eChatter

Fraud Update: Online Sales and Marketplaces

Many criminals continue to turn to the internet to unload stolen goods. Some sites require more information than a thief is willing to part with, which then leads them to other sites that have less security. Because of the anonymity some sites offer, it is important to search for the type of goods being offered on the site. User name searches are not always fruitful. Searching for items may back you in, if you will, to the criminal’s information.

Equally important is the rise of employee fraud. We wrote about this earlier this year. In Employee Fraud in the Digital Age, we discussed a case study. We once worked on a scan for an Investigator whose subject was suspected of selling a very unique set of stolen auto parts. The employee had created an eBay account and made the mistake of using a familiar user name. After the user name was revealed in our Deep Web Scan, we turned our attention to the online websites that sell goods to consumers. We were able to piece this information to that of our client’s subject. A huge catalog of stolen auto parts were on display.

Online Sales

According to Web Retailer, “47% of ecommerce sales were made through online marketplaces in 2020, amounting to nearly two trillion dollars. They also list 155 marketplaces that have more than one million visits per month, internationally.

How did this explosion in online selling happen? Over time it evolved, of course, but within the last couple of years, more and more people rely on it due to the Pandemic. Each online platform works differently, making it very difficult to find the scammers. Let’s take a look at a few of the top marketplaces to start.

Facebook Marketplace

Facebook noticed that its users were buying and selling things in groups across the platform. In 2016, it created a dedicated hub where people could post items for sale in order to reach interested buyers. They created what is now known as Facebook Marketplace, and they grew it to 1 Billion users.

The volume alone dictates that it will be a breading ground for fraud and scammers. Facebook is well aware of the issues they have and have publicly stated that they use software as well as outsourced people to review listings flagged by the software and to answer user complaints.

Most recently, you can find fake COVID vaccine cards for sale. However, for the most part you can find just about anything here.

Amazon Online Sales

It is a little more difficult to sell on Amazon. You can either sell your products to Amazon or on Amazon.

As a consumer, it is important to pay attention to who is selling an item. For example I recently purchased a specific style of shoes. I didn’t think much about it and when it was delivered it was an obvious counterfeit. It even had a very strong chemical smell. It was obvious I was a victim of a seller of counterfeit goods.

The Washington Post recently had a great article titled, “How to tell real products from scams when shopping online.” They actually listed out some good OSINT research tips, such as doing a reverse image search on the item you are looking at. It is also smart to research the company name.

eBay Online Sales

When it comes to online sales fraud, you most likely think eBay. eBay has been around since 1995 and it is no stranger to these issues. While there are many other marketplaces, It is still a gigantic places to sell all kinds of used and new products. When conducting research on a person or company allegedly selling stolen goods online, it is still the best place to start.

A couple of OSINT tips when searching eBay:

Search the site for every known user name. You may even want to mix it up a bit by mixing user name letters and numbers. For example, consider the following fictitious user names; @windycity146, @tom.day, @daytom – I would search each of these but then combine to create new ones that the user may be using on eBay. Such as @tom146, @day146, etc..
Search the site by utilizing the “Advanced” button, which will display new options for searches. Toggle to “show results” and then “items near me”. From here you can plug in a zip code up to 10 miles or more. This is an excellent way to search if you do not know the user name of your suspect.

TikTok & the Gabby Petito Case

Gabby Petito, a young and beautiful Social Media Influencer, went on one travel adventure after another with fiancé Brian Laundrie. And thens suddenly, it all took a very dark turn. With Gabby Petito’s potential remains being recently identified in Wyoming, and fiancé Brian Laundrie still missing, this case has captivated the hearts of many across the country.

Questions as to why this happened to her and if it all could have been prevented are on the minds of many. If you search #gabbypetito through TikTok right now you will find more than 480 million people have viewed the videos associated with the hashtag. From TikTok influencers, to witnesses, real time video footage is being posted piecing together the evidence.

How TikTok Helped

Taking a closer look at the videos associated with #gabbypetito, I stumbled upon Miranda Baker’s TikTok channel, a key witness associated with the investigation. Miranda and her boyfriend picked up Brian Laundrie who was hitchhiking around the time of Gabby’s disappearance. She gave a statement to the FBI but afterwards documented her interactions with Brian through her TikTok account. Every video she posted goes into details about Brian, their location, and interaction. Every video has gone viral.

