|

FBI’s Murder-For-Hire Crypto Investigation: Podcast Ep. 173

The murder-for-hire case of Ron Ilg, looks like it was pulled instantly from a Netflix documentary, however it is a actual life case involving cryptocurrency and a number of FBI brokers. Beth Bisbee (Director Product Strategy, Chainalysis Government Solutions) leads the dialogue with the Supervisory Special Agent, Forensic Analyst and Special Agent that have been tasked with this complicated and riveting case. 

You can hear or subscribe now on Spotify, Apple, or Audible. Keep studying for a full preview of episode 173.

Public Key Episode 173:Cracking the Chain: A Case Agent’s Journey Into Crypto Investigations

The murder-for-hire case of Ron Ilg, looks like it was pulled instantly from a Netflix documentary, however it is a actual life case involving cryptocurrency and a number of FBI brokers. Beth Bisbee (Director Product Strategy, Chainalysis Government Solutions) leads the dialogue with the Supervisory Special Agent, Forensic Analyst and Special Agent that have been tasked with this complicated and riveting case.

This FBI-led investigation involving a murder-for-hire case facilitated by way of the darkish internet, that includes cryptocurrency funds, seed phrases on sticky pads, weapons, money and biometric safes. 

The workforce particulars their journey, from the preliminary tip-off involving a custody dispute and an alleged plot to hurt a partner, to navigating the complexities of tracing cryptocurrency on the blockchain. The dialogue zeros in on how the newly created  Virtual Currency Response Team performed a important position in unraveling this case by leveraging blockchain evaluation regardless of the perpetrator’s makes an attempt to obfuscate transactions utilizing mixers. With cooperative efforts involving worldwide exchanges and Bitcoin ATMS.

This gripping dialogue highlights how the FBI workforce unraveled the complexities of the case utilizing trendy investigative strategies involving blockchain forensic evaluation and conventional detective strategies mixed to thwart a probably tragic crime.

Quote of the episode

 ”Early on within the investigation by way of some very respected cryptocurrency exchanges, we have been in a position to get info from them, that instantly tied to Ron Ilg. Specifically title, date of start, social safety quantity,his cellphone quantity that was used for two-factor authentication, a selfie that he had taken and despatched into the alternate, that sort of info was actually highly effective in tying Ron Ilg to the one that was behind the keyboard, attempting to order up this hitman service.” – Supervisory Special Agent (SSA), Federal Bureau of Investigation (FBI))

Minute-by-minute episode breakdown

2 | FBI Agents Entrance To Crypto By Using It To Investigate Darknet Markets 

5 | Exploring the Murder-For-Hire Case of Ron Ilg

8 | Introduction of the Virtual Currency Response (VCR) Team

12 | Major Breakthrough in Case When Reconstituting Crypto Wallets

17 | Connecting Intelligence From Exchanges and Bitcoin ATMs 

22 | Main Accelerants within the Case That Drove Huge Results

25 | Finding the Seed Phrase Safe at Ron’s House Changed Dynamic of Case

29 | Challenges and Hurdles That Arose During the Investigation

33 | The FBI Leverages Previous Murder-For-Hire Case in Investigation 

35 | Analyzing Ron Ilg’s Plea Deal and Sentencing 

37 | The Biggest Takeaways for the FBI on this Crypto Investigation 

Related sources

Check out extra sources supplied by Chainalysis that completely complement this episode of the Public Key.

Speakers on as we speak’s episode

This web site could comprise hyperlinks to third-party websites that aren’t beneath the control of Chainalysis, Inc. or its associates (collectively “Chainalysis”). Access to such info doesn’t suggest affiliation with, endorsement of, approval of, or advice by Chainalysis of the location or its operators, and Chainalysis will not be answerable for the merchandise, companies, or different content material hosted therein.

Our podcasts are for informational functions solely, and are usually not meant to supply authorized, tax, monetary, or funding recommendation. Listeners ought to seek the advice of their very own advisors earlier than making all these choices. Chainalysis has no duty or legal responsibility for any determination made or every other acts or omissions in connection along with your use of this materials.

Chainalysis doesn’t assure or warrant the accuracy, completeness, timeliness, suitability or validity of the knowledge in any explicit podcast and won’t be answerable for any declare attributable to errors, omissions, or different inaccuracies of any a part of such materials. 

Unless acknowledged in any other case, reference to any particular product or entity doesn’t represent an endorsement or advice by Chainalysis. The views expressed by friends are their very own and their look on this system doesn’t suggest an endorsement of them or any entity they signify. Views and opinions expressed by Chainalysis workers are these of the staff and don’t essentially mirror the views of the corporate. 

 

Transcript    

Beth 

Welcome everybody to the chain evaluation podcast. I’m Beth (*173*), and I’m the Director of Product Strategy with chain evaluation, Government Solutions. I’m actually excited to have the ability to have a dialogue on a very attention-grabbing case that was led by the Federal Bureau of Investigation and a workforce associated to one thing that’s fairly juicy for many individuals, and it’s thought of to be a homicide for rent, and I’m joined by the Supervisory Special Agent, the particular agent and the forensic analyst that supported the investigation. And so what I want to do is be capable to introduce these people and allow them to are available and describe what their background is, with a purpose to get them to the place they have been to start out investigating this case. So beginning off with that, I would love to have the ability to hear the background of the Supervisory Special Agent.

