoided making payments on his loans, and attempted to ?'audulently induce the banks to relieve him of certain repayment obligations and personal guarantees that Cohen and his wife had signed. 2017.08.02 Case Document 43-1 Filed 03/19/19 Page 112 of 269 15. Based on my review of emails obtained from the Cohen Email Warrants, mformation obtained pursuant to the iCloud Warrant, and documents produced pursuant to subpoenas, as well as my review of public sources, I have learned that Cohen has used the Subject ??Premises tote) mine-documents related-to-the Cohen-ef?his?tani? medallion debt, receive documents andlor conduct meetings related to his consulting work, receive documents andfor conduct meetings relating to his ?nances and assets, some of which, as noted above and as detailed ?n'ther herein, he has concealed from the banks in connection with the. re?nancing of his taxi medallion debt, - and house and operate electronic devices that were utilized in connection with, among other things, the taxi medallion transaction, Cohen?s consulting work, and 1? Speci?cally, as described below, Subject Prennses-l liker contains evidence concerning Cohen?s taxi medallion loans, his negotiations widt banks, his personal ?nances, his consulting work, his tax returns, and?, as well as electronic devices containing such evidence, all of which constitute or contain evidence of the Subject Offenses. Additionally, as described below, Subject Premisesuz liker contains evidence relating to Cohen?s consulting work, his ?nances, and? as well as electronic devices containing such evidence. Subject Premises?3, as described below, liker contains evidence relating to Cohen?s assets and ?nances, including assets that. may not have been disclosed to banks in connection udth the re?nancing of Cohen?s taxi medallion debt or documents relating to such assets, and documents or evidence related to Subject Premises?4 lilter contains electronic 1 t) 2017.03.02 ?r Case Document 43-1 Filed 03/19/19 Page 113 of 269 devices, including Subject Devicerl and Subject Device-2, which themselves contain evidence of the Subject Offenses, including concerning Cohen?s taxi medallion loans, his negotiations with banks, his personal ?nances, his consulting work, his tax and Accordingly, and as set forth in more detail below, there is probable cause to believe that the Subject Premises and Subject Devices will include evidence of the Subject Offenses. B. Probable Cause Regarding Subjects? Commission of the Subject Offenses? Cohen ?s Statements to Sterling National Bank 16. As set forth in detail below, in 2014, Cohen, through LLCs controlled by him and his wife, Laura Cohen, entered into a series of loans from Sterling National Bank (?Sterling?) and the Melrose Credit Union (?Meltose?), secured by taxi medallions, for approximately $20 million. Though entered into by LLCs, the loans were also secured by personal guarantees in the names of both Cohen and his wife. Over time, as the taxi industry weakened and the medallions lost value, Cohen sought to renegotiate the terms of these loans andfor relieve himself ?'om their obligations, including the personal guarantees. As part of that effort, Cohen made a series of representations to Sterling and Melrose about his net worth, assets, available cash and income, among other things. Speci?cally, based on my review of records maintained by Sterling and Melrose, and public sources concerning the taxi industry and the value of taxi medallions, as well as my participation in interviews with a Sterling executive vice-president (the ?Sterling Employee-l?) and two other 7 1n the following recitation of probable cause, I ?'equently refer to phone calls or text messages involving Cohen. The text messages described herein as sent or received by Cohen were all sent or received from the telephone numbers associated with Subject Device?1 or Subject Device-2. The vast majority of the phone calls described herein made or received by Cohen were made or received by the telephone numbers associated with Subject Device-l or Subject Device-2, although in certain limited instances Cohen used a landline or other phone. 11 201mm: Case Document 43-1 Filed 03/19/19 Page 114 of 269 Sterling employees (?Sterling Employee-2? and ?Sterling Employee?3?), I have learned, among other things, the following: a. Taxi medallions are small metal plaques af?xed to taxis. Without a medallion, it is illegal to operate a taxi in cities with medallion systems, such as New York City. Cohen and his wife own multiple LLCs that collectively own 32 taxi medallions (each LLC oWns two medallions).E Cohen?s purchase of these New York taxi medallions was originally ?nanced by loans from Capital One bank, for which-the-medal lions- sery ed- as? collateral.? Gohen?was-not?a-taxi operator, and leased his medallions to a third party. That third party made payments to Cohen, who in turn used some of those proceeds to malte his loan payments to Capital One. b. In early 2014, Cohen became a customer of Sterling when he sought to re?nance a mortgage on a rental property that he owned. In or around April 2014, Cohen raised with Sterling the prospect of referencing his taxi medallion loans, which were then at Capital One. By in or about September 2014, Cohen began negotiating a lending transaction with Sterling that would allow Cohen to pay off his loans at Capital One and borrow more money from the then-increase in value of the medallions. According to Sterling Employee-1, in 2014, prior to the recent upheaval in the taxi indusuyeas a result of the emergence of ride-sharing services, such as ?ber?{anti medallion loans were wowed by banks and investors as safe, short term credits, as the market value of taxi medallions was consistently rising. Consequently, taxi medallion loans??like the loans held by Cohen??were frequently re?nanced at increasing amounts as the value of the medallions rose. According to Sterling Employee-1, borrowers typically cashed out the increase in the loan amount 3 One of these companies, Mad Dog Cab Corp, was jointly owned by Sondra Cohen, who I believe is Cohen?s mother. 12 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 115 of 269 and used the additional funds for other purposes. Cohen appears to have followed this approach in 2014, when he agreed to re?nance his medallion loans for approximately $22 million, which? according to letters from Capital One in Sterling?s ?les?was greater than his previous debt at Capital One Bank ($21 million, of which $14.6 million Was a line of credit to Cohen). This allowed Cohen to cash out the proceeds from the transaction. c. Based on my review of records maintained by Sterling, I have learned that on or ??'??abontDecember S, 20 taxi-medallion-ELES entered?into-loan-agreements- and promissory notes with Sterling for the principal sum of $1,375,000, with repayment due on December 8, 2016. Each loan was signed by Michael or Laura Cohen, depending on who was the sole shareholder of the LLC. The address listed tor each of the LLCs was the address for Subject Premises-1 . The loans were also each secured by a security agreement, dated the same day, making the medallions collateral for the notes. To give Sterling additional security, Michael and Laura Cohen signed personal guarantees and confessions of judgment, giving Sterling the right to pursue collection against the Cohens? personal assets were their corporations to default under the loan agreements. The personal guaranty agreements stated that the LLCs had of?ces at the address for Subject Premises-1, and contained a notice provision that stated that any notices required by the agreements should be mailed to Subject Premises-l. in total, Sterling agreed to lend approximately $22 million to the Cohens' companies. d. Pursuant to participation agreements, Sterling transferred 45 percent of Cohen?s taxi medallion debt to l?vlelrose.9 9 Melrose, which had a business principally focused on taxi medallion loans, is now in conservatorship by the National Credit Union Administration 3 2011mm T-W - - Case Document 43-1 Filed 03/19/19 Page 116 of 269 e. In evaluating Cohen?s requested re?nancing of the taxi medallions, Sterling (and Melrose, consistent with its participation in the deal) conducted due diligence. At Sterling?s request, Cohen provided Sterling with a statement of ?nancial condition, dated August 1, 2014 (the ?August 2014 Financial Statement?), which indicated that Cohen had $100,740,000 in total assets, $23,550,000 in total liabilities, and a net worth of From my review of a Sterling credit memorandum, dated September 29, 2014, I know that Sterling viewed the transaction-favorablylicense, from-themedallions?were? - projected to be positive, the value of the collateral (as estimated by Sterling) exceeded $42 million, and the net worth of Cohen?who was the direct obligor under the guarantee agreements?was over $77 million. An internal Sterling credit and risk rating analysis report, dated October 20, 2014, recommended approval of the loans for substantially the same reasons. f. Based on my review of records maintained by Sterling and public sources, I have learned that over time, the collateral hacking Cohen?s loans (taxi medallions) lessened in value due to the rise in ride-sharing companies. Additionally, Cohen began falling behind on loan payments to Sterling and Melrose. llcnow from records maintained by Sterling and an interview with Sterlmg Employee-2 that, beginning in or around September 2015, Cohen told Sterling, in sum and substance, that the individual leasing Cohen?s medallions had fallen behind in making payments to Cohen, and that as a result, the cash ?ow from his taxi medallions had been reduced, leaving him with a shortfall of approximately $16,000 each month. For instance, I have reviewed an email from Sterling Employee?2, dated September 9, 2015, summarizing a call with Cohen?? which according to the email and toll records for Cohen?s cellphone occurred on September 3, 1? Cohen subsequently provided Sterling with a revised statement of ?nancial condition, also dated August 1, 2014, which reported assets of $99,420,000, total liabilities of 50,000, and a net worth of$75,370,000. 14 201103-112 Case Document 43-1 Filed 03/19/19 Page 117 of 269 2015-?during which Cohen told Sterling Employee-2, in sum and substance, about his cash flow problems and a shortfall of approximately $16,000. In that same email, Sterling Employee?2 commented that despite Cohen?s statements, his personal ?nancial information ?indicate[d] a strong ability to make up the difference in payments.? Cohen, however, according to Sterling Employee-2, pushed the bank for a reduction in Cohen?s payments. g. From my review of records maintained by Sterling and my participation in an interview with" Sterling and Sterling?Employee-E?spoke again on September 28, 2015, and that during the call Cohen stated, in sum and substance, that the individual to whom Cohen leases the medallions had again reduced payments to Cohen. I know from my review of. records maintained by Sterling that between in or about September 2015 and November ZOIS, Sterling raised the possibility?both internally and with Cohen?of Cohen posting his real estate holdings, personal residence, or some other collateral as additional security for the banks.?1 According to these records, however, Cohen resisted these requests. From my review of loan documents and records maintained by Sterling, I know that in or about November 2015, as a result of Cohen?s representation that he was not earning suf?cient returns on his medallions to covar interest payments, Sterling and Melrose agreed to amend their loans with Cohen by, among other things, reducing the interest rate Cohen paid to Melrose and extending the loan maturity date to December 8, 2017. h. I know ??om interviews with Sterling Employee-] and Sterling Employee-2, as well as emails I have reviewed, that in or about October 2016, Cohen told Sterling Employee?1 that Cohen had a potential buyer of his taxi medallions, named ?who would agree to Based on my review of property records, I know that on or about October 2.8, 2015, around the time period when Sterling raised the possibility of Cohen posting his personal residence* Subject Premises?1??as collateral, Cohen transferred Subject Premises?1 into a trust. 15 saunas; F. Case Document 43-1 Filed 03/19/19 Page 118 of 269 assume Cohen?s debt with Sterling and Maltese. Based on my review of records maintained by Sterling, as well as the interviews with Sterling Employee?l and Sterling Employee-2 referenced above, I know that by or before October 2016, Cohen had entered into negotiations to sell his sixteen corporate taxi medallion entities to_, I for the balance of the loans, which at the time was $21,376,000. I know from my review of records maintained by Sterling, and my participation in an interview with Sterling Employee-2, that as a _??cnndition?of the transfer-of- the-medall-iondoansr?and because Sterling-wasmnfamiliaI-with- _-Sterling requested that Cohen make a substantial principal payment on the loan, of approximately one million dollars, prior to the transfer. Cohen rejected this request initially. But i on or about January 31, 2017, Cohen told Sterling Employee-l, in sum and substance, that he would make a one million dollar principal reduction payment in order to more forward with the medallion transfer deal with Indeed, in an email sent by Cohen to Sterling Employee-2 on or about February 22, 2017, Cohen con?rmed that he ?agreed to pay down 1 million from the loan amount" i. Pursuant to the participation agreements between Sterling and Melrose, Sterling was required to secure Melrose?s agreement to participate in the transfer of the taxi medallion debt ?nm Cohen to On or about April 17, 2017, Sterling sent a memorandum to Melrose summarizing the terms of the proposed transaction, and noting the requirement that Melrose agree to the terms. On or about May 2, 2017, Sterling Employee?1 told that Meh'ose had agreed to the deal in principle, and that Sterling would be sending the parties a term sheet shortly. j. In order for the banks to conduct diligence and evaluate the proposed transaction fully, they requested ?nancial information from the parties. On or about June 7, 2017, Sterling l6 201103.02 Case Document 43-1 Filed 03/19/19 Page 119 of 269 Employee-l emailed Cohen to request an ?updated personal ?nancial statement,? completed jointly with Cohen?s wife, and Cohen's most recent federal income tax return. 011 or about June 8, 2017, Cohen emailed Sterling Employee-l a Sterling personal ?nancial statement form that had been ?lled out by hand, which referenced a statement of ?nancial condition, dated May 1, 2017 (the ?May 2017 Financial Statement?) that was also attached. The May 2017 Financial Statement included a cotter letter from Cohen?s accountant, stating, in sum and substance, that "the?information in? the not- cen?-rmed?its?aecuraey or completeness. The May 2017 Financial Statement stated that Cohen had total assets of $41,955,000, total liabilities of $39,130,000, and a net Worth of $2,325,000. The May 2017 Financial Statement indicated that Cohen?s assets were comprised of $1,250,000 in cash, $26,155,000 in closely held companies (such as the taxi medallion entities and his real estate holdings), $3,200,000 in real estate investrnents, and his $11,000,000 personal residence.12 Based on. my review of reports of law enforcement interviews of Sterling Employee-1, I have learned that Sterling Employee?1 revieWed the May 2017 inancial Statement with Cohen to, among other things, verify its accuracy, and Sterling Employee-1 asked Cohen about speci?c line items on the ?nancial statement, including the cash amount, value of medallions, and total liabilities. Cohen stated to Sterling Employee-1, in sum and substance, that the May 2017 Financial Statement was accurate. 1. On or about-August 16, 201?, Sterling Employee?l emailed Cohen and A- attaching a non?binding term sheet memorializing the potential transaction between 13 Based on my review of Cohen?s ?nancial statements, I know that the precipitous decline in assets from his 2014 ?nancial statement to his 2017 financial statements can be explained primarily by reported depreciation in the 1value of Cohen?s real estate assets and medallion investments. 17 201103.02 I Case Document 43-1 Filed 03/19/19 Page 120 of 269 Sterling, Melrose, Cohen, and The term sheet included a cover letter addressed to Cohen at Subject Premises-1. The parties negotiated the provisions of the term sheet and, on or about September 5, 2017, Sterling Employee-1 sent ,_md Cohen a copy of the executed term sheet. According to the term sheen?would borrow $20,000,000 from Sterling and Melrose, to be secured by the medallions that -vas to acquire ?'om Cohen. ?fth?; 1'3 i1} Pl'incipal'l'wmch? is what would remain after the $20,000,000 payment on the outstanding loan balance) would be repaid by Cohen and the two banks, with Cohen paying fi?y percent and the banks dividing the remaining half of the balance. Based on my review of an internal Sterling credit memorandum, dated October 4, 2017, the panties reached a preliminary agreement that Cohen would pay $632,956 of the remaining $1,265,912 principal loan balance, and Sterling and Melrose would absorb $357216? and $235,789, respectively, in the form of charge-offs. According to Sterling Employee- 1, Sterling was willing to divide the repayment of the outstanding principal balance?despite its prior insistence that Cohen make a principal pay-down of at least one million dollars?because Cohen represented on a telephone call with Sterling Employeel in sum and substance, that he had insuf?cient liquidity to pay the full outstanding principal balance. As part of the agreement, Sterling and Melrose also agreed to relieve Cohen and his wife of the personal guarantms that they made on behalf of the LLCs. Thus, after completing the '-transaction, Cohen would no longer have had any outstanding obligations to Sterling or Meh'ose. 11. Based on my review of emails sent by Sterling employees, I have learned that because the transaction hemeen the parties was subject to full credit underwriting by Sterling and Melrose (as Well as Melrose?s regulators at NCUA), in August and September 2017, Sterling 18 2017.03.02 - - Case Document 43-1 Filed 03/19/19 Page 121 of 269 required and requested additional ?nancial statements and tax returns for Cohen and for its credit underwriting process. In response to Sterling?s requests, on or about September 25, 2017, Cohen emailed Sterling Employee-2 a copy of his 2016 tax return. The tax return listed Cohen?s mailing address as Subject Premises-1. Additionally, on or about October 5, 2017, Cohen re?sent Sterling Employee?2 a copy of his May 2.017 Financial Statement. A, day later, on October 6, 2017, Cohen emailed Sterling Employee-2 a statement of ?nancial condition, dated September Statemen 0. Like the May 2017 Financial Statement, the September 2017 Financial Statement included a cover letter from-, Cohen?s accountant, stating, in sum and substance, that the information in the statement came from Cohen, and that -1ad not confirmed its accuracy or completeness. The September 2017 Financial Statement stated that Cohen had total assets of $33,435 0,000, total liabilities of $45,630,000, and a negative net worth of $121,200,000.13 Notably, unlike Cohen?s May 2017 Financial Statement, the September 2017 Financial Statement represented to Sterling that Cohen had a negative net worth. The September 2017 Financial Statement indicated that Cohen?s assets were comprised of $1,250,000 in cash, $17,630,000 in closely held companies (including the taxi medallion entities and his real estate holdings ,14 $3,200,000 in real estate investments, and his $11,000,000 personal residence (which, for the ?rst 13 Based on my review of Cohen?s ?nancial statements, 1 know that this ?trther decline in assets can be explained primarin by reported depreciation in the value of Cohen?s real estate assets and medallion investments. 14 Notably, the September 2017 Financial Statement valued each of Cohen?s thirty-two New York taxi medallions at approximately $180,187.5 0, which was considerably less than the $650,000 valuation ascribed to each medallion in the sheet. 1 9 an 7.08.02 Case Document 43-1 Filed 03/19/19 Page 122 of 269 time, be indicated was held by a trust .15 The September 20! 7 Financial Statement included assets and liabilities not held in Cohen?s name, such as various entities associated with his taxi medallions and some of his real estate investment entities. p. From my participation in an interview with Sterling Employee-2, and my review of records maintained by Sterling, I have also learned that around the time Cohen provided Sterling with these ?nancial statements?La, in or around September ZEN?Cohen stopped paying payments on his taxi-medallion-loans- altogether. According to Sterling-Employee- 2, Cohen informed Sterling, in sum and substance, that he had insu?cient funds to pay the principal and interest payments on his medallion loans. By in or about December 2017, Sterling and Melrose had not been paid approximately $276,937.92 in principal and interest payments on the medallion loans. Based on Cohen?s ?nancial condition as conveyed in the September 201'? Financial Statehtent, and his delinquency in making payments to Sterling, among other things, the bank?s credit underwriting committee determined (and memorialized in a December 2017 memorandum) that the Cohen-?- transaction was favorable for the bank - that is, that-would be a better borrower than Cohen. q. 011 or about December 26, 201?, Sterling sent Cohen a demand letter requesting immediate receipt of past?due loan payments. The demand letter was addressed to Cohen at Subject Premises-l. On December 2.9, 2017, Sterling sent Cohen a letter stating that he was in default under the loans between Sterling and Cohen?s medallion corporations. The notice of default was addressed to Cohen at Subject Premises-1 . Cohen did not make an immediate payment on the loans, but instead sent an e-mail to Sterling Employee-1 on or about January 24, 2018, 15 Based on my review of property records maintained by the City of New York, and my participation in an interview with-I know that in 2015, Cohen transferred his residence to a trust. He did not disclose that transaction to -or Sterling until in or about September 2017. 20 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 123 of 269 stating that during the closing of the Cohen- transaction, Cohen would ?bring all payments up to date as well as deposit the payoff differential.? Cohen also requested by email on January 24, 2018, that at the closing of the Cohen-?- transaction, Sterling provide a letter stating that all of Cohen?s debts have been satis?ed and that Cohen?s personal guarantees of the medallion loans had been terminated. r. The Comm-transaction, however, did not close. On or about January attorney emailed attorneys?for?Sterling and?stated-that--?at this?tin: there is no deal with Michael Cohen. Some of the numbers have changed and we are not prepared to go forWard.? 5. Based on my participation in the interview with Sterling Employee?2 and my review of records maintained by Sterling, I know that after the Cohen-teal fell apart, Sterling assigned Cohen?s loans to Sterling Employee-3, who specializes in collecting on defaulting loans. From my participation in an interview with Sterling Employee-3, my review of telephone call notes taken by Sterling Employee?3, and my review of telephone records, I know that Sterling Employee?3 spoke several times to Cohen on or about January 30, 2013 about paying down andfor restructuring Cohen?s outstanding taxi medallion loans. On the calls, which in total lasted more than an hour, Cohen stated in sum and substance that he did not have more than $1,250,000 to pay toward the medallion loans. 0n the call, in the course of reviewing the failed Cohen-- transactiom Sterling Employee-3 questioned Cohen about the price -vas to have paid for each medallion, and whether there was a side agreement between Cohen and Cohen denied that there was any side agreement with t. On or about January 31, 2018, Cohen emailed Sterling Employee-3 and proposed paying $500,000 to bring the loans current and $750,000 to bring the principal balance to 21 2017.03.02 ~11 Case Document 43-1 Filed 03/19/19 Page 124 of 269 $20,500,000. Cohen also suggested revised interest payment amounts. The signature block on the email indicated that Cohen?s address was the address for Subject Premises?2. On or about January 31, 2018, Sterling Employee-3 responded to Cohen and stated, in sum and substance, that Cohen would need to pay the entirety of the overdue payments and pay down the principal balance of the loan to $20,000,000 (in total, a payment of approximately $1,750,000), and would need to make larger interest payments. ab??t?FEbWI??l?S; Cohen 'emaile'd' Sterling-Employeesand-proposed ?[p]ayment of $1.250m which ALL can be used to pay down principal, if [Sterling] will waive past due amounts,? but stated do NOT have more than the $1.250m.? (Emphasis in original.) Cohen also stated, in sum and substance, that he had insuf?cient ?nancial resources to post additional collateral or pro?fund payments. The signature block on the email indicated that Cohen?s address was the address for Subject Premises-2. Based on my participation in an interview with Sterling Employee-3, I have learned that since January 30, 2018, Sterling has continued to renegotiate the medallion loans with Cohen based on Cohen?s representations about his current financial position. In particular, according to Sterling Employee-3, Cohen and Sterling have an agreement in principal to restructure Cohen?s loans based in part of Cohen?s agreement to make a principal payment of approximately $750,000, to make a payment of $500,000 to become current on interest payments, and to post $192,000 in cash collateral for his future payments on die loan. Cohen also agreed to pledge an interest he had in a property. Sterling Employee?3 has stated that had Cohen indicated he had more than $1,250,000 available to him, Sterling would haye, among other things, negotiated for a larger reduction to the principal amount of the loan. 22 20110an Fl? I :r - m- Case Document 43-1 Filed 03/19/19 Page 125 of 269 (ii) Cohen Made Material Misrepresenmrions About His manner to Banks Cohen Concealed from Sterling and Melrose Cash Derived from ConsultinLWork 17. As set forth in detail below, despite multiple written and oral representations by Cohen to Sterling (and, by extension, Melrosel's] that he had insuf?cient funds to pay down the principal balance of the medallion loans, make interest payments, or pay pastrdue amounts, it appears that between 2016 and the present, Cohen opened and maintained bank ?accountsatFirstRepublic ,_.and then. . consulting payments in these accounts, which he did not disclose to Sterling. Cohen set up these accounts and received these funds during the very period in which he made disclosures to Sterling about his personal ?nances (including his assets and liabilities) and his ability to make payments on the medallion loans. In these disclosures to Sterling?and despite being asked about these bank accounts by his accountant?Cohen misled the bank by claiming he had insuf?cient liquidity to satisfy his obligations or meet the bank?s demands, while withholding information about these ongoing revenue streams and liquid ?nancial assets at First Republic. 18. Speci?cally, based on my review of documents and bank records produced pursuant to a subpoena by First Republic, and my participation in and review of reports of interviews with a First Republic sales manager (?First Republic Employee?1?) and a First Republic senior managing director (?T?irst Republic I have learned, among other things, the following: ?5 Based on my review of a report of an interview conducted with an employee of Melrose, I have leamed that, pursuant to the participation agreement between Sterling and Meh'ose, Cohen?s ?nancial statements and other records in Sterling?s possession were forwarded to Melrose so that Meh-ose could make a determination as to whether to approve of the Cohen?' transaction. Based on my review of reports of bitervieWS with Melrose employees, 1 also new that Cohen called employees at Melrose regarding the Cohen? :ransaction. 23 2917.03.02 u?rl ?In Case Document 43-1 Filed 03/19/19 Page 126 of 269 a. Cohen and his wife have been customers of First Republic since approxiniately June 201 1. Cohen controls several checking and loan accounts at First Republic, some in his own name and others in the names of corporate entities. According to First Republic?s know-your- customer records on Cohen,17 his primary physical address is the address for Subject Premises-l . b. On or about October 26, 2016, in Manhattan, New York, Cohen opened a new checking account at First Republic in. the name of Essential Consultants LLC (the ?Essential account. According to account opening documents, the primary address for Essential Consultants LLC Was the address for Subject Premises-1. When Cohen opened the Essential Consultants Account, First Republic Employee-1 conducted an l?t?WlBW of Cohen- In response to a series of know?your- customer questions about the purpose of the account?the ansxvers to which First Republic Employee?1 entered into a form?8~?Cohen stated, in sum and substance, that he was opening Essential Consultants as a real estate consulting company to collect fees for investment consulting work, and all of his consulting clients would be domestic individuals based in the United States. Cohen also stated, in sum and substance, that his purpose in setting up the account was to keep the revenue from his consulting bushtess?