Another video created by Alyssa Rose, shows a YouTube video the couple had posted on one of their adventures. She pauses the YouTube video at marker 6:40, to focus in on a book that Brain Laundrie was reading in a hammock. As she zooms in, she discusses the book he was reading which is “The Annihilation”. This book is about groups of people exploring uncharted terrain that go missing. This particular book series follows four women.

A third video was from Riley Lively, a mom living in New Orleans. She took to her TikTok account and stated in the post, “Putting some of my investigation skills to good use!” In this video she discusses how through sleuthing through an app called “All Trails” she found Gabby Petito’s public account. This app allows you to search and follow other individuals and their hiking trails from around the world. Through this account Riley discovered all of the trails Gabby had saved. She begins to show the lists that Gabby had saved in her account. Many of these hiking trails saved could have been potential spots of where was had gone missing.

Critical Thinking

In OSINT we are taught about the techniques behind finding key pieces of data or evidence that is online. What isn’t always taught? How to apply critical thinking online. Growing your critical thinking skills is just as important in finding key information. Each one of these women took to TikTok and applied their critical thinking skills, piecing together social media content to an ongoing investigation.

The Takeaway

Each of the viral videos above teach us all something valuable! Culture, personality, details, and analysis. Miranda met with the FBI and provided a statement. She also was continuously working with the FBI while creating her video content. My mind immediately goes to the details she is discussing in each post, how she is processing what she witnessed in each video, and what are others saying about the content she is posting in the comments. Are there any additional witnesses there? Any other clues?

Alyssa Rose shared Gabby Petito’s Youtube video. Someone could have easily watched that video and not notice Brian in the hammock reading a book. She took the time to analyze a video that could have easily gone over the heads of many. The online personality of your subject matters. This is a great example of a small piece of information, showing us an insight to Brian Laundrie and his interest.

Riley Liley pieced together Gabby being an influencer, possibly having an account with the ever popular All Trails App and was right. She then was able to view Gabby’s public online account trail lists.

Leave no stone unturned. Think about their interests. If they have a large social media presence, there’s a chance they have apps they are tied to involving their interests.

When we think of social media research, or social media listening, culture is not something that immediately comes to mind. It is only when we begin to dig deeper and identify what our search parameters are, that we begin to understand the role culture plays. TikTok is a culture phenomenon that continues to evolve. It took on an entirely new form over the past two weeks with this case and will continue to do so.

Using Tinder for Robbery

Take a look at any police log and the dating app Tinder is sure to make an appearance. Most likely in regard to luring suspects to meet at a specific location and then rob them. Earlier this year, it was reported that 6 people lured through Tinder were robbed at gunpoint in Fresno, California. They asked people they met on Tinder to come to specific locations where the group would lie in wait and rob the victims at gunpoint.

In Chicago, two 18-year-olds “terrorized” two men looking for a Tinder date hookup who instead were attacked from behind, beaten, kidnapped and robbed in a Chicago neighborhood. A girl, 17, was also accused in the attacks, charged with driving a car during a criminal trespass to a vehicle, aggravated kidnapping, aggravated vehicular hijacking and aggravated robbery.

With over 6.5 million monthly downloads in May 2021, Tinder is the most downloaded dating application in the world.

How Detectives Use Location Spoofing in Tinder

The first thing a Detective must do is to create a fake Tinder account. It is important to target the location where the criminal activity is taking place. They then throw out the bait and wait for someone to respond.They then put undercover police out to see if someone tries to rob them. Dangerous work, but very effective when a certain area seems to be targeted over and over again.

Creating a Fake Profile

One question we get a lot is how can you search dating apps to find a cheating spouse. Short answer, there is no way to do this effectively. You must have an account. Let’s take Tinder as an example.

To begin you need to sign up using Google, Facebook or a telephone number. Tinder is one site that doesn’t seem to mind using Google Voice Numbers. If you have one already set up, this is an easy way to get signed up. Next, you will receive your verification code. Once you log in it will want to know your location. Next, you will need to modify your profile. This gives you the opportunity to match the profile of someone your client’s spouse may be interested in. Use a profile pic generator to create a fictitious person (https://www.thispersondoesnotexist.com).This is something that is AI generated and can not be found in a reverse image search.

