Possession vs. Receipt: The Charge That Adds Five Mandatory Years.

Last Updated on: 4th August 2026, 01:33 am

A deliberate internet download can provide evidence of knowing receipt. When federal law enforcement seize computers or devices, they may use evidence of a knowing download to support a charge of receipt. While receipt is often harder to prove than possession, any evidence of a download makes receipt easier to pursue.

The mandatory minimum sentence for first-offense receipt is five years. First-offense federal possession carries no mandatory minimum sentence. This creates immense leverage for prosecutors. With a five-year mandatory sentencing floor, they can effectively increase the pressure to accept a plea.

Section 2256, titled “Definitions for chapter,” defines child pornography as:

“any visual depiction, including any photograph, film, video, picture, or computer or computer-generated image or picture, whether made or produced by electronic, mechanical, or other means, of sexually explicit conduct, where … the production of such visual depiction involves the use of a minor engaging in sexually explicit conduct,”

The federal definition of child pornography is broad. Images that seem less-than-explicit can still be considered sexually explicit for purposes of the federal charge. Furthermore, the federal definition of a “minor” is anyone under the age of 18, and any image that does not comply with state age-of-consent laws will have no effect under federal law.

The federal government’s jurisdiction can rest on images that cross state lines via the internet. With internet-based child pornography cases, this is practically a given.

The internet transmission of an image will be used to support charges under Section 2252A and Section 2252. Both provisions carry mandatory minimum sentences for receipt and distribution offenses. Receiving or possession is not a requirement for criminal charges in these cases.

While it seems that the broad language of these statutes would lead to a lot of prosecution, the federal government often relies on plea bargaining. The threat of a mandatory minimum sentence is a powerful bargaining chip, and once a defendant’s actions meet the federal definition, the prosecution has the upper hand in plea bargaining.

What is the legal difference between receipt and possession?

The primary difference between possessing child sexual abuse material and receiving it is that receipt is considered a more active offense, and consequently carries more penalties. While possessing the material is illegal, the material could have come from anywhere. This doesn’t necessarily mean that you have acquired the images or videos from another source, and so, it does not carry as severe penalties.

The relevant section in federal law is U.S.C. § 2252(a)(4)(B), which states that it is unlawful for someone to knowingly possess a visual depiction of child sexual abuse. Along with U.S.C. § 2252A, these are among the most frequently used statutes in child pornography cases.

To convict you on a charge of possession, federal prosecutors need to prove that you knowingly possessed an image or video that contains child sexual abuse material. While this is much easier to prove than receipt, both charges are extremely serious.

Receipt is criminalized under U.S.C. § 2252(a)(2), and unlike possession, receipt is a separate offense that carries even stiffer penalties. To convict on a charge of receipt, federal prosecutors must prove that the defendant knowingly received a qualifying file; proof that a qualifying file was later found on the device is not enough. If federal law enforcement are able to find evidence showing that the material on a defendant’s computer or electronic device was received, it can support a charge under U.S.C. § 2252(a)(2).

Possessing child sexual abuse material is a serious offense under federal law, and first-offense charges carry a statutory maximum sentence of 10 years.

Receipt is a more serious offense under federal law, and first-offense charges carry a statutory maximum sentence of 20 years.

The difference in maximum sentences also reflects a difference in minimum sentences. Possession is not subject to a mandatory minimum sentence under the federal guidelines, but a first offense of child sexual abuse material receipt carries a mandatory five-year minimum sentence.

Under the law, the distinction between these two charges is clearly defined: “Whoever … knowingly receives, or distributes, any visual depiction using any means or facility of interstate or foreign commerce …” 18 U.S.C. § 2252(a)(2), and “Whoever … knowingly possesses, or knowingly accesses with intent to view, 1 or more books, magazines, periodicals, films, video tapes, or other matter which contain any visual depiction …” 18 U.S.C. § 2252(a)(4)(B).

What evidence proves a knowing download rather than possession?

When charging federal crimes under the child pornography statutes, prosecutors must present evidence that supports the specific allegations in the case. When evidence of a knowing download exists, federal prosecutors may charge the defendant with receipt rather than possession. Files that appear to have been downloaded and saved deliberately support the charge of knowing receipt. File metadata can also support this charge. The metadata includes information such as creation, modification, and access times. When the creation or modification date is recent, this can support a timeline that suggests a download from another source rather than long-term possession. Search history is perhaps one of the most crucial forms of evidence presented in federal child pornography cases. Search history that suggests a defendant was actively searching for child sexual abuse material can support prosecutors’ attempts to establish proof of knowledge, and receipt as well. While files can just exist in the downloads or images folder of a computer or device, folder organization can also provide evidence that a defendant acquired files with the purpose of possessing them. If files are organized into folders that correspond to the nature of the material, or even if the files are placed into concealed folders, which is another common find on computers and devices seized by federal law enforcement, it can support prosecutors’ claims of knowing possession. File names can also support a claim of knowing possession or receipt. When file names are clear about the nature of the illegal images or videos they contain, this can also be used to help satisfy the proof of knowledge requirement. The use of peer-to-peer software can support both the allegations of receipt and distribution. With peer-to-peer software, users send and receive files with other users without the need for a central server. If files that qualify as child sexual abuse material are downloaded using P2P software, prosecutors will present this as evidence of knowing receipt (and potentially distribution as well). Download logs and timestamps can support the charge of knowing receipt. Most computer operating systems record these pieces of information. If federal law enforcement find files with a recent creation or modification date, the timestamps and logs found on the device can support the prosecution’s claims of knowing receipt. Browser download histories can also support the charge of knowing receipt. Browsers record the IP addresses or URLs from which a file was downloaded. Files downloaded from websites dedicated to hosting or sharing child pornography, or from other sources that the browser records, can provide evidence of knowing acquisition. To establish knowing receipt of a child sexual abuse image or video, federal prosecutors need to prove that the defendant knew the nature of the material and knowingly received it. Receiving prohibited material is an offense; knowingly receiving it is an offense that carries a five-year mandatory minimum sentence for first offenses. Thus, federal prosecutors will use all available evidence to establish the defendant’s intent. At Spodek Law Group, we take the time to investigate and learn all aspects of the case. We review the evidence the government presents, and we look for ways to contest this evidence or present a more favorable alternative theory of the case.

