Quote: (07-21-2017 07:56 AM)Roosh Wrote:
What I want to know is how the government linked Cazes' Paypal receipt, which does not contain any reference to his forum handle, to his actual forum handle.
![[Image: tinfoilhat.gif]](https://rooshvforum.network/images/smilies/tinfoilhat.gif)
Here's how:
His original name on the forum was different than what it is now, it was changed at some point with gold membership. In quoted replies to his early comments you can see it if you go look.
That original name here is the
same user name he used across a dozen forums and websites from what I can see. Tech forums asking about servers, computer security, asian visa stuff, Thai classifieds, gamer forums, etc.
That username is also connected to his UpWork account, which has his real name. Not sure how it is connected, as it's not in the URL or written on his page, but it comes back as a result when searching that username. Perhaps he used it there previously then changed it, or it's in the background of his UpWork.
And, this username has part of his first name.
Basically what happened is:
(known facts)
-
First, they got his real name, in two ways;
1) Early password recovery emails and welcome emails from AlphaBay used a Hotmail address. They worked this address and untangled the VPN's/Tor or used undisclosed methods. It wasn't straight forward though as they knew this address 3 years ago according to reports.
2) His username on AlphaBay was
Alpha02 (this is different than his old username on RVF/the one he used all around the net I'm talking about).
He (surprise!) used that name once on a French language tech forum a decade ago and that forum had his real name attached. This how the FBI first identified him. The guy just couldn't think of new names. If he had even just changed it to Alpha
03 they wouldn't have found the old post on that forum when searching.
...then, how they found him on RVF and other forums:
(my logical guesstimation)
- Once they had his real name they did a simple internet search and linked it, through one or multiple websites, to
another username.
As I said above, I myself found this username connected to his real name in a couple ways- If you searched the other way around (by his real name) you would find this connection as well obviously.
- They then did a search on the username, finding all the posts by that username on the multiple websites he used it on.
One of those was RVF. From my brief looking, almost all of the accounts with that username have some corroborating facts making it clear it is the same guy.
Looking into paypal, finding payment, etc was for corroboration after they already knew the username and suspected it was him. The payment just confirmed what they already knew.