-which he said was not his main source of income?separate from his personal ?nances. As set forth below, there is probable cause to believe that Cohen?s statements about the intended purpose of the account and source of funds for the account were false. Speci?cally, as described below, the account was not intended to receive?and does not 'i Certain fmancial institutions are required to conduct such procedures pursuant to the Bank Secrecy Act and its implementing regulations. See 31 U.S.C. 5313; 31 C.F.R. 1020.220. '3 First Republic Employee-l ?rst ?lled out the form on the day he interviewed Cohen, October 26, 2016. On or about December 19, 2016, at the request of bank compliance personnel, First Republic Employee-1 updated the form to add more detail about Cohen?s statements. 24 201103.02 Case Document 43-1 Filed 03/19/19 Page 127 of 269 appear to have receivedmoney in connection with real estate consulting work; in addition, the account has received substantial payments ?om foreign sources. c. I know from my review of First Republic bank records that were scheduled by an FBI forensic accountant that after Cohen opened the Essential Consultants Account, Cohen received payments into that account from foreign businesses and entities that do not re?ect the stated client pro?le for the residential and commercial real-estate consulting services. Speci?cally, my'revietv?cf the Essential I know the_ following: i. Beginning on or about January '31, 2017, Cohen began receiving payments of $83,3 33 into the Essential Consultants Account from an entity called Columbus Nova LLC. According to public sources, Columbus Nova is an investment management ?rm controlled by Renova Group, an industrial holding company based in Zurich, SwitZerland that is controlled by Russian national Vilctor Veltselberg. From January 2017 to August 2017, the Essential Consultants Account received seven payments totaling $5 83,332.98 from Columbus Nova LLC. ii. Beginning on or about April 5, 2017, the Essential Consultants Account began receiving payments from Novartis Investments, SARL, which I believe to be the in?house ?nancial subsidiary of the Swiss pharmaceutical company Novartis International AG (?Novartis?). Between April 2017 and February 2013, the Essential Consultants Account received eleven wire payments from a Swiss bank account held in the name of Novartis, each in the amount of $99,980, for a total of 1,099,?30. Beginning in or about April 2017, the Essential Consultants Account started receiving wire payments from a bank account associated with the telecommunications company Inc. Speci?cally, on or about April 14, 2017, sent $100,000 to the ?25 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 128 of 269 Essential Consultants Account and, from in or about June 2017 to in or about January 2018, the Essential Consultants Account received ten $50,000 payments from In total, ATRLT sent $600,000 to the Essential Consultants Account. iv. On or about May 10, 2017, June 9, 2017, July 10, 2017, and November 27, 2017, the Essential Consultants Account received four deposits in the amount $150,000 (totaling $600,000) from a bank account in South Korea. The account holder ?om which the money was seitt i's'Kor'ea Kerospac?e is a South Koreaabased-company-that- - produces and sells ?xed-wing aircraft, helicopter aircraft, and satellites to the United States Department of Defense, among other customers. v. On or about May 22, 2017, the Essential Consultants Account received a $150,000 deposit from an account at a Kazakhstani bank. The listed account holder at Kaaltomrnertsbank was a second bank named BTA Bank, A0. A message accompanying the wire payment indicated that the payment was a consulting fee as per Inv ETA-101 DD May 10, 2017 consulting agreement WIN DD 08 05 2017 CNTR vi. 111 total, from on or about January 31, 2017 to on or about February 1, 2018, the Essential Consultants Account received approximately $3,033,112.98 in transfers and checks from the aforementioned entities. As of on or about January 10, 2018, the balance in the Essential Consultants Account was $1,369,474.23. Cohen?s withdrawals from the Essential Consultants account reveal that it was used for largely personal purposes, including to pay, among other things, American Express bills and fees from ?the Core Club,? a private social club in New York. d. On or about April 4, 2017, Cohen opened another new checking account at First Republic, this one in the name of Michael D. Cohen 85 Associates, PC. (the Account?). 26 2017mm Case Document 43-1 Filed 03/19/19 Page 129 of 269 Cohen was the only authorized signatory on the account. According to account opening documents, the primary address for MDCKEA Account was the address for Subject Premises?1. Among other things, the Account received ten wire transfers and one check from an account in the name of Squire Patton Boggs, a law firm. As noted above, Subject Premises-2 is located inside the New York of?ce of Squire Patton Boggs. In total, from on or about April 5, 2017, to on or about January 2, 2018, the Account received $426,097.70 in deposits, and "The ?27201-8rwas-S344?41735: As discussed below,?Gohen never disclosed any of the balance in the Essential Consultants or accounts to Sterling during the negotiations with respect to the - transaction or the subsequent loan re?nancing negotiations, including in his May 2017 Financial Statement and September 2017 Financial Statement. 19. Based on my review of emails that were seized pursuant to the Cohen Email Warrants, and my review of reports of interviews with employees of and Novartis, it appears that the aforementioned payments to the Essential Consultants Account and WCELA Account were for political consulting WOl?k, including consulting for international clients on issues pending before the Trump administration. Speci?cally, from my review of emails ?'om the Cohen Gmail Account, the Cohen Account, and public sources, I haVe learned the following: a. On or about April 28, 2017, Cohen sent an email to an individual whom I believe is af?liated with In the email, Cohen attached a ?Consulting Agreement? between KAI and Essential Consultants dated as of about May 1, 2017. The agreement indicates that Essential Consultants had the address of Subject Pramises-Z. The document indicates that Essential Consultants would render ?consulting and advisory services, as requested" by KAI, and that KAI would pay Essential Consultants ?a consulting fee of One Million Two Hundred Thousand 2? 1011.03.02 Case Document 43-1 Filed 03/19/19 Page 130 of 269 US Dollars,? disbursed through eight $150,000 installments between May 2017 and December 2017, I have also revieWed invoices in amounts of $150,000 that Cohen emailed to an individual whom I believe is af?liated with KAI. At the top of the invoices the address listed for Essential Consultants is the address for Subject Premises?2. b. On or about May 8, 2017, Cohen sent an email to an individual Whom I believe is af?liated with BTA Bank. The signature block on Cohen?s email listed ?Essential Consultants arid and provided-the address for?Subj est?Premises- 2- In the email, Cohen attached a doctunent purporting to be a ?Consulting Agreement? between BTA Bank and Essential Consultants dated as of about May 8, 201?. The agreement indicates that Essential Consultants had the address of Subject Premises-2, The document indicates that Essential Consultants would render ?consulting and advisory services? to ETA Bank, and that ETA Bank would pay Essential Consultants ?a consulting fee of One Million Eight Hundred Thousand US Dollars,? disbursed through payments of $1 50,000. On or about May 10, 2017', Cohen sent an email to an employee of BTA Bank, and attached to the email an invoice to BTA Bank in the name of Essential Consultants, with the address of Subject Premises- 2. The invoice contemplated a $150,000 payment to Essential Consultants for a consulting fee.? c. On or about January 23, 2017, Cohen appears to have entered into a consulting agreement with which contemplates that Essential Consultants ?shall render consulting and advisory services to and that would ?advise [Essential Consultants] of those issues and matters with respect to which ATELT Services desires [Essential assistance and advice.? The agreement indicates that Essential Consultants had the address of Subject Premises- l. The contract calls for ?to pay the Consultant for his services . . . a consulting fee of Fifty 28 291105.02 Case Document 43-1 Filed 03/19/19 Page 131 of 269 Thousand ($50,000) Dollars . . . per month.? Based on my review of reports of interviews with employees, I have learned that retained Cohen to consult on political issues, including net neutrality, the merger between and Time Warner, and tax reform. d. On or about March 1, 2017, Cohen appears to have entered into a contract between Novartis and Essential Consultants, which provides that Essential Consultants will ?provide consulting and advisory services to Novartis on matters that relate to the repeal and replacement of the Affordable?CaTAEf'in "thE'US?a?d?'any? other issues -mutually?agreeable-to [Essential Consultants] and Novartis.? The contract provides for a ?consulting fee of One Million Two Hundred Thousand ($1,200,000) US dollars,? to be paid to Essential Consultants in equal installments over the course of a year. Based on my review of reports of interviews with Novanzis employees, 1 have learned that Novartis retained Cohen to provide political consulting services and to gain access to relevant policymakers in the Trump Administration. e. In or about Februaty 2017, Cohen began negotiating the terms of a ?strategic alliance" with Squire Patton Boggs. On or about March 4, 2017, Squire Patton Boggs emailed Cohen a ?strategic alliance agreement.? Under the terms of the agreement, Cohen agreed to generate business for the law ?rm, and Squire Patton Boggs agreed to pay to Cohen ?an annual strategic alliance fee of $500,000, payable in twelve (12) equal installments.? Squire Patton Boggs also agreed to provide Cohen with ?dedicated and segregated of?ce space in [Squire Patton Boggs?s] New York and Washington DC. of?ces, which of?ce space shall be physically separate from [Squire Patton Boggs?s] of?ces and have locked doors and its own locked ?le cabinets." On or about April 3, 2017, Squire Patton Boggs announced on its website that is had formed a ?strategic alliance? with Michael D. Cohen an Associates and would ?jointly represent clients.? 29 201103.03 - o- Case Document 43-1 Filed 03/19/19 Page 132 of 269 20. Despite the signi?cant amount of money that Cohen receivad into the Essential Consultants Account and the Account, and the cash balance in both accounts, Cohen did not disclose that information to Sterling or Melrose. Speci?cally, based on my review of documents provided by - (as noted above, Cohen?s accountant at the time), my participation in an review with - edmr?evet?? have learned the following: meeting, Cohen told in sum and substance, that he had setup a law practice called Michael D. Cohen 3.: Associates P.C., and a consulting company called Essential Consultants LLC. Cohen told -, in sum and substance, that he expected to earn $7 5,000 per month in connection with his law practice, and that he expected gross revenues for the consulting business to be between ?ve and six. million dollars annually. 1). In or about October 2017, if not earlier, -ras preparing a personal ?nancial statement for Cohen. On or about October 6, 2017, -sent an email to Cohen in which I- wrote that is a drait of the new PFS as of September 30, 2017? and attached a draft of the Sepmmber 201ir Financial Statement. The draft statement re?ected that as of September 30, 2017, Cohen had only $1 ,25 0,000 in cash, total assets of approximately $33,430,000 (comprised of taxi medallion interests, real estate interests, and his personal residence and property), and liabilities of approximately $45,153 0,000, leaving him purportedly over $12 million in debt. In the same email, -1uestioned Cohen, in sum and substance, about the fact that the ?nancial statement did not list any value associated with either the Essential Consultants Account or the Account: ?[vv]e did not add any value for you[r] two operating entities Michael D. Cohen 8r. Associates 30 2017.03.02 FIE or ?aboutMay the__ Case Document 43-1 Filed 03/19/19 Page 133 of 269 POC [sic] and Essential Consultants LLC. Please advise whether or not these should be disclosed and what value.? c. On or about October 6, 2017, Cohen called -3y telephone?which is reflected on toll records for Cohen?s cellphone-?and told - in sum and substance, not to include Essential Consultants or in the September 2017 Financial Statement because they had no value. On or about October 6, 2017, following the call with-Cohen, using the Cohen answer ?[l]ooks -to make any changes to his cash position as listed in the September 2017 Financial Statement. In a letter dated October 6, 2017, addressed to Cohen stated, have revieWed the attached statement of ?nancial condition and ?nd it to be correct and consistent with the representations that I made to your firm. The attached is an accurate re?ection of my assets, liabilities and net worth (de?cit) as of September 30, 2017.? Attached to that letter was the September 2017 Financial Statement, which, as noted shone, was then transmitted to Sterling in connection with the proposed taxi medallion transaction between Sterling, Cohen, and 21. Based on my review of a report of an interview with Sterling Employee-?l, I have learned that Cohen did not disclose his income stream from Essential Consultants to Sterling Employee] or, to his knowledge, anyone else at Sterling. According to Sterling Employee?1, lmowledge of such an income stream woidd have affected Sterling?s demands during the negotiations, particularly with respect to the amount of a principal paydown of Cohen?s debt. Cohen Understated His Available Cash 22. In addition to withholding the existence of his Essential Consultants income from Sterling and Melrose, it appears that Cohen also substantially understated his available cash and cash equivalents in his ?nancial disclosures. Speci?cally, I know from my review of the September 3 1 2017.03.02. Case Document 43-1 Filed 03/19/19 Page 134 of 269 2017 Financial Statement that Cohen provided to Sterling that Cohen represented that he had $1,250,000 in cash as of September 30, 2017. I also know that on or about January 30, 2018, in a telephone call with Sterling Employee-3, and on February 1, 2018, in an email to Sterling Employee-3, Cohen represented that he did not have more than $1,250,000 in cash. But, from my review of a summary of bank records that Were scheduled by forensic accountants, I have learned that Cohen had approximately $5,000,000 in cash and cash equivalents as of September 30, 2017. Df Fabmg?-y?L; equivalents. Speci?cally, from my review of the account schedule and bank records, Ihave learned the following: a. Cohen. has three checking andfor savings accounts at Capital One Bank, one of which is in his wife?s name. As of September 30, 2017?, Cohen had $1,105,680.35 in his savings account, and $1,262,982.29 in total in the three accounts at Capital One Bank. As of Februaryr 1, 2018, Cohen had a total of $1 ,3 89,245.78 in these accounts. b. Cohen has three accounts at Morgan Stanley in his name. As of September 30, 2017, the combined total in cash and cash equivalents in those three accounts was $1,270,600.41. As of February 1, 2018, Cohen had $1,284.996.13 in these accounts. c. As of September 30, 2017, Cohen had $260,689.18 in an account at Signature Bank. As of Februaryr l, 2018, Cohen had $261,517.55 in this account. d. In addition to the Essential Consultants Account and WCIELA Account at First Republic, Cohen also had two joint checking accounts with Laura Cohen at First Republic. In total, as of September 30, 2017, Cohen had at least $1,876,209.27 in total in his four accounts at First Republic. As of February 1, 2018, Cohen had $3,332,992.95 in these accounts. 32 emanate Case Document 43-1 Filed 03/19/19 Page 135 of 269 e. Cohen has an account at Bethpage Credit Union with $25,931.39 in it as of September 30, 2017. f. As of September 30, 2017, Cohen had $17,542.54 in accounts at Sterling. g. Cohen has two accounts at TD Bank?one in his name and one held jointly with his wife. Cohen also has a safety deposit box at TD Bank-5ubj ect Premises?3. The safety deposit box was opened on December 13, 2017 in the names of Michael and Laura Cohen. -?h.?Irrtotal; as-of September 30720117,?Gehen had-at his accounts?-? at Capital One Bank, City National Bank, Signature Bank, Sterling Bank, Bethpage Credit Union, First Republic, and Morgan Stanley. As of February 1, 2018, Cohen had $6,263,732.59 in his accounts at Capital One Bank, City National Bank, Signature Bank, First Republic, and Morgan Stanley.? 23. Accordingly, based on the foregoing, it appears that Cohen?s written and oral representations to Sterling and Melrose that he did not have more than $1,250,000 were false, and that Cohen withheld infotmation regarding approximately $5 million in ?mds ?'om Sterling and Melrose in order to secure favorable terms in his renegotiation of his medallion loan. Based on my participation in an interview with Sterling Employee-2, and my review of reports of hirer-views with Sterling Employee-1 and two Melrose employees, it is my understanding that that Sterling and Melrose would view Cohen?s understating of his assets as material to its decision whether to renegotiate Cohen?s medallion loans and on what terms, or to its decision whether approve of the transfer of these loans to - 19 Based on my review of the account schedules described above, I know that, as of the date of this af?davit, the account balances for TD Bank have not yet been included in the schedule for either date and the account balances for Sterling National Bank and Bethpage Credit Union have not yet been included in the schedule for February 1, 2018. Thus, to the extent that these accounts have positive balances, Cohen?s total balances in fact were even higher on these dates. 33 2017.03.01 Case Document 43-1 Filed 03/19/19 Page 136 of 269 Cohen Has Unrenorted Interest Income 24. It appears that Cohen also bid from Sterling interest income that he was receiving in connection with a six million dollar loan he made to another individual. Speci?cally, I know from my review of the May 2017r Financial Statement and September 2017 Financial Statement that Cohen provided to Sterling that Cohen did not disclose that he had made a note receivable in the amount of approximately $6 million, or that he Was earning approximately $60,000 per month in loan. that were reviewed by another law enforcement agent, my review of property records and documents obtained pursuant to the Cohen Email Warrants, and my participation in an interview with-I have learned the following: a. Based on my review of property records, I have learned that on or about March 12, 2012, Cohen agreed to lend $2,000,000.m It appears that the promissory note was unsecured by any real property. On or about April 28, 2014, Cohen and- amended the promissory note, and restructured the loan to increase the principal amount to approximately $5,000,000. Under the terms of the amended promissory note, the loan was secured by_ aparuneut in Florida. 011 or about April 8, 2015, Cohen and -restated the promissory note to increase the principal amount to b. Based on my review of a copy of the restated note, which Was obtained pursuant to the Cohen Email Warrants, I hare learned that under the terms of the amended and restated learned from Gem] that 31 The note that the loan is to hUSband 311d Wife: jointly and severally. For ease of reference, I refer simply to ?-Jerein. 34 2011014112 Err?mun?: I Case Document 43-1 Filed 03/19/19 Page 137 of 269 promissory note, Cohen?s loan to _s an interest-only loan, and that the principal balance of the loan bears interest at an annual rate of 12.25 percent. I also know that the amended and restated promissory note includes a schedule of payments that require -to pay Cohen approximately $61,250 per month beginning in April 2015 and ending in April 2019. The note also requires thaJ-epay the principal balance of $6,000,000 on April 28, 2019. c. Based on my review of bank records, I have learned that, consistent with the terms of the? amended?and?restated promissory - approximately $61,250 since April 2015. Speci?cally, based on my review of records maintained by Capital One Bank, I have learned that from April 2015 to October 2015, Cohen received checks mama totaling mm, which he deposited into his personal bank account at Capital One Bank.22 It appears from my review of bank records and public sources that :-is the owner of From my review of records maintained by Capital One Bank, I have also learned that since October 2015, Cohen has received checks ?om an entity called 1? totaling $61,250 per month, which he deposited into his personal bank account at Capital One Bank. It appears from my review of bank records and public sources that -.s also the owner of 1- ?In total, it appears that Cohen receives approximately $735,000 per year in interest payments ?om - :21. Based on my review of Cohen ?s May 2017 and September 201?? Financial Statements, my review of his 2015 and 2016 tax returns obtained via subpoena and from the Cohen Email Warrants, and my participation in an interview with - I have learned that Cohen did 22 In April 2015, Cohen received a pro?rated payment. For all months thereafter, the total payment equaled $61,250, but _Jtten made the payment in multiple checks. 35 2012.03.02 Case Document 43-1 Filed 03/19/19 Page 138 of 269 not disclose this interest income he was receiving from -to Sterling or Melrose, or list it on his tax returns. I have also learned that while this interest income is taxable, Cohen did not tell -?his accountant?about the income, and -only learned about the income because he began doing _taxes in 2017.23 25. Accordingly, based on the foregoing, it appears that Cohen?s representations to Sterling and Meirese that he did not have more than $1,250,000 Were false, and that Cohen Manon relating to the interest incem?ehe is receiving from order to secure favorable terms in his renegotiation of his medallion loan. Cohen Had a Side A,Ureernen?t was 26. As set forth in detail below, during the course of Cohen?s negotiations to sell his interest in taxi medallions and the associated debt to Cohen not only misrepresented his ?nancial position to Sterling, but also failed to disclose a side agreement he had negotiated with_; it appears that '_.greed to pay an above?market price for Cohen?s taxi cab medallions, and in exchange, Cohen agreed to pay _Lpprosimately $3 .8 million in cash. Speci?cally, from my review of documents produced pursuant to a subpoena by Sterling, and my participation in interviews with Sterling Employee?l, Sterling Employee-Q, and Sterling Employee?3, I have learned, among other things, the following: a. On or about September 5, 2017, an executed term sheet was circulated by Sterling Employee~1 to Cohen and - The term sheet listed Cohen?s address as the address for Subject Premises?1. According to the term sheet, ?would borrow $20,000,000 from Sterling and Melrose, to be secured by the medallions that _was to acquire from 13 Accordingly, this interest income?which should have been reported as such on Cohen?s tax returns?is included herein in calculations of Cohen?s true cash position. 36 2011'an Case Document 43-1 Filed 03/19/19 Page 139 of 269 Cohen. At a price of $20 million for thirty-tyre taxi medallions, the proposed transaction valued each medallion as worth $625,000. The term sheet also contemplated a $1,265,913 pay-down of the principal balance of the loan. The term sheet made no mention of a $3.3 million payment from Cohen to or any other form of payment or ?nancial transaction bemoan the parties. b. Additionally, an internal Sterling credit memorandum, dated October 4, 2017, describing the terms of the Cohen-_transaction and the new loan to '?did not mentidn any payments .The__ memorandum also noted that the ?loan amount of indicates a purchase price per medallion? but ?it is recognized that this is not in line with current market values.? Indeed, according to an internal Sterling memorandum dated February 5, 2018, in the month of January 201 8, taxi medallions sold for amounts ranging from $120,000 to $372,000. According to Sterling Employee-1 and Sterling Employee?2, they wore never told that _igreed to a purchase price of $625,000 in exchange for a lump sum payment from Cohen, or that Cohen would make any payment to c. On or about January 30, 2018, Sterling Employee?3 asked Cohen whether Cohen had a side agreement with _in pay _a sum of money for entering into the medallion transaction. Sterling Employee-3 asked Cohen about such an arrangement because, according to Sterling Employee-3, the price that - Was paying for each medallion appeared to be well above the market price. Cohen stated, in sum and substance, that he had no side agreements?and never had a side agreement??with - 27. While Cohen and_ did not disolose any payment from Cohen to _in communications with Sterling, it appears that such a payment was contemplated. Indeed, based on my review cfreeords maintained by _and my participation in an interview 37 2017.00.02 Case Document 43-1 Filed 03/19/19 Page 140 of 269 with -I have learned the following, in substance and in part, regarding the proposed side payment from Cohen to? a. On or about September 19, 2017?,- prepared a memorandum for Cohen entitled, ?Sale of NYC Medallion Entities and Debt Assumption? (the The summarized the proposed transaction between Cohen and in part, as follows: ?Michael and Laura Cohen will transfer ownership of their 13 NYC medallion was to a Buyer EFF w?mme? bank indebt?dnessmpon- the [Cohens??-paying downthe. debt portfolio of the 13 entities by $500,000 and a cash payment to the Buyer of b. According to -Cohen told him the parameters of the deal, including the payment of $3,800,000 to - but-lid not know Where Cohen was going to obtain - As noted above, Cohen had more than $5,000,000 in cash and in his September 2017'' Financial $3,800,000 to pay cash equivalents as of September 2017., but had only disclosed Statement that he had $1.25 million in cash. 28. Based on my review of records maintained by Sterling (as Well as Melrose, the bank with the participating interest in the loans) and reports of interviews of representatives of Starling Melrose, or any other ?nancial institution (and Melrose), I have seen no evidence that Sterling. involved in the potential deal with Cohen and aware of the planned $3.8 million side payment from Cohen to- The Illegal Campaign Contribution Scheme 2? The reference to thirteen medallions appears to be an error by - Cohen and his wife together owned sixteen corporations, which in turn owned 32 taxi medallions. 38 2017.08.02 Case Document 43-1 Filed 03/19/19 Page 141 of 269 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 142 of 269 20110.02 Case . Document 43-1 Filed 03/19/19 Page 143 of 269 201108.02 Case Document 43-1 Filed 03/19/19 Page 144 of 269 201103.912 Case Document 43-1 Filed 03/19/19 Page 145 of 269 201103.02 Case Document 43-1 Filed 03/19/19 Page 146 of 269 2017.03.62 Case Document 43-1 Filed 03/19/19 Page 147 of 269 20110.02 Case Document 43-1 Filed 03/19/19 Page 148 of 269 201103.132 Case Document 43-1 Filed 03/19/19 Page 149 of 269 201103.02 Case Document 43-1 Filed 03/19/19 Page 150 of 269 2017.08.02 Case Document 43-1 Filed 03/19/19 Page 151 of 269 201103.02 Case Document 43-1 Filed 03/19/19 Page 152 of 269 201733.02 Case Document 43-1 Filed 03/19/19 Page 153 of 269 2017.08.92 Case Document 43-1 Filed 03/19/19 Page 154 of 269 201108.132 Case Document 43-1 Filed 03/19/19 Page 155 of 269 201103.132 Case Document 43-1 Filed 03/19/19 Page 156 of 269 201103.02 Case Document 43-1 Filed 03/19/19 Page 157 of 269 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 158 of 269 2917.03.02 Case Document 43-1 Filed 03/19/19 Page 159 of 269 C. Probable Cause Justifying Search of the Subject Premises and Subject Devices 45. Based on the foregoing, my review of records produced pursuant to subpoenas and the Cohen Email Warrants, and the iCloud Warrant, and my training and experience, there is probable cause to believe that the Subject Premises and Subject Devices have been used in furtherance of the Subject Offenses and are likely to contain instrumentalities, evidence, and fruits of the Subject Offenses. Speci?cally, there is probable cause to believe that Cohen permanently resides at Subject Premises-1 and, at least in part, works at both Subject Promiseva and Subject Premises-2, and that those locations contain evidence relating to the Sterling taxi medallion transaction, Cohen?s assets, Cohen?s consulting work for Essential Consultants LLC, and his Additionally, there is probable cause to believe that Subject Premises?i contains evidence of Cohen?s assets and? Finaler 13131"? is 131? Db?ble cause to believe that Subject Premises?4, in which Cohen is temporarily residing, contains electronic 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 160 of 269 devices, including Subject Device-1 and Subject Device?2, which, in turn, contain evidence of the Subject O??enses, such as evidence relating to the Sterling taxi medallion transaction, Cohen?s assets, Cohen?s consulting work for Essential Consultants LLC, and 46. First, there is probable cause to believe that Cohen lives and operates his businesses, at least in palt, at Subject Premises-l. Speci?cally, from my review of property records, I know that Michael Cohen and Laura Cohen own (in trust) Subject Premises-J. From my review of Cohen?s tax?returns, lmow he lists?l??r?i?a?rjr residence . from my review of emails produced pursuant to the Cohen Email Warrants, I lmow that Cohen routinely refers to Subject Premises-1 as his home. For example, on or about September 28, 2017 and October 6, 2017, Cohen emailed individuals that his home address is the address for Subject Premises-l . I also know from my review of emails that Cohen receives package delivery noti?cations that list Cohen?s address as the address for Subject Premises-1- Cohen has also provided the address of Subject Premises?l as the address for Essential Consultants and Michael D. Cohen Associates, RC- For example, the certi?cates of incorporation and account opening docurnents at First Republic for both entities list their addresses as the address for Subject Premises-l. See supra 1H 18(b), 18(d). The consulting agreement between Essential Consultants and also indicated the address for Essential Consultants is the address for Subject Premises? 