How to Defend CSAM Cases

I. How Does a Case Get to Law Enforcement?

The National Center for Missing and Exploited Children (NCMEC) CyberTipline is a centralized reporting system for the online exploitation of children. Facebook/Meta, Google, Instagram, Snapchat, Yahoo, Microsoft, X, etc are required to report suspected CSAM detected on their platforms. These providers make reports of suspected online sex crimes issues and NCMEC reviews each report, and then forwards it to law enforcement for investigation. The report typically includes a description of the images, cryptographic hash values assigned to each file, and the Internet Protocol (IP) address linked to the account in question.

Cases can also occur when computer repair technicians encounter suspected CSAM on a device, or if a family member or peer sees something and informs law enforcement. Additionally, if an allegation of child molestation is made against a suspect, that suspect’s devices may be seized and contraband files discovered.

II. How is the Dark Net involved in These Cases?

In a recent case, the DOJ in “Operation Grayskull” 18 defendants were arrested and the DOJ dismantled four dark web sites dedicated to images and videos containing CSAM.

Bitcoin is the most popular dark web currency. Litecoin comes in second as the most popular currency. Administrators of dark web sites use multiple websites under multiple pseudonyms, employing cryptocurrency mixers, numerous cryptocurrency wallets, and intermediary accounts to move the funds in an attempt to evade detection.

When a dark web site is dismantled, the users are tracked and ultimately arrested along with the administrators.

III. What are Some Ways to Defend These Types of Cases?

Conaway & Strickler, PC always advises seeking digital forensic experts in these types of cases. They can mirror image the devices seized and analyze them. They help decipher some of the more technical aspects of the discovery we receive. They also can tell us what steps the government did not take in investigating the case. They can also determine whether files were intentionally accessed, whether timestamps were manipulated, and whether malware or remote-access software could have created the material without the accused’s knowledge.

We also employ forensic psychologists to do a psychosexual evaluation to help provide mitigation and/or to provide a defense to the charges.

Conaway & Strickler, PC represents clients charged with CSAM at the state and federal level. For further information, please see here or contact us. We are here to help.