United States v. Twenty-Four Cryptocurrency Accounts

UNITED STATES DISTRICT COURT FOR THE DISTRICT OF COLUMBIA UNITED STATES OF AMERICA, Plaintiff, v. No. 19-cv-3098 (DLF) TWENTY-FOUR CRYPTOCURRENCY ACCOUNTS, Defendants. MEMORANDUM OPINION This action arises out of an investigation by the Internal Revenue Service and the Department of Homeland Security into a child pornography website called Welcome to Video (the Website). Compl. ¶ 2, Dkt. 1. Following that investigation, the United States initiated this forfeiture action in rem against twenty-four cryptocurrency accounts (the Defendant Properties) containing U.S. dollars, Bitcoin, and other forms of cryptocurrency allegedly used in connection with the Website’s criminal activities. Before the Court is the government’s Motion for Default Judgment against the Defendant Properties. Pl.’s Mot. for Default J. (Pl.’s Mot.), Dkt. 11. For the reasons that follow, the Court will grant the motion. I. BACKGROUND A. Factual Background 1 Bitcoin, like other so-called “cryptocurrencies” that have emerged in recent years, is a virtual currency traded over the Internet and controlled through computer software rather than 1 On a motion for default judgment following the entry of default, courts construe the well- pleaded allegations of the complaint as admitted. Boland v. Elite Terrazzo Flooring, Inc., 763 F. Supp. 2d 64, 68 (D.D.C. 2011). issued by a bank or government. Compl. ¶ 7. Bitcoin is sent and received using a virtual “address” made up of a unique string of characters akin to a bank account number; each address is controlled through a password, or private “key.” Id. Bitcoin and other cryptocurrencies are bought and sold on online “exchanges,” which allow customers to exchange virtual currencies for conventional money and vice versa. Id. The value of these currencies fluctuates; one Bitcoin was worth $11,573 in March 2018. Id. Every Bitcoin transaction is recorded on a decentralized public ledger called the “blockchain.” Id. The Website is a Tor-based 2 Internet site that “host[s] and distribute[s] image and video files depicting child pornography.” Id. ¶ 9. Customers receive content from the Website by redeeming “points,” which can be obtained by uploading child pornography videos, referring new customers to the site, or by paying various quantities of Bitcoin. Id. ¶ 14. The Website directs customers seeking to pay for points to online Bitcoin exchanges and “assign[s] a unique [Bitcoin] address for each [Website] customer account to receive payments and assign points appropriately.” Id. ¶ 15. The Website set up over 1.3 million Bitcoin addresses over the course of its operations, id., and between June 2015 and March 2018, the Website “received at least 420 [Bitcoin] through at least 7,300 transactions worth over $370,000.” Id. ¶ 17. Over the course of their investigation, law enforcement officials compiled a list of thousands of unique Bitcoin addresses associated with the Website, including one assigned to an undercover agent who created an account. Id. ¶ 16. That agent “paid [Bitcoin] to [the Website] and used the [W]ebsite to download child pornography video files” multiple times. Id. ¶ 18. During the agent’s investigation, the government reviewed the Website’s source code and traced 2 Tor masks Internet users’ IP addresses and thereby anonymizes user activity on Tor-based websites like the Website. Id. ¶ 6. 2 its IP address to Jong Woo Son, a telecommunications provider in South Korea. Id. ¶ 19. South Korean officials subsequently executed a warrant at Son’s home, where they located and seized the Website’s server and storage media. Id. ¶ 21. The evidence corroborated that the Website was dedicated to the distribution of child pornography and “generally identified” which customers were associated with which payments to the Website. Id. ¶ 22. In addition, “[a] review of a sample of the payments to [the Website] cross-referenced against the username and download data from the server revealed that payments to [the Website] corresponded with the user downloading videos from [the Website].” Id. By analyzing the blockchain, the government identified three different Bitcoin exchanges (the Exchanges) that had hosted transactions between the Website and the Defendant Properties. Id. ¶¶ 24–25; see also id. Attach. A. Each of the Defendant Properties had transferred Bitcoin on at least one occasion to a Bitcoin address controlled by the Website; for each account, at least one of the payments was linked to a specific user name that downloaded content from the Website. Id. at ¶ 25. Law enforcement obtained a warrant for the Defendant Properties and subsequently seized all twenty-four cryptocurrency accounts. Id. B. Procedural History On October 16, 2019, the United States filed a verified complaint for forfeiture in rem of the Defendant Properties. Dkt. 