What started as a program to track opioids and illegal firearms moving through the mail became something considerably harder to explain. The Postal Inspection Service was operating iCOP (Internet Covert Operations Program) by 2018, using open-source intelligence tools, cryptocurrency analysis, and social-media monitoring to support investigations.
By 2020, analysts were generating intelligence bulletins about protest events across the political spectrum. Targets included the Million MAGA March, a Virginia gun-rights rally and its counter-protest, Save the Post Office Saturday demonstrations, Black Lives Matter protests, and gatherings near then-Postmaster General Louis DeJoy’s home.
When Protest Monitoring Becomes the Product
The range of monitored events raises a direct question about the program’s connection to postal crimes.
That range raises an obvious question: what do demonstrations outside a cabinet official’s home have to do with parcels, stamps, or mail fraud?
Postal Inspection Service officials told Congress in 2021 that iCOP expanded during a period of threats against postal leadership, employees, and facilities. Analysts, they said, used open-source information to identify potential unrest.
That rationale explains monitoring in the vicinity of postal operations. It does not cleanly account for the full breadth of what the records show.
One bulletin discussed possible violence tied to inflammatory online material while simultaneously acknowledging that officials had no intelligence indicating a specific threat existed. Speculative threat assessment is not the same as credible threat assessment, and the distinction matters when the subject is constitutionally protected organizing. Some parallel programs have involved secretly tracking users far beyond any stated investigative purpose.
The Inspector General’s Finding Is the Key Document
The Postal Service’s own oversight body, not press coverage or advocacy litigation, provides the clearest institutional test of iCOP’s limits.
The USPS Office of Inspector General concluded: “We determined that certain proactive searches iCOP conducted using an open-source intelligence tool from February to April 2021 exceeded the Postal Inspection Service’s law enforcement authority.”
The problem was not that the posts were private. It was that the searches lacked a sufficient connection to postal crimes or Postal Service functions.
The audit did not find that every iCOP activity or every protest bulletin was unlawful. It found that certain proactive searches crossed a documented line.
The Records That No Longer Exist
Missing documentation makes independent oversight of the program’s full scope difficult to achieve.
Analysts stored sensitive personally identifiable information, gathered from public social-media sources, on work computers, according to the inspector general’s audit. They did not consistently record how that information was used or how it contributed to finished reports.
During EFF’s Freedom of Information Act litigation, the Postal Service disclosed that an external hard drive containing relevant emails became inoperable after it was dropped. The underlying emails had already been deleted under the agency’s retention schedule, the Postal Service said.
Absence of records does not prove misconduct. It does make independent accountability more difficult.
What the Postal Service Said, and What It Left Unanswered
Agency talking points addressed the bulletin program directly but left continuity questions unresolved.
USPS talking points attributed to the Chief Postal Inspector stated that the agency “stopped the distribution of the bulletins like the one you have seen in the media reports” following public scrutiny. Officials also said iCOP did not target groups based on race, religion, or the exercise of First Amendment rights. That is the agency’s assertion; it is not an independent finding that no protected activity was monitored.
After 2021 press coverage, the Postal Service reportedly renamed the program. No available disclosure confirms whether social-media collection, keyword monitoring, or intelligence sharing with law-enforcement partners ceased under the successor structure.
What Needs to Improve
The path forward requires documented authority, mandatory records retention, and a clear public policy governing any successor program.
EFF argues that the concern is not that public posts were read. Government collection and dissemination, the organization contends, can enable scrutiny or targeting well beyond the context in which people originally communicated, particularly when the subject is political organizing.
The Postal Inspection Service needs documented legal authority tied to postal crimes for each category of search, mandatory retention of oversight records, and published privacy impact assessments. It also needs a clear public policy governing whatever program now carries iCOP’s functions.
Renaming a program is not reform. The paper trail is.