 

Supervisory Special Agent 

Hello, I’ve been with the FBI as an agent for simply over 21 years. Lots of that point has been investigating complicated monetary crimes and different white collar crimes akin to public corruption and civil rights issues, been in varied subject places of work with the FBI. Prior to the FBI, I labored in public accounting and was licensed as a CPA, excellent.

 

Beth 

 Thank you a lot for becoming a member of and now to the particular agent.

 

Special Agent 

Got an identical background to the supervisor right here examine a wide range of crimes, together with monetary and cyber prison instances. And how lengthy have the 2 of you been working collectively? Eight or 9 years? Yeah, yeah, about 9 years. Perfect. And now introducing the forensic analyst.

 

Forensic Analyst 

Yes, I’m the forensic analyst. I’ve been with the Bureau since 2016 and virtually instantly started working complicated monetary crimes effectively as cyber investigations, together with ransomware, counter terrorism, preliminary entry brokers, crimes towards kids, drug instances, you title it, something that had a monetary element. I used to be accountable for conducting the monetary evaluation for the instances. And previous to becoming a member of the bureau, I used to be a CPA in public accounting for about 5 years.

 

Beth 

Very spectacular background. And how lengthy have you ever been working with the Supervisory Special Agent and Special Agent,

 

Forensic Analyst 

Since the summer season of 2021 when this case started?

 

Beth 

That leads into describing what your journey was earlier than we truly leap into the case. So can every considered one of you stroll by way of what you all did in changing into aware of cryptocurrency inside investigations. And we’ll go forward and begin with the Supervisory Special Agent. So again in 2014

 

Supervisory Special Agent 

we started working in undercover investigation on the darkish internet, shopping for and promoting the illicit items. And as a part of these investigations, we used cryptocurrency to purchase and promote. And in order that was most likely my first expertise with cryptocurrency. And then, in fact, because the years went on, increasingly more of our investigations concerned cryptocurrency, the place a sufferer was requested to take cash from their account and convert it to Bitcoin, or in a roundabout way sending cryptocurrency to the topic of the investigation. So you actually had a background of with the ability to deal with cryptocurrency and have interaction in an undercover capability. Correct? Yes, extra of utilizing it moderately than tracing it early on, but it surely developed into extra of a tracing operate because the years went on and we noticed extra instances utilizing cryptocurrency.

 

Beth 

And how about for the particular agent

 

Special Agent 

I wasn’t as closely concerned within the undercover operation that supervisor spoke about, however I did help on it, and so I had a basic familiarity with Bitcoin and blockchain and had some basic trainings. But there’s actually this case the place I working with the digital foreign money response workforce that I gained much more data about cryptocurrency.

 

Beth 

 So we’ll comply with up with the digital foreign money response workforce in only a second. But from the forensic analyst view, when did you grow to be aware of cryptocurrency inside investigations?

 

Forensic Analyst 

 So I turned aware of it in early 2016 once I went to the FBI coaching academy, and we got coaching on cryptocurrency. Mainly it was Bitcoin, and there weren’t any case research again in 2016 once I went by way of the academy, but it surely was primarily targeted on conceptual elements, and so after attending the Academy, I got here again to my dwelling workplace and commenced to analysis Bitcoin by myself. There wasn’t numerous coaching obtainable again then, however I started to get my very own pockets, learn articles, watch documentaries, purchase textbooks and simply begin to familiarize myself. And that segued into going by way of our databases and discovering potential instances to open close to my dwelling workplace. So I appeared for victims that have been close to our workplace or in our space of duty, and I went to my supervisor and requested if we might open up considered one of these instances, and that was 2016 and we started to research these kinds of instances. And these have been primarily white collar instances again then, like scams or tech assist scams and frauds, or in Ponzi schemes involving cryptocurrency. And that’s how I started investigating it. I went and sought out these instances to attempt to be taught this from an investor. A gate of viewpoint.

 

Beth 

So actually a dynamic sense of expertise throughout this workforce. So are you able to guys begin strolling by way of of how did you grow to be concerned with this attention-grabbing case of the homicide for rent?

 

Supervisory Special Agent 

Yes. So there was a day in April 2021 the place we obtained a name, a communication from an area legal professional in Spokane, Washington, and he had a consumer that was going by way of a divorce, and that consumer had been contacted by a information company with info that somebody had tried to rent successful man on the darkish internet to kidnap and assault her. As we bought extra info, she was at present going by way of a divorce and a bitter custody dispute, and this information company had an nameless informant or supply that was offering info to them. They weren’t keen to offer us that the identification of that supply, and so simply actually, from the outset, there have been numerous issues that make this declare not very credible, on condition that there was numerous incentive, or, you understand, one of many events that’s in the midst of this authorized battle to make up horrible issues about someone else. There was an nameless supply, after which there was the underlying story itself, that someone’s, you understand, hiring successful man on the darkish internet to kidnap and assault this lady for the aim of getting her to return to her husband. And so you set all these issues collectively, and it’s sort of a novel story that that doesn’t make numerous sense, and might not be very plausible, however we have to sort of run all issues to floor. And so I assigned this tip or this criticism to a particular agent right here within the workplace, and so he was in a position to run with it, and really early on, you understand, made the dedication that there, there is likely to be one thing there.