1. See supra 1i 19(0). 47. There is also probable cause to believe that Subject Premises-1 is likely to contain instrumentalities, evidence, and fruits of the Subject Offenses. Speci?cally, from my review of emails produced pursuant to subpoena and the Cohen Email Warrants and iCloud Warrant, as well as my training and experience, I know the following: 53 2017.03.02 A WV ?4 Case Document 43-1 Filed 03/19/19 Page 161 of 269 a. According to records maintained by Sterling, the address for all of Cohen?staai medallion .bLCs is the address for Subject Premises-1. See supra 1i 16(c). Additionally, the medallion loan documents indicate that any mailings related to the loans should be sent to Subject Promises-l. See id. Based on my training and experience, as well as my review of public sources, I know that individuals keep records of properties and assets in which they have ownership interests. Accordingly, I submit that Subject Premises-1 likely contains evidence of Cohen?s the as: medallioTIILCs,? the?revenue and-the? transaction with Sterling in 2014 to re-?nance the medallion loans that were then with Capital One Bank. b. From my review of records maintained by Sterling, I also know that Sterling addressed documents relating to the -transaction and Cohen?s attempts to modify the terms of the medallion loans to Subject Premises-1. For instance, Sterling addressed the transaction term sheet, see Super: 1] 16(1), and its demand letter and notice of default, see supra 1] 16(q), to Subject Premises-l. Accordingly, Subject Premises?l likely contains evidence concerning the -transaction and Cohen?s negotiations with Sterling. Some of those records?such as records relating to a payment from Cohen to --?were concealed from Sterling and cannot be obtained via subpoena to Sterling. Additionally, even where documents were sent to Cohen by Sterling (and therefore are available from Sterling via subpoena), the fact that they may be found in Subject Premises?l will be relevant to Cohen?s possession or knowledge of the documents. c. From my review of records maintained by First Republic, I lmow that Cohen provided the address for Subject Premises-l as the mailing addresses for the Essential Consultants Account and MDCELA Account. See supra 111 18(b), 18(e). Accordingly, it is likely that Subject 59 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 162 of 269 Premises-l contains records relating to the Essential Consultants Account and Account, including, among other things, account opening documents, bank statements, documents provided as part of the lmow-your?customer process, any notes made by Cohen when he was opening the accounts, wire transfer records, and canceled checks. Even where these records can be obtained from First Republic, the fact that they may be found in Subject Premises?l will be relevant to, among other things, Cohen?s ownership of the accounts, or his knowledge of transactions or the existence of ?mds in accounts: d. Based on my review of records maintained by Capital One Bank, TD Bank, Morgan Stanley, City National Bank, Signature Bank, and Bethpage Credit Union, I know that Cohen provided the address for Subject Premises-l as the mailing for his accounts at each of these ?nancial institutions. Accordingly, it is likely that Subject Premises-l contains records relating to these accounts, including, among other things, bank statements that list account balances. The existence of these records in Subject Premises?l will be relevant to, among other things, Cohen?s ownership of the accounts and his knowledge of the balances in these accounts. e. Additionally, Cohen may have records of other bank accounts or assets that were not disclosed to Sterling and are not presently known by law enforcement. For example, as described above, Cohen has received interest income since 2015 that he has not disclosed to Sterling or paid taxes on. Also, on Cohen?s August 2014 Financial Statement, see supra 1i 16(e), he disclosed $10,000,000 in ?investments in overseas entities.?30 The value of these investments was omitted from subsequent ?nancial statements. However, for the reasons outlined above, there is probable cause to believe that Cohen omitted the value of those investments from his 2017 3? Based on my participation in an interview with Sterling Employee?3, I have learned that Cohen told Sterling Employee?3 that the reference to ?investments in overseas entities? on his 2014 Financial Statement was to serve merely as a ?placeholder? for potential future investments. 60 2011mm Case Document 43-1 Filed 03/19/19 Page 163 of 269 ?nancial statements in order to understate his assets. As Subject Premises-1 is Cohen?s primary residence and he uses Subject Premises-l as the mailing address for bank records, there is probable cause to belieVe that account statements for unlmown bank accounts or assets concealed from Sterling are likely to be found in Subject Premises?1 . f. Based on my review of records maintained by and produced pursuant to the Cohen Email Warrants, Ilmow that the address Cohen provided to for Essential Consultants is the address for is-probable-canseto believe that Subject Premises-1 will contain evidence concerning the operation of Essential Consultants or money that Cohen received, through Essential Consultants, from Additionally, because Cohen used the address for Subject Premises-1 for at least one consulting arrangement involving Essential Consultants, there is probable cause to belieVe that Subject Premises-1 may contain records of other consulting arrangements that Cohen, through Essential Consultants, has with other individuals or entities. g. Based on my review of records maintained lay-recounting ?rm, and emails produced pursuant to the Cohen Email Warrants, I have learned that '-1DCD'tl11tin ?rm sent documents to Subject Premises-1 and used the address for Subject Premises?1 as the address listed on Cohen?s personal and corporate tax returns. See supra 'jl 1601). For instance, on or about October 6, 2017, an employee tit-accounting ?rm emailed Cohen that she had sent Cohen?s September 2017 Financial Statement by FedEx to Cohen?s attention. Accordingly, Cohen's tax records are likely to he found in Subject Premises-1. h. Based on my review of bank records and publicly-available documents, I know that 61 201103.112 Case Document 43-1 Filed 03/19/19 Page 164 of 269 1. Based on my review of emails produced pursuant to the Cohen Email Warrants and iCloud Warrant, 1 know that Cohen used at least one Apple iPhone, an Apple iPad Mini, and a _MacBook Pro to access his iClond account. Basal 6E - Apple pursuant to the iCloud Warrant, i know that electronic devices linked to Cohen?s iCloud account were used at Subject Premises?1 to, among other things, place telephone calls and backup ?les to Cohen?s iCloud account. Accordingly, there is probable cause to believe that Subject Promisesul contains electronic devices, including certain Apple products, that for reasons discussed below are liker to contain evidence of the Subject Offenses. j. Based on my review of emails produced pursuant to the Cohen Email Warrants, I understand that Subject Premises~1 recently sustained Water damage to certain parts of the premises, and that Cohen has engaged contractors to perform certain remediation work on the premises. In addition, as set forth above, I believe that Cohen and his famin are temporarily residing at Subject Premises?4 in the Loew?s Regency Hotel, which is approximater two blocks ?om Subject Premises-1. Howaver, based on my review of a work order sent to Cohen?s email by a contractor, I understand that the ?rst phase of the work order called for the contractor to ?Pack Sc Remove all items 3: ?nnishings in Living Room, Kitchen, Sons Room Dining Room? and store them elf-site. In addition, based on my review of drawings sent to Cohen by the contractor, it appears that the work is primarin being done in these rooms. Thus, I believe that the construction ?-to the extent it is still ongoing Would not necessarily have caused Cohen to move 62 2017.08.02 Case Document 43-1 Filed 03/19/19 Page 165 of 269 all documents or evidence responsive to the warrant out of Subj ect Premises?l because it does not appear that work is being done to the portion of Subject Premises-1, such as a home of?ce or Cohen?s own room, where such documents or evidence would most likely be found.31 48. Second, there is probable cause to believe that Cohen uses Subject Premises-2 as of?ce space, and also that Subject Premises?2 contains certain electronic devices. Speci?cally, from my review of the ?strategic alliance agreement? between Squire Patton Boggs and Cohen, andEyTe?view of the press" release on Squi'?Patton?Bog?gs?s of?ce at Subject Premises-2. See supra 18(d), 19(e). Indeed, I have learned that pursuant to Cohen?s agreement with the law firm, he has ?dedicated and segregated office space" in Squire Patton Boggs?s of?ces on the 23rd ?oor of 30 Rockefeller Plaza, and that the space is ?physically separate? from the ?rm?s of?ces and has ?locked doors and its own locked ?le cabinets.? See sapra?l 19(e). Additionally, I know that under the terms of the agreement, Cohen agreed to ?arrange for [his] own computer server system that is not connected to [Squire Patton Boggs's] computer network system." I lmow from my participation in an interview with -who met Cohen at Subject Premises?2 in 2017, that Subject Premises-2 is an of?ce with a door, it appears to be used only by Cohen, and it contains, among other things, a computer and paper ?les. According to -when .saw Cohen at Subject Premises-2, he had two cellular telephones in Subject Premisesrz. I also know from my review of emails produced pursuant to the Cohen Email Warrants that Cohen uses the address for Subject Premises?2 in the signature block 3? As noted below, based on my training and experience, I believe that individuals who travel or stay in hotels for short-term periods commonly bring some items with them, such as portable electronic devices or sensitive items, meaning that Cohen has likely taken some evidence ?-om Subject Premises-1 to Subject Premises-4. Nevertheless, given the temporary nature of Cohen?s stay at Subject Premises-4 and the scope of the work being done at Subject Premises?l, I bellch it is unlikely that Cohen has taken all evidence that would be subject to seizure out of Subject Premises-l. 63 201103.02 A up? Case Document 43-1 Filed 03/19/19 Page 166 of 269 on his emails. Based on my review of notes of a call between Cohen and First Republic Employee? 2 (which notes were taken by another First Republic employee, who was participating in the call and taking notes), I know that, on or about November 15, 201?, Cohen told First Republic Employee-2 that he had a new of?ce at 30 Rock. Moreover, I know from an article in Vanity Fair published on or about February I4, 2013, that Cohen was interviewed by the magazine in Subject Premises-2 in or about February 2018. 49:" Tit?mi: 'i?l?mbabl?ause to? believe that SubjectPremisesQ instrumentalities, evidence, and fruits of the Subject Offenses. Speci?cally, from my review of emails produced pursuant to subpoena and the Cohen Email Warrants and iCloud Warrant, as well as my training and experience, I know the following: a. According to records maintained by Sterling, when Cohen was emailing with Sterling Employee-3 in 2613 about a modi?cation to his existing loan ?om Sterling, Cohen listed his address in his email as the address for Subject Premises?2. See supra 1i 16(t), 1601). Accordingly, Subject Premises-2 likely contains evidence concerning Cohen?s loan modi?cation negotiations with Sterling. b. Based on my review of records obtained pursuant to the Cohen Email Warrants, I know that the address Cohen provided to KAI and ETA for Essential Consultants is the address for Subject Premises-2. See more 111i 19(a), 1903). Therefore, there is probable cause to believe that Subject Premises-2 will contain evidence concerning the operation of Essential Consultants or money that Cohen received, through Essential Consultants, from KAI and BTA, among other entities with which Cohen had a consulting arrangement. Additionally, based on my review of emails sent in 2018 that were obtained pursuant to the Cohen Email Warrants, I know that Cohen continues to enter into consulting arrangements through Essential Consultants, and agreements 64 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 167 of 269 .I . ?r-q relating to these arrangements indicate that Essential Consultants is located at Subject Premises? 2. Additionally, because Cohen used the address for Subject Premises?2 for multiple consulting arrangements involving Essential Consultants, there is probable cause to believe that Subject 1 Premisesrz may contain records of. other unknown consulting arrangements that Cohen has with other individuals or entities. c. Based on my review of records maintained by -iccounting ?rm, and emails produced pmsmohen Email'WarrantsT as well'a?s'my - - - -l have learned that -visited Subject Premises-2 to meet with Cohen about his taxes. See supra ll 20(a). At that meeting, -:liscussed with Cohen whether Cohen should disclose Essential Consultants on his personal ?nancial statement to banks. According, there is probable cause to believe that Subject Premises-2 will contain evidence relating to Cohen?s taxes, or notes of his conversation with - Moreover, the fact that Cohen used Subject Premises?2 for a meeting regarding his personal ?nancial matters provides probable cause to believe that documents and information regarding his ?nances will be found in Subject Premises-2. d. Based on my participation in an interview with .1 know that Cohen maintains a computer in Subject Premises-2. From my review of IP data produced pursuant to a subpoena and pen register to Google, it appears that Cohen is logging into his Grnail account from Subject Premises-2. Accordingly, there is probable cause to believe that Subject Premises-2 contains electronic devices, that for reasons discussed below are likely to contain evidence of the Subject Offenses. e. Based upon my training and experience, I have learned that individuals who maintain businesses typically keep records relating to the business?such as contracts with clients and records ofpayrnenta?at the business? identi?ed location. I am not aware of any addresses 65 2017.08.02 Case Document 43-1 Filed 03/19/19 Page 168 of 269 associated with Essential Consultants other than Subject Premises-1 and Subject Premisestz. Accordingly, there is probable cause to believe that Subject Premises-1 and Subject Premises-2 will contain business records for Essential Consultants. SD. Third, there is probable cause to believe that Subject Premises-3 is lilter to contain instrumentalities, evidence, and fruits of the Subject Offenses. In particular: a. As noted above, Cohen has two bank accounts at TD Bank. In or about November 017, as Cohen Was substanttal e'o'nsu' l?W'lf?wbich hedid'not?tliscl'ose to Sterling?Cohen opened the safety deposit box at TD Bank, which is Subject Premises?3. In light of the aforementioned evidence that Cohen conceals assets, including assets at TD Bank, there is probable cause to believe that Subject Premises-3 contains ?nancial assets, objects of value andfor documents relating to such assets or objects of value that Cohen liker did not disclose to Sterling. Indeed, based on my training and experience, I am aware that people often conceal valuable items in safety deposit boxes. Accordingly, there is probable cause to believe that Subject Premises-3 will contain evidence of the Bank Fraud Offenses. 2017.08.02 Case Document 43-1 Filed 03/19/19 Page 169 of 269 51. Based on my review ofemnils obtained pnrsuanttc the Cohen Email Warrants and cell phone location information, I belieVe that Cohen is tamporarily residing in Subject Pfemises? 4. See supra 111] There is also probable cause to believe that Subject Premises-4 contains instrumontaljties and evidence ofthe Subject Offenses, including, the following: 33 As noted above, Subject Premises-3 is approximately ?Ve inches by ten inches. Accordingly, I do not believe that it would ?t a large volume of hard copy documents; however, a small number of hard-copy documents, or a large volume of documents contained on a ?ash drive or other portable storage device, would ?t in Subject Premises?3. 67 2017.03.02 1 -.- n??Ti Case Document 43-1 Filed 03/19/19 Page 170 of 269 b. As described above, at the time Cohen moved to Subject Premises~4, he was also in the midst ofongoing negotiations with Sterling regarding the re?nancing of his medallion debts. For example, on January 30, 2013, Cohen had a phone call with Sterling Employee-3 about his ?nances and the proposed restructuring, and on February 1, 2018, Cohen sent an email to Sterling Employee?3 claiming that he did not have more than $1.25 million in cash. See 16(u). Thus, there is probable cause that Cohen took at least some documents and evidence relating a S?lij'eEtPfeEisesTil: in orderto arrange-ana- consult them in connection with these negotiations. c. As described above, Cohen used at least one Apple iPhone, an Apple iPad Mini, and a MacBoolc Pro to access his iCloud account, and these electronic devices linked to Cohen?s iCloud account were used at Subject Premises-l Cohens? permanent residence - to place telephone calls and backup ?les to Cohen?s iCloud account. See supra 111] 47(i). Although Cohen?s stay at Subject Premisesatl is temporary, based on my twining and experience I know that individuals who travel or stay in hotels for short-term periods commonly bring portable electronic devices with them, such as cellular phones, tablets, or laptops. Accordingly, there is probable cause to believe that Subject Premises~4, where Cohen currently appears to be residing, contains electronic devices, including Subject Device-1, Subject Device-2, andfor certain Apple products, that for the reasons discussed herein are likely to contain evidence of the Subject Offenses. d. Moreover, as set forth above, based on cellphone location information I know that Subject Device-1 and Subject Device-2 Were in the vicinity of Subject Premises-4 as recently as this morning (April 8, 2013). As set forth above there is probable cause to believe that Cohen used the Subject Devices in furtherance of the Subject Offenses, including to communicate with Sterling employees regarding the medallion transaction, with First Republic employees regarding 63 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 171 of 269 the Essential Consultants Account, with his accountant regarding his ?nances, and with 52. Although Cohen appears to be residing currently in Subject Premises?4, it is unknown whether Cohen will be physically present within Subject Premises-4 at the moment the warrant sought herein are executed. If Cohen is within Subject Premises-4 at that moment, Subject Device?1 and Subject Device-2 his cellphones A will liker also be within Subject Premises-4. IfCohen is not within Subject Premisesfat on his perso wherever he is located (which, based on location data for Subject Device-l and Subject Device-2 as recently as today, is liker to be in the Southern District of New York). As such, this wan-ant seeks separate authority to seize Subject Device] and Subject Device?2, in the event that those devices are not located within Subject Premises-4 (or another Subject Premises) at the moment the warrants sought herein are executed. D. Probable Cause Justifying Search of E81 53. Based on the foregoing, there is probable cause to believe that Subject Premises-l, Subject Premises-2 and Subject Premises?4 contain electronic devices that are liker to contain evidence, fruits, and instrumentalities of the Subject Offenses (and, as set forth above, that Subject Device-1 and Subject Device-2 are themselves electronic devices that are likely to contain evidence of the Subject Offenses). Speci?cally, based on my review of information produced pursuant to the Cohen Email Warrants, the iCloud Warrant, and subpoenas, as well as pen register data, 1 submit that there is probable cause that Subject Premises?1 contains an Apple iPad Mini, 21 MacBook Pro, and has, at various times, contained Apple cellphones; similarly, there is probable cause that Subject Premisesv2 contains a computer and has, at various times, contained Apple 69 2017.03.92 T?jrv??I?qml- Case Document 43-1 Filed 03/19/19 Page 172 of 269 cellphones. These devices are liker to include evidence, fruits, and of the Subject Offenses for the following reasons: a. As described throughout this af?davit, Cohen used email to send and receiVe communications related to the Subject Offenses. In particular, Cohen used email to send and receive communications with Sterling, First Republic- the entities to which he is providing consulting services?among others. While some of these emails have Emir-Helm obtaine?d?wa subpoenas and'search?watta'?t?s, I Know 'r?jftfail?ifg?and?experience that individuals can and do delete emails from their Internet-based inboxes but retain copies of these emails on their hard drives. I also know that individuals often have multiple email accounts, some of which mayr not be intovvn to law enforcement, and as a result electronic devices can be a unique repository of all emails relevant to certain Subject Offenses. Indeed, from my involvement in this investigation, I know that Cohen had an email account with the Organization, but the USAO and FBI have not been able to obtain the contents of that account to date. Thus, emails relevant to the Subject Offenses are liker stored on electronic devices in Subject Premises-1, Subject Premises~2 and/or Subject Premises-4. b. Additionally, Subject Premises-l, Subject Premise-2 and Subject Premises?4 likely contain electronic copies of documents relevant to the Subject Offenses. Indeed, I know from my training and experience that individuals often retain copies of important documents on their computers or other electronic devices capable of storing information, including cellphones (such as the Subject Devices) and tablets. Here, there are a number of documents that Cohen has lilter retained that will be relevant to the Subject Offenses. For example, electronic devices may include documentation of Cohen?s true net worth, a listing of his assets, an accounting of his available 70 201108.02 -ul "rl?T" Case Document 43-1 Filed 03/19/19 Page 173 of 269 cash, consulting agreements with third parties, and among other evidence of the Subject Offenses. c. Third, I know from my review of emails obtained pursuant to the Cohen Email Warrants that Cohen sent up online banking with First Republic. Based on my training and experience, 1 know that individuals who set up online banking often receive electronic notices concerning ?nancial transactions and, on occasion, save records of their ?nancial transactions to their devices. Accordingly, there is {amiable cause to Relieve that?Cohen?s elect?iic?devices contain evidence of banking activity, including the existence of bank accounts or assets that Cohen did not disclose to Sterling or Melrose. d. Fourth, from my review of records produced by Apple, I know that Cohen communicates using text message as well as communications applications. These applications that Cohen has downloaded onto a phone include, but are not limited to, WhatsApp, Signal, and Dust. I know from my review of toll records and text messages that, in particular, Cohen communicated with -ising these applications. Accordingly, there is probable cause to believe that Cohen?s cellphones 4 the Subject Devices will contain messages that are not otherwise accessible relating to the Subject Offenses. 54. Based on my training and experience, I know that individuals who engage in ?nancial crimes commonly use computers to communicate with co-conspirators, keep ?nancial lodgers, and retain fraudulent documents. As a result, they often store data on their computers related to their illegal activity, which can include logs of online or cellphone-based ?cha with co?conspirators; email correspondence; contact information of co-conspirators, including telephone numbers, email addresses, and identi?ers for instant messaging and social medial accounts; bank account numbers; andfor records of uses of funds. 71 201103.02 Case Document 43-1 Filed 03/19/19 Page 174 of 269 55. Based on my training andexperience, I also know that, where computers are used in furtherance of criminal activity, evidence of the criminal activity can o?en be found months or even years after it occurred. This is typically true because: 56. Electronic ?les can be stored on a hard drive for years at little or no cost and users thus have little incentive to delete data that may be useful to consult in the future. Even when a user does choose to delete data, the data can often be recovered months or years later with the appropriate forensic tools. When a ?le is ?deleted? on a home computer, the data contained in the ?le does not actually disappear, but instead remains on the hard drive, in ?slack-space,? until it is overwitten by new data ma?a-last ss? stcred elsewhere on the computer. Similarly, ?les that have been viewed on the Internet are generally downloaded into a temporary Internet directory or ?cache,? which is only overwritten as the ?cache? ?lls up and is replaced with more recently viewed Internet pages. Thus, the ability to retrieve from a hard drive or other electronic storage media depends less on when the ?le was created or viewed than on a particular user?s operating system, storage capacity, and computer habits. In the event that a user changes computers, the user will typically transfer ?les from the old computer to the new computer, so as not to lose data. In addition, users often keep backups of their data on electronic storage media such as thumb drives, ?ash memory cards, CD-ROMs, or portable hard drives. Based on the foregoing, I respect?illy submit there is probable cause to believe that Cohen engaged in the Subject Offenses, and that evidence of this criminal activity is likely to be found in the Subject Premises, on computers and electronic media found in the Subject Premises, and on the Subject Devices. In particular, there is probable cause to believe that the Subject Premises and Subject Devices will contain evidence, fruits, and instrumentalities of violations of the Subject Offenses, as more ?illy described in Section II of Attachments A, B, C, D, and to the proposed warrants, including the following: a. Evidence necessary to establish the occupancy or ownership of the Subject Premises, including without limitation, utility and telephone bills, mail envelopes, addressed correspondence, bank statements, identification documents, and keys. 201108.02 b. Evidence relating to Sterling, Melrose, andfor taxi medallions. 72 ?r an Case Document 43-1 Filed 03/19/19 Page 175 of 269 c. Evidence relating to. a plan, proposal, or agreement for Cohen andfor entities associated with him to transfer any interest in taxi medallions, and any associated debts or liabilities, to others, including to _ndfor entities associated with him. d. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling andfor Maltese. e. Evidence relating to Essential Consultants, LLC, including any documents that hidicate the nature and?purp?e Ef??ments made ?lm?horn Essen??l?Cons?ult?ahts? or i?e' nature of any work done by Cohen or any other individuals in connection with Essential Consultants. f. Evidence of income to Michael D. Cohen Associates, including any documents that indicate the nature and purpose of payments made to or item Michael D. Cohen dc: Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen an Associates. g. Evidence relating to Cohen?s net worth, available cash and cash equivalents, and annual income, income sources, and other assets, whether held personally or through entities, including tax returns, personal ?nancial statements, and bank records. 