Timeline: Feds Bust Massive Alphabay Vendor "HumboldtFarms"

https://www.deepdotweb.com/2017/08/21/timeline-feds-bust-massive-alphabay-vendor-humboldtfarms/

On August 8, a Homeland Security Investigations officer signed a completed arrest warrant, signalling that he had arrested William James Farber in Los Angeles, California. Farber, a 37-year-old convicted felon, had operated--along with six co-conspirators--one of of the most successful Alphabay vendor accounts in existence. At the group's peak, they shipped 1,000 packages every week. Not only had Farber sold on Alphabay, newly-released court documents explained, but on nearly every market since the original Silk Road. Back then, though, he used a different username: "PureFireMeds."

Farber fell into law enforcement's scope after a series of transactions with an unlicensed Bitcoin exchanger. Authorities redacted pages of the criminal complaint, and as a result, many critical pieces of information--pieces connecting the Bitcoin exchange to PureFireMeds and HumboldtFarms--are unavailable to the public. All the complaint revealed was that former DEA Task Force Officer Jared Gabbay sent California law enforcement information obtained in a search warrant. The government redacted the details, but left an address. We do know, from other parts of the document, that the federal investigators found the Bitcoin exchanger through a confidential informant, though.

A search for the address where the warrant was executed--150 Harvard St., Cambridge, Massachusetts--resulted in little useable information. According to the complaint, the warrant was executed by the Drug Enforcement Agency and Cambridge police on January 23, 2014. The single useful result from a Google search of the address is a news article from January 24, 2014. At that address, the DEA and Cambridge police found "items that they were concerned about" on January 23. One woman, Jan Visterfeld, was arrested and charged with drug distribution. Cambridge Police Deputy Superintendent Jack Albert said that authorities removed materials from the scene, but would not reveal any further details.

"They cleared the scene and said there was no danger to neighboring residents, and investigators came back today to remove some stuff they want to have analyzed,'' Albert said. Visterfeld pleaded not guilty the following day. A spokesperson for the district attorney's office would not reveal what drugs Visterfeld had been arrested for distributing.

Authorities had not redacted the name of one of the apartment's residents: "Jay Best." The "name" connected to the name of an online Bitcoin exchanger that traded cash--through the mail--for bitcoins. He was known online as "Cashguy," and even known by international authorities.

Jay Best used the email addresses "JayCortex@gmail.com" and "best@mit.edu."

At the Cashguy apartment raid on January 23, law enforcement found a shipping label made out to Farber. The tracking number matched a tracking number in a message between PureFireMeds (PFM) and Cashguy. A connection was positively established between PFM and Farber, at that point in time. He connected the PFM vendor accounts on several darknet markets by checking the PGP key used on each account. The agent's experience helped him deduce that because the accounts shared listings, usernames, and PGP keys, the same entity owned every one of the accounts. He said.

An analysis from the DEA:

"PFM finalized 5,486 narcotics orders between August 26, 2013, and October 28, 2014. PFM sold 10 different types of illegal narcotics, including marijuana, cocaine, norco hydrocodone, 'mushrooms, ecstasy, MDMA, LSD, OxyCOdone, Xanax, and Ketamine. The total value of these finalized orders was estimated to be $1,183,904.60."

September 30, 2016: The investigating agent found a post from a Reddit user that asked if HumboldtFarms was scamming users. Another Reddit user replied that HumboldtFarms (HF) "might be the vendor PureFireMeds." He found the HF account on numerous darknet markets.

February 23, 2017: An undercover, controlled order was placed by a California detective and the HSI agent. Package arrived. The "leafy green substance" tested positive for marijuana.

March 1 - March 23, 2017: USPIS Inspectors profiled the packages. They were shipped, frequently, from the same address. The packages used fake return addresses or addresses missing various numbers. HF also shipped packages in USPS Flat Rate boxes, but instead of the usual label, the drug trafficking organization (referred to in the complaint as HumboldtFarmsDTO) used USPS stamps. A USPS employee explained that this was highly unusual. Inspectors identified a "heavyset" Hispanic male who had made routine deliveries of packages that matched the description given by law enforcement. They caught his vehicle on USPS footage.

After the suspect departed the post office one day, law enforcement made the first major moves on the ground:

A Fresno police officer pulled the suspect over for driving without tags and illegal window tint. The suspect had no ID, but identified himself as "Michael Palma."
Postal inspectors identified four mail sacks containing 100-200 USPS Flat Rate boxes.
With assistance from a K9 unit, postal inspectors opened two packages and found that they had contained marijuana cookies and brownies.

Palma was identified and subsequently found on Facebook where he was friends with Farber and Bryan Lemons. The next seven pages in the complaint were redacted.

April 1: A postal inspector had previously noted that the stamps used on HF's packages were the only stamps used by the DTO. USPS pulled recent transactions and found that someone had purchased the stamps in batches of $1,000-$3,000 per visit. Security footage revealed a woman that matched the pictures from Facebook and Instagram accounts of Annie Jagler. Jagler was friends with Lemon and Farber.

