3/21/2013

CraigslistInvestigations
March21,2013
Det.WayneNichols

BureauofJusticeAssistance
This project was supported by Grant No. 2011-BE-BX-K003
awarded by the Bureau of Justice Assistance.
The Bureau of Justice Assistance is a component of the Office of
Justice Programs, which also includes the Bureau of Justice
Statistics, the National Institute of Justice, the Office of Juvenile
Justice and Delinquency Prevention, the Office for Victims of
Crime, the Community Capacity Development Office, and the
Office of Sex Offender Sentencing, Monitoring, Apprehending,
Registering, and Tracking.
Points of view or opinions in this document are those of the
author and do not necessarily represent the official position or
policies of the U.S. Department of Justice.

NationalCriminalJusticeTrainingCenter
ThiswebinarisbeingbroughttoyoubytheNationalCriminalJustice
TrainingCenter(NCJTC).
Formoreinformationonourcourseofferings,pleasevisit
www.ncjtc.org.
Eligibility:ParticipantsmustworkforaLawEnforcementagency.Toview
thescheduleorobtainrelatedwebinarinformationincluding
presentations,participantsmustbeamemberofNCJTCand/ortheICAC
TaskForcewebsites.
Pointsofvieworopinionsinthisdocumentarethoseoftheauthorand
donotrepresenttheofficialpositionorpoliciesofFoxValleyTechnical
College.Aswell,theymaynotbeappropriateinalljurisdictions.Before
implementing,pleasecheckwithcompetentlegalrepresentation.

3/21/2013

DuringtheWebinar
Allattendeeswillbemuted.
Ifyoudesiretoaskaquestion,pleaseusethe
questionssectionoftheGoToWebinardialoguebox,
typicallyintheupperrightcornerofthescreen.
Pleasedonotraiseyourhandforquestionswecannot
unmuteyou.
Thequestionswilleitherbeanswereddirectlybya
panelistoraskedtothepresenterwhowillanswer.

PollQuestions
Pollquestionsmaybeaskedduringthewebinar. Theyare
askedsowecanbetterunderstandtheaudienceandprovide
themostusefulinformationtoyou.
Theywillbeleftopenonlyashortperiodoftimesoplease
respondpromptly.

PostWebinarInformation
Attheconclusionofthewebinarashortsurveywillappear.
Weaskthatyoucompletethesurveyinanefforttogather
informationtobetterservethecommunityinpreparationfor
futurewebinars.Pleasecompleteitbeforesigningoff.
Within24hoursofthewebinar,youwillreceiveanemail
containingbothalinktoviewtherecordedwebinar,andalink
todownloadthePowerPointpresentation.

3/21/2013

Introduction
WayneNichols
Activelawenforcementwithover10yearsof
experience
Henderson,NVPoliceDepartment
ComputerCrimesUnit

Conductproactiveluring/enticementoperations
PollQuestion2
Howmanyofyouhaveeverreactivelyinvestigateda
Craigslistinvestigation?

GoalsandObjectives
HistoryofCraigslist
UnderstandinghowCraigslistworks
Postingads
Browsingads
Advancedsearching

InformationretainedbyCraigslist

Utilitiesandformsneeded
Theessentials

GoalsandObjectives
WhattolookforinaCraigslistposting
HowtoobtaininformationfromCraigslist
Viaadministrativesubpoenaorsearchwarrant
Requestinginformationbasedondifferentsources
PostingID
Emailaddress
IPaddress

Examinationofpreviouscases/operations
Tipstomakeyouroperationasuccess

3/21/2013

HistoryofCraigslist
Createdin1995byCraigNewmark
Startedoffasanemaildistributionlistamong
friends
FeaturinglocaleventsinSanFrancisco

1996,becamewebbased,featuringfree
onlineclassifiedadvertisements
2000,expandedtomajorU.S.cities
Today

HowDoesCraigslistMakeMoney?
Incomingrevenue
Peoplewhopostjobs
Majorcities $25topostinonecategory

Apartmentlistings
AbrokeredapartmentinNewYork $10apost

TherapeuticServices
$10apost
$5torepost

HowCraigslistWorks
www.craigslist.orgOR
www.craigslist.com
Onlineclassifiedads
forum
Allowsyoutosearchand
postadsinnearlyevery
majorU.S.city
Canada,Europe,Asia,
MiddleEast