11. Evidence relating to agreements, loans, and/or ?nancial transactions between Cohen. and_ and any payments try-:0 Cohen. 73 201108.02 Case Document 43-1 Filed 03/19/19 Page 176 of 269 p. Communications with others, including-audior other accountants, relating to Cohen?s bank accounts, taxes, debts, and/or ?nances; q. Communications, records, documents, and other ?les re?ecting false representations to a ?nancial institution related to the intended pmpose of an account or loan at that ?nancial instimtion; the nature of any business or entity associated with an account at a ?nancial institution; the source of funds ?owing into an account; or the purpose or nature of any financial transactions involving that financial institution; Evidenee of Cohen?s intent as it relates to the Suhieot b??enses under investigation. Procedures for Searching ESI A. Execution of Warrant for E81 57. Federal Rule of Criminal Procedure provides that a warrant to search for and seize property ?may authorize the seizure of electronic storage media or the seizure or 74 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 177 of 269 copying of electronically stored information . . . for later review.? Consistent with Rule 41, this application requests authorization to seize any computer devices and storage media and transport them to an appropriate law enforcement facility for review. This is typically necessary for a number of reasons: a First, the volume of data on computer devices and storage media is often impractical for law enforcement personnel to review in its entirety at the search location. a Second, because computer data is particularly vulnerable to inadvertent or intentional modi?cation or destruction, coi?pmer de_vices are?ideally Examined?in a?coTiutoll'ed environment, such as a law enforceth laboratory, where trained personnel, using specialized software, can make a forensic copy of the storage media that can be subsequently reviewed in a manner that does not change the underlying data. I Third, there are so many types of computer hardware and software in use today that it can be impossible to bring to the search site all of the necessary teohnical manuals and specialized personnel and equipment potentially required to safely access the underlying computer data. It Fourth, many factors can complicate and prolong recovery of data from a computer device, including the increasingly common use of passwords, or other features or con?gurations designed to protect or conceal data on the computer, which often talre considerabletime and resources for forensic personnel to detect and resolve. 58. As discussed herein, Squire Patton Boggs is a functioning law firm that conducts legitimate business unrelated to Cohen?s commission of the Subject Offenses. Subject Premises- 2 is an of?ce located inside of Squire Patton Boggs?s New York of?ce. In order to execute the warrant in the most reasonable fashion, law enforcement personnel will attempt to investigate on the scene ofwhat computers or storage media, if any, must be seized or copied, and what computers or storage media used not be seized or copied. Law enforcement personnel will speak with Squire Patton Boggs personnel on the scene as may be appropriate to determine which ?les and electronic devices within Subject Premises-2 belong to or were used by Cohen. While, based on the foregoing, it does not appear that Cohen shared electronic devices or a server with Squire Patton Boggs, where appropriate, law enforcement personnel will copy data, rather than physically seize i5 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 178 of 269 computers, to reduce the extent of any disruption of Squire Patton Boggs?s operations. 11", after i inspecting the seized computers off?site, it is determined that some or all of this equipment is no longer necessary to retrieve and preserve the evidence, the GoVernrnent will return it. 59. Additionally, because Cohen is an attorney, and claims to serve as a personal attorney for Trump, the review of evidence seized from the Subject Premises and Subject Devices will be conducted pursuant to established screening procedures to ensure that the law enforcement personnel involved in the investigation, including attorneys for the Govermnent; in a manner reasonably designed to protect any attorney?client or other applicable privilege. When appropriate, the procedures will include use of a designated ??lter team,? separate and apart from the investigative team, in order to review potentially privileged communications and detet'mine which communications to release to the investigation and prosecution team. B. Accessing ESI on the Subject Devices 60. As described above, the Subject Devices are both Apple brand devices. 61. I know from my trainhrg and experience, as well as from information found in publicly available materials including those published by Apple, that some models of Apple devices such as iPhones and iPads o?'er their users the ability to unlock the device via the use of a ?ngerprint or thumbprint (collectively, ??nger-print?) in lieu of a numeric or alphanumeric passcode or password. This feature is called Touch ID. I also know that the Apple iPhone offers its users the ability to unlock the device via the use of facial recognition (through infrared and visible light scans) in lieu of a ntnneric or alphanumeric passcode or password. This feature is called Face 62. If a user enables Touch ID on a given Apple device, he or she can register up to 5 ?ngerprints that can be used to unlock that device. The user can then use any of the registered 76 201T.DS.G2 Case Document 43-1 Filed 03/19/19 Page 179 of 269 ?ngerprints to unlock the device by pressing the relevant ?nger(s) to the device?s Touch ID sensor, which is found in the round button (often referred to as the ?home? button) found at the bottom center of the front of the device. If a user enables Face ID on a given Apple device, he or she can unlock the device by raising the iPhcne to his or her face, or tapping the screen. In my training and experience, users of Apple devices that offer Touch or Face ID often enable it because it is considered to be a more convenient way to unlock the device than by entering a numeric or ?ami13r?sscode 61- pasm?asa more s?ecunc?wa?ymtect t?dms?intents. 63. In some circumstances, Touch ID or Face ID cannot be used to unlock a device that has either security feature enabled, and a passcode or password must be used instead. These circumstances include: (1) when the device has just been turned on or restarted; (2) when more than 48 hours has passed since the last time the device was unlocked; (3) when the passcode or password has not been entered in the last 6 days, and the device has not been unlocked via Touch ID in the last 8 hours or the device has not been unlocked via Face ID in the last 4 hours; (4) the device has received a remote leek command; or ?ve unsuccess?ll attempts to unlock the device via Touch ID or Face ID are made. 64. The or passwords that would unlock the Subject Devices are not known to law enforcement. Thus, it will likely be necessary to press the ?ngers of the User of the Subject Devices to the devices? Touch ID sensor, or hold the Subject Devices in front of the user's face to activate the Face ID sensor, in an attempt to unlock the devices for the purpose of executing the search authorized by this warrant. Attempting to unlock the releVant Apple devices via Touch ID with the use of the ?ngerprints of the user, or via Face ID by holding the device in front of the user?s face, is necessary because the goverrunent may not otherwise be able to access the data contained on those devices for the purpose of executing the search authorized by this warrant. 77 1017.03.02 - ~1r II - Case Document 43-1 Filed 03/19/19 Page 180 of 269 65. Based on these facts and my training and experience, it is likely that Cohen is the user of the Subject Devices, and thus that his ?ngerprints are among those that are able to unlock the Subject Devices via Touch ID or his face is able to unlock the Subject Devices via Face 1D. 66. Although I do not [mow which of a given user?s 10 ?ngerprints is capable of unlocking a particular device, based on my training and experience lknow that it is common for a user to unloclca Touch ID-enabled Apple device via the ?ngerprints on thumbs or index ?ngers. ?Iu the eveh?l?t lav?v Dairies above within the ?ve attempts permitted by Touch 1D, this will simply result in the device requiring the entry of a password or passeode before it can be unlocked. 67. I also [mow from my training and experience, and my review of publicly available materials published by Apple that Apple brand devices, such as the Subject Devices, have a feature that allows a user to erase the contents of the device remotely. By logging into the Internet, the user or any other individual who possesses the user?s account information can take steps to completely wipe the contents of the device, thereby destroying evidence of criminal conduct, along with any other information on the device. The only means to prevent this action is to disable the device?s ability to connect to the Internet immediately upon seizure, which requires either access to the device itself to alter the settings, or the use of specialized equipment that is not consistently available to law enforcement agents at every arrest. 68. Due to the foregoing, I request that the Court authorize law enforcement to press the ?ngers (including thumbs) of Cohen to the Touch sensors the Suhj ect Devices, or hold the Subject Devices in front of Cohen?s face, for the purpose of attempting to unlock the Subject Devices via Touch ID or Face ID in order to search the contents as authorized by this warrant. ?8 201103.02 Case Document 43-1 Filed 03/19/19 Page 181 of 269 Review of 69. Following seizure of any computer devices and storage media andfor the creation of forensic image copies, law enforcement personnel (including, in addition to law enforcement o?icers and agents, and depending on the nature of the E81 and the status of the investigation and related proceedings, attorneys for the goVernment, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government for the 70. In conducting this review, law enforcement personnel may use various techniques to determine which ?les or other contain evidence or fruits of the Subject Offenses. Such techniques may include, for example: 0 surveying directories or folders and the individual ?les they contain (analogous to looking at the outside of a ?le cabinet for the markings it contains and opening a drawer believed to contain pertinent ?les); 0 conducting a ?le-by-?le review by ?opening? or reading the ?rst few ?pages? of such ?les in order to determine their precise contents (analogous to performing a cursory examination of each document in a ?le cabinet to determine its relevance); 0 ?scanning? storage areas to discover and possibly recover recently deleted data or deliberately hidden ?les; and a performing electronic keyword searches through all electronic storage areas to determine the existence and location of data potentially related to the subject matter of the investigation?; and reviewing metadata, system information, con?guration ?les, registry data, and any other information re?ecting how, when, and by whom the computer vras used. 3? KeyWord searches alone are typically inadequate to detect all relevant data. For one thing, keyword searches work only for text data, yet many types of ?les, such as images and videos, do not store data as searchable text. Moreover, even as to text data, there may be information properly subject to seizure but that is not captured by a keyword search because the information does not contain the keywords being searched. 79 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 182 of 269 71. Law enforcement persormel will make reasonable efforts to restrict their search to data falling within the categories of evidence speci?ed in the warrant. Depending on the however, law enforcement personnel may need to conduct a complete review of all the E81 from seized devices or storage media to evaluate its contents and to locate all data responsive to the warrant. D. Return "if a: the necessms-?- to retrieve and preserve the data, and the devices themselves are not subject to seizure pursuant to Federal Rule of Criminal Procedure 41(c), the Government will return these items, upon request. Computer data that is or unreadable will not be returned unless law enforcement personnel have determined that the data is not an instrumentality of the offense, (ii) a fork of the criminal activity, contraband, (iv) otherwise unlawfully possessed, or evidence of the Subject Offenses. 30 201103.02 Case Document 43-1 Filed 03/19/19 Page 183 of 269 IV. Conclusion and Ancillary Provisions 73. Based on the foregoing, I respectfully request the court to issue a warrant to seize the items and information speci?ed in Attachments A, B, C, D, and to this af?davit and to the Search and Seizure Warrants. 74. In light of the con?dential nature of the continuing investigation, I respectfully request that this affidavit and all papers submitted herewith he maintained under seal until the mm"? ?m Sworn to before me on 3th day of April, 20.18 Him?; HON. HENRY 13. PITMAN UNITED STATES molsrasts JUDGE 31 201103.02 -. Case Document 43-1 Filed 03/19/19 Page 184 of 269 ATTACHMENT A I. Premises to he Searched?Subj act Premises-1 The premises to be searched (?Subject Premises-1?) are described as follows, and include electronic devices, and all locked and closed containers found therein: Apartment .located inside the building at 502 Park Avenuo, New York, New York 10022. The building located at 502 Park Avenue is a SZ-?oor brick residential building. Subject Premises-l is located on the the building. 11. Items to Be Seized A. Evidence, Fruits, and Instrumentalities of the Subject Offenses The items to be seized from Subject Premises-1 are evidence, ?'uits, and insu'umeutalities of violations of 18 371 (conspiracy, as it pertains to the other Subject Offenses), 1005 (false bank entries), 1014 (false statements to a ?nancial institution), 1343 (wire fraud), and 1344 (bank fraud), and 52 U.S.C. 3tll and 30109(d)(l)(A)(l) (illegal campaign contributions) (the ?Subject Offenses?), described as follows: a. Evidence relating to Sterling National Bank, Melrose Credit Union, andi?or taxi medallions, ?om January 1, 2013 to the present. b. Evidence relating to a plan, proposal, or agreement for Michael Cohen andfor entities associated with him to transfer any interest in taxi medallions, and any associated debts or liabilities, to others, including to _andlor entities associated with him. c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling andr?or Melrose. d. Evidence relating to Essential Consultants, LLC, including any documents that indicate the nature and purpose of payments made to or ?'om Essential Consultants or the nature of any work done by Cohen or any other individuals in connection with Essential Consultants. e. Evidence of income to Michael D. Cohen Associates, including any documents that indicate the nature and purpose of payments made to or ?om Michael D. Cohen .35 Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen tit Associates. f. Evidence relating to Cohen?s net worth, available cash and cash equivalents, and annual income, income sources, and other assets, whether held personally or through entities, including tax returns, personal ?nancial statements, and bank records, from January I, 2013 to the present. g. Evidence relating to agreements, loans, and/or ?nancial transactions between Cohen and?andfor entities controlled by the? 2 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 185 of 269 l, 2612b the present. ?n o. Communications with others, including?audio!? Dille accountants: relating to Cohen's bank accounts, taxes, debts, andfor ?nances, ?rom January 1, 201.3 to the pre sont. p. Communications, records, documents, and other ?les re?ecting false representations to a ?nancial institution related to the intended purpose of an account or loan at that ?naneial institution; the nature of any business or entity associated with an account at a ?nancial institution; the source of funds ?owing into an account; or the purpose or nature of any ?nancial transactions involving that ?nancial institution, from anuary 1, 2013 to the present. q. Evidence of Cohen?s intent as it relates to the Subject Offenses under investigation. B. Search and Seizure of Electronically Stored Information I The items to be seized ??om SubjectPremises?l also include any computer devices and storage media that may contain any electronically stored information falling within the categories set forth in Section ILA of this Attachment above, including, but not limited to, a MacBook Pro, any other desktop and laptop computers, anyr Apple iPhone or other cellphone or smartphone 3 2017.08.02 Case Document 43-1 Filed 03/19/19 Page 186 of 269 belonging to Michael Cohen or in his possession, an Apple iPad Mini, portable hard drives, disk drives, thumb drives, and personal digital assistants. In lieu of seizing any such computer devices or storage media, this warrant also authorizes the copying of such devices or media for later review. The items to be seized from Subject Premises-1 also include: 1. Any items or records needed to access the data stored on any seized or copied computer devices or storage media, including but not limited to any physical keys, devices, or records of login credentials, passwords, private keys, or similar information. HI Any items or records that may facilitate a forensic examination of the computer devices or storage media, including any hardware or software manuals or other information the cgn?guyation-nf?the seized or- ccpied?ccmputer?deviws Or-StOITagB-me?ia- -- 3. Any evidence concerning the identities or locations of those persons with access to, control over, or ownership of the seized or copied computer devices or storage media. C. Review of ESI Following seizure of any computer devices and storage media and/or the creation of forensic image copies, law enforcement personnel (which may include, in addition to law enforcement of?cers and agents, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the E31 contained therein for information responsive to the warrant. In conducting this review, law enforcement personnel may use various techniqUes to locate information responsive to the warrant, including, for example: 20 103.02 surveying various ?le ?directories? and the individual ?les they contain (analogous to looking at the outside ofa ?le cabinet for the markings it contains and opening a drawer believed to contain pertinent ?les) ,3 opening or cursorily reading the ?rst few ?pages? of such ?les in order to determine their precise contents; scanning storage areas to discover and possibly recover recently deleted ?les or deliberately hidden ?les; performing key word searches through all electronic storage areas to determine whether occurrences of language contained in such storage areas exist that are intimately related to the subject matter of the investigation; and reviewing metadata, system information, configuration ?les, registry data, and any other information re?ecting how, when, and by whom the computer was used. -1, Case Document 43-1 Filed 03/19/19 Page 187 of 269 Law enforcement personnel will make reasonable efforts to search only for ?les, documents, or other electronically stored information within the categories identi?ed in Sections ILA and ILB of this Attaclnnent. However, law enforcement personnel are authorized to conduct a complete review of all the BSI from seized devices or storage media if necessary to evaluate its contents and to locate all data responsive to the warrant. Additionally, review of the items described in this Attachment shall be conducted pursuant to established procedures designed to collect evidence in a manner reasonably designed to protect any attorney-client or other applicable privilege. When appropriate, the procedures shall include use of a designated ??lter team,? separate and apart from the investigative team, in order to address potential privileges. 201103.02 911n- W1: a Case Document 43-1 Filed 03/19/19 Page 188 of 269 ATTACHMENT I. Premises to be Searched?Snbj ect Premises-2 The premises to be searched (?Subject Premises?2?] are described as follows, and include electronic devices, and all looked and closed containers found therein: An of?ce belonging to or assigned to Michael Cohen located on the 23rd ?oor of the building at 30 Rockefeller Plaza, New York, New York 101 12, inside of the of?ces of the law firm Squire Patton Boggs. The building located at 30 Rockefeller Plaza is a (id-?oor of?ce building that spans the entire block between Sixth Avenue and Rockefeller Plaza. '11. [tomato?Bem?U A. Evidence, Fruits, and Instrumentalitie of the Subject Offenses The items to be seized from Subject Premises-2 are evidence, fruits, and instrumentalities of violations of 18 U.S.C. 371 (conspiracy as it pertains to the other Subject O?enses), 1005 (false bank entries), 1014 (false statements to a ?nancial institution), 1343 (Wire fraud), and 1344 -- (bank fraud), and 52 U-S.C. 30116(a)(1)(A) and 30109(d)(1)(A)(1) (illegal campaign contributions) (the ?Subiect Offenses?) described as follows: a. Evidence relating to Sterling National Bank, Melrose Credit Union, and/or taxi medallions, from January 1, 2013 to the present. b. Evidence relating to a plan, pro posal, or agreement for Michael Cohen andfor entities associated with him to transfer anv interest in taxi medallions, and any associated debts or liabilities, to others, including to indfor entities associated with him. c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling andfor Melrose. d. Evidence relating to Essential Consultants, LLC, including any documents that indicate the nature and purpose of payments made to or ?'orn Essential Consultants or the nature of any work done by Cohen or any other individuals in connection with Essential Consultants. e. Evidence of income to Michael D. Cohen ?is Associates, including any documents that indicate the nature and purpose of payments made to or from Michael D. Cohen Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen 4&3 Associates. f. Evidence relating to Cohen?s at worth, available cash and cash equivalents, and annual income, income sources, and other assets, whether held personally or through entities, including tax returns, personal ?nancial statements, and bank records, ??om January 1, 2013 to the present. of Evidence relating to agreements, loans, and/or financial tr audior entities controlled by Cohen and 201103.02 ansactions between 6 Case Document 43-1 Filed 03/19/19 Page 189 of 269 ?andanypamems ivy-wanes summary 1, 2612 to the present. o. Communications with others, including?andfor other accountants, relating to Cohen?s bank accounts, taxes, debts, and/or ?nances, from January 1, 2013 to the present. p. Communications, records, documents, and other ?les re?ecting false representations to a ?nancial institution related to the intended purpose of an account or loan at that ?nancial institution; the nature of any business or entity associated with an account at a ?nancial institution; the source of funds ?owing into an account; or the purpose or nature of any ?nancial transactions involving that ?nancial institution, from January 1, 2013 to the present. q. Evidence of Cohen?s intent as it relates to the Subject Offenses under investigation. B. Search and Seizure of Electronically Stored Information The items to be seized from Subject Promises-2 also include any computer devices and storage media that may contain any electronically stored information falling within the categories set forth in Section ILA of this Attachment above, including, but not limited to, any desktop and laptop computers, any Apple iPhone or other cellphone or smartphone belonging to Michael Cohen 7 cannon: Case Document 43-1 Filed 03/19/19 Page 190 of 269 or in his possession, portable hard drives, disk drives, thumb drives, and personal digital assistants. In lieu of seizing any such computer devices or storage media, this Warrant also authorizes the copying of such devices or media for later review. The items to be seized from Subject Premises-2 also include: 1. Any items or records needed to access the data stored on any seized or copied computer devices or storage media, including but not limited to any physical keys, devices, or records of login credentials, passwords, priVate keys, or similar information. 2. Any items or records that may facilitate a forensic examination of the computer [iflipESuC?Jl? stor? media, including any hardware or software manuals or other information concerning the con?gui?io?nof the or 3. Any evidence concerning the identities or locations of those persons with access to, control over, or ovmership of the seized or copied computer devices or storage media. C. Review of ESI Following seizure of any computer devices and storage media and/or the creation of forensic image copies, law enforcement personnel (widch may include, in addition to law enforcement of?cers and agents, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the 1381 contained therein for information responsive to the warrant. In conducting this review, law enforcement personnel may use various techniques to locate information responsiVe to the warrant, including, for example: - surveying various ?le ?directories? and the individual files they contain (analogous to looking at the outside of a ?le cabinet for the markings it contains and opening a dravver believed to contain pertinent ?les); I opening or cursorin reading the ?rst few ?pages? of such ?les in order to determine their precise contents; a scanning storage areas to discover and possibly recover recently deleted ?les or deliberately hidden ?les; I performing key word searches through all electronic storage areas to determine whether occturences of language contained in such storage areas exist that are intimately related to the subject matter of the investigation; and reviewing metadata, system information, con?guration ?les, registry data, and any other information reflecting how, when, and by whom the computer was used. 201108.02 Case Document 43-1 Filed 03/19/19 Page 191 of 269 Law enforcement personnel will make reasonable efforts to search only for ?les, documents, or other electronically stored information within the categories identi?ed in Sections 11A and HE of this Attachment. However, law enforcement personnel are authorized to conduct a complete review of all the E81 from seized devices or storage media if necessary to evaluate its contents and to locate all data responsive to the warrant. Additionally, review of the items described in this Attachment shall he conducted pursuant to established procedures designed to collect evidence in a manner reasonany designed to protect any attomey?client or other applicable privilege. When appropriate, the procedures shall include use of a designated ??lter team," separate and apart iron] the investigative team, in order to address potential privileges. 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 192 of 269 ATTACHZNIENT Premises to he Searched?Subject Premises-3 The premises to be searched (?Subject Premises-3?) are described as follows, and include all locked and closed containers found therein: A safe deposit box located inside the TD Bank branch location at 500 Park Avenue, New York, New York 10019, marked as box t. The safe deposit box is in the natue of Michael Cohen and Laura Cohen. 