 

Beth 

The particular agent that turned concerned, what was the very first thing that you simply did when you obtained this tip?

 

Special Agent 

Yeah, when the supervisor signed the criticism to me, we each thought it was sort of a wild allegation initially, however we see if any items of it are true, and so by way of a wide range of means, we’re in a position to ultimately make contact with the journalists who had contacted the legal professional’s consumer about this supposed hit on her, and have been in a position to, by way of some sort of open supply analysis, decide that, you understand, that there was a journalist related to a significant information outlet with this title, and he had an e-mail tied to that. And then I used to be additionally ready, by way of the FBI, to find out that there was an identical case that this journalist had sort of given a heads up on out of Wisconsin the place there was a homicide for rent. Just on this case, ours wasn’t a homicide for rent. It was a kidnap for rent after which an unrelated additionally assault for rent a pair months previous to that, however we hadn’t seen something like this earlier than, the place somebody was attempting to have somebody kidnapped, then hooked on medicine and blackmailed after which inspired to have intercourse with their ex after they returned to them. So it was moderately uncommon and sort of wild allegations.

 

Beth 

 So from the facet of receiving the tip after which operating a few of that down with the reporter that ended up with the ability to present a number of the info, what did you find yourself doing? From an investigative lens for the blockchain,

 

Special Agent 

when you realized there was cryptocurrency concerned, I instantly reached out to a few those that I knew had a bit extra data about it. As I stated earlier than, I used to be usually aware of it, however we didn’t have any consultants within the subject. And it wasn’t like it’s now, the place there’s a number of individuals with chain evaluation licenses and subject places of work. And in order that was the preliminary contact with the digital foreign money response workforce. And we bought some good help there to determine the exchanges we would have liked to get data from. And then ultimately our first contact truly left the bureau. And then we bought the workforce member from the response workforce that’s on the decision proper now.

 

Beth 

Let’s dive into slightly little bit of background with the digital foreign money Response Team. And this, I believe, falls into how the forensic analyst turned concerned. So if the forensic analyst isn’t mine, giving an summary of what that really is and the way the Bureau has been in a position to truly develop that program to what it’s to have the ability to assist with all these investigations.

 

Forensic Analyst 

 The digital foreign money response workforce as and we seek advice from it because the vcrt is a bunch of many people contained in the FBI throughout many various subject places of work that maintain cryptocurrency experience. So you understand, we’ve some centralized elements of cryptocurrency data at FBI Headquarters, however the digital foreign money response workforce is decentralized throughout the United States for the FBI, and what that workforce does is lend help to one another. So if there’s, say, a case in Los Angeles that they want particular cryptocurrency experience on a selected, sophisticated matter coping with cryptocurrency, then they could attain out to the vcrt member, who’s in Miami, Florida, that has experience there. So it’s a approach to leverage the Bureau’s cryptocurrency consultants to assist one another on investigation. So that’s actually what it’s, and it’s not a full time job. Usually it’s a added obligation the place you help the opposite places of work by way of the vcrt. So the.Not like there are full time vcrt members in these completely different places of work. So that’s usually how the vcrt works. And the vcrt was based simply earlier than I bought the decision for this case, which was concerning the summer season of 2021 s

 

Beth 

o if you turned concerned within the case in summer season of 2021 how was it that one you have been in a position to rise up to hurry with every thing that the Supervisory Special Agent and the particular agent knew, however then additionally to have the ability to increase the investigation with what you’re ready to make use of along with your experience.

 

Forensic Analyst 

This case is definitely actually distinctive, as a result of the particular agent and supervisory particular agent had already achieved unbelievable work within the brief time from after they began the case to once I bought concerned. And that’s not what’s distinctive is what’s distinctive is that they already had the suspect recognized by way of what the particular agent was discussing, the tip that got here by way of from the information company, and all of that. So usually, in instances that I get introduced on to I’m targeted on discovering the ghost, discovering the individuals which can be hiding behind crypto foreign money transactions, and I get introduced in to search out who these individuals are. But on this state of affairs, the brokers had already achieved implausible work, and so they already had the man recognized. So this was a change of tempo. And so initially, the brokers gave me the a few Bitcoin addresses that have been concerned. They gave me the Hitman cost addresses that they use to obtain the cost, and subsequently I might again into the funds made by our suspect. And so that’s the place I began the evaluation from there.

 

Beth 

So from the attitude of the Special Agent bringing in someone that not essentially in your subject workplace, like a secondary member, if you’ll, how was with the ability to work with the Forensic analysts to have the ability to increase the case. What was your expertise inside that?

 

Special Agent 

It was nice Bureau as giant as it’s. You know, we do work with individuals on their subject places of work throughout the nation. And then additionally popping out of covid, I believe individuals have gotten slightly extra used to some digital work. So him not being in our precise workplace in Spokane wasn’t a problem.

 

Beth 

 So what have been a number of the issues that actually broke open the case after the three of you have been in a position to work collectively and collaborate and truly construct out the investigation by way of the crypto angle?