April 5: Law enforcement placed a tracker on Palma's vehicle. His vehicle, notably with visible plates, led the authorities to the home of Michele Pickerell. She lived in a "gated community" where the security guard recognized and identified many members of the DTO. In addition to Pickerell, surveillance at this location added one more member of the DTO to the list of suspects: Richard Thomas Martinsen. (It was later discovered that postal inspectors had previously identified him as a suspect but not his full identity).

April 12: "Det. Kim found a picture on Facebook from 2015 that included Pickerell in a photo with three other women wearing a Stix Ride Shop hat (Stix Ride Shop is a skateboarding business owned by Farber); Farber' "liked" this photo on Facebook," the HSI agent explained.

April-May: Martinsen's activities were dissected. Postal inspectors found vape cartridges with "@justdabble" branding. JustDabble was a company closely affiliated with the DTO. The company sells marijuana vape cartridges and closely connected to other known members or associates of Farber, including an edible company linked to Farber himself. Additionally, Martinsen's banking activity had caught the eye of IRS inspectors for suspicious activity:

"Wells Fargo bank reported that the currency deposited into Martinsen's accounts had an odor of marijuana and that multiple cash deposits were conducted at branches located in California, Illinois, Nevada, Florida, and Oregon by unknown subjects. 'The cash deposits were then immediately followed by cash withdrawals in or near Hollywood, CA. The cash deposits were often in amounts just below the Currency Transaction Report filing threshold [$10,000]."

April-May 9: Fresno police placed a gps tracker on Farber's vehicle and mapped his activities. They knew when he would be somewhere, when he got gas, when he purchased new clothing, etc. They also noticed that he made routine stops at a warehouse. Law enforcement "smelled" the building and reported a marijuana odor. They had obviously discovered what the warehouse contained at this point. Det. Kim reached out to the department of water and power to confirm the suspicion that Farber was using the warehouse to grow marijuana.

The warehouse used more kilowatt hours of power per month than the average Costco.

May 20: The agent discovered that HF had entered vacation mode on Alphabay.

May 22: HF started messaging other Alphabay vendor to sell the vendor account. The account operator requested $100,000 to $400,000. Alphabay admins then banned HF, Larsen reported. The message is below. Spacing added.

"Hello from HumboldtFarms!

You are receiving this message because you are a TRUSTED VENDOR WITH GOOD RATINGS and we would like give you a unique opportunity. After over 3 great years of being a Top level Cannabis vendor we have decided to get out of the business and we are selling our accounts on Alphabay and Dream. Since 2015 we have sold over $8 million in sales and have been trusted by our repeat customers again and again. This really is a big opportunity for someone to make a lot of money.

Please take a second to visit our stats or see them listed below and or find us our stats on grams. We are in good standing with not only our customers but also the site admins. Due to unforeseen issues with our staff we are forced to close and get out of the business even though we do not wish to do this. Our accounts can be easily taken over by anyone who sees the huge opportunity to buy the account and start generating some massive sales and income.

We are currently going on Vacation mode to get caught up with our current sales because of short staff.. We are currently taking offers starting no less then $100k USD but ideally we are looking to get 200k-400k (these numbers can easily be made back within a few weeks). We are only considering TRUSTED VENDORS WITH GOOD RATINGS and long stats history to sell to so we can continue to have a good name. Please take your time to study our stats and message me with the subject to read "BUYER INTERESTED" to make us an offer."

The End: The IRS conducted an analysis of the funds received by every known HF bitcoin address. In total, Farber/HF had earned more than six million dollars from darknet or otherwise suspicious sources. The HF wallets were, like the PFM wallets, directly linked to Farber himself. Larsen called for the DTO's arrest:

"Based upon my training and experience, and on the facts set forth in this affidavit, I believe there is probable cause that defendants [Farber, Palma, Martinsen, Lemons, and Pickerell], violated Title 21, United States Code, Sections 846 and 841(a)(1) & (b)(1)(C) (Distribution of Controlled Substances and Conspiracy~ and Title 18, United States Code, Sections 1956 & 1957 (Money Laundering and Conspiracy). I therefore request that the Court authorize the attached complaints and arrest warrants."

Farber and Lemons were picked up on conspiracy to distribute controlled substances and money laundering. According to the DoJ, the remainder were charged with only conspiracy to distribute controlled substances.


Comments


[123 Points] vvv8:

"The “leafy green substance” tested positive for marijuana."

"the currency deposited into Martinsen’s accounts had an odor of marijuana"

I just love how these LE treat marijuana as if it's the devil's plant. Did these guys never smoke a joint in their lives? It's almost as if they are jealous that they can't smoke weed due to their career paths. For gods sake Cali is going to legalize weed so very soon and the cops still treat weed like it's a hard, detrimental drug to society.

I just don't understand how stupid people can accept the sale of cigarettes, pharmaceutical pills, and alcohol in their society, yet still view marijuana as an unwanted bad drug.