11. Items to Be Seized A. Evidence, Fruits, and Instrumentalities of the Subject Offenses The items to be seized from Subject Premises~3 are evidence, fruits, and instrumentalities of violations of 13 U.S.C. 371 (conspiracy as it pertains to the other Subject 1065 (false bank entries), 1014 (false statements to a ?nancial institution), 1343 (wire fraud), and 1344 (bank fraud), and .52 U.S.C. and 30109(d)(l)(A)(1) (illegal campaign contributions) (the ?Subject Offenses?), deseribed as follows: 1. Evidence relating to Michael Cohen?s net worth, aVailahle cash and cash equivalents, assets, and annual income, and income sources, ?om January 1, 2013 to the ?who phi? ll] 2u17nsnz .. Case Document 43-1 Filed 03/19/19 Page 193 of 269 9. Any portable electronic storage device. B. Search of Seized Electronic Devices Probable cause exists to search any seized electronic storage device for the items set forth in Section above. C. Review of ESI Following seizure of any electronic storage device, law enforcement personnel (which may include, in addition to law enforcement of?cers and agents, attorneys for the governmmit, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under govermnent control) are authorized to review the E31 contained therein for information responsive to the warrant. In conducting this review, law enforcement personnel may use various techniques to locate information responsive to the warrant, including, for example: I surveying various ?le ?directories? and the individual ?les they contain (analogous to looking at the outside of a ?le cabinet for the markings it contains and opening a drawer believed to contain pertinent ?les); I opening or cursorin reading the ?rst few ?pages? of such ?les in order to determine their precise contents; I scanning storage areas to discover and possibly recover recently deleted ?les or deliberately hidden ?les; 0 performing key word searches through all electronic storage areas to determine whether occurrences of language contained in such storage areas exist that are intimately related to the subject matter of the investigation; and - reviewing metadata, system information, con?guration ?les, registry data, and any other information re?ecting how, when, and by whom the computer was used. Law enforcement personnel will make reasonable efforts to search only for ?les, documents, or other electronically stored information within the categories identi?ed in Sections and 11.3 of this Attachment. However, law enforcement personnel are authorized to conduct a complete review of all the ESI from seiZed devices if necessary to evaluate its contents and to locate all data responsive to the warrant. Additionally, review of the items described in this Attachment shall be conducted pursuant to established procedures designed to collect evidence in a manner reasonably designed to protect 1 1 2011mm Case Document 43-1 Filed 03/19/19 Page 194 of 269 any attorney-client or other applicable privilege. When appropriate, the procedures shall include use of a designated ??lter team,? separate and apart from the investigative team: in order to address potential privileges. 12 2010.03.02 up Case Document 43-1 Filed 03/19/19 Page 195 of 269 ATTACHMENT I. Premises to he Searched??Subj eet Premises-4 The premises to be searched (?Subject Premises-4?) are described as follows, and include electronic devices, and all looked and closed containers found therein: Room 1728 located inside the Loews Regency Hotel at 540 Park Avenue, New York, New York 10065. The building is a luxury hotel located on Park Avenue and diet Street. Subject Premises?4 is located on the 17th ?oor of the hotel. E. Items t1 Be Seized A. Evidence, Fruits, and Instrumentalities of the Subject Offenses The items to be seized from Subject Premises-4 are evidence, fruits, and insnumentalities of violations of 18 U.S.C. 3'71 (conspiracy, as it peltains to the other Subject Offenses), 1005 (false hank entries}, 1014 (false statements to a ?nancial institution), 1343 (wire fraud), and 1344 (bank ?ned), and 52 U.S.C. 30116(a)(1)(A) and 30109(d)(1)(A)(l) (illegal campaign conn'ibutions) (the ?Subject O??enses?), described as follows: a. Evidence relating to Sterling National Bank, Melrose Credit Union, andfor taxi medallions, from January 1, 2013 to the present. b. Evidence relating to a plan, proposal, or agreement for Michael Cohen andfor entities associated with him to transfer anv interest in taxi medallions, and any associated debts or liabilities, to others, including to mdfor entities associated with him. c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling and/or Melrose. d. Evidence relating to Essential Consultants, LLC, including any documents that indicate the nature and purpose of payments made to or from Essential Consultants or the nature of an},r work done by Cohen or any other individuals in connection with Essential Consultants. e. Evidence of income to Michael D. Cohen dc: Associates, including any documents that indicate the nature and purpose of payments made to or from Michael D. Cohen 61: Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen Associates. f. Evidence relating to Cohen?s net worth, available cash and cash equivalents, and annual income, income sources, and other assets, whether held personally or through entities, including tax returns, persona] ?nancial statements, and bank records, ?-om January 1, 2013 to the present. g. Evidence relating to agreements, loans, and/or ?nancial transactions betWeen Cohen and?alder entities controlled by 1 3 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 196 of 269 ?md any payments by _to Cohen ?om January 1,5612 to} the present. o. Communications with others, including ?andfor other accountants, relating to Cohen?s bank accounts, taxes, debts, and/or ?nances, from January 1, 2013, to the present. p, Communications, records, documents, and other ?les re?ecting false repreSentations to a ?nancial institution related to the intended purpose of an account or loan at that ?nancial institution; the nature of any business or entity associated with an account at a ?nancial institution; the source of funds ?owing into an account; or the purpose or nature of any ?nancial transactions involving that ?nancial institution, from January 1, 2013 to the present. q. Evidence of Cohen? a intent as it relates to the Suhj ect Offenses under investigation. B. Search and Seizure of Electronically Stored Information The items to be seined from Subject Premises-4 also include any computer devices and storage media that may contain any electronically stored information falling Within the categories set forth in Section ILA of this Attachment above, including, but not limited to, a MacBook Pro, any other desktop and laptop computers, any Apple iPhone or other cellphone or smartphone 14 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 197 of 269 belonging to Michael Cohen or in his possession, an Apple iPad Mini, portable hard drives, disk drives, thumb drives, and personal digital assistants. In lieu of seizing any such computer devices or storage media, this warrant also authorizes the copying of such devices or media for later review. The items to be seized from Subject Premises-4 also include: 1. Any items or records needed to access the data stored on any seized or copied computer devices or storage media, including but not limited to any physical keys, devices, or records of login credentials, passvvords, private keys, or similar information. 2. Any items or records that may facilitate a forensic enamination of the computer devices or storage media, including any hardware or software manuals or other information concerning th?oifiguration of the seized ci- copied?ccmputer devices"or'storage'media: 3. Any evidence concerning the identities or locations of those persons with access to, control over, or ownership of the seized or copied computer devices or storage media. C. Review of ESI Following seizure of any computer devices and storage media and/or the creation of forensic image copies, law enforcement personnel. (which may include, in addition to law enforcement of?cers and agents, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the E31 contained therein for information responsive to the warrant. In conducting this review, law enforcement personnel may use various techniques to locate information responsive to the warrant, including, for example: I surveying various ?le ?directories? and the individual ?les they contain (analogous to looking at the outside of a ?le cabinet for the markings it contains and opening a drawer believed to contain pertinent ?les]; - opening or cursorily reading the ?rst few ?pages? of such ?les in order to determine their precise contents; - scanning storage areas to discover and possibly recover recently deleted files or deliberately hidden ?les; a performing key word searches through all electronic storage areas to determine whether occurrences of language contained in such storage areas exist that are intimately related to the subject matter of the investigation; and reviewing metadata, system information, configuration ?les, registry data, and any other information reflecting how, when, and by whom the computer Was used. 15 2017.?8.02 . Case Document 43-1 Filed 03/19/19 Page 198 of 269 Law enforcement personnel will make reasonable efforts to search only for ?les, documents, or other electronically stored mformation within the categories identi?ed in Sections ILA and of this Attachment. However, law enforcement personnel are authorized to conduct a complete review of all the from seized devices or storage media if necessary to evaluate its contents and to locate all data responsive to the warrant. Additionally, review of the items described in this Attachment shall be conducted pursuant to established procedures designed to collect evidence in a manner reasonably designed to protect any attorney-client or other applicable privilege. When appropriate, the procedures shall include use of a designated ??lter team,? separate and apart from the investigative team, in order to address potential privileges. 16 201?.08?2 .. Case Document 43-1 Filed 03/19/19 Page 199 of 269 ATTACHMENT I. Device Subject to Search and Seizure Subject Device?1 The device that is the subject of this search and seizure warrant (?Subject Device-1?) is described as follows: An Apple iPhone serviced by with the telephone number- During the execution of this search warrant, law enforcement personnel are authorized to depress the ?ngerprints andfor thumhprints of Michael Cohen onto the Touch ID sensor of Subject Device- or hold Subject Device~1 in front of Cohen?s face to activate the Face ID sensor, in order t5 g?ai??c? teammate: b?y 't?ma?t? 11. Review of ESI on the Subject Device Law enforcement personnel (including, in addition to law enforcement of?cers and agents, and depending on the nature of the E31 and the status of the investigation and related proceedings, attorneys for the government, attorney support staff, agency personnel assisting the government in this hivestigation, and outside technical experts under government control) are authorized to review the E81 contained on Subject Device~1 for evidence, fruits, and instrumentalities of violations of 1 8 U.S.C. 371 (conspiracy as it pertains to the other Subject Offenses), 1005 (false bank entries), 1014 (false statements to a ?nancial institution), 1343 (wire fraud), and 1344 (bank fraud), and 52 U.S.C. 30116(a)(1)(A) and 30109(d)(1)(A)(1) (illegal carilpaign contributions) (the ?Subject Offenses?) described as follows: a. Evidence relating to Sterling National Bank, MelroSe Credit Union, andfor taxi medallions, from January 1, 2013 to the present. b. Evidence relating to a plan, proposal, or agreement for Michael Cohen andi?or entities associated with him to transfer any interest in taxi medallions, and any associated debts or liabilities, to others, including to _andfor entities associated with him. c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling andfor Melrose. d. Evidence relating to Essential Consultants, LLC, including any documents or communications that indicate the nature and purpose of payments made to or from Essential Consultants or the nature of any work done by Cohen or any other individuals in connection with Essential Consultants. e. Evidence of income to Michael D. Cohen Associates, including any documents or communications that indicate the nature and purpose of payments made to or from Michael D. Cohen Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen 8.: Associates. 17 2017.03.02 m?u?u?J Case Document 43-1 Filed 03/19/19 Page 200 of 269 f. Evidence relating to Cohen's net worth, available cash and cash equiVaIents, and annual income, income sources, and other assets, whether held personally or through entities, including tax returns, personal ?nancial statements, and bank records, from January 1, 2013 to the present. a. Evidence relating to agreements, loans, andfor ?nancial transactions between Cohen and ?andf?r entities coatm?ed by and any sealants by Comm ?rm? mm 2012 to the present. 0. Communications with others, including? and/Dr a?c?untantsi relating to Cohen?s bank accounts, taxes, debts, andfor ?nances, from January 1, 2013 to the present. p. Communications, records, documents, and other ?les re?ecting false representations to a ?nancial instimtion related to the intended purpose of an account or loan at that ?nancial institution; the nature of any business or entity associated with an account at a ?nancial institution; the source of funds ?owing into an account; or the purpose or nature of any ?nancial transactions involving that ?nancial institution, from January 1, 2013 to the present. 18 masses Case Document 43-1 Filed 03/19/19 Page 201 of 269 If the Government determines that Subject Device-l is no longer necessary to retrieve and preserve the data on the device, and that Subject Device-l is not subject to seizure pursuant to Federal Rule of Criminal Procedure 41(c), the Government will return Subject Device-1, upon request. Additionally, review of the items described in this Attachment shall be conducted pursuant to established procedures designed to collect evidence in a manner reasonably designed to protect any attorney-client or other applicable privilege. When appropriate, the procedures shall include use of a designated ??lter team,? separate and apart from the investigative team, in order to address potential privileges. 9 201 103.02 Case Document 43-1 Filed 03/19/19 Page 202 of 269 ATTACHMENT I. Device Subject to Search and Seizure Subject Device-2 The device that is the subject of this search and seizure warrant (?Subject Device-2?) is described as follows: An Apple iPhone serviced by with the telephone number- During the execution of this search warrant, law enforcement personnel are authorized to depress the ?ngerprints andfor thumbprints of Michael Cohen onto the Touch ID sensor of Subject or hold Subject Device?2 in front of Cohen?s face to activate ?1e Face ID sensor, in order to gain access to the contents?of any such II. Review of on the Subject Device Law enforcement personnel (including, in addition to law enforcement of?cers and agents, and depending on the nature of the E81 and the status of the investigation and related proceedings, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the E31 contained on Subject Device?2 for evidence, fruits, and insutunentalities of violations of 18 U.S.C. 371 (conspiracy as it pertains to the other Subject Offenses), 1005 (false bank entries), 1014 (false statements to a ?nancial institution), 1343 {wire fraud), and 1344 (bank ?end), and 52 U.S.C. 30116(a)(l)(A) and (illegal campaign contributions) (the ?Subject Offenses?) described as follows: a. Evidence relating to Sterling National Bank, Melrose Credit Union, andfor taxi medallions, from Januan)I l, 2013 to the present. b. Evidence relating to a plan, proposal, or agreement for Michael Cohen andfor entities associated with him to transfer any interest in taxi medallions, and any associated debts or liabilities, to others, including to andfor entities associated with him. c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling andfor Melrose. d. Evidence relating to Essential Consultants, LLC, including any documents or cormnunications that indicate the nature and purpose of payments made to or from Essential Consultants or the nature of any work; done by Cohen or any other individuals in connection with Essential Consultants. e. Evidence of income to Michael D. Cohen a: Associates, including any documents or conununications that indicate the nature and purpose of payments made to or from Michael D. Cohen its Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen 4% Associates. 20 201103.02 Case Document 43-1 Filed 03/19/19 Page 203 of 269 f. Evidence relating to Cohen's net worth, arailable cash and cash equivalents, and annual income, income sources, and other assets, whether held personally or through entities, including tax returns, personal ?rmneial statements, and bank records, from January 1, 2013 to the present. e. Evidence. relating to agreements, loans, and/or financial transactions between andfor entities controlled by and any payments by Cohen, from Janualy Cohen and 1,41?; to we present. 1U union 1 Upton Hug Equu manna, man unmym?u nun-u. 0. Communications with others, including and/or other accountants, relating to Cohen?s bank accounts, taxes, debts, ?nances, from January 1, 2013 to the present. p. records, documents, and other ?les re?ecting false representations to a ?nancial institution related to the intended purpose of an account or loan at that ?nancial institution; the nature of any business or entity associated with an account at a ?nancial institution the source of funds ?owing into an account; or the purpose or nature of any ?nancial transactions involving that ?nchial institution, from January 1., 2013 to the present. 21 201108.02 Case Document 43-1 Filed 03/19/19 Page 204 of 269 If the Government determines that Subject Device-2 is no longer necessary to retrieve and preserve the data on the device, and that Subject Device-2 is not subject to seizure pursuant to Federal Rule of Criminal Procedure 41(c), the Government will return Subject Device-2, upon request. Additionally, review of the items described in this Attachment shall be conducted pursuant to established procedures designed to collect evidence in a manner reasonably designed to protect any attorney-client or other applicable privilege. ?W?lien appropriate, the procedures shall include use of a designated ??lter team,? separate and apart from the inVestigative team, in order to address potential privileges. 22 2017.08.02 Case Document 43-1 Filed 03/19/19 Page 205 of 269 A0 93 (SDNY Rev. 051' 10] Search and Seizure warrant hull? UNITED STATES DISTRICT COURT ,1 for the Southern District of New York In the Matter of the Search of (Brie?y describe the property to be scorched - Hamil} the person by acres and address) Case 6 9 502 Parltevenue, Apartment. New York, New York 8 2 9 10022, and any closed contained - therein, See Attachment A SEARCH AND To: Any authorized law enforcement of?cer An application by a federal law enforcement of?cer or an attorney for the government requests the search of the following person or property located in the Southern District 01? New York {Marni}? the person or describe to be searched and give its location): 502 Park Avenue, Apartment .New York, New York 10022, and any closed containers?tems contained therein, See Attachment A The person or pt'opeity to be searched, described above, is believed to conceal (idem: the person or describe the m'oper'ot to be seized): See Attachment A I ?nd that the or any recorded testimony, establish probable cause to search and seize the person or property. I YOU ARE COMMANDED to execute this warrant on or before 13the daytime 6:00 am. to 10 pm. at any time in the day or night?ns ?nd-reasonable cause has been established. . . . 2. Unless delayed notice is authorized below, you must give a copy of the waxes and a the property taken to the person from whom, or from whose premises, the property was taken, Orleans the copy and receipt at the place where the property was taken. - .- I - The of?cer executing this warrant, or an of?cer present during the execution oi'the wanan artist prepare an inventon as required by law and return this warrant and inventoly to the Clerk of the Court. Upon its return, this warrant and inventory should be ?led under seal by the Clerk of the Court. El 1 find that immediate noti?cation may have an advelse result listed in 13 U.S.C. 2705 (excapt for delay of trial), and authorize the of?cer executing this warrant to delay notice to thefp'cracn' who, or whose property, will be searched 01' seized (cliecbrbe box) Elfor days I I I Duntil, the facts justifyi?tig, ills-teammates date at? Date and time issued: if; 5' Tibia/Ice? I -5 Jackie? City and state: New York, NY lHonL. litm "can; 913mg atrudge Pr'iitteiirtains dent-title Case Document 43-1 Filed 03/19/19 Page 206 of 269 AG 93 (Rev. ewe} Search and Seizure {Page 2) Return Case No; Date and time warrant exeeuted: Copy efwerrent and inventory left with: made in the of Inventety of the property taken and name of any pereen(e) seized: Certi?cation I declare under penalty efperjtuj: that this inventory is correct and was returned along with the original wen'ant to the Court. Date: Executing a?eer ?3 Signarw'e Prmred name and rifle by .. . Case Document 43-1 Filed 03/19/19 Page 207 of 269 ATTACHMENT A I. Premises to he Searched?Subject Premises~1 The premises to be searched (?Subject Prenrisesvl are described as follows, and include I electronic devices, and all locked and closed containers found therein: Apartmen located inside the building at 502 Park Avenue, New York, New York 10022. The building located at 502 Park Avenue is a 32??oor brick residential building. Subject Premises-1 is located on the -of the building. 11. Items to Be Seized The items to be seized from Subject Premisesal are evidence, fruits, and instrurnentalities of violations of 18 U.S.C. 3?71 (conspiracy, as it pertains to the other Subject Offenses), 1005 (false bani-t entries), 1014 (false statements to a ?nancial institution), 1343 (wire fraud), and 1344 (bank fraud), and 52 U.S.C. 30116(a)(1)(A) and {illegal campaign contributions) (the ?Subject Offenses?), described as follows: a. Evidence relating to Sterling National Bank, Melrose Credit Union, andfor taxi medallions, ?ora January 1, 2013 to the present. b. Evidence relating to a plan, proposal, or agreement for Michael Cohen andfor entities associated with him to transfer any interest in taxi medallions, and any associated debts or liabilities, to others, including to anda?or entities associated with him. c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling and/or Melrose. d. Evidence relating to Essential Consultants, LLC, including any documents that indicate the nature and purpose of payments made to or from Essential Consultants or the nature of any work done by Cohen or any other individuals in connection with Essential Consultants. e. Evidence of income to Michael D. Cohen Associates, including any documents that indicate the nature and purpose of payments made to or ??orn Michael D. Cohen Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen 35 Associates. f. Evidence relating to Cohen?s net worth, available cash and cash equivalents, and annual income, income sources, and other assets, whether held personally or through entities, including tax returns, personal financial statements, and bank records, from January 1, 2013 to the present. g. Evidence relating to agreements, loans, andfor fmancial transactions between Cohen and ?mdfor entities controlled by 1? 2 - Case Document 43-1 Filed 03/19/19 Page 208 of 269 and any payments by l, 2012 to the present. -to Cohen, from January o. Communications with others, including andfor other accountants, relating to Cohen?s bank accounts, taxes, debts, andz?or ?nances, from January 1, 2013 to the present. p. records, documents, and other ?les re?ecting false representations to a ?nancial institution related to the intended purpose of an account or loan at that ?nancial institution; the nature of any business or entity associated with an account at a ?nancial institution; the source of ?mds ?owing into an account; or the purpose or nature of any ?naneial transactions involving that ?nancial institution, from January 1, 2013 to the present. q. Evidence of Cohen?s intent as it relates to the Subject Offenses under investigation. B. Search and Seizure of Electronically Stored Information The items to be seized from Subject Premisesul also include an}J computer devices and storage media that Ina}.r contain any electronically stored information falling within the categories set forth in Section ILA of this Attachment above, including, but not limited to, a MacBoolr Pro, any other desktop and laptop computers, any Apple iPhone or other cellphone or smartphone 3 201103.02 Case Document 43-1 Filed 03/19/19 Page 209 of 269 belonging to Michael Cohen or in his possession, an Apple iPad Mini, portable hard drives, disk drives, thumb drives, and personal digital assistants. In lieu of seizing any such computer devices or storage media, this warrant also authorizes the copying of such devices or media for later review. The items to be seized from Subject Premises-1 also include: 1. Any items or records needed to access the data stored on any seized or copied computer devices or storage media, including but not limited to any physical keys, devices, or records of login credentials, passwords, private keys, or similar information. 2. Any items or records that may facilitate a forensic examination of the computer devices or storage media, including any hardware or software manuals or other information concerning the con?guration of the seized or copied computer devices or storage media. 3. Any evidence concerning the identities or locations of those persons with access to, control over, or ownership of the seized or copied computer devices or storage media. Review of set Following seizure of any computer devices and storage media andr'or the creation of forensic image copies, law enforcement personnel (wl?ch may include, in addition to law enforcement of?cers and agents, attorneys for the government, attorney support staff; agency personnel assisting the government in this investigation, and outside technical experts under control) are authorized to review the 1331 contained therein for information responsive to die warrant. In conducting this review, law enforcement personnel may use various techniques to locate information responsive to the warrant, including, for example: a surveying various ?le ?directories? and the individual ?les they contain (analogous to looking at the outside of a file cabinet for the maiitings it contains and opening a drawer believed to contain pertinent files}; 9 opening or cursorin reading the ?rst few ?pages? of such tiles in order to determine their precise contents; a scanning storage areas to discover and possibly recover recently deleted ?les or deliberately hidden ?les; - II performing key word searches through all electronic storage areas to determine whether occurrences of language contained in such storage areas exist that are intimately related to the subject matter of the investigation; and I reviewing metadata, system information, con?guration ?les, registry data, and any other information reflecting how, when, and by whom the computer was used. Case Document 43-1 Filed 03/19/19 Page 210 of 269 Law enforcement personnel will make reasonable effotts to search only for ?les, documents, or other electronically stored information within the categories identi?ed in Sections ILA and 11.13 of this Attachment. However, law enforcement personnel are authorized to conduct a complete review of all the E81 from seized devices or storage media if necessary to evaluate its contents and to locate all data responsive to the warrant. Additionally, review of the items described in this Attaclnnent shall be conducted pursuant to established procedures designed to collect evidence in a manner reasonany designed to protect any attorneyelicnt or other applicable privilege. When appropriate, the procedures shall include use of a designated ??lterteant,? separate and apart ?om the investigative team, in order to address potential privileges. 201103.Case Document 43-1 Filed 03/19/19 Page 211 of 269 A0 93 (SDNY Rev. 05t10)3earch and Seizure Warrant Inn-? UNITED STATES DISTRICT COURT for the Southern District of New York In the Matter of the Search of {Brie?y describe the proper? to be searched or io?ertti?.J the person by Home and odth'ess') Cage Nil 502 Park Avenue, Apartment- New York, New York 10022, and any closed containerstitems contained therein, See Attachment A SEARCH AND SEIZURE-WARRANT To: Any authorised no enforceaesierssa An application by a federal law enforcement officer or an attorney for the government requests the search of the following person or property located in the Southern District Uf New York {idenn? the person or describe the propertv to be searched ondgivs its in?ation): - 502 Park Avenue, Apartment -New York, New York 10-322, and any closed containersiitems contained therein. See Attachment A The person or property to be searched, described above, is believed to conceal (identi? the person or describe the proper? to be seized): I See Attachment A I ?nd that the or any recorded testimony, establish probable cause to search and seize the person or property. . YOU ARE to execute this warrant on or before 3 I {not to exceed 14 days) if in the daytime 6:00 am. to 10 p.111. at any time in the day or night as I find reasonable cause has been established. . Ii Unless delayed notice is authorized below, you must give a copy of the warrant and a receiptfor the property taken to the person from whom, or from whose premises, the property was taken, or leave the copy and receipt at the place where the property was taken. The of?cer executing this warrant, or an of?cer present during the execution of the warrant, must prepare an inventory as required by law and return this warrant and inventory to the Clerk of the Court. Upon its return, this warrant and inventory__s__lmuld be filed under sea] by the Clerk of the Court. USMJ initiate CI I ?nd that immediate noti?cation may have an adverse result listed in 18 U.S.C. 2705 [except for delay of trial), and authorize the of?cer executing this warrant to delay notice to the person who, or whose property, will be searched seized {check the appropriate box) days (not to exceed 39). IZIuntil, the facts justifying, the later speci?c date of Date and time issued: 4/ Hran Vi Judge '3 .rr'gmture City and state: New York. NY - Hon. Henry a. Pitrnan. us. Mauistrate Judoe Printed home and tide Case Document 43-1 Filed 03/19/19 Page 212 of 269 AD 93 {Rem 013139} Search and Seizure Warrant {Page 2) - Return Case No.: Date and time warrant executed: Copy of warrant and inventory left with: Inventory made in the presence of: Inventory of the property taken and name of any person(a) seized: Hun?. . . .L I Certi?cation I declare under penaltyr of perjury that this inventory is correct and was returned along with the original warrant to the Court. Date: Executing o?icer ?5 Signature Printed Home and ri?e Case Document 43-1 Filed 03/19/19 Page 213 of 269 ATTACHMENT A I. Premises to be Searched?Subject Premises-1 The premises to be searched (?Subject Premises?1?) are described as follows, and include electronic devices, and all looked and closed containers found therein: Apartment-located inside the building at 502 Park Avenue, New York, New York 10022. The building located at 502 Park Avenue is a 32-floor brick residential building. Subject Premises?1 is located on the?of the building. II. Items to Be Seized The items to be seized from Subject Premises?1 are evidence, fruits, and instrumentalities of violations of 18 U.S.C. 371 (conspiracy, as it pertains to the other Subject Offenses), 1005 (false bank entries), 1014 (false statements to a ?nancial institution), 1343 (wire fraud), and 1344 (bank fraud), and 52 U.S.C. 30116(a)(1)(A) and 30109(d)(1)(A)(1) (illegal campaign contributions) (the ?Subject Offenses?), described as follows: a. Evidence relating to Sterling National Bank, Melrose Credit Union, and/or taxi medallions, from January 1, 2013 to the present. b. Evidence relating to a plan, proposal, or agreement for Michael Cohen and/or entities associated with him to transfer any interest in taxi medallions, and any associated debts or liabilities, to others, including to _and/ or entities associated with him. 0. