So some such system detected him as a threat and he left in under a month of employment? That's wild.
The FBI got lucky that one of their honeypot email addresses was the inbox. And then obtained records corroborating everything, such as from Kraken.
and the access logs of the top secret material from the agency's systems.
The access logs said Dalke accessed. Kraken's logs said "there were deposits of Monero in Dalke's accounts that are the exact amounts you sent Dalke, accounting for exchange rate fluctuations". Kraken's KYC records said "here's Dalke and his addresses". The UPS store he was using for an address said "Yep, Dalke keeps a drop here". The bank account connected to Kraken said "Yep, its Dalke". The setup at Union Station in Denver was for Dalke to come there between 11:30am and 3:30pm on September 28th, the affidavit ends 1 day before that, and Dalke was arrested in that exact location the next day.
he would have been emailing anyone and the compromised wires picked it up for the FBI to then begin their sting operation?
The FBI still had to do the work, but I think its also plausible that they have a bunch of honeypot email inboxes around. I think since they had to do all the communication as well as the transferring of funds that it's not really parallel construction, at least in any controversial way for evidence collection. They got additional evidence that doesn't need creating a rationale retroactively.
but what do you think happened here?
I don’t see the issue with this one to apply such a rigid stance
Maybe he did dumb things with it, but the whole thing was a sting.
Look at the VAT fraud in Europe, billions lost, virtually nobody arrested
https://en.wikipedia.org/wiki/Missing_trader_fraud
> Notwithstanding these measures, MTIC fraud remains a problem for the EU. As at November 2018, calculations estimating the annual costs of the fraud range from €20 billion up to more than €100 billion (depending on methodology adopted).[21] An EU Parliament study in October 2018 found that MTIC/carousel fraud is the most damaging type of cross-border VAT fraud with an estimated €50 billion losses on average per year.
France is also hemorrhaging billions through social benefits fraud, they don't even attempt to recover most of it as they don't have the manpower
Different figures are given but it looks that most those "billions" are in fact shortfall and not benefit fraud.
Drug crime gets a lot of attention because the statutes are written in a way that makes the crimes very easy to prove. It’s far easier to prove the elements of a drug possession charge than it is to prosecute something like fraud.
The authorities are strategic in their approach but at the end of the day they are operating on finite resources.
The advantage the authorities have though is that they are playing offence. They can make plenty of mistakes and still achieve their objective.
Criminals just have to make one mistake and it can undo all the she effort they have made to mitigate risk.
https://www.vox.com/2018/9/24/17896034/murder-crime-clearanc...
But if you are going to do a crime do it once and done and you may very well get away with it.
-> some gear get purchased bet never used/installed for a few years. Sits around gathering dust. -> Sheriff sees this, takes it home sells it on eBay. Nobody notices or cares. It wasn't being used after all. -> Sheriff finds other unused gear, takes home and sells it. -> No valuable unused gear left, so Sheriff starts buying stuff simply so he could take it home and sell it. -> At this point it is noticed. Seriff gets found out and arrested.
If it was just the first step, nobody would have noticed and the guy would have pocketed $20k or whatever, and no one in the world would have been the wiser. The auditors may have eventually discovered the piece missing, but long after any video recordings expired, and the original purchase was perfectly legit. But greed combined with stupidity got the guy arrested.
Those who could resist doing it more than once probably can resist doing it at all.