Do cached thumbnails or automatic downloads count as receipt?

The nature of the Internet makes it possible for an image or video file to be stored on a computer, laptop, or other electronic device without a user knowingly storing the file there. In criminal cases involving Internet-based child pornography, a key part of the defense is to distinguish between a “knowing” act and an inadvertent one. This is particularly important in the context of possession and receipt charges, which are both distinguished by the requirement that the defendant “knowingly” commit the offense. Some examples of the kinds of files that can exist without a user knowingly storing them are cache files, temporary internet files, and thumbnail artifacts. These are automatic files, that are not necessarily saved by the user, and the file paths for their creation are separate from the user’s downloads folder.

Federal prosecutors need more than the mere fact that a cache file, thumbnail, or temporary Internet file existed on the device to establish knowing receipt or possession. They need evidence that the defendant knowingly received or possessed the material; an effort to store the file is not required in every receipt or possession case. If evidence of awareness cannot be established, a charge of possession could prove to be more difficult to pursue.

When files are discovered in the unallocated space of a computer’s hard drive, their presence does not, without more, establish knowing possession. Instead, the presence of a file in unallocated space only supports the notion that the file existed at some point. Once the defendant deleted the file, it may remain in unallocated space until replaced by another file. Deletion may be evidence of prior dominion and control, rather than proof that the defendant never knowingly possessed the file.

Cloud services like Dropbox and Google Drive create a unique situation as well. A defendant may have stored illegal content in the cloud, and a file has then been automatically synced to the defendant’s device. Without evidence showing that the defendant actively downloaded or accessed the material via their device, this does not, by itself, establish a knowing acquisition. The existence of automatic cache files does not, by itself, provide evidence for a charge under U.S.C. § 2252(a)(2) (knowing receipt of child sexual abuse material). Evidence of knowing acquisition must first be established, and then the prosecutor can argue that the automatic creation of cache files is further evidence of a receipt violation. Files that appear in the unallocated space of a hard drive prove that a file was present at some time. The fact that a file exists in unallocated space does not prove knowing possession of the file, nor does it prove that the defendant did not delete the file after realizing its nature.

Partial downloads are a bit different. When images of child pornography are partially downloaded, this can provide evidence of receipt. If there is evidence of an intentional transfer, the partial nature of the downloaded file has no bearing on culpability. If you are facing this situation, Spodek Law Group handles federal criminal defense matters nationwide, from offices in New York and Los Angeles.

Can a judge sentence below the five-year receipt minimum?

One of the primary reasons a defendant might be willing to plead guilty to a possession charge is because this eliminates the five-year mandatory minimum sentence that is available with a receipt plea.

Judges have varying degrees of discretion when sentencing in federal court, but without statutory authority, a judge cannot deviate below the mandatory minimum. In a case involving child sexual abuse material, a defendant’s best chance to avoid a five-year mandatory sentence is to plead guilty to a charge other than receipt.

Substantial assistance motions are a recognized form of statutory authority that is available under federal law. If a defendant can show that they have played a significant role in assisting law enforcement with a federal investigation, the prosecution may file a substantial assistance motion. While this is not a guarantee of a sentence below the five-year mandatory minimum, this motion will help persuade the judge to deviate from the sentencing guidelines.

A substantial-assistance motion affects sentencing, not whether the charge remains pending. This depends on the degree of help that is provided, but if the government determines that you provided substantial assistance, it is a strong endorsement of your willingness to cooperate.

Guideline variances do not erase statutory mandatory minimum sentences. A variance is a request for a sentence that does not fit into the sentencing guidelines; however, the guidelines are merely intended to assist judges. Statutory minimums, however, can only be avoided if there is a recognized exception to the minimum.