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling and/or Melrose. d. Evidence relating to Essential Consultants, LLC, including any documents that indicate the nature and purpose of payments made to or from Essential Consultants or the nature of any work done by Cohen or any other individuals in connection with EsSential Consultants. e. Evidence of income to Michael D. Cohen Associates, including any documents that indicate the nature and purpose of payments made to or from Michael D. Cohen Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen Associates. f. Evidence relating to Cohen?s net worth, available cash and cash equivalents, and annual income, income sources, and other assets, whether held personally or through entities, including tax returns, personal ?nancial statements, and bank records, from January 1, 2013 to the present. g. Evidence relating to agreements, loans, and/or ?nancial transactions between Cohen and?major controlled by 2 2017.08.02 Case Document 43-1 Filed 03/19/19 Page 214 of 269 1, 2012 to the present. o. Conununications with others, h1clnding_andfor other accountants, relating to Cohen?s bank accounts, taxes, debts, andfor ?nances, ?'om January 1, 2013 to the present. p. Communications, records, documents, and other ?les re?ectmg false representations to a fmancial institution related to the intended purpose of an account or loan at that ?nancial institution; the nature of any business or entity associated with an account at a ?nancial institution; the source of funds ?owing into an account; or the purpose or nature of any ?nancial transactions involving that ?nancial institution, from January 1, 2013 to the present. q. Evidence of Cohen?s intent as it relates to the Subject Offenses under investigation. B. Search and Seizure of Electronically Stored Information The items to be seized from Subject Premises-1 also include any computer devices and storage media that may contain any electronically stored information falling within the categories set forth in Section ILA of this Attachment above, including, but not limited to, a MacBook Pro, any other desktop and laptop computers, any Apple iPhone or other cellphone or smartphone 3 2017.03.02 I - Case Document 43-1 Filed 03/19/19 Page 215 of 269 belonging to Michael Cohen or in his possession, an Apple iPad Mini, portable hard drives, disk drives, thumb drives, and personal digital assistants. In lieu of seizing any such computer devices or storage media, this warrant also authorizes the copying of such devices or media for later review. The items to be seized from Subject Premises-1 also include: 1. Any items or records needed to access the data stored on any seized or copied computer devices or storage media, including but not limited to any physical keys, devices, or records of lo gin credentials, passwords, private keys, or similar information. 2. Any items or records that may facilitate a forensic examination of the computer devices or storage media, including any hardware or software manuals or other information concerning the con?guration of the seized or copied computer devices or storage media. 3. Any evidence concerning the identities or locations of those persons with access to, control over, or ownership of the seized or copied computer devices or storage media. C. Review of ESI Following seizure of any computer devices and storage media and/or the creation of forensic image copies, law enforcement personnel (which may include, in addition to law enforcement of?cers and agents, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the E81 contained therein for information responsive to the warrant. In conducting this review, law enforcement personnel may?use various techniques to locate information responsive to the warrant, including, for example: I surveying various ?le ?directories? and the individual ?les they contain (analogous to looking at the outside of a ?le cabinet for the markings it contains and opening a drawer believed to contain pertinent ?les); 0 opening or cursorin reading the ?rst few ?pages? of such ?les in order to determine their precise contents; - scanning storage areas to discover and possibly recover recently deleted ?les or deliberately hidden ?les; 0 performing key word searches through all electronic storage areas to determine whether occurrences of language contained in such storage areas exist that are intimately related to the subject matter of the investigation; and - reviewing metadata, system information, con?guration ?les, registry data, and any other information re?ecting how, when, and by whom the computer was used. 2017.08.02 Case Document 43-1 Filed 03/19/19 Page 216 of 269 Law enforcement personnel will make reasonable efforts to search only for ?les, documents, or other electronically stored information within the categories identi?ed in Sections HA and EB of this Attachment. However, law enforcement personnel are authorized to conduct a complete review of all the E81 from seized devices or storage media if necessary to evaluate its contents and to locate all data responsive to the warrant. Additionally, review of the items described in this Attachment shall be conducted pursuant to established procedures designed to collect evidence ina manner reasonably designed to protect any attorney?client or other applicable privilege. When appropriate, the procedures shall include use of a designated ??lter team,? separate and apart from the investigative team, in order to address potential privileges. 2017.08.02 Case Document 43-1 Filed 03/19/19 Page 217 of 269 AU 93 (SDNY Rev. esno: Search and Seizure Warrant UNITED STATES DISTRICT COURT for the Southern District of New York 18M Case No. I U?l In the Matter of the Search of (Brie?y describe thepmpen}! to be searched or idemnd the person by Maine and address) 2969 MIChael Cohen?s Of?ce at 30 Rockefeller Plaza, 23rd Floor, New York, New York 10112, and any closed contained therein, See Attachment I II SEARCH AND SEIZURE WARRANT To: Any authorized law enforcement of?cer An application by a federal law enforcement officer or an attorney for the goyernment requests the Search of the following person or property located in the Southern District of New York. {Friend}? the patron or deecrthe rite properly to be searched and give its inaction): Michael Cohen?s Of?ce at 30 Rockefeller Plaza, 23rd Floor, New York, New York 1 [It 12, and any closed containersiiterns contained therein, See Attachment The person or property to be searched, described above, is belieVEd to conceal redeem: the peace ordeacribe the properg; to be seized]: See Attachment . I ?nd that the a?idayi?s), or any recorded testimony, establish probable cause to search ahd'siej?se'the, person or II. II I property, I I YOU ARE COWNDED to execute this warrant on or before Iggy-Exta?gd gig-J13) . I if in the daytime 6:00 am. to in p.111. at any time in the day or night nail ?ndfreasonalble'oanse has been established. I Unless delayed notice is authorised below, you must give a copy of the wali'ant and a'recciptifor the property taken to the person from whom, or from whose premises, the property was taken, or leave the copy and receipt at the placewheretheproperty wastaken, The officer executing this warrant, or an of?cer present during the execution of the warrant, heat prepare an inventory as required by law and return this warrant and inventory to the Clerk of the Court. Upon its return, this Warrant and intrentory should be ?led under seal by the Clerk of the Court. LEMJEti?nis I ?nd that immediate noti?cation may have an adverse result listed in 13 U.S.C. 2705 (except for delay of trial), and authorize the of?cer executing this warrant to deiay notice to the poison who, or whose property, will be searched 01' (check the appropriate box} Df?l? days (?not to exceed 30). Duntil, the factsjustifying, the later speci?c date of . - .53? Datc and time issued: ?re/{newer ref We . - - Flier? trim - City and state: New NY Hoe. :H'enw a. Pihnan', Us; Magistrate Judge Printednerriee??f?iffCase Document 43-1 Filed 03/19/19 Page 218 of 269 AD 93 (Ree. 01.119) Search and Seizure Warrant {Page 2) Return Case Ne; Date and time warrant exeeoted: Copy of warrant and invent)on left with: Inventory made in the presence of Inventoly of the pmperty taken and name of any person(a) seized: Certi?cation to the Cemt. Date: I declare under penalty of perjuljr that this inVentory is oorreet and was retmned along with the original Warrant Executing of?cer signature Primed name and ri?e InmataBaSaaed Case Document 43-1 Filed 03/19/19 Page 219 of 269 ATTACHMENT I. Premises to be Searched?Subject Premises?2 The premises to be searched (?Subject Premises-2") are described as follows, and include electronic devices, and all looked and closed containers found therein: An of?ce belonging to or assigned to Michael Cohen located on the 23nd floor of the building at 30 Rockefeller Plaza, New York, New York 10112, inside of the of?ces of the law ?rm Squire Patton Boggs. The building located at 30 Rockefeller Plaza is a SEE-?oor of?ce building that spans the entire block between Sixth Avenue and Rockefeller Plaza. A. Evidence, Fruits, and Instrumentalities of the Subject Offenses The items to be seized ??om Subject Premises-2 are evidence, fruits, and insnumentalities of violations of 13 U.S.C. 3271 {conspiracy as it pertains to the other Subject Offenses), 1005- (false bank entries), 1014 (false statements to a ?nancial institution), 1343 (wire fraud), and 1344 (bank fraud), and 52 U.S.C. 30116(a)(1)(n) and 30109(d)(1)(n)(1) (illegal campaign contributions) (the ?Subject Offenses") described as follows: a. Evidence relating to Sterling National Bank, Melrose Credit Union, andx'or tad-ti medallions, from anuary l, 2013 to the present. b. Evidence relating to a plan, proposal, or agreement for Michael Cohen andi?or entities associated with him to transfer any interest in taxi medallions, and any associated debts or liabilities, to others, including to mdfor entities associated with him. c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling andfor Melrose. d. Evidence relating to Essential Consultants, LLC, including any documents that indicate the nature and purpose of payments made to or from Essential Consultants or the nature of any work done by Cohen or any other individuals in connection with Essential Consultants. e. Evidence of income to Michael D. Cohen a; Associates, including any documents that indicate the nattn?e and purpose of payments made to or from Michael D. Cohen 8.: Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen 35 Associates. f. Evidence relating to Cohen?s net worth, available cash and cash equivalents, and annual income, income sources, and other assets, whether held personally or through entities, including tan returns, personal financial statements, and bank records, from January 1, 2013 to the present. - g. Evidence relating to agreements, loans, andfor ?nancial transactions between Cohen and 6 actress: and! or entities controlled .-.-.-- .. - rm -r .- . --.- Case Document 43-1 Filed 03/19/19 Page 220 of 269 and any payments by '_to Cohen, ?'orn January 1, 2012 to the present. o. Conmtunications with others, including ?mdfor other accountants, relating to Cohen?s bank accounts, taxes, debts, andfor ?nances, from January 1, 2013 to the present. 13. Communications, records, documents, and other ?les re?ecting false representations to a ?nancial institution related to the intended purpose of an account or loan at that ?nancial institution; the nature of any business or entity associated with an account at a fmancial institution; the source of funds ?owing into an account; or the purpose or nature of any ?nancial transactions involving that ?nancial institution, from January 1, 2013 to the present. Evidence of Cohen?s intent as it relates to the Subject Offenses under investigation. B. Search and Seizure of Electronically Stored Information The items to be seized from Subject Premises-2 also include any computer devices and storage media that may contain any electronically stored information falling Within the categories set forth in Section 11A ofthis Attachment above, including, but not limited to, any desktop and laptop computers, any Apple iPhone or other cellphone or smartphone belonging to Michael Cohen 7" emanate "av-Iran - -- .- Case Document 43-1 Filed 03/19/19 Page 221 of 269 or in his possession, portable hard drives, disk drives, thumb drives, and personal digital assistants. In lieu of seizing any such computer devices or storage media, this warrant also authorizes the copying of such devices or media for later review. The items to be seized from Subject Premises-2 also include: 1. Any items or records needed to access the data stored on any seized or copied computer devices or storage media, including but not limited to any physical keys, devices, or records of login credentials, passwords, private keys, or similar information. 2. Any items or records that may facilitate a forensic examination of the computer devices or storage media, including any hardware or software manuals or other information concerning the con?guration of the seized or copied computer devices or storage media. 3. Any evidence concerning the identities or locations of those persons with access to, control over, or ownership of the seized or copied computer devices or storage media. C. Review of ESI Following seizure of any computer devices and storage media andfor the creation of forensic image copies, law enforcemem personnel (which may include, in addition to law enforcement officers and agents, attorneys for the government, attorney support sta?; agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the 1331 contained therein for infonnation responsive to the warrant. In conducting this review, law enforcement personnel may use various techniques to locate information responsive to the warrant, including, for example: - surveying various ?le ?directories? and the individual ?les they contain (analogous to looking at the outside of a ?le cabinet for the markings it contains and opening a drawer believed to contain pertinent ?les); - opening or cursorily reading the ?rst few ?pages? of such ?les in order to determine their precise contents; a scanning storage areas to discover and possibly recover recently deleted ?les or deliberately hidden ?les; a performing key word searches through all electronic storage areas to determine whether occurrences of language contained in such storage areas exist that are intimately related to the subject matter of the investigation; and reviewing metadata, system information, configuration files, registry data, and any other infonnation reflecting how, when, and by whom the computer was used. 201103.02 a, -W?Case Document 43-1 Filed 03/19/19 Page 222 of 269 Law enforcement personnel will make reasonable efforts to search only for files, documents, or other electronically stored information within the categories identi?ed in Sections HA and ILB of this Attachment. However, law enforcement personnel are authorized to conduct a complete review of all the E81 from seized devices or storage media if necessaryr to evaluate its contents and to locate all data responsive to the warrant. Additionally, review of the items described in this Attachment shall be conducted pursuant to established procedures designed to collect evidence in a manner reasonany designed to protect any attorneyaclient or other applicable privilege. When appropriate, the procedures shall include use of a designated ??lterteam,? separate and apart from the investigative team, in order to address potential privileges. 13.03332 I Case Document 43-1 Filed 03/19/19 Page 223 of 269 AD 93 Rev. 05!] Search and Seizure 1 litarrant UNITED STATES DISTRICT COURT for the Southern District of New York In the Matter of the Search of {Brie?y describe the property to he searched or idenrh?l the person by Home and address) Case No, Michael Cohenjs Of?ce at 30 Rockefeller Plaza, 23rd Floor, New York, New York 10112, and any closed containerel'iterns contained therein, See Attachment SEARCH AND SEIZURE WARRANT To: Any authorized law enforcement of?cer An application by a federal law enforcement of?cer or an attorney for the requests the search of the following person or property located in the Southern District of New York [identify the person or describe the property to be searched its inaction): Michael Cohen?s Of?ce at 30 Rockefeller Plaza, 23rd Floor, New York, New York 101 12, and any closed containersiltems contained therein, See Attachment The person or property to be searched, described above, is believed to conceal (idemr?: the person or describe the property to be seized): See Attachment I ?nd that the or any recorded testimony, establish probable cause to search and seize the person or property. - YOU ARE COWANDED to execute this warrant on or before A .- 3' i {nor to exceed i4 days) ill in the daytime 6:any time in the day or night as I find reasonable cause has been established. Unless delayed notice is authorized below, you must give a copy of the warrant and a receipt for the property taken to the person from whom, or from Whose premises, the property was taken, or leave the copy and receipt at the place where the property was taken. The of?cer executing this Warrant, or an of?cer present during the execution of the warrant, must prepare an inventory as required by law and return this warrant and inventory to the Clerk of the Court. Upon its return, this warrant and inventory should be filed under seat by the Clerk of the Court. USMinirr?cis El I ?nd that inunediate noti?cation may have an adverse result listed 18 U.S.C. 2705 (except for delay of trial), and authorize the of?cer executing this warrant to delay notice to the person who, or whose property, will be searched or seized (check the appropriate box) Elfor days (not to exceed so). ?until, the facts justifying, the later speci?c date of 5. 99mm, hedge ?s signature Date and time issued: (?h-6?45 (in. City and state: New York. NY Hon. Henry a. F'itman. us. Magistrate Judoe Printed name and ride - - .. - w-tmrwe?m- Case Document 43-1 Filed 03/19/19 Page 224 of 269 AD 93 (Rev. Search and Seimre Warrant (Page 2] Return Case No.: Date and time warrant exeented: Cop}r of warrant and inventor}.r left with: Inventor}.r made in the preaenee of Inventory of the property taken and name of any person(s) seized: i; Certi?cation I declare under penalty of perjury that this inventory is correct and was returned along with the original warrant to the Court. Date Executing o?icer ?s signature Printed Home and title Case Document 43-1 Filed 03/19/19 Page 225 of 269 ATTACHMENT I. Premises to be Searched?Subject Premises-2 The premises to be searched (?Subject Premises?2?) are described as follows, and include electronic devices, and all looked and closed containers found therein: An of?ce belonging to or assigned to Michael Cohen located on the 23rd ?oor of the building at 3 0 Rockefeller Plaza, New York, New York 10112, inside of the of?ces of the law ?rm Squire Patton Boggs. The building located at 30 Rockefeller Plaza is a 66-?oor of?ce building that spans the entire block between Sixth Avenue and Rockefeller Plaza. II. Items to Be Seized A. Evidence, Fruits, and Instrumentalities of the Subject Offenses The items to be seized from Subject Premises?2 are evidenCe, fruits, and instrumentalities of violations of 18 U.S.C. 371 (conspiracy as it pertains to the other Subject Offenses), 1005- (false bank entries), 1014 (false statements to a ?nancial institution), 1343 (wire fraud), and 1344 (bank ?aud), and 52 U.S.C. 30116(a)(1)(A) and 30109(d)(1)(A)(1) (illegal campaign contributions) (the ?Subject Offenses?) described as follows: a. Evidence relating to Sterling National Bank, Melrose Credit Union, and/or taxi medallions, from January 1, 2013 to the?present. b. Evidence relating to a plan, proposal, or agreement for Michael Cohen and/or entities associated with him to transfer any interest in taxi medallions, and any associated debts or liabilities, to others, including to ?1nd/ or entities associ?ated'with him. c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling and/or Melrose. Evidence relating to Essential Consultants, LLC, including any documents that indicate the nature and purpose of payments made to or from Essential Consultants or the nature of any work done by Cohen or any other individuals in connection with Essential Consultants. e. Evidence of income to Michael D. Cohen 85 Associates, including any documents that indicate the nature and purpose of payments made to or from Michael D. Cohen Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen Associates. f. Evidence relating to Cohen?s net worth, available cash and cash equivalents, and annual income, income sources, and other assets, whether held personally or through entities, including tax returns, personal ?nancial statements, and bank records, from January 1, 2013 to the present. I g. Evidence relating to agreements, loans, and/or ?nancial transactions between Cohen and ?and/or entities controlled by? 6 2017.08.02 Case DocUment 43-1 Filed 03/19/19 Page 226 of 269 and any payments by -to Cohen, from January l, ZUIZ to the present. o. with others, including .?andr'or other accountants, relating to Cohen?s bank accounts, taxes, debts, and/or ?nances, from January 1, 2013 to the present. p. Communications, records, documents, and other files re?ecting false representations to a financial institution related to the intended purpose of an account or loan at that financial institution; the nature of any business or entity associated with an account at a ?nancial institution; the source of funds ?owing into an account; or the purpose or nature of any ?nancial transactions involving that ?nancial institution, from January 1, 2013 to the present. q. Evidence of Cohen?s intent as it relates to the Subject Offenses under investigation. B. Search and Seizure of Electronically Stored Information The items to be seized from Subject Premises-2 also include any computer devices and storage media that may contain any electronically stored information falling within the categories set forth in Section ILA of this Attachment above, including, but not limited to, any desktop and laptop computers, any Apple iPhone or other cellphone or smartphone belonging to Michael Cohen 7 2o 17.03?2 I . .. Case Document 43-1 Filed 03/19/19 Page 227 of 269 or in his possession, portable hard drives, disk drives, thumb drives, and personal digital assistants. In lieu of seizing any such computer devices or storage media, this warrant also authorizes the copying of such devices or media for later review. The items to be seized from Subject Premises?2 also include: 1. Any items or records needed to access the data stored on any seized or copied computer devices or storage media, including but not limited to any physical keys, devices, or records of lo gin credentials, passwords, private keys, or similar information. 2. Any items or records that may facilitate a forensic examination of the computer devices or storage media, including any hardware or software manuals or other information concerning the con?guration of the seized or copied computer devices or storage media. 3. Any evidence concerning the identities or locations of those persons with access to, control over, or ownership of the seized or copied computer devices or storage media. C. Review of ESI Following seizure of any computer devices and storage-media and/orthe creation of forensic image copies, law enforcement personnel (which may include, in addition to law enforcement of?cers and agents, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the E81 contained therein for information responsive to the warrant. In conducting this review, law enforcement personnel may use various techniques to locate information responsive to the warrant, including, for example: 0 surveying various ?le ?directories? and the individual ?les they contain (analogous to looking at the outside of a ?le cabinet for the markings it contains and opening a drawer believed to contain pertinent ?les); 0 opening or cursorin reading the ?rst few ?pages? of such ?les in order to determine their precise contents; 0 scanning storage areas to discover and possibly recover recently deleted ?les or deliberately hidden ?les; - performing key word searches through all electronic storage areas to determine whether occurrences of language contained in such storage areas exist that are intimately related to the subject matter of the investigation; and reviewing metadata, system information, con?guration ?les, registry data, and any other information re?ecting how, when, and by whom the computer was used. 2017.08.02 Case Document 43-1 Filed 03/19/19 Page 228 of 269 Law enforcement personnel will make reasonable efforts to search only for ?les, documents, or other electronically stored information within the categories identi?ed in Sections ILA and 11B of this Attachment. However, law enforcement personnel are authorized to conduct a complete review of all the E31 from seized devices or storage media if necessary to evaluate its contents and to locate all data responsive to the warrant. Additionally, review of the items described in this Attachment shall be conducted pursuant to established procedures designed to collect evidence in a manner reasonany designed to protect any attorney?client or other applicable privilege. When appropriate, the procedures shall include use of a designated ??lter team,? separate and apart ?om the investigative team, in order to address potential privileges. 2017.03.02 Case Document 43-1 Filed 03/19/19 Page 229 of 269 A0 93 Rev. Search and Seizure Warrant UNITED STATES DISTRICT COURT for the Southern District of New York Case No. Safe Deposit Box-nested at the TD Bank Branch at 500 Park Avenue, New York, New York 10019, and any . I closed containersr'items contained therein, See Att. (3 R?v ARRANT SEARCH AND SEIZU In the Matter of the Search of (Brie?y describe to he secreted or the person by name oneT until-ass) 'To: Any authorized law enforcement of?cer An application by afederal law enforcement officer or an attorney for the govermnent requests the search of the following person or property located in the Southern District of New York {identi?a thapsrson or describe the property to be searcher-land give to location): - Safe Deposit .ocatecl at the TD Bank Branch at 500 Park Avenue, New York, New York 10019. and any closed containersntems contained therein?ee Attachment The person or property to be searched, described above, is believed to conceal (lid?m?? reaper-son or describe the properer to be re r'zedj't See Attachment I ?nd that the or any recorded testimony, establish probable sense to search and seize the person or property. YOU ARE COWNDED to execute this warrant on or before if ifany time in the day or nightrals' ?nd reaSonahle' cause has been established. El in the daytime 6:00 am. to In pm. Unless delayed notice is authorized below, you must give a copy of the and tit-receipt. for the property taken to the person from whom, or from whose premises, the property was taken. or'i'eave the cepy and receipt at the Place where the property was taken. - - . - The of?cer executing this warrant, or an officer present timing the executi'on'ottl?re, warrant, an inventory as required by law and return this warrant and inventory to the Clerk the Qottrt. I Upon its return, this Warrant and inventory should be ?led under sea] by the Clerk ofithe heart. USrl? but this El I ?nd that immediate noti?cation may have an adverse result listed in 18 U.S.C. 2705 (except for delay of trial), and authorise the of?cer executing this warrant to delay notice to the person who, or whose property, will be searched or seized {erect appropriate box) leor days (nor to exceed 3d). Du?m? the facts the 13161? Speci?c date of . I I Passes?...JDate and tune rssued: r. tie-a so, Mf?i-?e?fg?mwb Ic?hrdge ?s sperms it 353? City and state: New York.NY Printed Name '3 Hon. Henry B. Pttman. Case Document 43-1 Filed 03/19/19 Page 230 of 269 A0 5'3 (Rev. KINDS) Beam]: and Seizure Wment?hge 2} .i i Return 1 Case No; I Date and time walnut executed: Copy of Warrant and inventory left with: Inventm'y made in ?le presence of InventonI of the property taken and name of any seized: i: i; :f . Certi?cation I declare under penalty of perjury that this inVE?t?l'jF is correct and was returned along with the original warrant f; to the Court. 