[104 Points] BrianEno_BBMC:

The "brown grainy substance" tested positive for sand


[30 Points] 90210BitchTits:

Damn lucky bastard to have OpSec like that and last so long. I mean he was Facebook friends with his employees and they all knew who each other really were.

Would it not be strange to have someone who lives in Los Angeles order weed from you through the darknet? lol that looks and sounds suspicious as hell. I'm not sure what its like in California but I'm assuming that high quality weed is available within a 10 minute drive anywhere in the state. So California weed vendors should probably stop sending out California orders.

Conspiracy to distribute controlled substance and money laundering charges on top of already being a convicted felon... bye bye little buddy.


[22 Points] bebopx2:

LE is reading reddit posts!!!!!!!!


[13 Points] coffeencreme:

Quite shocked to hear this actually. He was around a long time.


[13 Points] DickCheeseKillah:

Hmm interesting . I just looked up the name Jan visterfeld and the police said they originally responded to her apartment about a armed robbery. Than they said they had a search warrant. I wonder if they by accident stumbled Upon something. This is definitely one of the most interesting DNM cases. Lots of info


[11 Points] FarberWuzAFook:

So I have a little knowledge of this...from a mutual friend...but what I know is that this guy was a grade A fuck, we was always bragging and shit to bitches on instagram, bringing girls around and snapchatting himself with loads of cash and molly and shit. Hit festivals pretty often too and got loud out there too. That's coming out of the mouth of someone who probably sucked this dudes dick at some point. I'd bet on that last part tbh.


[9 Points] bebopx2:

Wasn't Humboldtfarms called out numerous times for keeping buyer info ?


[8 Points] itsalaughinggas:

At that address, the DEA and Cambridge police found “items that they were concerned about” on January 23. One woman, Jan Visterfeld, was arrested and charged with drug distribution. Cambridge Police Deputy Superintendent Jack Albert said that authorities removed materials from the scene, but would not reveal any further details.

Sounds like the cops found the wax blasting lab

“They cleared the scene and said there was no danger to neighboring residents, and investigators came back today to remove some stuff they want to have analyzed,’’ Albert said. Visterfeld pleaded not guilty the following day. A spokesperson for the district attorney’s office would not reveal what drugs Visterfeld had been arrested for distributing.


[7 Points] bebopx2:

Where is the article stating he kept almost all of his customers personal info encrypted and that he gave that info to the cops?


[6 Points] bballstar99:

Is 2-400k for a vendor account something reasonable? Seems to me you could give out a lot of samples/discounts and build your own account much cheaper.


[5 Points] None:

[deleted]


[6 Points] None:

RIP to "heavy set Mexican man"


[6 Points] None:

he also sold sand


[4 Points] iSupportAbortions11:

"Authorities redacted pages of the criminal complaint, and as a result, many critical pieces of information—pieces connecting the Bitcoin exchange to PureFireMeds and HumboldtFarms—are unavailable to the public."

More sneaky illegal tactics used by our beloved LE.

Dirty cunts


[3 Points] YarrIBeAPirate:

Damn. That gated community needs to fire those guards. Fucking rats


[3 Points] PM_ME_EGGNOG:

Another part that I left out of the post because of the level of speculation: the cars outside the woman's house on Google maps match the cars in the criminal complaint. I'd guess they are the same.


[2 Points] DextroShade:

So because I am feeling lazy right now, can someone simply say what OPSEC mistakes they made besides being on fucking Facebook?


[2 Points] Hairybristols:

He should have got out the game a year ago.


[2 Points] Chabfita:

So here's how it sounds like he got busted to me

Humboldt has millions in btc he needs to launder

makes an anonymous lbc account and buys from a guy that ships cash

LBC trader ships to a girl on his team in Missouri. There is no way this girl was involved with any of the drugs if she lived in Missouri.

The girl in Missouri Laundered money for them into their main accounts, she likely had her own business or helped them start a business

LBC Trader gets arrested

Gives Missouri girls address

Missouri girl gives up all info she has, hence why the article is suspicious and vague here, to protect her

Whole operation goes under because of some stupid bitch


[1 Points] mynamebazac:

Wow just read this that guy is gone.


[1 Points] DNrick_sanchez:

how did they even know he had coins, arent they fucking ez as hell to hide....


[1 Points] Lyzergic:

Maaan. Am I the only one confused. What the fuck?


[1 Points] catsonabike:

Holy shit


[1 Points] GetWellDuckDotCom:

Damn I live near lowell


[1 Points] xKingxShawnx:

Fuck the Police.


[1 Points] _PrinterPam_:

I'm having trouble believing this article considering that, at peak, "they shipped 1,000 packages every week" but only "finalized 5,486 narcotics orders between August 26, 2013, and October 28, 2014" (over a year).


[1 Points] brucejennardnm:

HBF was purefiremeds?! That unstable asshole sold bunk e pills like 3 years ago


[1 Points] hyphyaf:

best@mit.edu

Damn, that's a good email address.


[-1 Points] itsjay_60:

So is HumboldtGrowers on TR busted to?


[-5 Points] mrmollyboy:

This was already posted a bit ago and is well known.


[-4 Points] None:

Repost