How the IRS scored one of the biggest child pornography busts in history

It's not very often we Americans want to cheer for the Internal Revenue Service. This is the organization that takes a significant chunk of our paychecks every week, after all. But trust me, by the end of this, you're going to give this particular…
Blake Stilwell Avatar

Share

It’s not very often we Americans want to cheer for the Internal Revenue Service. This is the organization that takes a significant chunk of our paychecks every week, after all. But trust me, by the end of this, you’re going to give this particular law enforcement agency its due. So while they irk us for the money it takes, the IRS also busts tax cheats and will reach out to taxpayers to inform them bout how to pay and pay the right way.

Oh, and they helped bring down one of the largest child pornography websites ever, netting hundreds of pedophiles worldwide, people who thought they’d never get caught. It became an international, inter-agency success story.


It’s a well-known fact that almost anything, no matter how illicit, is available on the dark web, a section of the Internet that isn’t indexed by search engines and is protected by layers and layers of encryption that can only be accessed using Tor, a special browser. An estimated 57 percent of dark web activities are illegal in nature, including the sale of stolen bank accounts, drugs, and child pornography. Because of the anonymity of the dark web, blockchain technology, and the bitcoin used to purchase much of these items, predators, hackers, and drug dealers think it’s a reasonably safe marketplace. Now the IRS can tick off its first score against these illicit practices.

An informant revealed the existence of a child pornography website to federal agents, one that appeared because other sites were shut down by authorities. This site, called “Welcome to Video,” accepted bitcoin as payment, a further way to guarantee the users’ anonymity. But the IRS doesn’t normally cover this ground. So they turned to Homeland Security for help in following the money.

The investigators weren’t able to trace the source of the server hosting the imagery, but through a defect in the website, they were able to trace individual elements of the site. Meanwhile, IRS agents sent bitcoin to addresses associated with the Welcome to Video site. The addresses, they found, were going to addresses given to them by a criminal informant. The feds were able to trace the blockchain ledgers of bitcoin transactions within Tor, a supposedly anonymous browser. Then they divided their resources, one would find the users of the site, and another would find its host.

Federal agents copied one of the confirmed users’ mobile phones and laptops when it was confiscated at an international airport. From there, they traced its bitcoin transactions to South Korea and the United States. They confirmed payments to the Welcome to Video site but also found the website operator’s bitcoin transactions. That’s when they hit the jackpot – the operator of the website opened his U.S. exchange account with a selfie – holding his South Korean passport.

Authorities in Seoul raided the home of a 22-year-old living with his parents, who hosted a “mammoth” child porn site. They took down the site but didn’t alert its users. They were next. Instead, they uploaded a page in broken English about updates being made to the site.

Now that they had the server, authorities in the U.S., South Korea, and London had access to all of “Welcome to Video’s” users. This information led to the arrest of some 300 people in 12 countries – including DHS Agents and other Americans in Georgia, Texas, and Kansas. The Wall Street Journal reports that as a result of the server’s seizure, 23 minors were rescued, all being held and abused by users of the website.

Most of the arrested individuals have since pled guilty or are already serving time. One of the alleged users jumped from his balcony, killing himself.

For the whole story and more details about the amazing work of the IRS, check out the full story in the Wall Street Journal… and try to remember this on April 15th.