3/21/2013

HowCraigslistWorks(cont)
Thewebsiteisbrokedownin:
Sections
Categories
Subcategories

Importanttounderstandtheabbreviationsof
asubcategory

TheBiggerPicture
AlthoughCraigslistissynonymouswith
prostitution muchmoredifferenttypesof
crimearetakingplace
Drugs
Propertycrimes/Fraud
Harassment

3/21/2013

PostingtoCraigslist
Freetopost(withexceptionsofaforementioned)
Anemailaddressisrequiredtopostanad
CLisnowrequiringaverifiedphonenumberwith
certaintypesofposting

Nolimitonnumberofpostings
CLhasbeguntotargetspammers

Everypostcancontainupto8photos
Postercanchoosetolistadditionalcontact
informationwithinthepost

PostingtoCraigslist(cont)
Acomputerisnotrequired
CellphoneswithInternetaccess
Applicationsonsmartphones

Majorityofclassifiedpostingsexpireafter45
days
Thefollowingcitieshavea7dayexpiration
Boston,LosAngeles,NewYork,Portland,Sacramento,
SanDiego,Seattle,SanFrancisco,WashingtonDC

PostingtoCraigslist(cont)
Posterscanadd
additionalorspecified
locations

Thereisnota
verificationprocessfor
listedinformation

3/21/2013

PostingtoCraigslist(cont)
Anypostingcanbe
Theposterwillreceive
flaggedbyotherusers
anemailnotificationif
orCraigslist
posthasbeenflagged

PostingtoCraigslist(cont)
Reasonsapostcanbeflagged
Miscategorized wrongcategory/site,discusses
anotherad,otherwisemisplaced
Prohibited violatescraigslistTermsofUseor
otherpostedguideline
Spam postedtoofrequently,inmultiple
cities/categories,oristoocommercial

PostingtoCraigslist(cont)
CLdoesrestricttheadvertisementofthe
followingitems:
Weapons,alcohol,drugs,hazardousmaterials,
illegaltelecommunicationequipment,counterfeit
currency,gamblingitems,enticementofminors

3/21/2013

PostingtoCraigslist(cont)
InFebruary2013,Craigslisthasbeguntotest
2wayemailrelaytocombatspam
Itposesissuesfortheinvestigator
Emailcommunicationdoesnotmigrateawayfrom
Craigslist
Keepingtheemailaddresshiddenfrombothparties

Communicationcancontinueeveniftheoriginal
adhasbeenremoved
Upto6months

PostingtoCraigslist(cont)
Previousmethodofcommunication
CLactsasthemiddlemanontheinitial
communication
CLcreatesanemailaddresswithinthepost
Subsequentemailcommunicationtakesplaceoutside
ofCraigslist
Importanttonotbypassthemiddlemanprocess

QuestionsBeforethePostingDemo?

3/21/2013

BrowsingCraigslist
NoaccountisrequiredtobrowseCraigslist
Noageverificationtoentercertainpartsofthe
site
BannerpostedbeforeenteringCasual
Encounters

BrowsingCraigslist(cont)
Newestpostingsalways
appearatthetop
Postwillalsoreflectif
picturesareincluded
withinpost

Browsedpostingsare
highlighted
Checksettingsinyour
browser

BrowsingCraigslist(cont)

3/21/2013

BrowsingCraigslist(cont)

BrowsingTips
Startyourbrowsingor
searchbychoosinga
category
Thenchoose
subcategory
Trytoavoidcastinga
widernet

AdvancedBrowsing/Searching
Advancedsearchoption
Allowsyoutonarrowasearchbyterm,price
range,andiftheposthasanincludedimage

10

3/21/2013

QuestionsBeforetheDemo?