 

Special Agent 

If there have been few milestones I recalled, and I believe the primary large one was it was a Sunday and it was when Ill was flying again into the nation from Mexico, and so our whole workplace pitched in to each strategy him on the airport for an interview, whereas on the similar time execute a search warrant at his home and interview another people who have been concerned that day. And every thing yielded fruitful outcomes, after which essentially the most helpful was then on the search horn in the home, we recovered ilk’s username and password for the Hitman website, after which additionally seed phrase for a pockets. And these issues mixed, bought us nice proof, as a result of we have been in a position to instantly recuperate a few of his messages to the Hitman website, after which additionally the vcrt member was then in a position to reconstitute that pockets, which helped put every thing collectively on the crypto aspect,

 

Beth 

was there something particular with the reconstitution of the pockets, whether or not that day or the following day or in a while within the investigation, that have been actually pivotal in with the ability to increase the investigation?

 

Special Agent 

 I would depart that to the VCR workforce member to elucidate additional. I imply, I might simply say having him on board with these items of proof was in a position to speed up issues, versus us stall out attempting to determine it out. And then his eventual last report on the Bitcoin evaluation was an enormous piece of getting this case to a plea settlement. I believe he was in a position to attribute greater than 99% of the deposits to ILB that have been within the Bitcoin pockets that made the funds to the Hitman website.

 

Beth 

So from the forensic analyst perspective, are you able to stroll by way of what that was and piecing all of that collectively that then finally went into the report that you simply introduced?

 

Forensic Analyst 

So this occurred in a number of phases. So earlier than I used to be supplied the seed phrase. I had achieved blockchain evaluation of the Hitman funds. So finally, we recognized 5 funds made by our topic to the hitman, and people have been all in Bitcoin. And I used to be in a position to analyze these funds and use, you understand, co spending, change deal with evaluation strategies like that, to construct out the pockets based mostly on on chain evaluation. So that is with out the seed phrase, and I had constructed out a lot of the pockets and recognized a lot of the 5 funds got here from this pockets that I constructed out on chain. However, as soon as we bought the seed phrase and reconstituted the pockets, it was a large enchancment, and so I truly needed to reconstitute the pockets twice, as a result of the primary time we reconstituted it in 2021 the instruments to make use of for this kind of reconstitution weren’t almost nearly as good as they’re now. So again in 2021 once we have been attempting to reconstitute the pockets with out essentially creating our personal pockets, however discovering the addresses derived from.These seed phrases, or from the seed phrase, we have been in a position to get extra addresses clustered inside that very same pockets that I had constructed out. So my preliminary evaluation, from blockchain evaluation, produced a set of addresses, and the primary reconstitution of the pockets produced much more addresses clustered in that very same pockets. And then lastly, I believe was in 2022 is once we reconstituted the pockets once more with higher instruments, and that produced much more addresses. And all of that mixed, you understand, all of these addresses mixed that we might show have been beneath ills management, as a result of we discovered these in a seed phrase in his home, we have been in a position to attribute all 5 Hitman funds to his pockets that was the primary part of it’s to grasp his unhosted pockets, or non-public pockets that we reconstituted from the seed phrase, did actually, make all 5 funds. And then the following step was to determine, can we show? How did he supply these funds? Walking by way of how to have the ability to map with the 5 recognized funds that was additionally achieved leveraging the entry of the username and password of the darkish internet platform. Is that appropriate? Correct?

 

Beth 

There’s like a mixture of investigative techniques which can be being leveraged, proper? So from the Supervisory Special Agent background of with the ability to conduct undercover funds, you sort of perceive how that operation works, however then additionally with the ability to then start tracing it, to construct out the case, to then lead into the restoration of the pockets, inside with the ability to perceive the place they have been in a position to truly entry the crypto. So which means taking the Fiat or money and changing it into crypto to make these funds. What have been a number of the issues that you simply have been in a position to determine?

 

Supervisory Special Agent 

Well, I believe that a number of the issues we have been in a position to determine, you understand, early on within the investigation, by way of some very respected cryptocurrency exchanges, we have been in a position to get info from them that instantly tied to Ron Hill, particularly title, date of start, social safety quantity, his cellphone quantity that was used for 2 issue authentication, a selfie that he had taken and despatched into the alternate. That sort of info was actually highly effective in tying Ron sick to the one that was behind the keyboard attempting to order up his Hitman service. And then, as because it went on, every of the opposite sources that included Bitcoin ATMs, you understand, they’re taking images of the person standing in entrance of that ATM. And so, you understand, together with the forensic analyst, we’re wanting on the sources of funding for this pockets. It all got here again to basically Ron Elks image, both from a bitcoin alternate or from him standing in entrance of a Bitcoin ATM. And in order that was actually highly effective proof that the forensic analyst put collectively in a really easy chart that made a really sophisticated topic grow to be comprehensible if this have been to go to a trial and be seen by a jury.

 

Beth 

 So that results in an additionally attention-grabbing matter is, how have been you all in a position to relay this complicated investigation to a prosecutor to ensure that them to have the ability to take it ahead, and what was a number of the most difficult issues that you simply encountered when attempting to piece collectively that story that simplified it?

 

Forensic Analyst 

Our VCR workforce member right here did an incredible job of explaining in layman’s phrases how a few of these issues labored. It’s one of many extra issues that might have made it extra sophisticated was Brent did attempt to use a mixer, after which didn’t actually use it correctly, however our VCR workforce member was throughout that, and was in a position to determine his cryptocurrency going out and in of this to proceed tracing it.