1: Date: I Exec uh} 1g q??i?oer ?5 sfgn?nre ?'??ed?name one" ri?e i Case Document 43-1 Filed 03/19/19 Page 231 of 269 ATTACHMENT I. Premises to be Searched?Subject Premises~3 The premises to be searched (?Subject Premises??) are described as follows, and include all looked and closed containers found therein: A safe deposit box. located inside the TD Bank branch location at 500 Park Avenue, New York, New York 10019, marked as box -The safe deposit box is in the name of lVlichael Cohen and Laura Cohen. II. Items to Be Seized The items to be seized ?'om Subject P1ernises~3 are evidence, fruits, and instrumentalities of violations of 13 U.S.C. 371 (conspiracyr as it pe?ains to the other Subject Offenses), 1005 (false bank entries), 1014 (false statements to a ?nancial institution), 1343 (wire fraud), and 1344 (bank fraud), and 52 U.S.C. 30116(a)(1)(A) and 30109(d)(1)(A)(1) (illegal campaign contributions) (the ?Subject Offenses?), described as follows: 1. Evidence relating to Michael Cohen?s net worth, available cash and cash equivalents, assets, and annual income, and income entrance, from lancer}.r 1, 2013 to the present. 10 201103.02 147-.-.-.-.-.- .- .- . -. -.-.- . Case Document 43-1 Filed 03/19/19 Page 232 of 269 9. Any portable electronic storage device. B. Search of Seized Electronic Devices Probable cause exists to search any seized electronic storage device for the items set forth in Section above. C. Review of ESI include, in addition to law enforcement of?cers and agents, attorneys for the govertnnent, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the E81 contained therein for information responsive to the warrant. In conducting this review, law enforcement personnel may use various techniques to locate information reaponsive to the warrant, including, for example: - smveying various ?le ?directories? and the individual ?les they contain (analogous to looking at the outside ofa ?le cabinet for the markings it contains and opening a drawer believed to contain pertinent ?les); - opening or cursorin reading the ?rst few ?pages? of such ?les in order to determine their precise contents; a scanning storage areas to discover and possibly recover recently deleted files or deliberately hidden ?les; . a performing key word searches through all electronic storage areas to determine whether oflanguage contained in such storage areas exist that are intimately related to the subject matter of the investigation; and reviewing metadata, system information, con?guration ?les, registry data, and any other infolmation re?ectng how, when, and by whom the computer was used. Law enforcement personnel will make reasonable etTorts to search only for ?les, documents, or other electronically stored information within the categories identi?ed in Sections ILA and ILB of this Attachment. However, law enforcement personnel are authorized to conduct a complete review of all the ESI from seized devices if necessary to evaluate its contents and to locate all data responsive to the warrant. Additionally, review of the items described in this Attachment shall be conducted pursuant to established procedures designed to collect evidence in a manner reasonably designed to protect 11' seizure of?any?elccn?onie storage device-?aw enforcement?personnel (which may -- .. . Case Document 43-1 Filed 03/19/19 Page 233 of 269 an}r attomeywolient or other applicable Privilege. When appropriate, the procedures shall include use of a designated ??lter team,? separate and apart from the investigative team, in order to address potential privileges. 12 2017.03.02 i. - ..- -.-.- --. -.: - Case Document 43-1 Filed 03/19/19 Page 234 of 269 A0 93 Rev. 051?10] Search and Seizure Warrant UNITED STATES DISTRICT COURT for the Southern District of New York In the Matter of the Search of {Brie?y describe the proper-h: to he searched or identg?x the person by name and address) Case No, Safe Deposit Box: Located at the TD Bank Branch at BUD Park Avenue, New York. New York 10019, and any closed oontainersfitems contained therein, See Att. (3 SEARCH AND SEIZURE WARRANT When-I?Vva To: 'Any autifoiisze'diaw enforcement of?cer An application by a federal law enforcement officer or an attorney for the government requests the search of the following person or property located in the Southern District of New York (identi?' the person or a he the program) to be searched and give its location): - Safe Deposit Box; Located at the TD Bank Branch at 500 Park Avenue, New York, New York 10019. and any closed containersiitems contained therein,See Attachment The person or property to be searched, described above, is believed to conceal (trims)? the person or the program! to he seized}: See Attachment I ?nd that the atlidavit?s), or any recorded testimony, establish probable cause to search and seize the person or property. Lino?? 13 (hot to exceed i4 days) at any time in the day or night as I ?nd reasonable cause has been established. YOU ARE COMMANDED to execute this warrant on or before at in the daythne 6:00 am. to 10 p.11]. Unless delayed notice is authorized below, you must give a copy of the warrant and a receipt for the property taken to the person from whom, or from whose premises, the property was taken, or leave the copy and receipt at the place where the property was taken. The of?cer executing this warrant, or an of?cer present during the execution of the warrant, must prepare an inventory as required by law and return this warrant and inventory to the Clerk of the Court. Upon its retum, this warrant and inventory should be ?led under sea] by the Clerk of the Court. USMJInitials El I ?nd that immediate noti?cation may have an adverse result listed in 18 U.S.C. 2705 (except for delay of trial), and authorize the of?cer executing this warrant to delay notice to the person who, or whose property, will be searched or seized (check the appropriate box) Elfor days (not to exceed Duntil, the facts justifying, the later speci?c date of Date and time issued: . Judge ?3 signature City and state: New York. NY Hon. Henrv Et. Pitman. U.8. Maoistrate Judoe Printed name and title . . . .. --. .- Case Document 43-1 Filed 03/19/19 Page 235 of 269 AG 93 (Rev. Ult??l} Search and Seizure Warrant [Page 2} Return Case No; Date and time warrant executed; Copy of warrant and inventory left with: Inventory made in the presence of Inventory of the property taken and name of any person(s) seized: Certi?cation I declare under penalty that this inventory is correct and was returned along with the original warrant to the Court. Date: Executing o?icer?s signature Printed mme and ri?e . .I . - Case Document 43-1 Filed 03/19/19 Page 236 of 269 ATTACHMENT I. Premises to be Searched?Subject Premises-3 The premises to be searched (?Subject Premises~3?) are described as follows, and include all looked and closed containers found therein: A safe deposit box located inside the TD Bank branch location at 500 Park Avenue, New York, New York 10019, marked as box -Fhe safe deposit box is in the name of Michael Cohen and Laura Cohen. H. Items to Be Seized . A.._Evidence, Emits, and. Instrumentalities of the Subject Offenses The items to be seized from Subject Premises-3 are evidence, fruits, and histrumentalities of violations of 13 U. 8.0. 3?1 (conspiracy as it pertains to the other Subject Offenses), 1005 (false bank entries), 1014 (false statements to a ?nancial institution), 1343 (Wire fraud), and 1344 (bank fraud), and 52 1.1.8.0 30116(a)(1)(A) and 30109(d)(1)(A)(1) (illegal campaign contributions) (the ?Subject Offenses?), described as follows: 1. Evidence relating to Michael Cohen?s net worth, available cash and cash equivalents, assets, and annual income, and income sources, from January 1, 2013 to the present. 10 mitoses Case Document 43-1 Filed 03/19/19 Page 237 of 269 9. Any portable electronic storage device. B. Search of Seized Electronic Devices Probable cause exists to search any seized electronic storage device for the items set forth in Section above. C. Review of ESI ,Following seizure of any electronic storage device, law enforcement personnel (which may include, in addition to law enforcement of?cers and agents, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the E81 contained therein for information responsive to the warrant. In conducting this review, law enforcement personnel may use various techniqUes to locate information responsive to the warrant, including, for example: - surveying various file ?directories? and the individual files they contain (analogous to looking at the outside of a file cabinet for the markings it contains and opening a drawer believed to contain pertinent ?les); - 0 opening or cursorily reading the ?rst few ?pages? of such ?les in order to determine their precise contents; 0 scanning storage areas to discover and possibly recover recently deleted .?les or deliberately hidden ?les; 0 performing key word searches through all electronic storage areas to determine whether occurrences of language contained in such storage areas exist that are intimately related to the subject matter of the investigation; and reviewing metadata, system information, con?guration ?les, registry data, and any other information re?ecting how, when, and by whom the computer was used. Law enforcement personnel will make reasonable efforts to search only for ?les, documents, or other electronically stored information within the categories identi?ed in Sections ILA and 11B of this Attachment. However, law enforcement personnel are authorized to conduct a complete review of all the E81 from seized devices if necessary to evaluate its contents and to locate all data responsive to the warrant. Additionally, review of the items described in this Attachment shall be conducted pursuant to established procedures designed to collect evidence in a manner reasonably designed to protect 11 2017.08.02 Case Document 43-1 Filed 03/19/19 Page 238 of 269 any attorney-client or other applicable privilege. When appropriate, the procedures shall include use of a designated ??lter team,? separate and apart from the investigative team, in order to address potential privileges201103.02 a . Case Document 43-1 Flled 03/19/19 Page 239 of 269 A0 93 Rev. DSIIOJ Search and Seizure Warrant UNITED STATES DISTRICT COURT for the Southern District of New York In the Matter of the Search of (Brie?y describe the property to be searched or Memoir! the person by name and address) Case No, Loews Regency Hotel, 549 Park Avenue, Room WEB, New York. New York 1 0065, and any closed containersiitems contained therein, See Attachment SEARCH AND SEIZURE WARRANT r152? authorized law enforcement-of?cer An application by a federal law enforcement officer or an attorney for the government requests the search of the following person or property located in the Southern District of New York fidenrpj; the person or describe the property to be searched and give its location): Loewe Regency Hotet, 540 Park Avenue. Room 1 ?23. New York. New York and any closed contalned therein, See Attachment The person or property to be Searched, described above, is believed to conceal [scantily firepower: or dare-tee the property to be scared): See Attachment I ?nd that the af?davit?s}, or any recorded testimony, establish prob able cause to seerchand sees the person or Presets- l. . - 3229/9": . . >310i?r?0-??pd New) at any time in the day or night as i ?ndfreasonahle cause has established. - - YOU ARE COWNDED to execute this warrant on or before El in the daytime 6:00 am. to 10 pm. Unless delayed notice is authorised below, you must give a copy of the warrant and 'a'jreccipt forthe ta'operty taken to the person from whom, or item whose premises, the property Was taken, or leave the copy and receipt atthe placo where the property was taken. - i I The officer erecuting this warrant, or an officer present during the execution of the Warrant; pre pare an inventory as required by law and realm this warrant and invento1y to the Clerk of the Court. Upon its return, this warrant and hive-nton should be ?led under seat by the Clerk of the Court. USA o'an trials Cl 1 ?nd that inunediate noti?cation may have an adverse result listed in i8 U.S.C. 2?05 (except for delay of trial), and authorize the of?cer executing this warrant to delay notice to the person who, or whose property, will be searched or seized {cassette replays-rare box) Elfor days more exceed 3d). - - - - . Hunt?, the facts justifying, the later speci?c date-of: gram sew?e . fitted/?shed Date and dine issued: {if City andstate: New York. NY Hen, Henry: a. Eitaiae; is. - Printed Horne and ri?e "Mao-numnuumm "as? Illrr I.: . Case Document 43-1 Filed 03/19/19 Page 240 of 269 A093 (REV. 01.309} Search and Seizure Wanant (Page 1} Return Case No; Date and time warrant exeontecl: flop}.r of warrant and inventory left with: Inventorjg,?r made in the presence of Inventory of the property taken and name of any person{5) seized: - . . Certification I declare under penalty of that this inventory is current and was retained along with the original warrant to the Court. - Date: Execu?ng o?fcer ?5 signature Primed name and ri?e --.- - -: Case Document 43-1 Filed 03/19/19 Page 241 of 269 ATTACHEIENT I. Premises to be Searched?Subject Premisesutl The premises to be searched (?Subject Premises-4?) are described as follows, and include electronic devices, and all locked and closed containers found therein: Room 12728 located inside the Loews Regency Hotel at 540 Park Avenue, New York, New York 10965. The building is a luxury hotel located on Park Avenue and 61st Street. Subject Premises~4 is located on the Will ?oor of the hotel. II. Items to Be Seized Evidence,lFruits, and Instrumentali?es of the Subject Offenses I I The items to be seized from Subject Premises-4 are evidence, fruits, and instrumentalities ofvioiations of 13 U.S.C. 371 (conspiracy, as it pertains to the other Subject Offenses), 10135 (false bank entries), 1014 (false statements to a ?nancial institution), 1343 (wire fraud), and 1344 (bank fraud), and 52 U.S.C. 30116(a)(1)(A) and (illegal campaign contributions) (the ?Subject Offenses?), described as follows: a. Evidence relating to Sterling National Bank, Meirose Credit Union, andfor taxi medallions, from January 1, 2013 to the present. in. Evidence relating to a plan, proposal, or agreement for Michael Cohen andfor entities associated with him to transfer anv interest in taxi medallions, and any associated debts or liabilities, to others, including to andtor entities associated with him. c. Evidence relating to a plan, proposal, or agreement to modi?,r loans that Cohen has with Sterling and/or Melrose. d. Evidence relating to Essential Consultants, LLC, including any documents that indicate the nature and purpose ofpayrnents made to or from Essential Consultants or the nature of an}r work done by Cohen or any other individuals in connection with Essential Consultants. e. Evidence of income to Michach Cohen 55 Associates, including any documents that indicate the nature and purpose of payments made to or from Michael D. Cohen Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen cit Associates. - f. Evidence relating to Cohen?s net worth, available cash and cash equivalents, and annual income, income sources, and other assets, whether held personally or through entities, including tax returns, personal ?nancial statements, and bank records, from January 1, 2013 to the present. g. Evidence relating to agreements, loans, andfor ?nancial transactions between Cohen and ?andror entities controlled by 13 201103.02 .r :IsCase Document 43-1 Filed 03/19/19 Page 242 of 269 and any payments by Cohen, from January 1, 21.112. 120 111E o. Comntmiications with others, including ?andfor other accountants, relating to Cohen?s bank accounts, taxes, debts, andior ?nances, from Januaryr 1, 2.013 to the present. - p. Conununications, records, doctnnents, and other ?les re?ecting false representations to a ?nancial institution related to the intended purpose of an account or loan at that ?nancial institution; the nature of any business or entity associated with an account at a ?nancial institution; the source of ?Jnds ?owing into an account; or the purpose or nature of any ?nancial transactions inrciaing that ?nancial institution, from January 1, 2013 to the present. Evidence of Cohen?s intent as it relates to the Subject Offenses under imrestigation. B. Search and Seizure of Electronically Stored Information The items to be seized from Subject Premises?4 also include any contputcr devices and storage media that nna}r contain any electronically stored information falling within the categories set forth in Section 11.13. of this Attachment abore, including, but not limited to, a MacBook Pro, any other desktop and laptop computers, anyr Apple iPhcne or other cellphone or I4 Zilli?al? r, q?wu . .- . .. -.--.. .- Case Document 43-1 Filed 03/19/19 Page 243 of 269 belonging to Michael Cohen or in his possession, an Apple iPad Mini, portable hard drives, disk drives, thumb drives, and personal digital assistants. in lieu of seizing any such computer devices or storage media, this warrant also authorizes the copying of such devices or media for later review. The items to be seized from Subject Premises-4 also include: 1. Any items or records needed to access the data stored on any seized or copied computer devices or storage media, including but not limited to any physical keys, devices, or records of login credentials, passwords, private keys, or similar information. 2. Any items or records that may facilitate a forensic examination of the computer devices or storage media, including any hardware or software manuals or other information devicosor storage_nredia,__ 3. Any evidence concerning the identi?es or locations of those persons with access to, control over, or ownership of the seized or copied computer devices or storage media. C. Review of ESI Following seizure of any computer devices and storage media andfor the creation of forensic image copies, law enforcement personnel (which may include, in addition to law enforcement officers and agents, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the E81 contained therein for information responsive to the warrant. In conducting this review, law enforcement personnel may use various techniques to locate information responsive to the warrant, including, for example: - surveying various ?le ?directories? and the individual files they contain (analogous to looking at the outside of a ?le cabinet for the markings it contains and opening adrawer believed to contain pertinent files); a opening or cursorin reading the first few ?pages? of such files in order to detehrrine their precise contents; in scanning storage areas to discover and possibly recover recently deleted ?les or deliberately hidden ?les; In performing ltey word searches through all electronic storage areas to determine whether occurrences of language contained in such storage areas exist that are intimately related to the subject matter of the investigation; and - reviewing metadata, system information, con?guration ?les, registry data, and any other information re?ecting how, when, and by whom the computer was used. 15 EDI-7.03.02 . man-n. . . .. . . wanna-marl ..-. .. - .. .. . -.- . x?F- 5.123 Case Document 43-1 Filed 03/19/19 Page 244 of 269 Law enforcement personnel will make reasonable efforts to search only for ?les, documents, or other electronically stored information within the cat?gories identi?ed in Sections HA and 11.13 of this Attachment. However, law enforcement personnel are authorized to conduct a complete review of all the ESI from seized devices or storage media if necessary to evaluate its contents and to locate all data responsive to the warrant. Additionally, review of the iteIns described in this Attachment shall be conducted pursuant to established procedures designed to collect evidence in a manner reasonany designed to protect any attorney-client or other applicable privilege. When appropriate, the procedures shall include use of a designated ?filter team,? separate and apart from the investigative team, in order to address potential privileges. 16 201103.02 ":u-Kr .. . .. . Case Document 43-1 Filed 03/19/19 Page 245 of 269 A0 93 Rev. 0310} Search and Seizure Warrant UNITED STATES DISTRICT COURT for the Southern District of New York In the Matter of the Search of {Brie?y describe the property to be searched or retentij the person by name and address) Case No. Loews Regency Hotel, 540 Parlt Avenue, Room 1728, New York, New York ?1065, and any closed containersfitems contained therein, See Attachment SEARCH AND SEIZURE WARRANT - *Any auti??i?d?law enforcement?of??' An application by a federal law enforcement of?cer or an attorney for the government requests the search of the following person or property located in the Southern District Of New York (identi?a the person or describe the propertyr to be searched and give its {oration}: Loews Regency Hotel, 540 Park Avenue, Room 1T28, New York, New York 10065, and any closed oontainerstitems contained therein, See Attachment The person or property to be searched, described above, is believed to conceal (?rearm) disperser: or desarioe the property to be seized): See Attachment I find that the or any recorded testimony, establish probable cause to search and seize the person or prop crty . Liar-ls YOU ARE COMMDED to execute this warrant on or before - - - (not to exceed 14 at in the daytime 6:00 am. to 10 pm. established. Unless delayed notice is authorized below, you must give a copy of the warrant and a receipt for the property taken to the person from whom, or from whose premises, the property was taken, or leave the copy and receipt at the place where the property was taken. The of?cer executing this warrant, or an of?cer present during the execution of the warrant, must prepare an inventory as required by law and return this warrant and inventory to the Clerk of the Court. Upon its return, this warrantaod meanton should be filed under seal by the Clerk of the Court. I ?nd that immediate noti?cation may have an adverse result listed in 13 U.S.C. 2705 (except for delay USMJ Initim's at any time in the day or night as I ?nd reasonable cause has been of trial), and authorize the of?cer executing this warrant to delay notice to the person who, or whose property, will be searched 01? seized (checkrhe appropriate box) ijUI? days (Motto exceed 30). Duntil, the facts justifying, the later speci?c date of Hrhi?? Qi?l?nm Date and time issued: 3 7 n? in. Judge ?5 signature City and state: New York, NY Primed name and rate Hon. Hennar B. Pitman. U.S. Magistrate Judge Case Document 43-1 Filed 03/19/19 Page 246 of 269 A0 93 (Rev, {31mg} Search and Seizure Warrant (Page 2) Return Case No: Date and time warrant executed: Copy of warrant and inventor}r left with: Inventory made in the presence of Inventor}.r of the property taken and name of an)r person(a) seized: Certification to the Court. Date I declare under penalty of perjury that this inventory is correct and was returned along with the original warrant Executing o??icer ?5 Signature Primed Home and tfrle .. . a: Case Document 431 Filed 03/19/19 Page 247 of 269 ATTACHMENT I. Premises to be Searched??Subject Premises?4 The premises to be searched (?Subject Premises-4?) are described as follows, and include electronic devices, and all looked and closed containers found therein: Room 1728 located inside the Loews Regency Hotel at 540 Park Avenue, New York, New York 10065. The building is a luxury hotel located on Park Avenue and 6lst Street. Subject Premises?4 is located on the 17th ?oor of the hotel. II. Items to Be Seized A. Evidence, Fr?uits, The items to be seized from Subject Premises-4 are evidence, fruits, and instrumentalities of violations of 18 U.S.C. 371 (conspiracy, as it pertains to the other Subject Offenses), 1005 (false bank entries), 1014 (false statements to a ?nancial institution), 1343 (wire fraud), and 1344 (bank fraud), and 52 U.S.C. 30116(a)(1)(A) and 30109(d)(1)(A)(1) (illegal campaign contributions) (the ?Subject Offenses?), described as follows: a. Evidence relating to Sterling National Bank, Melrose Credit Union, and/or taxi medallions, from January 1, 2013 to the present. b. Evidence relating to a plan, proposal, or agreement for Michael Cohen and/or entities associated with him to transfer anv interest in taxi medallions, and any associated debts or liabilities, to others, including to and/or entities associated with him. c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling and/or Melrose. d. Evidence relating to Essential Consultants, LLC, including any documents that indicate the nature and purpose of payments made to or from Essential Consultants or the nature of any work done by Cohen or any other individuals in connection with Essential Consultants. e. Evidence of income to Michael D. Cohen 82; Associates, including any documents that indicate the nature and purpose of payments made to or from Michael D. Cohen Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen 85 Associates. - f. Evidence relating to Cohen?s net worth, available cash and cash equivalents, and annual income, income sources, and other assets, whether held personally or through entities, including tax returns, personal ?nancial statements, and bank records, from January 1, 2013 to the present. g. Evidence relating to agreements, loans, and/or ?nancial transactions between and/or entities controlled by 13 Cohen and 2017.08.02 i Em Case Document 43-1 Filed 03/19/19 Page 248 of 269 and any payments by -to Cohen, from January 1, 2012 to the present. o. Conununications with others, including?andfor other accountants, relating to Cohen?s bank accounts, taxes, debts, andfor ?nances, from January 1, 2013 to the present. 13. Communications, records, documents, and other ?les re?ecting false representations to a ?nancial institution related to the intended purpose of an account or loan at that ?nancial institution; the nature of any business or entity associated with an account at a ?nancial institution; the source of funds ?owing into an account; or the purpose or nature of any ?nancial transactions involving that ?nancial institution, from January 1, 2013 to the present. q. Evidence of Cohen?s intent as it relates to the Subject Offenses under investigation. B. Search and Seizure of Electronically Stored Information The items to be seized from Subject Premises-4 also include any computer devices and storage media that may contain any electronically stored information falling within the categories set forth in Section ILA of this Attachment above, including, but not limited to, a MacBook Pro, any other desktop and laptop computers, any Apple iPhone or other cellphone or smanphone 14 201103.132 Case Document ?43-1 Filed 03/19/19 Page 249 of 269 belong'ing?to Michael Cohen or in his possession, an Apple iPad Mini, portable hard drives, disk drives, thumb drives, and personal digital assistants. In lieu of seizing any such computer devices or storage media, this warrant also authorizes the copying of such devices or media for later review. The items to be seized from Subject Premises?4 also include: 1. Any items or records needed to access the data stored on any seized or copied computer devices or storage media, including but not limited to any physical keys, devices, or records of login credentials, passwords, private keys, or similar information. 2. Any items or records that may facilitate a forensic examination of the computer devices or storage media, including any hardware or software manuals or other information concerning the con?guration of the seized or copied computer devices orstorage media. 