Presented by Wayne Nichols Introduction Wayne Nichols Active law enforcement with 9 years of experience Currently a Detective with the Henderson Nevada Police Department Assigned to the Computer Crimes Unit ID: 578433
Download Presentation The PPT/PDF document "Craigslist Investigations" is the property of its rightful owner. Permission is granted to download and print the materials on this web site for personal, non-commercial use only, and to display it on your personal computer provided you do not modify the materials and that you retain all copyright notices contained in the materials. By downloading content from our website, you accept the terms of this agreement.
Slide1
Craigslist Investigations
Presented by Wayne NicholsSlide2
Introduction
Wayne Nichols
Active law enforcement with 9 years of experience
Currently a Detective with the Henderson, Nevada Police Department
Assigned to the Computer Crimes Unit
T.F.O
with the FBI
(Internet Crimes Against Children)
Conduct online undercover operations
Consultant for PoliceTechnical.com
CraigslistSlide3
Goal and Objectives
Understanding how Craigslist works
Types of crimes found on Craigslist
Drugs
Prostitution
Enticement of minors
Property crimesSlide4
Goal and Objectives (
cont
)
What to look for in a Craigslist posting
Tools needed to initiate investigations
PDF capture tool
Undercover email addresses
Google Voice
Access to LE databases
TLO.com
How to obtain information from CraigslistSlide5
How Craigslist Works
www.craigslist.org OR www.craigslist.com
Online classified ads forum
Allows you to search and post ads in nearly every major U.S. city
Canada, Europe, Asia, Middle EastSlide6
How Craigslist Works (cont
)
The website is broke down in:
Sections
Categories
Subcategories
Important to understand the abbreviations of a subcategorySlide7
How Craigslist Works (cont
)
‘Personals’ section are heavily used for illegal activity
‘Erotic Services’ created controversy for the site
Although now shut down
‘Casual Encounters’ contains the majority of prostitution activity Slide8
Posting to CraigslistSlide9
Posting to Craigslist
Free to post (with few exceptions)
An email address is required to post an ad
CL is now requiring a verified phone number with certain types of posting
No limit on number of postings
Every post can contain up to 4 photos
Poster can choose to list additional contact information within the postSlide10
Posting to Craigslist (
cont
)
A computer is not required
Cell phones with Internet access
Applications on smart phones
Majority of classified postings expire after 45 days
The following cities have a 7-day expiration
Boston, Los Angeles, New York, Portland, Sacramento, San Diego, Seattle, San Francisco, Washington DCSlide11
Posting to Craigslist (cont
)
Posters can add additional or specified locations
There is not a verification process for listed informationSlide12
Posting to Craigslist (
cont
)
CL acts as the “middle man” on the initial communication
CL creates an email address within the post
Subsequent email communication takes place outside of Craigslist
Important to not bypass the “middle man” process
Prior to posting, the poster is agreeing to all terms and conditions of Craigslist
CL does “restrict” the advertisement of the following items:
Weapons, alcohol, drugs, underage enticement, hazardous materials, illegal telecommunication equipment, counterfeit currency, gambling
itemsSlide13
Example of PostingSlide14
Information Captured by CL
Craigslist captures and retains the IP address associated with
all
postings
Including verified phone number
CL is also retaining photos included with every post (with a 2 month retention period
)
Starting from the time the post expires or is flagged
Craigslist logs
every
posting associated with suspect’s email address
No retention period
A reverse search can also be done
By IP or email addressSlide15
Information Captured by CL (
cont
)
Craigslist logs
limited
information on all responses to a post
E
mail and IP address only
Along with date and
time stamps
Actual message content is NOT saved
Craigslist will indicate if the posting was flagged, expired, or removed by poster
Craigslist will indicate
if the
posting has been modified
But only saves the most recent
change
CL does not track the evolution of an adSlide16
Information Captured by CL (cont)
EXIF data is not saved
Photo is condensed to fit size limit standards
Administrative
Subpoena / Search Warrant will be accepted by fax, email, or mail
Quicker to have the results emailed to youSlide17
Craigslist Contact Information
Fax
415-504-6394. Attention: Custodian of Records
Email
legal@craigslist.org (please send request as a PDF)
Mail
Craigslist – 1381 9
th
Avenue San Francisco, CA 94122. Attention: Custodian of RecordsSlide18
Subpoena Return InfoSlide19Slide20Slide21
Utilities and Forms Needed Before the Investigation BeginsSlide22
The Essentials
PDF tool
‘Cute PDF’ is free
Undercover email accounts
Gmail is a must for all email communication
Google Voice accounts
TLO
Free to law enforcementSlide23
Forms
Administrative Subpoena / Search Warrant
Are you asking for all available information?