 

Special Agent 

Yeah, and I might add a few issues. One of the ways in which I used to be taught by way of the academy and simply going by way of trials and different prosecutions was to make a timeline. Juries will make timelines, and we will both give them a timeline from the details, or they will create their very own. And that strategy and mentality, I believe, has served many individuals effectively. So I made a decision to make a timeline for this case. So I began, and it’s a really visible timeline. I started the timeline when he made his first Bitcoin buy by way of his Exchange account, after which simply had little bubbles alongside that timeline to indicate precisely when was he buying. When did he alternate messages on the darkish internet with these hit males, after which when did he make the cost to them? And what’s attention-grabbing is alongside the way in which, we had nice actual world corroborating proof. And what I imply by actual world is typically when issues occur on the blockchain. It’s onerous to convey that in an actual world layman’s phrases, however when we’ve Ron ilk messaging the hitman, saying, Hey, I’ve bought $40,000 of Bitcoin in my pockets, I’m able to ship this to you, and we’ve the timestamp of that message, effectively then we will go and have a look at the blockchain, and have a look at his pockets that we have been monitoring on the blockchain and see that he did, actually, have $40,000 at that date and time. And in order that’s actual world proof that corroborates what we see on the blockchain. So I believe that was actually vital, the timeline and these little time limits, and in addition analogies and.Analogies have been actually useful when explaining this to not simply prosecutors, but in addition to juries and judges, whether or not it’s an affidavits, however analogies have confirmed to be very useful to elucidate cryptocurrency transactions to individuals who won’t be as concerned in them in a day by day sense.

 

Beth 

Do you occur to have any of the analogies that you simply leveraged with a purpose to convey this to the prosecutor and even the remainder of the investigative workforce.

 

Special Agent 

The commonest analogy we use once we cope with CO spending and alter is an instance of going into like a espresso store. So you understand, you go right into a espresso store and you’ve got 5 $1 payments in your pockets, however you you don’t have your bank card, you simply have 5 $1 payments and also you need to purchase a cup of espresso for $3 effectively, you’d hand over three of the $1 payments to the cashier, and that’s referred to as co spending, as a result of these three $1 payments are beneath your management, and you’re spending all of them collectively with a purpose to make an output. So in that state of affairs, for those who take three $1 payments and pay on your $3 cup of espresso, then you definately don’t get any change again. That’s only a one for one. So that’s co spending. And if we need to take it a step additional and focus on what change is like on the blockchain, so like when Ron ilk made a cost to the hitman, he obtained change for into his bitcoin pockets. And in order that’s like strolling right into a espresso store with a $5 invoice. You don’t have any $1 payments, however you stroll right into a espresso store with a $5 invoice, you hand it to the cashier, and so they provide you with your cup of espresso and $2 again. So these $2 you get again that’s modified from the transaction. And in order that’s one of the primary analogies we use when attempting to elucidate how Bitcoin works, the way it co spends, how change addresses happen, and the way we will piece collectively who owns particular addresses in the identical pockets. I don’t suppose I’ll ever stroll right into a espresso store the identical means now with that visible.

 

Beth 

Thank you. So one of many issues that I’m inquisitive about as we all know that investigations ebb and move. And generally there’s issues that speed up it, after which there are issues that stall. Were there sure situations on this investigation the place it accelerated? And then, likewise, when did it appear to stall? If ever?

 

Supervisory Special Agent 

 Well, I believe one of many issues that accelerated the investigation once we, you understand, we bought the preliminary criticism, and over the course of a couple of week, started to confirm a number of the info we have been supplied. And Ron el right now, was in Mexico on trip, however was coming again to the Spokane on Sunday night time. And in order that was an accelerating second in that we felt like we would have liked to behave. Because we, at that time, had had decided that this was a official risk, that there was a official chance that someone was going to be injured right here. And so on that Sunday night time, we would have liked to be ready to behave on the airport to strategy and interview Ron yelg. We wanted to be prepared with a search warrant at his residence to search for proof of the crime there. And in order that was one of many occasions that we, you understand, we felt like we would have liked to maneuver fairly shortly.

 

Beth 

What about from the particular agent or the forensic analyst perspective?

 

Special Agent 

 I believe what he stated is strictly true. If there was something that stalled, or that will have been Ron il suicide try shortly after the search warrant that sort of purchased us a while to get a criticism written to arrest him as he was launched from the hospital, however in any other case, the VCR workforce members last report, I believe that will have been one other accelerator in the direction of a plea. Otherwise, you understand, this case probably might have stalled out with negotiations, attempting to return to a decision and will have gone to trial.

 

Forensic Analyst 

 The accelerant on my aspect, though I used to be not concerned actually in any respect, with what the particular agent and supervisor Special Agent are speaking about after they have been on the airport and after they have been doing a search warrant at his home. I wasn’t concerned in that. So every thing that I used to be doing was, you understand, after the very fact, however I believe an accelerant was once I obtained the seed phrase that actually accelerated the evaluation, the blockchain evaluation, after which this once we reconstituted the pockets for a second time and captured all the addresses that was an accelerant, as a result of at that time we had sturdy, sturdy proof pointing to Ron ILGA is making all of these funds. So I believe that accelerated the writing of the report that I wrote for the workforce and the protection. And from my viewpoint, that was most likely the accelerant. But actually it was, in any case, the quick motion that occurred on the very starting of this case.