18 U.S.C. § 3553(f), the safety valve, applies only to certain federal drug offenses. It allows the court to impose a sentence below the mandatory minimum when the defendant meets the statutory criteria; it has no application to child sexual abuse material (CSAM) cases. The term “superseding indictment” is used to describe indictments that amend or replace previously issued indictments. Superseding indictments may add, remove, or modify the charges listed in a defendant’s original indictment. The U.S. Department of Justice uses this process in CSAM cases as well, and it is possible that the government will issue a superseding indictment in which they add the charge of receipt. As we’ve established, receipt charges carry a five-year mandatory minimum sentence, and receipt charges are often pursued in tandem with possession charges. For the fiscal year that ended on September 30, 2024, the United States Sentencing Commission reported an average sentence of 87 months for first-offense receipt of CSAM.

According to the U.S. Sentencing Commission, these are the reported average sentences imposed for possession and receipt of CSAM.

The report showed that first-offense receipt offenses carry a higher statutory maximum than first-offense possession offenses, and they had a higher average sentence imposed as well. While this average sentence may not reflect the penalties imposed in the average case, it provides some context to consider.

Can prosecutors charge receipt and possession for the same files?

It is common for federal indictments in child pornography cases to list “stacked” counts of possession, receipt, and distribution.

A stacked indictment is an indictment in which the government is seeking convictions under the child pornography statutes for each of the images or videos that they discovered on a defendant’s computer or device. Stacked indictments are used to increase the government’s leverage. If defendants are facing a significant number of charges, they may find it difficult to find effective legal representation in the time that remains before their trial. While a multiplicity challenge is a viable defense in some cases, this defense is not a sure thing. A multiplicity challenge can be made based on the theory that prosecutors are trying to convict you for the same conduct twice. When the two charges involve possessing and receipt of the same images or videos, this is an argument that can be made.

The best way to assess whether a multiplicity challenge will be effective is to look to how courts are viewing these cases in the past. In the Ninth Circuit, courts have held that possession is a lesser-included offense of receipt.

Along with the federal sentencing guidelines, this is a critical aspect of the federal court system. The concept of a lesser-included offense comes from the idea that it is impossible to be convicted of a greater-included offense without meeting the elements of the lesser-included offense. If the offense of receipt includes all the elements of possession, then the two charges may be duplicative, and this is an argument for a multiplicity challenge.

Even in circuits that have recognized a multiplicity of counts in certain contexts, the conclusion is far from a settled matter. For example, a finding that receipt and possession charges are based on the same event does not necessarily mean that multiple counts are duplicative. If separate images or videos were received on different dates, even if they were obtained in a single browsing session, then federal law enforcement can potentially prove that each was received separately.

The punishment of a multiplicity violation does not always lead to a reduction in the defendant’s sentence. While concurrent sentencing may be a plausible outcome in some cases, the proper remedy for a multiplicity violation is the vacating of the redundant counts. This may not have a significant effect on the final sentence in practice, but it is a necessary first step in challenging other aspects of the conviction.

What should defense counsel investigate first in a receipt case?

When you are facing charges in a federal child pornography investigation, federal prosecutors will need to prove more than that you own the device on which the images or videos in question were found. They need to prove your knowing possession of the file, and this is where federal defense counsel can first start building the case for an attribution defense. An attribution defense generally asserts that the user of the device is not the same person who received the illegal material.

Shared devices, open Wi-Fi networks, malware, and evidence of remote access are all circumstances that present opportunities to establish attribution defenses. If federal prosecutors are unable to establish your knowing possession of the image or video, they will be unable to meet the burden of proof for receipt. The best way for defense counsel to determine the likelihood of an effective attribution defense is by hiring an independent digital forensic expert to independently review the data obtained from the seized device. Digital forensics is a highly technical field, and the best defense attorneys will have a highly technical digital forensic expert to work closely with.

Federal digital forensic investigators have numerous tools for recovering deleted files and finding deleted search history. If the defendant created separate user accounts and each account accessed different websites and saved different files, it may be possible for a digital forensic expert to pinpoint who had access to a specific image or video.

When federal agents seek a warrant to seize computers, laptops, or other electronic devices, the scope of the warrant must be specific. Overly broad warrants can violate the Fourth Amendment. If the warrant was a violation of the Fourth Amendment, evidence obtained during the government’s investigation may be suppressed.

The suppression of incriminating evidence can provide important leverage during plea bargaining. If evidence is suppressed, it may not be available to support the prosecution’s claims of knowing possession, and it may prevent the government from proving receipt as well. When defending against federal criminal charges, your best and most-effective defense counsel will be well-acquainted with the nature of the computer or device that the government has taken. For example, the operating system and browser installed on the device will be important pieces of information for building an effective attribution defense, as well as determining how to challenge the evidence the government collects.

The Internet makes it possible to unknowingly store illegal content on a computer or other electronic device, as discussed earlier. If your attorney has evidence to support a claim that you inadvertently downloaded illegal content, you could use this to argue for a plea to a possession charge rather than receipt.

Speak With a Federal Defense Lawyer

If you are dealing with any part of what this article describes, the next step is a conversation with a lawyer who handles these cases. Spodek Law Group is a second generation criminal defense firm practicing since 1976, representing clients nationwide from offices in New York, Brooklyn, Queens and Los Angeles. Call 212-300-5196 to speak with our team.