3. Any evidence concerning the identities or locations of those persons with access to, control over, or ownership of the seized or copied computer devices or storage media. C. Review of ESI Following seizure of any computer devices and storage media and/or the creation of forensic image copies, law enforcement personnel (which may include, in addition to law enforcement officers and agents, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the E81 contained therein for information responsive to the warrant. In conducting this review, law enforcement personnel may use various techniques to locate information responsive to the warrant, including, for example: - surveying various ?le ?directories? and the individual files they contain (analogous to looking at the outside of a ?le cabinet for the markings it contains and opening a drawer believed to contain pertinent ?les); 0 opening or cursorily reading the first few ?pages? of such files in order to determine their precise contents; - scanning storage areas to discover and possibly recover recently deleted files or deliberately hidden ?les; a performing key word searches through all electronic storage areas to determine whether occurrences of language contained in such storage areas exist that are intimately related to the subject matter of the investigation; and 0 reviewing metadata, system information, configuration files, registry data, and any other information re?ecting how, when, and by whom the computer was used. 15 2017.08.02 Case Document 43-1 Filed 03/19/19 Page 250 of 269 Law enforcement personnel will make reasonable efforts to search only for files, documents, or other electronically stored information within the categories identified in Sections ILA and ILB of this Attachment. However, law enforcement personnel are authorized to conduct a complete revievlr of all the E81 from seized devices or storage media if necessarj,r to evaluate its contents and to locate all data responsive to the warrant. Additionally, review of the items described in this Attachment shall be conducted pursuant to established procedures designed to collect evidence in a manner reasonably designed to protect any attorney?client or other applicable privilege. When appropriate, the procedures shall include use of a designated ??lter team,? separate and apart from the investigative team, in order to address potential privileges. 16 2011.03.02 .- - . ., . Case Document 43-1 Filed 03/19/19 Page 251 of 269 93 Rev. ?13110) Search and Seizure Warrant UNITED STATES DISTRICT COURT for the Southern District of New York In the Matter of the Search of . "e (Brieth describe Lire proper-n: to be searched 9 or idem;ij the person lay Home and adr??eas) n. . An Apple iPhone with Phone Number? 3 - - See Attachment SEARCH AND SEIZURE WARRANT I'o: Any authorized law officer An application by a federal law enforcement of?cer or an attorney for the government requests the search 0f the following person or property located in the Southern District of New York the person or describe the prepare? to he searcher? mm" "ire Its location): An Apple lPhone with Phone Number I See Attach ment The person or property to be searched, described above, is believed to conceal riders-rip: the person or" desor'ihe the property to be seized): See Attach merit I?nd that the af?davids}, or any recorded testimony, establish probable cause to search and seize the person or YOU ARE to execute this warrant on or before iff?l?w I, irritants need r4 days) if in the daytime 6:0? an]. to 10 pm. If] at any time in the day or he l'?nd reasonable cause has been established. I Unless delayed notice is authorized below, you must give a copy wairjrantfand?areceipt for thejproperty taken to the person from whom, or from whose premises, the property was taken, serene the and receipt at the place where the property was taken. - -- . The officer executing this warrant, or an officer present during the executieh pfthelw'srrant, must prepare an inventory as required by law and return this warrant and inventory to the Upon its return, this warrant and inventory should be ?led under seal by the Clerk ot?th'e Court. newsman El I ?nd that immediate noti?cation may have an adverse result listed in 18 U.S.C. 2705 (except for delay of trial), and authorize the of?cer executing this warrant to delay notice to the person who, or whose property, will be searched or seized (cheoktlre appropriate box) lTlfor days (motto exceedm). . .i - I'Jrurtil, the facts jussesrg, the lessees. of Date and time issued: 1?"1 #511Irv/9;. j. Ire I I I City and state: New York. NY Hon Han-?, g. Ma mtg?l .J a -IPr-r*nr2drrorhe osr'drr'h's . . .. -.- Case Document 43-1 Filed 03/19/19 {Page 252 of 269 AG 93 (Rev. DIME) Seareh and Seizure Warrant [Page 2.) Return Case Ne: Date and time warrant executed: Copy of warrant and inventory left with; Imentery made in the presence of Inventory of the property taken and name of an}r persen(a) seized: Certi?ea tien I declare wider penalty of perjury that this is correct and Was returned along with the original Warrant to the Court. Date: Ere eating a?car ?3 signature Printed Mania and rifle Case Document 43-1 Filed 03/19/19 Page 253 of 269 ATTACHMENT I. Device Subject to Search and Seizure Subject Device-1 The device that is the subject of this search and seizure warrant (?Subject Device-1?) is described as follows: An Apple iPhone serviced by ATc?i'aT with the telephone number During the execution of this search warrant, law enforcement personnel are authorized to depress the ?ngerprints andf'or thumbprints of Michael Cohen onto the Touch ID sensor of Subject Device-1, or hold Subject Device-l in front of Cohen?s face to activate the Face ID sensor, in order to gain access to the contents of any such device as authorized by this warrant. II. Review of ESI on the Subject Device Law enforcement personnel (including, in addition to law enforcement of?cers and agents, and depending on the nature of the E31 and the status of the investigation and related proceedings, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the contained on Subject Device-1 for evidence, fruits, and instrumentalities of violations of 13 U.S.C. 371 (conspiracy as it pertains to the other Subject Offenses), 1005 (false bank entries), 1014 (false statements to a fmancial institution), 1343 (wire ?end), and 1344 (bank fraud), and 52 U.S.C. 30116(a)(1)(A) and 30109(d)(1)(A)(1) (illegal carnpaigu contributions) (the ?Subj ect Offenses?) described as follows: a. Evidence relating to Sterling National Bank, Melrose credit Union, andfor taxi medallions, from January 1, 2013 to the present. b. Evidence relating to a plan, proposal, or agreement for Michael Cohen entities associated wi?l him to tran er nv in crest in tar-ti medallions, and any associated debts or liabilities, to others, including to anchor entities associated with him: c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling andfor Meh'ose. d. Evidence relating to Essential Consultants, LLC, including any documents or communications that indicate the nature and purpose of payments made to or ?'onr Essential Consultants or the nature of any work done by Cohen or any other individuals in connection with Essential Consultants. e. Evidence of income to Michael D. Cohen {it Associates, including any documents or communications that indicate the nature and purpose of payments made to or from Michael D. Cohen 35Assoeiates, or evidence of the purpose of accounts opened in the name of Michael 1). Cohen Associates. 17 201103.02 h" . Case Document- 43-1 Filed 03/19/19 Page 254 of 269 f. Evidence relating to Cohen?s net worth, available cash and cash equivalents, and annual income, income sources, and other assets, Whether held personally or through entities, including tax returns, personal ?nancial statements, and bank records, from January 1, 2013 to the present. g. Evidence relating to agreements, loans, andr?or ?nancial transactions between and/or entities controlled by . and any payments by_ to Cohen, ?om January Cohen and AU 1 2. 110 1116 present. and! or other accountants, o. with others, including relating to Cohen?s bank accounts, taxes, debts, andfor ?nances, from January 1, 2013 to the present. p. Conununications, records, documents, and other ?les re?ecting false representations to a ?nancial institution related to the intended purpose of an account or loan at that ?nancial institution; the nature of any business or entity associated with an account at a fmancial institution; the source of funds ?owing into an account; or the purpose or nature of any ?nancial transactions involving that ?nancial institution, from January 1, 2013 to the present. 1 it messes .. 33:7?: . . . n. Case Document 43-1 Filed 03/19/19 Page 255 of 269 - If the Government determines that Subject Device-1 is no longer necessary to retrieve and preserve the data on the device, and that 5qu eat Devieenl is not subject to seizure pursuant to i Federal Rule of Criminal Procedure 41(c), the Government will return Subject Device-l, upon request. 'i Additionally, review of the items described in this Attachment shall he conducted pursuant to established procedures designed to collect evidence in a manner reasonath designed to protect an}r attorney?client or other applicable privilege. When appropriate, the procedures shall include . i Ilse of a designated ?filter team,? separate and apart from the investigative team, in order to address potential privileges. .I. 3i i; i. 19 201103.02 .: Case Document 43-1 Filed 03/19/19 Page 256 of 269 AG 93 Rev. Search and Seizure Warrant UNITED STATES DISTRICT COURT for the Southent District of New York [11 the Matter of the Search of (Brie?y describe the property to be searched or ideal?ij the person in: more and address) An Apple iPhone with Phone Number See Attachment Case No. - SEARCH AND SEIZURE WARRANT _Tii:" An application by a federal law enforcement of?cer or an attorney for the government requests the search of the following person or property located in the Southern District of New Yen-k {identij the person or describe the prepare: to t? "M"er "ire its inaction): An Apple iPhone with Phone Number_, See Attachment The person 01? property to '36 searched, described above, is believed lit) conceal (Extent?ij the person or describe the property to be seized): See Attachment - I that the or any recorded testimony, establish probable cause to search and seize the person or property. YOU ARE COMMANDED to execute this warrant on or before (not to exceed 14 days) Ed in the daytime 6:013 am. to 10 pan. at any titne in the day or night as I ?nd reasonable cause has been established. Unless delayed notice is authorized below, you must give a copy of the warrant and a receipt for the property taken to the person from whom, or frorn whose premises, the property was taken, or leave the copy and receipt at the 5' place where the property was taken. The officer executing this warrant, or an of?cer present during the execution of the warrant, must prepare an inventory as required by law and return this warrant and inventory to the Clerk of the Court. Upon its retunt, this warrant and inventory shpuld be ?led under seal by the Cleric of the Court. UWJ Initials I ?nd that immediate noti?cation may have an adverse result listed in 13 U.S.C. ZTOS (except for delay of trial), and authorize the officer executing this warrant to delay notice to the person who, or whose property, will be searched 01? Puri?ed (check the appropriate box) lijI' days (not to exceed 315?). Uuntil, the facts justifying, the later speci?c date of . Date and time issued: 759119.94. pr ?ea, Judge signature City 311d State: New York. NY Hon. Henry B. Pitman. U.S. Magistrate Judge Printed more and ri?e Case Document 43-1 Filed 03/19/19 Page 257 of 269 AD 93 (Rev. 01109] Search and Seizure Wanant (Page 2) Return Case No; Date and time warrant exeeutecl: Copy of warrant and inventon left with: Inventory made in the presence of Inventory of the property taken and name of any person(s) seized: Cer??eation to the Court. Date: I declare under penalty of perjuryr that this inventory is correct and was returned along with the original warrant Executing o?icer ?3 signature Printed name and ri?e Case Document 43-1 Filed 03/19/19 Page 258 of 269 ATTACHMENT I. Device Subject to Search and Seizure Subject Device-1 The device that is the subject of this search and seizure warrant (?Subject Device-1?) is described as follows: An Apple iPhone serviced by with the telephone number During the execution of this Search warrant, law enforcement personnel are authorized to depress the ?ngerprints and/ or of Michael Cohen onto the Touch ID sensor of Subject Device-1, or hold Subject Device?1 in front of Cohen?s face to activate the Face ID sensor, in order to gain access to the contents of any such device as authorized by this warrant. II. Review of ESI on the SubjectDevice Law enforcement personnel (including, in addition to law enforcement of?cers and agents, and depending on the nature of the E81 and the status of the investigation and related proceedings, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the E81 contained on Subject Device?1 for evidence, fruits, and instrumentalities of violations of 18 U.S.C. 371 (conspiracy as it pertains to the other Subject Offenses), 1005 (false bank entries), 1014 (false statements to a financial institution), 1343 (wire fraud), and 1344 (bank fraud), and 52 U.S.C. 30116(a)(1)(A) and 30109(d)(1)(A)(1) (illegal campaign contributions) (the ?Subject Offenses?) described as follows: a. Evidence relating to Sterling National Bank, Melrose Credit Union, and/or taxi medallions, from January 1, 2013 to the present. b. Evidence relating to a plan, proposal, or agreement for Michael Cohen and/or entities associated with him to transfer any interest in taxi medallions, and any associated debts or liabilities, to others, including to ?1nd/or entities associated with him. 0. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling and/or Melrose. 0 d. Evidence relating to Essential Consultants, LLC, including any documents or communications that indicate the nature and purpose of payments made to or from Essential Consultants or the nature of any work done by Cohen or any other individuals in connection with Essential Consultants. e. Evidence of income to Michael D. Cohen Associates, including any documents or communications that indicate the nature and purpose of payments made to or from Michael D. Cohen Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen Associates. 17 2017.08.02 A 1: Film.- Case Document 43-1 Filed 03/19/19 Page 259 of 269 f. Evidence relating to Cohen?s net worth, available cash and cash equivalents, and annual income, income sources, and other assets, whether held personally or through entities, including tax returns, personal ?nancial statements, and bank records, from January 1, 2013 to the present. - -.: -.4.- - g. Evidence relating to agreements, loans, and/or ?nancial transactions between ind/or entities controlled by a and any payments by to Cohen, from anuaiy Cohen and l, 2012 to the present. o. Communications with others, including?mdfor other accountants, relating to Cohen?s bank accounts, taxes, debts, andfor fmances, from January 1, 2013 to the present. p. Communications, records, documents, and other ?les re?ecting false representations to a ?nancial institution related to the intended purpose of an account or loan at that fmancial institution; the nature of any business or entity associated with an account at a ?nancial institution; the source of funds ?owing into an account; or the purpose or nature of any ?nancial transactions involving that ?nancial institution, ??om January I, 2013 to the present. 13 gonnacz Case Document 43-1 Filed 03/19/19 Page 260 of 269 If the Government determines that Subject Device-1 is no longer necessaryr to retrieve and preserve the data on the device, and that Subject Device?1 is not subject to seizure pursuant to Federal Rule of Criminal Procedure 4103), the Government will return Subject Device?1, upon request. Additionale revievv of the items described in this Attachment shall be conducted pursuant to established procedures designed to collect evidence in a manner reasonably designed to protect any attorney-client or other applicable privilege. When appropriate, the procedures shall include use of a designated ?filter team,? separate and apart from the investigative team, in order to address potential privileges. 19 concern rmm. . . . .. Case Document 43-1 Filed 03/19/19 Page 261 of 269 AD 9'3 Rev, Search and Seimre Warrant UNITED STATES DISTRICT COURT 9 g; for the Southern District of New York In the Matter of the Search of -- (Brie?y describe the property to be searched I i or fdenti ttircper?son turnouts andaddr?ersApple tF?hone with Phone Number_ See Attachment .j r? i SEARCH AND SEIZURE WARRANT To: au?m?m law ??fnmement Of?cer . . . . .. An application by a federal law enforcement of?cer or an attorney for the government requests the search g} ofthe following person or preparer located in the Southern District of New York ?demt?x theperron or describe the taupe?)? to "ma-5w" ?bre its locatiqu if An Apple iF'hone with Phone Number See Attachment The person or property to be searched, described above, is believed to conceal ?denrr?: fiteperzron or describe the proper? to be seized}: 3' See Attachment I ?nd that the or any recorded testimony, establish probable cause to or PTOPBTW- II - .I - . YOU ARE CDWED to execute this warranton or before gt" ?5 . - tarot-to awesome) if in the daytime 6:01] am. to It} pm. at any time in the day or night as I ?nd reasonable cause has been established. V. 1 Unless delayed notice is authorized below, you must give a copy of the warrant and a receipt forJ property taken to the person from whom, or from whose premises, the property was taken, or leave the, copyfangi receipt at the place where the property was taken, - 1' The of?cer executing this warrant, or an of?cer present during the execution of the warrant, must prepare an inventory as required by law and 1eturn this wallant and inventory to the Clerk of the Court. Upon its return, this warrant and inventon should be ?led under seal by the Clerk of the Court. i USMJqu?uts El Itiud that immediate noti?cation may have an adverse result listed in 18 U.S.C. 27'05 (except for delay of trial), and authorize the of?cer executing this warrant to delay notice to the person who, or whose property, will be searched or seized (check the appropriate but) Ci for days {1'ch exceed .3139, . . .. i: .. l.'luntil, the facts justi?ing, the later speci?c date of 5 Date and time issued: if 37; 5 #7 35am? j, 61/ [9/15 I fthatfge?a signature I I. I . I City and state: New verk. My Hon. Henrv B. Pitrb'eri. Printed more and Case Document 43-1 - Fi-Ied- 03/19/19 Page 262 of 269 ATTACHMENT 1. Device Subject to Search and Seizure Subject Device-2 The device that is the subject of this search and seizure warrant (?Subject Devices?? is described as follows: An Apple iPhone serviced by with the telephone number During the execution of this search warrant, law enforcement personnel are authorized to depress the ?ngerprints andfor thtunbprints of Michael Cohen onto the Touch ID sensor of Subj ect Device?2, or hold Subject Device~2 in front of Cohen?s face to activate the Face ID sensor, in order to gain access to the contents of any such device as authorized by this warrant. II. Review of ESI on the Subject Device Law enforcement personnel (including, in addition to law enforcement of? cars and agents, and depending on the nature of the E31 and the status of the investigation and related proceedings, attomeys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical expeits under government control) are authorized to review the E31 contained on Subject Device-2 for evidence, fruits, and of violations of 13 U.S.C. 371 (conspiracy as it pertains to the other Subject Offenses), 1005 (false bank entries), 1014 (false statements to a ?nancial institution), 1343 (wire hand), and 1344 (hauls: fraud), and 52 use. 30115(a)(1)(A) and (illegal campaign contributions) (the ?subject Offenses?) described as follows: a. Evidence relating to Sterling National Bank, Melrose Credit Union, andfor taxi medallions, from January 1, 2013 to the present. b. Evidence relating to a plan, proposal, or agreement for Michael Cohen andfor entities associated with him to transfer any interest in taxi medallions, and any associated debts or liabilities, to others, including to ?1ndr?or entities associated with him. c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling andfor Melrose. (1. Evidence relating to Essential Consultants, LLC, including any documents or communications that indicate the nature and pm'pose of payments made to or ??om Essential Consultants or the nature of any work done by Cohen or any other hidividuals in connection with Essential Consultants. e. Evidence of income to Michael D. Cohen 85 Associates, including any documents or that indicate the nature and purpose of payments made to or from Michael D. Cohen 3: Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen a; Associates. 20 seizosm . .. I Case Document 43-1 Filed 03/19/19 Page 263 of 269 f. Evidence relating to Cohen?s net worth, available cash and cash equivalents, and annual income, income sources, and other assets, whether held personally or through entities, including tax returns, personal ?nancial statements, and bank records, from January 1, 2013 to the present. g. Evidence relating to agreements, loans, andfor ?nancial transactions between Cohen and?andfor entities controlled by and any payments by to Cohen, ??orn January 1, 2012 to the present. 0. Communications with others, including _andi'or other accountants, relating to Cohen?s bank accounts, taxes, debts, andfor ?nances, from January 1, 2013 to the present. 13. Communications, records, documents, and other ?les re?ecting false representations to a ?nancial institution related to the intended purpose of an account or loan at that financial institution; the nature of any business or entity associated with an account at a ?nancial institution; the source of funds ?owing into an account; or the purpose or nature of any ?nancial transactions involving that ?nancial institution, ?onl January I, 2013 to the present. 21 2017.03.?unripe Case Document 43-1 Filed 03/19/19 Page 264 of 269 If the Government determines that Subject Device-2 is no longer necessary to retrieve and preserve the data on the device, and that Subject Device-2 is not subject to seizure pursuant to Federal Rule of Criminal Procedure 41(c), the Government will return Subject Device-2, upon request. Additionally, review of the items described in this shall be conducted pursuant to established procedures designed to collect evidence in a manner reasonably designed to proteot any attorney-client or other applicable privilege. When appropriate, the procedures shall include use of a designated ??lter testin,? separate and apart ?ora the hivestigative team, in order to address . potential privileges. 22 so 1 7.03.02 .. . .. . .. Case Document 43-1 Filed 03/19/19 Page 265 of 269 A0 93 {5131le Rev. O?il?) Search and Seizure Warrant UNITED STATES DISTRICT COURT for the Southern District of New York In the Matter of the Search of (Brie?y describe the property to be searched. or identi?l the person by name and address) An Apple iPhone with Phone Number- See Attachment SEARCH AND SEIZURE WARRAN Case No. To: "An?yauthoriree'law An application by a federal law enforcement of?cer or an attorney? for the government requests the search of the following person or property located in the Southern District of New val-k (identi?t the person or describe the property to be ?some? its ioeotiort): An Apple iPhone with Phone Number tee Attachment The person or property to be searched, described show, is believed to conceal (identt?t the person or describe the property to be seized): See Attach ment I fuid that the affidavit(s], or any recorded testimony, establish probable cause to search and seize the person or property. YOU ARE communist) to execute this warrant on ct before {not to exceed 1'4 o?mrs) if in the daytime 6:00 am. to 10 pm. at any time in the day or night as I ?nd reasonable cause has been established. Unless delayed notice is authorized below, you must give a copy of the warrant and a receipt for the property taken to the person from whom, or from whose premises, the property was taken, or leave the copy and receipt at the place where the property was taken. The of?cer executing this warrant, or an of?cer present during the execution of the warrant, must prepare an inventor},r as required by law and return this warrant and inventon to the Clerk of the Court. Upon this warrant and inventor: should be ?led under seal by the Clerk of the Court. I ?nd that immediate noti?cation may have an adverse result listed in 13 U.S.C. 2705 (except for delay of trial), and authorize the of?cer executing this warrant to delay notice to the person who, or whose property, will searched or seized (cheer the appropriate box) Elfor days {not to exceed so). Ijuntil, the facts justifying, the later speci?c date of Date andtirne issued: 7; PH m?h Judge signature Hon. Henrv B. Pitmao. UBIMaoiatrato Judue Printed name and title City and state: New YorkCase Document 43-1 Filed 03/19/19 Page 266 of 269 i AD 93 (Rev. Search and Seizure Warrant [Page 2] Return Case No; Date and time warrant executed: Copy of warrant and inventory left with: Inventory made in the presence of Inventory of the property taken and name of any person(s) seized: - rantings-Tr: - . - - Certi?cation I declare under penaltyr of perjury that this inventory is correct and was returned along with the original warrant to the Court. Date: Executing o?icer?s signature 4 i: I. I Printed Home and ri?e Case DoCument 43-1 Filed 03/19/19 Page 267 of 269 ATTACHMENT I. Device Subject to Search and Seizure 4- Subject Device-2 The device that is the subject of this search and seizure warrant (?Subject Device?2?) is described as follows: An Apple iPhone serviced by with the telephone number During the execution of this search warrant, law enforcement personnel are authorized to depress the ?ngerprints and/ or thumbprints of Michael Cohen onto the Touch ID sensor of Subject Device?2, or hold Subject Device?2 in front of Cohen?s face to activate the Face ID sensor, in order to gain access to the contents of any such device as authorized by this warrant. II. Review of ESI on the Subject Device Law enforcement personnel (including, in addition to law enforcement officers and agents, and depending on the nature of the ESI and the status of the investigation and related proceedings, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the E81 contained on Subject Device-2 for evidence, fruits, and instrumentalities of violations of 18 U.S.C. 371 (conspiracy as it pertains to the other Subject Offenses), 1005 (false bank entries), 1014 (false statements to a financial institution), 1343 (wire fraud), and 1344 (bank fraud), and 52 U.S.C. 30116(a)(1)(A) and 30109(d)(1)(A)(1) (illegal campaign contributions) (the ?Subject Offenses?) described as follows: a. Evidence relating to Sterling National Bank, Melrose Credit Union, and/or taxi medallions, from January 1, 2013 to the present. b. Evidence relating to a plan, proposal, 'or agreement for Michael Cohen and/ or entities associated with him to transfer any interest in taxi medallions, and any associated debts or liabilities, to others, including to? and/or entities associated with him. c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has with Sterling and/ or Melrose. d. Evidence relating to Essential Consultants, LLC, including any documents or communications that indicate the nature and purpose of payments made to or from Essential Consultants or the nature of any work done by Cohen or any other individuals in connection with Essential Consultants. e. Evidence of income to Michael D. Cohen Associates, including any documents or communications that indicate the nature and purpose of payments made to or from Michael D. Cohen Associates, or evidence of the purpose of accounts opened in the name of Michael D. Cohen Associates. 20 2017.08.02 Case Document 43-1 Filed 03/19/19 Page 268 of 269 f. Evidence relating to Cohen?s net worth, available cash and cash equivalents, and annual income, income sources, and other assets, whether held personally or through entities, including tax returns, personal ?nancial statements, and bank records, from January 1, 2013 to the present. - g. Evidence relating to agreements, loans, and/or ?nancial transactions between andfor entities controlled by and any payments by to Cohen, from January Cohen anc l, ZUIE 130 [he 0. Communications with others, including?mdfor other accountants, relating to Cohen?s bank accounts, taxes, debts, andfor ?nances, from January 1, 2013 to the present. p. Communications, records, documents, and other ?les re?ecting false representations to a ?nancial institution related to the intended purpose of an account or loan at that financial institution; the nature of any business or entity associated with an account at a financial institution; the source of funds ?owing into an account; or the purpose or nature of any fmanciai transactions involving that ?nancial institution, from January 1, 2013 to the present. . 21 201103.02 Case Document 43-1 Filed 03/19/19 Page 269 of 269 If the Government determines that Subject Device-2 is no longer necessary to retrieve and preserve the data on the device, and that Subject Device-2 is not subject to seizure pursuant to Federal Rule of Criminal Procedure 41(c), the Government will return Subject Device-2, upon request. Additionally, review of the items described in this Attaelunent shall be conducted pursuant to established procedures designed .to collect evidence in a manner reasonany designed to protect any attorney-client or other applicable privilege. When appropriate, the procedures shall include use of a designated ?filter team? separate and apart from the investigative team, in order to address potential privileges. 22 2017.03.02 .- a. - -