 

Beth 

So going again to what could have stalled the case just a bit bit was the most likely shock to possibly the investigative workforce of the suicide try, when it comes to, like, the stall for that, it principally allowed you to sort of decelerate slightly bit to have the ability to piece collectively the remainder of the proof that you’ll have both not been in a position to tighten up as a lot, however then additionally search for different methods to have the ability to tighten up a number of the proof. Would that be an correct assertion

 

Special Agent 

to some extent? Yes, I believe it’s much less doubtless that he was going to have the ability to safe another person to hold out any form of hit if he was in a hospital mattress. So that was.Is good for our victims to not have to fret about him following them out on the road earlier than we might arrest him. So speaking concerning the accelerating facet, so with the ability to determine the restoration seat, that’s an thrilling factor.

 

Beth 

Can you stroll me by way of the way you have been truly in a position to get entry to the restoration seat and the place it might have been situated, or what info could have been supplied by the person.

 

Supervisory Special Agent 

Yes, so I used to be a part of the workforce that was interviewing Brent ILG on the airport, and whereas we have been speaking with him, I used to be additionally in communication with the search workforce at his home. And in order we have been nearing the top of our interview and our search of his baggage, the workforce on the airport indicated that they have been principally achieved, however there was a few safes that they wanted to open and search. And so that they requested if he can be keen to supply the mix to get within the safes. And so once I requested him, he stated, Well, it’s biometric. It opens with my fingerprint. And I stated, Well, we’d be blissful to offer you a journey to your own home for those who’d like, for those who’re keen to open these for us. And he stated that he would try this. And so we drove him out. And quickly after that, we arrived at his home, and he put his thumb print on the secure, and it opened up, and contained in the secure have been some issues that you’d anticipate finding in a secure. There was there was some money, and there was a handgun, and there was a sticky notice that included what seemed to be a username and password, and these 12 random phrases that turned out to be the seed phrase when the secure opened. Did he have any acknowledgement of what was found in there, or that he could have forgotten inside a secure, as a result of generally individuals could not entry the secure frequently. Was there any shock from him? Yeah, his demeanor modified at that time. You know, all through the interview and automobile journey dwelling, you understand, he made it clear he was the neatest particular person within the room, and when he noticed that secure open and we pulled out the sticky notice that Demeter modified, you understand, the look on his face dropped a bit, and there gave the impression to be an acknowledgement by him that he was in numerous bother. Now,

 

Beth 

generally these are essentially the most priceless acknowledgements, proper? When working this investigation, normally, like most complicated investigations, take a village, and we’ve walked by way of the assist that the bureau supplied with the digital foreign money Response Team. But then, have been there different partnerships that you simply guys leveraged with a purpose to assist construct a robust basis for the investigation?

 

Special Agent 

Our job power officers, that are from a wide range of companies for our Safe Streets. At the time, they have been nice companions, as a result of that Sunday the place Bill was approached on the airport and the search was at his home, that required everybody right here to pitch in these preliminary days, and everybody went out on a Sunday to both go to the airport to interview individuals or to go to his home to go looking. And with out that manpower, I don’t know if we’d have been ready to do this as shortly and efficiently because it was.

 

Supervisory Special Agent 

Maybe the opposite factor I might add, you understand, and clearly our digital foreign money Response Team, you understand, is right here on the decision. So they’re clearly a key companion, and did an incredible job. The different companions that I might add right here can be the prosecutors on the United States Attorney’s Office, you understand, actually, from day one, they have been very a lot concerned on this case and aggressive. And you understand, no matter it was we would have liked so far as authorized course of, they have been prepared to supply it. And so that they have been nice companions by way of this entire investigation, the prosecution

 

Beth 

, when it comes to any of the technical or investigative hurdles that this workforce encountered, what have been a number of the most tough ones that you simply recall.

 

Special Agent 

Think one facet of this case was that, at the very least for my part, Ill was a manipulative psychopath. And so up till he was sentenced from his jail cell, he was repeatedly attempting to control individuals to both do issues for him or change the narrative his case. He did strive reaching out to a sufferer a pair occasions, both instantly or by way of different means, and in order that was a continuing factor of monitoring what he was attempting to do and staying on high of that,

 

Forensic Analyst 

I might add, from the cryptocurrency viewpoint, OBS use of mixers was initially a technical hurdle. However, the way in which he used them made it quite a bit simpler for us to shortly overcome that hurdle. And one thing I believe is actually key right here is when the brokers discovered the seed phrase, they discovered that seed phrase in three completely different areas, and considered one of them was on his cellphone within the secure in his home, after which the third one was in a guide. It was written down in a guide that they present in his baggage getting back from Mexico. And the truth that they flipped by way of all these pages to search out these 12 random phrases on a web page inside a fairly full guide was actually spectacular. And so I believe that actually made numerous issues simpler. And so I need to be sure that they get kudos for that spotlight to element, however I believe for technical hurdles, you understand, Ill actually simply used exchanges and Bitcoin ATMs to fund the unhosted pockets. We have the seed phrase for that unhosted pockets which he then instantly paid the hitman. So for blockchain evaluation, it was not very tough, however the mixer would have been the largest technical hurdle from the start.