1. The government posted notice on http://www.forfeiture.gov for thirty consecutive days from November 21, 2019 until December 20, 2019. See Decl. of Publication, Dkt. 3. No claims were filed in response to that publication before January 19, 2020. Aff. in Supp. of Default ¶ 7, Dkt. 8. The United States also identified potential claimants of the Defendant Properties using legally mandated “know-your-customer” information collected by the Exchanges, Pl.’s Mot. at 21, and then sent notice to those potential claimants through 3 certified mail, email, or both. Aff. in Supp. of Default ¶ 5(a). No potential claimants had filed a claim to the Defendant Properties as of June 8, 2020. Id. ¶ 6. The Clerk of the Court entered a warrant for arrest in rem of the Defendant Properties on April 2, 2020. Dkt. 6. On June 12, 2020, the government filed an affidavit for default, Dkt. 8, and on June 23, 2020, the Clerk of the Court entered default. Dkt. 10. The United States filed the instant motion for default judgment on June 24, 2020. Dkt. 11. II. LEGAL STANDARD The Federal Rules of Civil Procedure empower district courts to enter default judgment against a defendant who fails to defend its case. Fed. R. Civ. P. 55(b)(2); Keegel v. Key West & Caribbean Trading Co., 627 F.2d 372, 375 n.5 (D.C. Cir. 1980). While federal policy generally favors resolving disputes on their merits, default judgments are appropriate “when the adversary process has been halted because of an essentially unresponsive party.” Mwani v. bin Laden, 417 F.3d 1, 7 (D.C. Cir. 2005) (quotation marks omitted). Obtaining a default judgment is a two-step process. First, the plaintiff must request that the Clerk of Court enter default against a party who has failed to plead or otherwise defend. Fed. R. Civ. P. 55(a). The Clerk’s entry of default establishes the defendant’s liability for the well- pleaded allegations of the complaint. Boland v. Providence Constr. Corp., 304 F.R.D. 31, 35 (D.D.C. 2014). Second, the plaintiff must apply to the court for a default judgment. Fed. R. Civ. P. 55(b). At that point, the plaintiff “must prove his entitlement to the relief requested using detailed affidavits or documentary evidence on which the court may rely.” Ventura v. L.A. Howard Constr. Co., 134 F. Supp. 3d 99, 103 (D.D.C. 2015) (internal quotation marks and alterations omitted). “[T]he defendant’s default notwithstanding, the plaintiff is entitled to a default judgment only if the complaint states a claim for relief.” Jackson v. Corr. Corp. of Am., 4 564 F. Supp. 2d 22, 27 (D.D.C. 2008) (quoting Descent v. Kolitsidas, 396 F. Supp. 2d 1315, 1316 (M.D. Fla. 2005)). Pleading requirements in civil forfeiture actions are governed by the Supplemental Rules and by the Federal Rules of Civil Procedure, to the extent they are “not inconsistent with the[] Supplemental Rules.” Fed. R. Civ. P. Supp. R. A(2). Supplemental Rule G establishes the requirements for a complaint in such an action. As relevant here, the complaint must be verified, state the grounds for jurisdiction, describe the property “with reasonable particularity,” identify the statute under which the action is brought, and “state sufficiently detailed facts to support a reasonable belief that the government will be able to meet its burden of proof at trial.” Fed. R. Civ. P. Supp. R. G(2). “Before a default judgment is entered pursuant to a complaint for forfeiture in rem, the government must also show that it complied with the notice requirements contained in the Supplemental Rules.” United States v. $1,071,251.44 of Funds Associated with Mingzheng Int’l Trading Ltd., No. 17 Civ. 01166, 2018 WL 3949962 at *5 (D.D.C. 2018). III. ANALYSIS A. Notice Supplemental Rule G(4) requires the government to provide two forms of notice in a forfeiture action in rem: notice to the public via publication and notice to potential claimants via direct notice. See Fed. R. Civ. P. Supp. R. G(4)(a), (b). Notice by publication must describe the property, state the time to file a claim and answer, and name the government attorney to be served with the claim and answer. Fed. R. Civ. P. Supp. R. G(4)(a)(ii). Such notice is sufficient if it is published “on an official internet government forfeiture site for at least 30 consecutive days.” Id. G(4)(iv)(C). Here, the government posted notice of this forfeiture proceeding on http://forfeiture.gov for 30 consecutive days, starting on Nov 21, 2019 and ending on December 5 20, 2019. Aff. in Supp. of Default ¶ 7; see Decl. of Publication. The notice stated that “[a]ny person claiming a legal interest in the Defendant Property must file a verified Claim with the court within 60 days from the first day of publication.” Decl. of Publication at 2–3. No claims were filed in response to the publication by January 19, 2020. Aff. in Supp. of Default ¶ 7; see also Fed. R. Civ. P. Supp. R. G(5)(a)(ii)(B) (requiring