UPDATE 13.5.2014I began work to find physical location of Suspect #1, and found result in Tartu, Estonia. After much digging, I was able to find picture of this person from school event and even local bike race event. But there is problem. Person I locate in Tartu is 14 year old child...
I still not sure what this mean. It could mean several thing:
A) I simply found child (wrong person) with
same name as Suspect #1 and should keep search on
B) Child could be little brother, nephew, son, relative or friend of actual Suspect who used same Computer
C) Name I find is simply alias or fake name of Scammer and more investigation need to find real name and location
D) Very small possibility, but child could be incredible gifted and intelligent and could be scammer, but I doubts this, haha
I looking for answer now, and also taking closer look at Suspect #2 and other suspects just in case this one innocent. When people use proxy and Tor sometme multiple people use same exit node or IP/port proxy and we must examine each potential suspect and find most likely one. But I think answer most likely the A or B possibility, and I need to continue search for people with suspect name and try to find physical location...
Reason I think these child I find is simply wrong person with same name:
* Suspect has Youtube account with activity and preference more like adult from 2009, when child only would be 8 or 9 years aged.
* Suspect first begin using Facebook when child would only been 5 or 6 years aged
* Suspect multi-lingual,
very intelligent, proficient in use of Tor and proxy and has knowledge of internet protocols few children possess
* Few children skilled spammer and does blackhat SEO activity for money or capable of things suspect I see does
Most interesting part is the suspect original Facebook account made many post/spam concern Bitcoin few months before the big scams take place. After scams, he try to delete this account, all his picture and all reference to ever made about Bitcoin. He then open new Facebook account with no picture of self with only few dozen local friends and never mention Bitcoin again. But he still using Tor and proxies and post spam about Bitcoin on internet to this day, but he keep it all OFF of Facebook and stay quiet. He also list no location, place of work, relatives, school or any personals information. This often indicate person wants not to be found and has hiding something.
But do not yet lose faith, friends. These investigation VERY difficult and MUCH work. Sometimes you lucky and find scammer in few days, sometimes weeks, sometimes months, sometimes year or even longer. There often MANY dead-ends and false lead along the way. You almost NEVER find a scammer on
first try. One must build list of possible suspect and analyze each one by one, eliminate ones who innocent and keep search until damning evidence found. The more skilled scammer, the more work takes it to solve case. This scammer is very savvy and smarter one than most. But he not invincible, trust me!!!
@ serpiente: When you become online I have detail report compile of investigation proceeding you may take look at and tell me what you think. Send me pm and we try to make sense of what information we have and make decision on how to best continue search.