 

Supervisory Special Agent 

And possibly I simply add one factor as a educating level, forensic anneal has simply talked concerning the consideration to element and discovering these seed phrase in three completely different areas that.True. Eventually, the primary time we acknowledged that we had discovered the seed phrase was in that sticky notice in his secure at his home, later, as we have been reviewing his cellphone, we discovered it once more there in his cellphone. We additionally discovered an image of the handwritten seed phrase in a guide, and that’s once we acknowledged that we had seen that guide earlier than, which was in his baggage as he was getting back from Mexico. So that prompted one other search warrant to return and retrieve that guide. And so I discussed that actually as a educating level, that you understand these 12 random phrases might appear to be something. It might be wherever, even written within the again cowl of a guide that you could be not suppose something about

 

Beth 

so attention-grabbing that you simply talked about that as effectively, since you additionally talked about that you simply noticed an image of the 12 phrases in a guide, so he additionally had an image on his cellphone of the guide with the 12 phrase seed phrase, sure, so actually 4 areas, then, proper? That’s fairly wild within the nature of this case. As like, it’s very outstanding to have the ability to be Hitman for rent. There’s a way of this to be like, headline catching. So how did you guys work on, like, the high profile nature of this case, in addition to the person? He was a fairly high profile particular person as effectively, appropriate?

 

Supervisory Special Agent 

He was a reasonably outstanding doctor within the space. He was a neonatologist, and so he was pretty rich within the sense of, you understand, being a profitable doctor, you understand. And so it did get some native media consideration, some nationwide, even some worldwide, due to the supply of the preliminary reporting was a global information company. And so there was a few of that, but it surely didn’t actually have an effect on our investigation, as a result of we nonetheless had the identical parts that we would have liked to show that he had dedicated the crime, and we simply went about our exercise, and he tried to make it about himself and about his way of life, and attempt to create that distraction, each within the media in addition to in courtroom, and thankfully, in courtroom the place it issues, no one was actually fooled about why we have been actually there. We weren’t going after him due to his way of life. We have been investigating and prosecuting him due to the crimes he had dedicated.

 

Beth 

So usually, when in investigations, you draw from earlier experiences, and that helps construct foundations to investigations after which additionally classes discovered. Had any of you labored a hitman for rent investigation previous to this one,

 

Special Agent 

there was a hitman for rent right here in Spokane, possibly six, seven years earlier. It didn’t contain the darkish internet or cryptocurrency. I assisted with the trial that was not concerned within the case, however the supervisor, you most likely have a bit extra involvement in

 

Supervisory Special Agent 

that one. Yeah, that was, you understand, completely different in some methods, however comparable in that concerned successful man for rent. We finally indicted six individuals in that conspiracy that included the ringleader that you understand, ordered the hits, in addition to the person, the person who dedicated the 2 killings, one in North Dakota and one in Spokane, after which 4 others that have been concerned within the conspiracy to cowl it up or conceal proof, or issues like that.

 

Beth 

 From the attitude of that investigation to this one, what have been a number of the sturdy parallels that you simply have been in a position to then leverage from what you discovered on the primary case to what you noticed inside this one.

 

Supervisory Special Agent 

 I believe one of many parallels was the high degree of motivation within the earlier case that concerned two those that have been truly killed. There have been a number of makes an attempt to have these individuals killed, and people makes an attempt continued till the principle topic was profitable in getting his want. And we noticed that very same factor with Ron ilk. He approached one hit man on the darkish internet, realized in some unspecified time in the future that he had been scammed after he’d despatched Bitcoin, and he was simply being scammed, and he continued to look and ship cash to individuals in an effort to get a former enterprise companion assaulted and her arms damaged, and to get his estranged spouse kidnapped and drugged and assaulted, and it was clear he was not going to cease till he bought what he needed. And so I believe for me, that’s essentially the most comparable circumstances of these two instances, is that they have been going to go till they bought what they needed, and Ron elk had the monetary sources to make it occur.

 

Beth 

So do you additionally really feel that that was one of many causes, the preliminary a part of with the ability to apprehend him when he got here again from Mexico, and the urgency for that, simply due to the will and urgency on their finish to attempt to solidify and inspire them to complete the job,

 

Supervisory Special Agent 

I believe that was a part of it, though we could not have recognized at the moment of his a number of makes an attempt, however due to the forensic analyst’s nice work, we might see in a while his a number of makes an attempt. You know, because the case went on, we higher understood his character and actually the lengths he was keen to go to have these individuals assaulted.

 

Beth 

 I do know that we’ve talked about it a few occasions that there was a plea. Can you stroll by way of what the result of the case was finally.

