Covert Trace
1. MONERO PRACTICAL
A confidential informant advised that on March 4, 2024 9:00 p.m. they purchased 1.5
grams of cocaine for $118 on the Courier Dark Web Marketplace using the cryptocurrency Monero (XMR).
The informant’s Monero Address is:
41zJkQgge8dhwoKCD863gpEybYk4nd5fV4XRicS5nPchXgvnHGYkVPZFzQYLmPBrZa2ca3Y8RQTQJRUJyQowjjHWJtTt3du
The suspect’s Monero Address is:
49VPPbqw1n1F3yEDsz7woW7ahyxMf3996JCxcaRhp6FuNqPtpegg94FWA32oHVT4RM37LeHgZs5jCSrHTbieMpug1uCXtJs
The informant advised that the Transaction Hash for the purchase of the cocaine is:
b936100f613bf6d702dad8fce2f89e9eae5046ce9c9020fd79adb1f1259e33b0
The informant also advised that he had a private transaction key that proved the
transaction was successful. The transaction private key is:
4ca128760b7720fff0eace3625c2e2558b950a2cb4e99cf25c26f782314f5701
Using the Monero Blockchain Explorer, www.localmonero.co/blocks answer the
following questions:
a. Search the suspects address and identify all transaction history.
b. If that was not successful search the transaction hash that the informant
provided. What details are now available.
IF THE WEBSITE RETURNS AN ERROR, GO TO www.blockchair.com and run the transaction hash, then scroll down and hit prove payment. Enter the suspects address, the private key and select tab that says "Prove Payment"
c. Can you identify the amount of Monero that was sent?
d. Click "I sent Monero" and follow the directions listed. (NOTE: - Ensure you are still on the page where the transaction hash was searched)
e. What details are now provided?
f. Can you identify the amount of Monero that was sent now?
2. TEST PAYMENT
On March 26, 2024, an undercover officer arranged for the purchase of 1 ounce of powder cocaine. The target wanted to be paid in Bitcoin. The target provided the following address, and the undercover officer sent a $6.00 test transaction.
bc1qyqplled5djehv86lkazlrw47vnht3q65la4927
- Using the Tracer feature of CT PRO, identify if the target address is associated with an exchange. If so, what is the name of the exchange?
3. EXCHANGE TRACE
In June 2024, Narcotic Investigators initiated an investigation into a local drug dealer that was selling illicit fentanyl and cocaine on the streets of your community using various social media apps. In September 2024, an undercover officer was able to make a controlled purchase of cocaine from the target The target provided the UC the following Bitcoin address:
bc1qav4d8htzl7p8dqt8xz8ec0uur335s0dlzgxn5p3ftphauzrk3kkqgjn45u
Based on this information, answer the following questions using an advanced blockchain analytical tool:
(NOTE – CT PRO- USE THE TRACER FEATURE ONLY AND NO DATE FILTER IS NEEDED)
Trace the movement of the BTC from the target's wallet and attempt to identify an exchange used to cash out the cryptocurrency.
Document the last four of the transaction hashes, the target addresses, and the exchange deposit addresses that you would use to prepare a legal process to the exchange for account information.
4. MONEY PICKUP PRACTICAL
On 2021-07-02 20:06:24 an undercover officer assisted an International Drug Cartel launder approximately $101,125 USDT on the Tron Blockchain by sending $101,125 USDT to the Drug Cartel Mule. The Drug Cartel Mule provided a Tron Address of: NOTE (CT PRO SELECT THE TRON BLOCKCHAIN)
TFJdrtS8a5EGGLM4146QPKfoPEqsNT4kWv
Approximately 30-45 minutes after receiving the USDT from the undercover officer, the Drug Cartel Mule engaged in a wallet hop. NOTE: THE UNDERCOVER OFFICER TRANSACTION OCCURRED AT 2021-07-02 20:06:24
- Trace the address to a possible exchange used to liquidate the cryptocurrency. During the undercover operation, the target advised the UC that he successfully laundered and liquidated the cryptocurrency on July 3, 2021.
NOTE: CT PRO - set a date filter of July 2 - 3, 2021 and select "TRON" Blockchain
- Based on the Exchange identified, document the transaction hash, the suspect address, and the exchange deposit address that would be put into your agency Letterhead Memo.
CLICK THE BELOW LINK TO VIEW A VIDEO DEMONSTRATION OF THE TRACE.
https://vimeo.com/1121047677?share=copy#t=0