any claim to be filed “no later than 30 days after final publication of . . . legal notice under Rule G(4)(a)”). This satisfied the government’s obligation to provide notice by publication. See Fed. R. Civ. P. Supp. R. G(4)(a)(iv)(C). Direct notice must be sent “to any person who reasonably appears to be a potential claimant” and “by means reasonably calculated to reach the potential claimant.” Id. Supp. R. G(4)(b)(i), (iii)(A); see Mesa Valderrama v. United States, 417 F.3d 1189, 1197 (11th Cir. 2005) (“Reasonable notice . . . requires only that the government attempt to provide actual notice; it does not require that the government demonstrate that it was successful in providing actual notice.”). The government relied on the “know-your-customer” information obtained from the Exchanges to identify, locate, and provide notice to potential claimants of the Defendant Properties. See Pl.’s Mot. at 21. On or around December 27, 2019, the government sent notice via certified mail to 19 of the 24 potential claimants it had identified using physical mailing addresses obtained from the Exchanges. Aff. in Supp. of Default ¶ 5(a); Pl.’s Mot. at 21. Six of the mailings were returned as undeliverable. Aff. in Supp. of Default ¶ 5(a); Pl.’s Mot. at 21. On or around that same date, the United States also emailed notice to 23 of the 24 potential claimants using email addresses provided by the Exchanges. Aff. in Supp. of Default ¶ 5(a); Pl.’s Mot. at 21–22. Four of the emails “bounced back” as undeliverable because the accounts were no longer active. Aff. in Supp. of Default ¶ 5(a); Pl.’s Mot. at 22. On May 4, 6 2020, the government resent notice to any potential claimant for whom notice was unsuccessful via mail or email. Aff. in Supp. of Default ¶ 5(b). No potential claimants filed a claim to the Defendant Properties on or before June 8, 2020. Id. ¶ 6; see Fed. R. Civ. P. Supp. R. G(5)(a)(ii). These actions satisfied the government’s obligation to provide direct notice to potential claimants. See Fed. R. Civ. P. Supp. R. G(4)(b). Adequate notice requires only “that the government attempt to provide actual notice; it does not require that the government demonstrate that it was successful in providing actual notice.” $1,071,251.44 of Funds Associated with Mingzheng Int’l Trading Ltd., 2018 WL 3949962 at *5 (emphasis added) (quoting Mesa Valderrama, 417 F.3d at 1197). When the government attempts to provide notice and “hear[s] nothing back indicating that anything ha[s] gone awry,” it is reasonable to believe that the chosen method informed the interested parties. Jones v. Flowers, 547 U.S. 220, 226 (2006). The government therefore satisfied its obligations by resending notice only to those recipients for whom certified mail and email notice were both returned as undeliverable. Moreover, email was an appropriate form of notice under these circumstances because the case involves international defendants whose locations are hard to pin down and the nature of the crimes necessarily entails some degree of cyber-proficiency on the part of the Defendant Properties’ owners. See Fed. Trade Comm’n v. PCCare247, Inc., No. 12 Civ. 7189, 2013 WL 841037, at *4 (S.D.N.Y. Mar. 7, 2013) (permitting notice by email where it was “reasonably calculated to provide defendants with notice”); Philip Morris USA Inc. v. Veles Ltd., No. 06 Civ. 2988, 2007 WL 725412, at *3 (S.D.N.Y. Mar. 12, 2007) (permitting notice by email where “defendants conduct business extensively . . . through [the] Internet” and “defendants do not disclose their physical addresses”). 7 Between certified mail and email notice, every potential claimant but two—one who provided no email or mailing address to the Exchanges and another who provided no mailing address and a defunct email address—received direct notice at least once. Pl.’s Mot. at 22. With respect to the two potential claimants whom the government was unable to reach directly, notice via publication satisfied the government’s obligations. See Johnson v. United States, No. 1:03 Civ. 00281, 2004 WL 2538649, at *4 (S.D. Ind. Oct. 22, 2004) (citing Mullane v. Centr. Hanover Bank & Tr. Co., 339 U.S. 306, 317–319 (1950)) (finding publication of a forfeiture notice satisfies due process requirements where “the government does not know or reasonably cannot discover the [claimants’] whereabouts”). The government has met the notice requirements of Supplemental Rule G. B. Adequacy of the Complaint In any action seeking forfeiture in rem under a federal statute, “the complaint must be verified, state the grounds for jurisdiction and venue, describe the property with reasonable particularity, identify the statute under which the forfeiture action is brought, and state sufficiently detailed facts to support a reasonable belief that the government will be able to meet its burden of proof at trial.” United States v. $6,999,925.00 of Funds Associated With Velmur Mgmt. Pte, Ltd., 368 F. Supp. 3d 10, 19 (D.D.C. 2019) (internal quotation marks omitted) (quoting Fed. R. Civ. P. Supp. R. G(2)). This Court has jurisdiction over “any action or proceeding for the recovery or enforcement of any . . . forfeiture . . . incurred under any Act of Congress.” 