 

Special Agent 

The final consequence was he pled to arranging. The choose sentenced him to eight years imprisonment, $100,000fine, an extra $25,000 restitution to the victims, and when it comes to main up for understanding whether or not it was going to be.A plea or a trial? What was it leaning in the direction of? Were you anticipating it to go to trial simply based mostly off of his character, or have been you anticipating extra of the negotiation for the plea? We knew we had a really sturdy case, however we additionally had a really attention-grabbing character in Dr Ilg, who additionally had the monetary means to go to trial with costly attorneys that he so select to do. Thankfully, I believe his attorneys realized that after they misplaced quite a lot of motions pre trial in courtroom, that they didn’t have any extra luggage of methods that they may try to pull, they have been in a position to persuade him {that a} plea was in his greatest curiosity. And I believe he did get a particularly reasonable deal. And then that’s how we got here to the plea, from the facet of the investigation, wanting ahead to different investigations that you simply’re both at present supporting or can be supporting.

 

Beth 

What are a number of the issues that you simply taken from this investigation to then apply to future investigations? And that is open to all

 

Special Agent 

 factor investigation, notably because it was one of many first the place cryptocurrency was intricately concerned, I’d say, as quickly as you acknowledge that cryptocurrency or one thing on the blockchain goes to be a big a part of your case. If you’re not one of many consultants, don’t hesitate to achieve out to the digital foreign money response workforce or one of many different many belongings which can be in subject places of work. Now

 

Supervisory Special Agent 

 I believe one of many issues I might suppose I discovered on this course of that I’ve utilized to different instances is is simply because a case includes cryptocurrency doesn’t imply can’t resolve it. Fact, there’s a lot about cryptocurrency and the way in which that it really works that it might assist to determine individuals. It might help to determine the place sick gotten positive aspects have been transferred. And so, you understand, particularly exchanges within the United States, they’ve all the knowledge {that a} financial institution would have on who these prospects are. And so what we’ve additionally discovered is, outdoors the United States, the place our authorized course of, they’re not required to provide info, they’re nonetheless usually keen to offer over that info, as a result of there’s a push to possibly destigmatize cryptocurrency that it’s not at all times used for prison exercise. And so we will usually get info from exchanges all through the world.

 

Forensic Analyst 

I had quite a few takeaways from this investigation that I’ve utilized to many different investigations, and the very first thing is to maintain it easy, and is it, can I inform the story with the financials? Because on the finish of the day, the last word viewers is the jury at trial, and might I clarify it to them with analogies to assist them? Since they don’t they most likely don’t have the time to do deep dives on cryptocurrency and blockchain evaluation of their free time. So can I preserve it easy and inform inform the story of the monetary exercise? Number two, it actually taught me find out how to use analogies when working with prosecutors and when drafting my lengthy report that detailed each single transaction that ilk had made to the hit males and clarify primary ideas, you understand, like we talked about, the Bitcoin Blockchain, co spending change what a seed phrase is, what non-public keys are. How do non-public keys come from seed phrases, all of that stuff. And then the very last thing that I took away was the significance of actual world corroboration of the proof, like I talked about earlier. So if not for the brokers paying such shut consideration to the small print on gathering proof, my evaluation wouldn’t have been as sturdy. So it truly is that workforce effort of gathering actual world proof, mixing that with the blockchain evaluation to make a very compelling story at trial. So that these are the principle takeaways that I had.

 

Beth 

Sounds like all three of you had nice takeaways from this investigation. So lastly, what I would love to have the ability to sort of drive house is, was there a second in or story from this investigation that caught with you, whether or not it’s a breakthrough in close to miss or one thing that defines the human aspect of this work that makes you need to pursue extra instances. There are so lots of these moments from this case,

 

Supervisory Special Agent 

I suppose I’ll attempt to simply decide one. The motive that I’ve made a profession of it’s because there are individuals on the market. It might be a neighbor, it might be a grandparent, it might be, you understand, a buddy that has grow to be a sufferer of a criminal offense. And on this case, we had two direct victims, after which different individuals who have been victimized by this man, and so what was highly effective to me was to sit down subsequent to those victims, surrounded by their household in a courtroom as this man was being sentenced for his crimes, and the reduction that they felt and the gratitude they felt For the investigative workforce was very memorable for me, and finally that’s the rationale we do what we do is to guard victims and maintain individuals accountable in order that there aren’t any victims sooner or later.

 

Special Agent 

I used to be going to say one thing very comparable. What stood out to me was sentencing, listening to the sufferer statements from three completely different people actually drove it dwelling that folk threats have been very actual to those people, having him locked up from a point of closure and security to a fearful and difficult time of their life,

 

Forensic Analyst 

I might say one thing virtually utterly similar, that the sentencing when the victims spoke, and the way a lot that affected me and seeing the impact of our work play out to convey them justice was actually essential.

 

Beth 

Finally, with that, if an individual does, be.Become a sufferer or know somebody who’s what can they do?

 

Supervisory Special Agent 

 Well, they will contact their native subject workplace, submit a tip on-line@fbi.govor suggestions.fbi.govif the crime concerned a web-based element, they need to report that to the Internet Crimes Complaint Center, and to do this, they’d go to IC three.gov and report the knowledge there. Those can be the three predominant areas is, you understand, the contact the Field Office reported on-line at FBI or at IC three.

 

Beth 

Thank you. And I need to personally thank the Supervisory Special Agent, the particular agent and the forensic analyst on strolling us by way of the vital investigation and impactful investigation. Thank you a lot.

 

Special Agent 

Thank you. Thank you. Thanks.

 

The put up FBI’s Murder-For-Hire Crypto Investigation: Podcast Ep. 173 appeared first on Chainalysis.

Similar Posts