British national Kai West is suspected of being the man behind the “IntelBroker” alias. He’s now under indictment by the U.S. Attorney’s Office for the Southern District of New York. West’s alleged activities as IntelBroker have resulted in about $25 million in losses to victims. The lengthy and complicated investigation, including extensive cryptocurrency tracing and international collaboration, resulted in West’s arrest in France.
The case illustrates the growing law enforcement sophistication in tracking cybercriminals using cryptocurrency transactions. Investigators were able to trace IntelBroker to real-world identities through careful examination of blockchain data and working with cryptocurrency exchanges. This arrest is a historic win in the global fight against hacking and cybercriminals. It has showcased the power of combining old-school investigative gumshoeing with new-school digital forensics.
The Cryptocurrency Connection
One of the key components in unmasking IntelBroker was following the money in crypto transactions. Similarly, investigators found that IntelBroker had engaged with Coinbase using the same Bitcoin address he used to scam for other illegal services.
The original Coinbase account, opened under the name ‘Kyle Northern’ was a red flag. The KYC data associated with the account traced directly back to Kai West themselves. At the time, it was considered the most consequential breakthrough in the investigation.
Chainalysis Reactor and the Web of Exchanges
As law enforcement pursued IntelBroker, they used Chainalysis Reactor — a cutting-edge cryptocurrency tracing tool — to build a map of IntelBroker’s digital presence. The forensic analysis uncovered a complex network of cryptocurrency transactions across various exchanges, adding to the mounting evidence linking Kai West.
This complex network of transactions was ostensibly created in order to obscure the original source of funds. More importantly, it went on to drop the breadcrumbs that led to IntelBroker’s true identity. It was the combined cooperation of both cryptocurrency exchanges that allowed law enforcement to obtain account information necessary to crack the investigation wide open.
Unraveling the Digital Identity
Beyond cryptocurrency, investigators pursued other digital trails. One email address tied to the IntelBroker operation, [email protected], turned into a critical piece of that puzzle.
This email address was the clue that brought investigators to the profile of Kai West on LinkedIn. The profile further filled in other corroborating details that bolstered the connection between Kai West and the IntelBroker persona.
IntelBroker had previously listed a public Ethereum address (0x0cD1FD1191aeC66F555C0893D29E7c36AeEeb6ab) in a Twitter post. Every donation sent to this address went directly to the Changelly exchange. Now it’s developed another connection back to the person behind that alias.
International Cooperation and Arrest
The investigation resulted in a collaborative, international operation. French authorities arrested Kai West on the basis of an INTERPOL Red Notice, allowing U.S. prosecutors to charge him and secure his extradition.
The arrest highlights the need for international cooperation and collaboration to stop cybercrime, which knows no borders. The event underscored the amazing collaboration that exists between law enforcement agencies across the globe and the united front they present to cybercriminals.
