In December 2017, the CyberTipline® received a report from a registered electronic service provider regarding the transmission of apparent child pornography via their social networking service. As part of their report, the ESP provided incident information, including an email address, screen name, images of the apparent child pornography and IP addresses associated with the reported files.
A NCMEC analyst assigned to this report viewed multiple images, which appeared to be unfamiliar, and a chat log suggesting the reported user was enticing the child victim to sexually molest her toddler-aged relative. After querying the CyberTipline with the information submitted by the ESP, it appeared the reported user was associated with multiple other reports and had possibly been aggressively enticing multiple children to produce child pornography. The email addresses provided by the ESP linked to a social media profile including a location and possible gang affiliation. Based on the uploaded content and chat log, NCMEC staff prioritized the report.
The same day, the reporting ESP sent an escalated report related to the reported user alleging he had been using several accounts to coerce multiple minors to produce child pornography images. On various occasions, the user appeared to have enticed child victims into sexually molesting younger relatives. The analyst added value to this report, connected additional reports to the reported individual, and reclassified the escalated report to the highest priority. The report was made available to an Internet Crimes Against Children Task Force in the Mid-Atlantic states, which alerted a local police department. The ICAC continued to update NCMEC about the case and request additional information as needed. As the reported user is a citizen of another country, Homeland Security Investigations assisted in his arrest. Due to the diligent work of law enforcement, 15 victims, including a 2-year-old girl, have been rescued.
In January 2018, the CyberTipline received a report from a member of the public alleging the reported individual was addicted to child pornography. It was also alleged the reported user was previously employed in a school and may continue to have access to children. The reporting person provided a name, address, telephone number and username for the reported user.
An analyst used the information provided in the report to find a potentially related social media profile associated with the telephone number and username provided by the reporting person. The profile contained the same name listed in the report and suggested the reported user had access to multiple children. Based on that information, the analyst escalated this report and made it available to law enforcement in a southern state. Per a joint investigation by law enforcement agencies in that state, the user was arrested.
The reported user is accused of possessing “material containing a representation of a minor, unknown female, approximate age between 8 and 10 ... engaged in sexual activity.” The reported user faces charges to include one count of Indecent Liberties with a Minor and three counts of 2nd Degree Exploitation of a Minor. The victim appears to be a child from the daycare where the user worked.