Adderall123 Bust: iCloud Records, USPS Profiling, Surveillance

~5 min read | Published on 2022-05-03, tagged Darkweb-VendorDrug-Bust using 1160 words.

Under the username “Adderall123” on darkweb markets, two Bay Area men allegedly shipped counterfeit Adderall pills to customers throughout the United States.
An investigation led by the Drug Enforcement Administration (DEA) and the United States Postal Inspection Service (USPIS) resulted in the arrest of Andrew and Tony Tan for allegedly selling methamphetamine on darkweb markets. According to DEA Special Agent Colin Hart, Andrew, Tony, and one other co-conspirator operated the vendor account “Adderall123” on several darkweb marketplaces, including White House Market (WHM), Torrez Market, ASAP Market, and Empire Market.

Adderall123 sold counterfeit Adderall pills on several marketplaces.



The investigation into Adderall123 began in April 2021. Investigators examined the vendor’s profile on White House Market, where Adderall123 had been selling 30 milligram Adderall pills for sale in quantities of 30, 50, and 100 pills. White House Market, which shut down in October 2021, allowed vendors to import feedback from vendor profiles on different marketplaces. Adderall123 had imported feedback from Empire Market, indicating that the vendor had a presence on the darkweb as early as August 2020.
In September 2021, Special Agent Hart conducted an undercover purchase (“UC Purchase #4”) of 200 30mg Adderall pills from Adderall123 on White House Market. Agents had the package shipped to an “Arlo Krauser” at an address in Elverta, California, controlled by law enforcement.
Before UC Purchase #4 had occurred, a USPIS General Analyst had identified the Westlake Post Office in Daly City, California, as a post office used by Adderall123. A mailing at the Westlake Post Office on September 17, 2021, had been flagged as a package shipped by Adderall123.
“[The] mailing had been identified as part of a set of mailings flagged by a USPIS General Analyst (GA) as suspected ADDERALL123 mailings. The packages in these mailings were identified based on similarities they shared with previous suspected ADDERALL123 mailings and prior undercover purchases from ADDERALL123. These similarities included over-the-counter mailing transactions of large volumes of Priority Mail Flat Rate envelopes, mailed out of 940 and 941 zip codes, mailed to addresses all over the U.S., with handwritten labels (often with fake names or fake return addresses), and postage-paid for in cash.”

Purported users had conflicting conclusions about the active ingredient of Adderall123's products.



Agents reviewed the post office surveillance footage from September 17, 2021. They observed an Asian male with glasses, a black face mask, and a grey hoodie mailing a stack of Priority Mail Flat Rate Envelopes. The suspect, later identified as Andrew Tan, left the post office and entered a white Subaru SUV with honeycomb-shaped rims.
On September 30, 2021, agents set up surveillance at multiple post offices in South San Francisco, Daly City, San Bruno, and San Francisco. A Postal Inspector at the Daly City Main Post Office observed Andrew Tan conducting an over-the-counter transaction. The Postal Inspector walked to the parking lot and recorded the license plate during the transaction. After the suspect had left, the Postal Inspector returned to the post office and recovered nine Priority Mail Flat Rate Envelopes. The suspect had paid for them with cash, and all of the packages had a handwritten return address (“Jimmy Leung, 191 Whittier St, Daly City, CA 94014”). One of the packages was addressed to the name and address provided during UC Purchase #4.

ASAP is the only remaining market where Adderall123 had an account.



The package contained 207 orange, circular pills pressed with “dp” and “30.” The pills tested positive for methamphetamine.
Three controlled purchases are described in the criminal complaint. After receiving similar counterfeit Adderall pills from a different order, agents sent the pills to a lab to have them tested for fingerprints. One of the pills tested positive for a fingerprint that matched a fingerprint card for Andrew Tan.
According to the California DMV, the license plate was registered to Andrew Tan or one of his relatives at an address investigators believe belongs to his parents.
Apple gave agents access to the data stored in Tan’s iCloud account.
“Agents observed a video, dated June 16, 2020, which shows Tony TAN sitting in an indoor location, taking orange circular pills from a large clear zip-lock bag and sliding the pills onto a white piece of paper. The pills in the video match the appearance of the counterfeit Adderall pills pressed with methamphetamine that agents have purchased and seized throughout this investigation, including those contained within UC Purchase #4 and Parcel Intercept #2. GPS location data for this video is [Lat], [Long], which shows to be on the street outside of [Address], the suspected residence of Andrew TAN and Tony TAN’s parents. I know the individual handling the pills in the video to be Tony TAN because his appearance matches that of Tony TAN in his DMV photo, a family photo of Tony TAN found on Andrew TAN’s iCloud account, bank photos and video of Tony TAN making cash deposits into his bank account, and Tony TAN as observed on surveillance and pole camera footage during this investigation.”

