LOW INTERNET GRUNT LE
Usually an innocent sounding question. Easy to spot. GRUNT1 (low LE grunt): " Been away for awhile, what are the new markets? Anyone help me out?" "So is "vendorname" the new top go to where does he ship from?" "Anyone know where "" ships from?" meanwhile they have a 2 month history asking prying questions and never helping the community. That guy was your rookie, next guy is more invested.
MEDIUM DNM undercover: Will have months back of cover. He may or may not have regular looking posts on their accounts. Be wary of lots of suspicious questions. They can befriend targets for many months. They may not necessarily target users or buyers but they will use them to take over organization that they can infiltrate. If they are low on their list they may infiltrate r/DNMs and install other Medium DNM undercover as intel for going after the next organization. If they are more advanced they aim higher.
The Number 3 Guy. Every LE wants to be him. The medium DNM undercover wishes his bust will grant a small glance towards him, making him as proud as possible.
edit: these are just thoughts. not a hand book. add to the convo. we need more sneaky opsec ideas and threat reduction
The Number 4. guy: Act like you know what LE does to earn trust.