Tinder should give you a different set of results based on your location. It isn’t easy to search even with an account set up. It may help you to identify a person who has a profile on the app. Most times, this is what your client may be looking for.

Sounds like a lot of work, right? It is a lot of work and you may or may not find what you are looking for. If you do find your suspect, then not only do you know he/she is on the site, but you can use the image to conduct a reverse image search to determine if it is being used anywhere else online.

Facial Recognition – Online Research

Facial recognition is something that you may want to zero in on before you begin any type of reverse image searching. If you just want to see if the photo itself is being used anywhere else online, then leaving the photo as is works well. However, what if you have a photo of a person but can’t identify the person? In that case, you may want to search a bit differently.

Google Reverse Image Search

Google doesn’t really focus all that much on the facial recognition aspect of a photo. Instead, it is geared more to searching content. That means it takes into consideration what the photo is about. Is it a photo of a person eating at a restaurant? You may get a large number of results showing you a photo of a person who looks similar, eating at a restaurant.

It doesn’t focus as much on the facial recognition aspect.

One work around to this is to crop your photo before searching through Google Image. Take out all the background and just focus on the face of the person if possible.

Yandex

Yandex’s image search is far superior for facial recognition. I highly recommend using it. Take a look at the difference between searches. I use a standard head shot in all my marketing online. It should come up in a Google reverse image search without any problem. However, it doesn’t.

Look at how much more you information you get from Yandex than from a basic Google Image Search. While there are photo selections offered to the right, Yandex allows you to further crop an area of the photo. This allows you to try the search in more than one way.

Notice also how it offers you sites containing information about where the image is online. It highlights several sites where this exact photo is being used.

Tin Eye

Tin Eye is used all the time in investigations. For this particular exercise, it did not fair as well as the others, however. The result I received from a basic search was a website that is not even up and running anymore.

Social Media Defamation

Social media in many ways is still the wild, wild west. It is a lawless environment in which many people have been harmed by reckless comments. Over the last year, we have seen several cases in which one person was harassing another person in social media.

How common is online harassment? During a January 2020 survey it was found that 44 percent of internet users had personally experienced any kind of online harassment with 28 percent of respondents reporting to having experienced severe forms of online harassment such as physical threats, sexual harassment, stalking and sustained harassment.

What is Considered Defamation?

According to the Electronic Frontier Foundation (which has a great web page on online defamation law), there are three elements that must be shown during a defamation claim:

The statement has to be false
It has to be communicated (published) to someone other than the person being defamed
It has to be about the plaintiff and have the potential to harm their reputation

Written defamation is considered to be libel. Verbal defamation is considered to be slander.

For a statement to meet the legal definition of defamation, it has to be a false statement by a third party. Additionally, it needs to be intended to do serious harm to a person’s reputation. It has to be done “without fault”. You must be able to show someone was acting irresponsibly when making the statement.

Examples of Social Media Defamation

HG.org legal resources outlines social media defamation examples as follows. “Not every untrue or unkind statement is actionable. However, many statements are. For example, if you accused a person on social media of abusing his or her spouse or children, such a statement would likely be considered defamatory if it were not true. Even if an individual posts information that is partially true and partially false, he or she can be found liable for defamation. For example, a person may claim that an individual was fired for harassment. The individual may have been fired but not for harassment. The court may find defamation still existed despite some truth to the statement.“

Steps to Dealing with Social Media Defamation

Most businesses are monitoring online content through social media and the web. Most individuals are not. You may not even be aware of someone posting negative information unless an associate tells you about it. On the other hand, you may be very aware because the person has set out to harrass you online.

Do not respond. This is hard to do. Responding hastily can just make the situation worse.
Capture the evidence. Take screenshots as soon as you can in order to collect the posts. This will at least provide you with a good point of reference if things get worse.
The next step is to either hire a Private Investigator or an Attorney. Getting legal help is very important if it doesn’t look like this is going away. Either will be able to conduct some research on the perpetrator. You may not be the only one this is happening to. Legal help will also be able to authenticate the online evidence should it go to court at any point in time. An Attorney may be able to provide you with a Cease and Desist Letter.
Notify the social media company. Check out the resource pages. You may be able to report this.

Always be careful. This is especially true if the person lives near you. Exercise caution until you get it resolved.