Site will be messed up for a bit as I work on things/break them.

“Adderall123” Bust: iCloud Records, USPS Profiling, Surveillance

Under the username “Adderall123” on darkweb markets, two Bay Area men allegedly shipped counterfeit Adderall pills to customers throughout the United States.

An investigation led by the Drug Enforcement Administration (DEA) and the United States Postal Inspection Service (USPIS) resulted in the arrest of Andrew and Tony Tan for allegedly selling methamphetamine on darkweb markets. According to DEA Special Agent Colin Hart, Andrew, Tony, and one other co-conspirator operated the vendor account “Adderall123” on several darkweb marketplaces, including White House Market (WHM), Torrez Market, ASAP Market, and Empire Market.

A picture of Adderall123 sold counterfeit Adderall pills on several marketplaces.

Adderall123 sold counterfeit Adderall pills on several marketplaces.

The investigation into Adderall123 began in April 2021. Investigators examined the vendor’s profile on White House Market, where Adderall123 had been selling 30 milligram Adderall pills for sale in quantities of 30, 50, and 100 pills. White House Market, which shut down in October 2021, allowed vendors to import feedback from vendor profiles on different marketplaces. Adderall123 had imported feedback from Empire Market, indicating that the vendor had a presence on the darkweb as early as August 2020.

In September 2021, Special Agent Hart conducted an undercover purchase (“UC Purchase #4”) of 200 30mg Adderall pills from Adderall123 on White House Market. Agents had the package shipped to an “Arlo Krauser” at an address in Elverta, California, controlled by law enforcement.

Before UC Purchase #4 had occurred, a USPIS General Analyst had identified the Westlake Post Office in Daly City, California, as a post office used by Adderall123. A mailing at the Westlake Post Office on September 17, 2021, had been flagged as a package shipped by Adderall123.

“[The] mailing had been identified as part of a set of mailings flagged by a USPIS General Analyst (GA) as suspected ADDERALL123 mailings. The packages in these mailings were identified based on similarities they shared with previous suspected ADDERALL123 mailings and prior undercover purchases from ADDERALL123. These similarities included over-the-counter mailing transactions of large volumes of Priority Mail Flat Rate envelopes, mailed out of 940 and 941 zip codes, mailed to addresses all over the U.S., with handwritten labels (often with fake names or fake return addresses), and postage-paid for in cash.”

A picture of Purported users had conflicting conclusions about the active ingredient of Adderall123's products.

Purported users had conflicting conclusions about the active ingredient of Adderall123's products.

Agents reviewed the post office surveillance footage from September 17, 2021. They observed an Asian male with glasses, a black face mask, and a grey hoodie mailing a stack of Priority Mail Flat Rate Envelopes. The suspect, later identified as Andrew Tan, left the post office and entered a white Subaru SUV with honeycomb-shaped rims.

On September 30, 2021, agents set up surveillance at multiple post offices in South San Francisco, Daly City, San Bruno, and San Francisco. A Postal Inspector at the Daly City Main Post Office observed Andrew Tan conducting an over-the-counter transaction. The Postal Inspector walked to the parking lot and recorded the license plate during the transaction. After the suspect had left, the Postal Inspector returned to the post office and recovered nine Priority Mail Flat Rate Envelopes. The suspect had paid for them with cash, and all of the packages had a handwritten return address (“Jimmy Leung, 191 Whittier St, Daly City, CA 94014”). One of the packages was addressed to the name and address provided during UC Purchase #4.

A picture of ASAP is the only remaining market where Adderall123 had an account.

ASAP is the only remaining market where Adderall123 had an account.

The package contained 207 orange, circular pills pressed with “dp” and “30.” The pills tested positive for methamphetamine.

Three controlled purchases are described in the criminal complaint. After receiving similar counterfeit Adderall pills from a different order, agents sent the pills to a lab to have them tested for fingerprints. One of the pills tested positive for a fingerprint that matched a fingerprint card for Andrew Tan.

According to the California DMV, the license plate was registered to Andrew Tan or one of his relatives at an address investigators believe belongs to his parents.

Apple gave agents access to the data stored in Tan’s iCloud account.

“Agents observed a video, dated June 16, 2020, which shows Tony TAN sitting in an indoor location, taking orange circular pills from a large clear zip-lock bag and sliding the pills onto a white piece of paper. The pills in the video match the appearance of the counterfeit Adderall pills pressed with methamphetamine that agents have purchased and seized throughout this investigation, including those contained within UC Purchase #4 and Parcel Intercept #2. GPS location data for this video is [Lat], [Long], which shows to be on the street outside of [Address], the suspected residence of Andrew TAN and Tony TAN’s parents. I know the individual handling the pills in the video to be Tony TAN because his appearance matches that of Tony TAN in his DMV photo, a family photo of Tony TAN found on Andrew TAN’s iCloud account, bank photos and video of Tony TAN making cash deposits into his bank account, and Tony TAN as observed on surveillance and pole camera footage during this investigation.”

Agents also obtained a copy of Tan’s iMessages. The records contained incriminating messages sent to and from Tan’s girlfriend.

A message sent to Tan from his girlfriend:

“I am trying to be open-minded at least about weed. You smoking with my brother multiple times. That time where you were so high you couldn’t drive after you smoked with Matt. You smoking with Nathan. I even smoked with you. Eating them with you. But at least you were upfront with me. You said it would only be with me, but you don’t follow through with anything that you say. I didn’t like it but I tolerated you having this job. We are waiting for you to pick up your career and you claim it got fcked bc of this job. Now you’re moving onto pills. the first time you told me about the pills I said to get rid of them. You didn’t and I let it go. You offered them to me and at one point I even considered it despite my values bc I should be more open minded and at least give it a try. But that’s against what I believe in and yet you still suggest them to me every now and then. You’re offering them to my brother and now you want to sell this shit?! That’s too much for me to try to understand.”