Agents also obtained a copy of Tan’s iMessages. The records contained incriminating messages sent to and from Tan’s girlfriend.
A message sent to Tan from his girlfriend:
“I am trying to be open-minded at least about weed. You smoking with my brother multiple times. That time where you were so high you couldn’t drive after you smoked with Matt. You smoking with Nathan. I even smoked with you. Eating them with you. But at least you were upfront with me. You said it would only be with me, but you don’t follow through with anything that you say. I didn’t like it but I tolerated you having this job. We are waiting for you to pick up your career and you claim it got fcked bc of this job. Now you’re moving onto pills. the first time you told me about the pills I said to get rid of them. You didn’t and I let it go. You offered them to me and at one point I even considered it despite my values bc I should be more open minded and at least give it a try. But that’s against what I believe in and yet you still suggest them to me every now and then. You’re offering them to my brother and now you want to sell this shit?! That’s too much for me to try to understand.”

In another message, Tan sent a message to his girlfriend:
“I don’t supply. It’s like Matt supplies me. Its like Natalie buys them. And shares with your brother. She’s not supplying. It’s called sharing what we hav.”
[img=]Tan's girlfriend thought he sold actual Adderall aparently.[/img]

Police arrested Andrew and Tony Tan in April 2022. Both men face one count of possession with intent to distribute 5 grams or more of methamphetamine and 50 grams or more of a mixture or substance containing detectable amounts of methamphetamine. Tony Tan’s court documents are sealed, and the third co-conspirator’s court documents are unavailable.
If convicted, Andrew and Tony face a minimum of five years imprisonment.
Complaint pdf

Vendors with “adderall” in their username have a thing about selling methamphetamine apparently.

Comments (16)


fuckcp2022-05-04
bbcfec30

Sorry for abusing this post, but I don't know how to contact you. Could you please finally remove that Fresh Onions (freshonify...) instance from your link list? It is mostly just a CP advertisement page. Visit the page for a few days, it is always the same pedo links at the top, hardcoded. Also check the source code, there is a hidden element at the bottom of the page (class area51) with fixed pedo links. That bastard probably indirectly makes more money with these ads by being listed here. Thanks.

DNL2022-05-04
03cf28a0

Wow, yikes. Removed. Thank you.

me2022-05-04
4ef7f290

Thank you too for the quick action. Hope his advertisers get pissed off.

honey2022-05-04
63a20230

Use the tor honeypot network, end up raped in jail. You want an even more stupid combo? Use the government mail as well. Looks like these fine gentlemen don't understand what Surveillance State means.

deathmeanspeace2022-05-04
8f964d80

free another fallen one at least we took risks my boi we could never do that 9-5

adderall4life2022-05-04
053b6bc0

This motherfucker was sloppy as hell. Don't let LEA take credit for his downfall. Fucking feds suck at their game.

2689269822022-05-05
d6f71bb0

just a question from legal perspective: If 50 grams of powder been seized in person that contain of it 1\% amphetamine, do the judge consider the amount of the seized substance 50 grams or 0.5 gram of amphetamine?

79asd7as9d789asd2022-05-05
76cba560

Domestically Prohibited Items You can't send these items in the U.S. mail: Air Bags Ammunition Explosives Gasoline Marijuana (medical or otherwise); hemp/CBD is allowed, but restricted For Federal charges: 50 grams; is the weight they charge you, lol and u can thank the Richard Milhaus Nixon administration :) no politics! no homo! REEEEEEEEEEEEEEEEEEEEEEEEE that breaks my incel world view! REEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE!

830380382022-05-05
0abaef00

@785e6faa ok but why talking like a fed bot

a2022-05-11
7fbc66b0

charged for the total weight, like in the 60's how all the hippies selling lsc in sugar cubes were going down for literal sugar... so they switched to blotter paper. stay as light as possible.

Rez2022-05-05
391e1610

They will charge you 50 grams. Even more since us police commonly also include the weight of the bag or container in the charge as well

nig2022-05-05
5d985f50

under 5 for pressing and selling pills? chinks always get that white treatmeant for sentences. twinkie ass motherfuckers

askljdf2022-05-05
ab7bc750

What kind of ignoramus hand-writes labels, mails from post office lobbies, and goes out of their way to make the most basic mistakes every time they ship? Holy cow farts! Read something before you start vending. http://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion/post/9f9a3fd9c5a78a982aff

asdasd2022-05-05
c77201e0

Wow, everything about his complete and utter failure of performing most basic opsec processes has already been said - I'm merely surprised that he hasn't been caught much earlier (which again might tell quite something about LE's competence in this regard). What a tool.

GeorgiaPeaches2022-05-06
0a160920

Crazy cause his packages always landed very quickly. Glad I used that annex instead though. Coudn't stand getting them packages looking like Billy sent Granny a birthday gift.

FakeAlias67752022-05-12
7c917240

That's what always terrified me about this game. Fuck getting ripped off...suppose your vendie is suss??? what then... Fuck....Tip of the hat to Postal Intelligence...holy shit there is alot of info here... they covered multiple mail offices... Once you fuck up...thats it