28 U.S.C. § 1355(a). Venue is proper in the District of Columbia as well, because it is the location where the “acts or omissions giving rise to the forfeiture occurred,” 28 U.S.C. § 1355(b)(1)(A), and it is the “judicial district . . . into which the [Defendant Properties] [were] brought” after being seized, 28 8 U.S.C. § 1395(c). Further, the government filed a Verified Complaint identifying the statute under which the forfeiture action was brought and describing the Defendant Properties in extensive detail. See Compl. ¶¶ 2, 25. Therefore, the only remaining issue is whether the complaint “state[s] sufficiently detailed facts to support a reasonable belief that the government will be able to meet its burden of proof at trial.” United States v. All Assets Held in Account Number XXXXXXXX, 83 F. Supp. 3d 360, 366 (D.D.C. 2015) (quoting Fed. R. Civ. P. Supp. R. G(2)(f)). The government brought this action under 18 U.S.C. § 2252, see Compl. ¶ 2, which prohibits individuals from “knowingly receiv[ing], or distribut[ing], any visual depiction . . . of a minor engaging in sexually explicit conduct,” 18 U.S.C. § 2252(a)(2), and from “knowingly possess[ing], or knowingly access[ing] with intent to view . . . films . . . or other matter which contain[s] any visual depiction . . . involving the use of a minor engaging in sexually explicit conduct,” id. § 2252(a)(4)(B)(i). Pursuant to 18 U.S.C. § 2253(a)(3), anyone in violation of § 2252 “shall forfeit to the United States such person’s interest in any property, real or personal, used or intended to be used” in committing or promoting commission of the offense. The fact that customers had to take a number of affirmative steps to transact with the Website—creating an account and then amassing and expending points, which were obtained through referring new customers, uploading videos, or purchasing Bitcoin—“provide[s] . . . more than [a] substantial basis” to furnish a reasonable belief that “[users] logging into [the Website] did so with the intent to access, view, and/or distribute child pornography.” United States v. Taylor, 250 F. Supp. 3d 1215, 1230 (N.D. Ala. 2017) (“Any user logging into the [child pornography website] would have had to take these steps: (1) download Tor software; (2) acquire the website’s unique algorithm-generated address . . . (3) navigate the [website] homepage . . . 9 (4) create a[n] [] account . . . and (5) arrive at the main [website] directory . . . .”). Records from the Website’s server seized from Son’s residence also revealed that users logged into the Website and purchased downloadable content. Compl. ¶ 22; see United States v. Wagner, 951 F.3d 1232, 1257–58 (10th Cir. 2020) (upholding a criminal conviction where “[s]ubpoenaed records established that [the accounts were] registered to [the website’s users]”). These facts will likely enable the government to meet its burden of proof at trial. Forfeiture is authorized under 18 U.S.C. § 2253(a)(3) if the Defendant Properties were “used or intended to be used to commit or to promote the commission” of knowingly possessing or accessing child pornography in violation of § 2252. 18 U.S.C. § 2253(a)(3). To “use” is to “convert to one’s service, to employ, to avail oneself of, and to carry out a purpose or action by means of.” United States v. Hull, 606 F.3d 524, 527 (8th Cir. 2010) (alterations adopted) (quoting Bailey v. United States, 516 U.S. 137, 145 (1995)). In Hull, there was ample evidence that the defendant was guilty of “using” his real property to commit child pornography offenses where he connected to the Internet and distributed illegal content from a room in his home. Id. Here, the Defendant Properties were employed to make payments to Bitcoin accounts controlled by the Website that in turn enabled users to access and download illicit materials from the Website. See Compl. ¶ 22, 25. As in Hull, the evidence here “show[s] a substantial connection – not merely an incidental or fortuitous relationship – between the [Defendant Properties] and the offenses.” Hull, 606 F.3d at 527–28. Accordingly, the Defendant Properties were “used” to transact with the Website in the manner contemplated by § 2253 and they are therefore subject to forfeiture. 10 CONCLUSION For the foregoing reasons, the Court grants the plaintiff’s motion for default judgment. A separate order consistent with this decision accompanies this memorandum opinion. ________________________ DABNEY L. FRIEDRICH July 20, 2020 United States District Judge 11