In another message, Tan sent a message to his girlfriend:

“I don’t supply. It’s like Matt supplies me. Its like Natalie buys them. And shares with your brother. She’s not supplying. It’s called sharing what we hav.”

A picture of Tan's girlfriend thought he sold actual Adderall aparently.

Tan's girlfriend thought he sold actual Adderall aparently.

Police arrested Andrew and Tony Tan in April 2022. Both men face one count of possession with intent to distribute 5 grams or more of methamphetamine and 50 grams or more of a mixture or substance containing detectable amounts of methamphetamine. Tony Tan’s court documents are sealed, and the third co-conspirator’s court documents are unavailable.

If convicted, Andrew and Tony face a minimum of five years imprisonment.

Complaint pdf

Vendors with “adderall” in their username have a thing about selling methamphetamine apparently.

It's Called We Engage In A Mild Amount of Tomfoolery
d4cccd70 Tue, May 3, 2022

OPSEC lessons 2 b learned:

  1. dont mix personal life with business especially not your dearest sweet angel gilrfriend
  2. dont film ur shit
  3. dont upload ur incriminating shit to fucking icloud
  4. switch post offices
  5. change appearance
  6. dont use a nym for too long
  7. dont leave fingreprints on ur shit
  8. smart devices are compromised. dont trust ishit
  9. if you failed and retards send u incriminating messages dont reply to that shit
  10. if u feel u failed opsec quit or at least take a timeout and change ur nym

and so many more but im out of fingers

also fuck yuo for that counterfit adderal shit. B honest

2e3b4ef0 Tue, May 3, 2022

ayo dat true aint let d white man fol u preach king fr fr no cap

21cee320 Fri, May 6, 2022

yo wtf is this jungle speak?

bbcfec30 Tue, May 3, 2022

Sorry for abusing this post, but I don’t know how to contact you.
Could you please finally remove that Fresh Onions (freshonify…) instance from your link list? It is mostly just a CP advertisement page. Visit the page for a few days, it is always the same pedo links at the top, hardcoded. Also check the source code, there is a hidden element at the bottom of the page (class area51) with fixed pedo links. That bastard probably indirectly makes more money with these ads by being listed here.

03cf28a0 Wed, May 4, 2022

Wow, yikes. Removed. Thank you.

4ef7f290 Wed, May 4, 2022

Thank you too for the quick action. Hope his advertisers get pissed off.

00759b30 Tue, May 3, 2022

Holy shit you sound like a fucking retard. Write actual words you stupid sounding cunt.

63a20230 Wed, May 4, 2022

Use the tor honeypot network, end up raped in jail. You want an even more stupid combo? Use the government mail as well. Looks like these fine gentlemen don’t understand what Surveillance State means.

8f964d80 Wed, May 4, 2022

free another fallen one at least we took risks my boi we could never do that 9-5

053b6bc0 Wed, May 4, 2022

This motherfucker was sloppy as hell. Don’t let LEA take credit for his downfall. Fucking feds suck at their game.

d6f71bb0 Wed, May 4, 2022

just a question from legal perspective: If 50 grams of powder been seized in person that contain of it 1% amphetamine, do the judge consider the amount of the seized substance 50 grams or 0.5 gram of amphetamine?

76cba560 Wed, May 4, 2022

Domestically Prohibited Items

You can’t send these items in the U.S. mail:

Air Bags
Marijuana (medical or otherwise); hemp/CBD is allowed, but restricted  

For Federal charges: 50 grams; is the weight they charge you, lol and u can thank the Richard Milhaus Nixon administration :) no politics! no homo! REEEEEEEEEEEEEEEEEEEEEEEEE that breaks my incel world view! REEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE!

0abaef00 Wed, May 4, 2022


ok but why talking like a fed bot

7fbc66b0 Wed, May 11, 2022

charged for the total weight, like in the 60’s how all the hippies selling lsc in sugar cubes were going down for literal sugar… so they switched to blotter paper. stay as light as possible.

391e1610 Wed, May 4, 2022

They will charge you 50 grams. Even more since us police commonly also include the weight of the bag or container in the charge as well

5d985f50 Thu, May 5, 2022

under 5 for pressing and selling pills? chinks always get that white treatmeant for sentences. twinkie ass motherfuckers

c77201e0 Thu, May 5, 2022

Wow, everything about his complete and utter failure of performing most basic opsec processes has already been said - I’m merely surprised that he hasn’t been caught much earlier (which again might tell quite something about LE’s competence in this regard). What a tool.

0a160920 Thu, May 5, 2022

Crazy cause his packages always landed very quickly. Glad I used that annex instead though. Coudn’t stand getting them packages looking like Billy sent Granny a birthday gift.

02a23c40 Fri, May 6, 2022


yo wtf is this jungle speak?

7c917240 Wed, May 11, 2022

That’s what always terrified me about this game.
Fuck getting ripped off…suppose your vendie is suss???

what then…

Fuck….Tip of the hat to Postal Intelligence…holy shit there is alot of info here… they covered multiple mail offices…

Once you fuck up…thats it

New comments are disabled after ten days in an attempt to limit spam.