Information about previous posts
Are you providing an email address as a preferred method to receive requested information?
Include a “do not disclose” request in subpoenaSlide24
Drug InvestigationsSlide25
Drugs on Craigslist
Reading between the lines is necessary
Offers of drugs are subtly embedded within legitimate postings
Important to know slang terminology
UrbanDictionary.com
Medical themed advertisements
Theme
of “Medicinal Marijuana
”
Drugs and sex still go hand in hand
‘Personals’ section will most likely yield the most
resultsSlide26
Where to Begin
‘Casual Encounter’ or ‘
Misc
Romance’ section
Often no
need to go past the main categorySlide27
Common Slang / Search Terms
Marijuana
420, bud, medicinal, grow, hydro, weed, herb, ganja
Methamphetamine
Tina, crystal, clouds, spun
Heroin
H, OP8
Pills
Lortab
, Tabs,
Perc
or Percocet, Valium, RX, Oxy, Hydrocodone, Xanax
Ecstasy
X, Molly,
xtcSlide28
Common Slang / Search
Terms (
cont
)
Keeping up on your local crime trends
What’s popular in your jurisdiction may not be popular in anotherSlide29
420Slide30
Best 420 AroundSlide31
Legitimate Posting?Slide32
Monday Tina DeliveredSlide33
Tina and MollySlide34
MollySlide35
PillsSlide36
Got Toes?Slide37
Very DiscreetSlide38
Prostitution InvestigationsSlide39
Prostitution on Craigslist
Typically an easier type of proactive investigation to initiate
Revolving door of ads
The ‘Personals’ has several different subcategories
‘Casual Encounters’ allows for more advanced searchesSlide40
Prostitution on Craigslist
Most target enriched categories
Women seeking:
Men (W4M)
Men seeking:
Women (M4W)
Men (M4M)Slide41
Prostitution on Craigslist
Key phrases and terms are often used
The exchange of “roses” (most popular search term)
Massages
Outcall
Incall
or In-call
Sugar, Sugar Daddy, Sugar Baby
Could be synonymous with pimps seeking out prostitutes
Searches for “outcall” and “
incall
” seem to be more popular in major cities
The exchange
of drugs
is a
very popular
themeSlide42
Subtle RequestSlide43
Not So Subtle RequestSlide44
‘Outcall’ or ‘In-call’Slide45
RosesSlide46
Roses, 420, White Girls…Slide47
Sugar BabeSlide48
Sugar BabySlide49
Sugar DaddySlide50
HiringSlide51
Juvenile Enticement InvestigationsSlide52
CL vs. Chat Rooms
The offender is placing the ad
The investigation begins with the CL post
With CL, less likely to be dealing with “fantasy communicators”
More likely dealing with an offender who has made his mind up to meet
With CL, you’re communicating with someone who resides in your jurisdiction
Or will be in your jurisdictionSlide53
CL vs. Chat Rooms
The time between communication to an actual meeting is often very
quick *
Patience of the offender
Time restraints they have (visitor in town)
Turnaround time on subpoenas to CL is much quicker
Days versus weeks
The majority of your offenders are identified prior to the meet
LE tools and email research tools are essential
TLO
AccurintSlide54
Where to Focus Efforts
‘Casual Encounters’
M4W (men looking for women)
‘
Misc
Romance’Slide55
Craigslist Postings
Prosecution purposes
Enticement postings fall into 3 categories
The good
The bad
The ambiguous
Important to not miss out on these types
Be mindful of potential search terms
Young, any age, girl, incestSlide56Slide57Slide58Slide59Slide60Slide61Slide62Slide63
The Craigslist ToolSlide64
The Craigslist Tool
Joseph Versace
Programmer / Analyst for Ontario Provincial Police
Works in the Child Sexual Exploitation Section
Developed the P2P tool ePhex
Many more tools on the horizon
The tool allows you to search Craigslist based on location, type of ad, and while using user generated search termsSlide65
The Craigslist Tool (cont)
Incorporates your undercover email accounts from within the interface
Similar to
ePhex
, the tool will incorporate screenshots and does the reporting for you
“Soft release” at the 2012 ICAC Conference in Atlanta, GA
Wide
release in late May, 2012
Free to all law enforcementSlide66
Any Questions?
Detective Wayne Nichols
www.PoliceTechnical.com
nichols1242@gmail.com