InformationCapturedbyCL
Themostimportantpieceofinformationon
anyCraigslistadisthepostingID
CraigslistcapturesandretainstheIPaddress
associatedwithall postings
Includingverifiedphonenumber
CLisalsoretainingphotosincludedwithevery
post(witha2monthretentionperiod)
Startingfromthetimethepostexpiresorisflagged

InformationCapturedbyCL(cont)
Craigslistlogsevery postingassociatedwiththe
suspectsemailaddress
Noretentionperiod
Areversesearchcanalsobedone
ByIPoremailaddress

Craigslistlogslimited informationonall
responsestoapost
EmailandIPaddressonly
Alongwithdateandtimestamps

ActualmessagecontentisNOTsaved

11

3/21/2013

InformationCapturedbyCL(cont)
Craigslistwillindicateifthepostingwas
flagged,expired,orremovedbyposter
Craigslistwillindicateifthepostinghasbeen
modified
Butonlysavesthemostrecentchange
CLdoesnottracktheevolutionofanad

EXIFdataisnotsaved
Photoiscondensedtofitsizelimitstandards

CraigslistContactInformation
AdministrativeSubpoena/SearchWarrantwillbe
acceptedbyfax,email,ormail
Quickertohavetheresultsemailedtoyou

Fax
4155046394.Attention:CustodianofRecords

Email
legal@craigslist.org(pleasesendrequestasaPDF)

Mail
Craigslist 13819th AvenueSanFrancisco,CA94122.
Attention:CustodianofRecords

QuestionsBeforetheDemo?

12

3/21/2013

Scenario#1
Lawenforcementhasrespondedtoa
suspiciousadinvolvingastolenwasher/drier
set
Duringemailcommunication,thesuspectemails
photoswhichyoulaterconfirmareofthestolen
washeranddrier

Scenario#2
AfellowDetectiveinHomicideadvisesyou
thatavictimwasrobbedandkilledafter
placingagoldwatchforsaleadonCraigslist
Accordingtothevictimsfriends,thevictimwould
oftensellitemsonCraigslistandlisthisphone
numberwithintheposts
Phonenumber:4434525155

Homicideisrequestingassistancesinceyoure
aCraigslistexpert

13

3/21/2013

Scenario#2(cont)
Remembertheadvance
searchfeature
Startwithasection(For
Sale),thenacategory
(Jewelry)
Enteraphraseorphone
number

14

3/21/2013

Scenario#3
Followingadruginvestigationthatbeganon
Craigslist,yoursuspectclaimsthathetraded
pillstoanothersubjectwhoprovidedhim
withMethamphetamineandbraggedabout
havinglargerquantitiestotrade

AnyQuestions?

15

3/21/2013

UtilitiesandFormsNeeded
BeforetheInvestigationBegins

TheEssentials
PDFtool
CutePDFisfree

Undercoveremailaccounts
Gmail

GoogleVoiceaccounts
https://www1.gotomeeting.com/register/223277360

TLO LEonlineresearchtool
AsofOctober,2012TLOhasbeguntochargefor
advancedsearches

TheEssentials
PollQuestion3
AreyouactivelyusingTLOinyourcriminal
investigations?

16

3/21/2013

DrugInvestigations

DrugsonCraigslist
Readingbetweenthelinesisnecessary
Offersofdrugsaresubtlyembeddedwithin
legitimatepostings
Importanttoknowslangterminology
UrbanDictionary

Importanttoknowhow tosearchforslangterms

Medicalthemedadvertisements
ThemeofMedicinalMarijuana

DrugsonCraigslist
Drugsandsexstillgohandinhand
Personalssectionwillmostlikelyyieldthemost
results

AdvancedbrowsinginCraigslist

17

3/21/2013

WheretoBegin
CasualEncounteror
Misc Romancesection
Oftennoneedtogopast
themaincategory

CommonSlang/SearchTerms
Marijuana
420,bud,medicinal,grow,hydro,weed,herb,ganja,kush

Methamphetamine
Tina,crystal,clouds,spun,gofast

Heroin
H,OP8

Pills
Lortab,Perc orPercocet,Valium,RX,OxyorRoxy,
Hydrocodone,Xanax,Zanny,Vicodin,mg

Ecstasy
X,Molly,xtc,E

CommonSlang/SearchTerms(cont)
Keepinguponyourlocalcrimetrends
Whatspopularinyourjurisdictionmaynotbe
popularinanother

18

3/21/2013

420

420

FourTwentyandHydro

19

3/21/2013

Tina

Tina

GoFast

20

3/21/2013

Pills

XanaxorVics?

Oxy

21

3/21/2013

NoCops,Please

InvestigativeConsiderations
Doesyourprosecutorapproveofthe
prostitutionangle
Youmaynotfindablatantadvertisement

Doyouhaveanunderstandingofstreetvalue?
Doyoupossesstrainingandexperienceinthe
areaofstreetlevelnarcotics?
Deconfliction
Beawareofotherjurisdictionsproactive
operations

StolenProperty

22

3/21/2013

OffenderPointofViewofCraigslist
CultureofCraigslist
Fewerrulesandrestrictions

Subjectfeels anonymous
Transactionsoccurveryquickly
Transactionsareassumedcashonly
Craigslistempowersthesellertoconduct
businessontheirterms
Barter

OffenderPointofViewofCraigslist
Postingrequiresverylittleinformation
Serialnumbersandmodelnamesarenotrequired
tosuccessfullylisttheitem

Meetingatapublicplaceorparkinglotisnot
abnormal
Evenlegitimatesellers/buyersfeelsaferwiththe
transactiontakingplaceawayfromtheirhome

OffenderPointofViewofCraigslist
Basedonitem,price,andpostinglanguage
thepostercanexpecttobedealingwith
likemindedcustomers
Dependingonsupply&demand,offender
maynotevenneedtopostanad
Simplylooksforwantedads

23

3/21/2013

ADreamPostingforaThief

LocatingStolenProperty
2methods
Proactivesearching
Canbetimeconsuming
Followingcrimetrendsinyourjurisdiction

Reactivesearching
Searchingoutparticularitemsofinterest
Giftcards

Oftentimesavictimwilllocatetheirproperty
Followingasuspectbyhisphonenumber,email,orIP
address

VictimsWhoLocateTheirProperty
Scenario
Citizenisthevictimofaburglary
Home
Storageunit

Afterreportingthecrime
Victimbeginstosearchontheirownfortheirproperty
Engagesellersincommunication
Tryingtoobtainadditionalinformation
Photos

Contactspolice

24

3/21/2013

VictimsWhoLocateTheirProperty
Prioritizeidentifyingyoursuspect
ResearchtheCraigslistadthevictimlocated
Isthereadditionalstolenpropertywithinthead?

Reviewanycommunicationbetweenvictimand
seller
Email
Importanttorememberthemiddlemanformat

Phonenumber
Photos
Couldofferyouawealthofinformation

EmailCommunication

ReoccurringTrends
Fraudulentautosales
Buyer
Potentialbuyerisinstructedtowiremoney,usuallyvia
WesternUnion
Potentialbuyerisadvisedthatthevehicleisbeing
shippedfromanotherlocation
Potentialbuyerisgivenasobstoryortoldtheyare
leavingtownimmediately
Departingarmedservices

25

3/21/2013

ReoccurringTrends
Housing
Scammersaretakingadvantageoflargeinventory
ofrentalpropertiesorvacanthomes
Veryeasyforscammertosearchlegitimatesitesforto
gatherinfo

PotentialRenter/Leaser
Notabletoseethepropertyinperson
Duetoownertravelingorrecentlyrelocating

InstructedtowiremoneyviaWesternUnionor
MoneyGram

CaseStudy

26

3/21/2013

InvestigativeConsiderations
MasssellersareflockingtoCraigslist
Proactivemeasuresbasedonthequantityofsale
itemsmayinfactbelegitimate

Areweencouragingvictimstosearchon
Craigslist?
Neverattempttobegetbackyourproperty
yourself

Harassment

Harassment
PollQuestion3
Haveyoueverinvestigatedaharassment
investigationinvolvingCraigslist?

Policedepartmentsareseeinganincrease
withharassmentcasesviaCraigslist
Typicallytheharassingadwillbeinthe
Personalssection
CasualEncounters
Misc Romance

27

3/21/2013

Harassment
Typicallyinvolvesadisgruntled:
Exspouse
Employee

Thesuspectsarebeingmindfulofhowthey
postcertaininformation
Phonenumbers
Spelledoutversustraditionalnumeric

Harassment
Thesuspectsarebeingmindfulofcovering
theirtracks
UsinganopenWiFisignal
Starbucks
Library

Craigslisttypically requiresaphonenumber
whenpostingtothePersonals
Thiswilloftenbeyourbestleadwhenconducting
thefollowup

CaseStudy

28

3/21/2013

CaseStudy

AnyQuestions?
Thankyouforattending!
DetectiveWayneNichols HendersonPolice
Department
wan@cityofhenderson.com
7022674778

29