The Dead Drop
FRAUD · POWER · PSYOPS
Your address is for sale. The off switch is a prop.
|
The Dead Drop No. 102
21 states gave you the right to opt out of the sale of your own life. A privacy watchdog audited 38 of the biggest data companies and found eight documented ways the opt-out is built to fail. A Minnesota legislator was murdered in her home by a man who found the address the way anyone can. The right is real. The off switch is theater.
Scene 1: The Notebook
On June 14, 2025, before dawn, a man drove through the suburbs north of Minneapolis dressed as a police officer. His name was Vance Boelter. Investigators would later recover notebooks from his vehicle. Inside was a list, handwritten, of more than 45 Minnesota public officials, and beside the names, home addresses. On another page, the method. 11 websites. People-search sites, the kind that take a name and hand back an address for free or for the price of a coffee.
Scene 2: The Door
That night Senator John Hoffman and his wife Yvette were shot in their home. They survived. Representative Melissa Hortman and her husband Mark were not as lucky. They were murdered in theirs. Hortman had served as Speaker of the Minnesota House. She had spent a career inside the machinery that writes the state's laws. The address that placed her on a notebook was not stolen and was not hacked. Prosecutors say Boelter used people-search data brokers to research his targets. The address was a listing. It was published. In the language of the industry that sold it, it was a product.
Scene 3: The Form
There is, on paper, a way to pull an address off that market. 21 states have passed laws giving you the right to tell a company to stop selling you. The right exists. This month a privacy watchdog in Washington, the Electronic Privacy Information Center (EPIC), published the results of a long test of whether the right works. Researchers audited 38 of the largest data companies in America and went looking for the off switch.
What they found is a catalog of how the off switch is built. Found late. Read wrong. Clicked past. Quietly ignored. Built, in eight documented ways, to fail. The report's title is the verdict. Good Luck Opting Out.
They told you that you had a choice.
| GM, WELCOME BACK TO THE DEAD DROP. |
Operatives, last week the file was the settlement office. Three deals in seven days, each one branded for the public and wired to the connected. The promise built for you. The payout built for someone else. We said the fraud was no longer being prosecuted. The fraud was being marketed.
This week the file is smaller and sits closer to your hand. It is the button. The toggle. The link in the footer you have clicked maybe once. The opt-out carries the same architecture as the settlement office, shrunk to the size of a web form. A right is printed for the public. A workaround is engineered for the company. You are told you are in control. The control is a prop.
The Audit. EPIC, the privacy watchdog, ran 38 of the biggest data brokers, social platforms, AI firms, surveillance vendors, and dating apps through their own opt-out processes. Eight distinct categories of manipulative design. The industry has a gentler word for it. They call it user experience. The honest word is older. It is a confidence trick, and it has a working name now. The dark pattern.
The Stakes. This is not a column about annoyance. A buried link is annoying. A buried link that keeps a domestic violence survivor's home address in circulation is something else. The opt-out is the only tool a private citizen has to pull an address off the open market without a lawyer. When it fails, it fails the people who need it most, and it fails them at the door.
Same architecture as last week. A promise sized for the public. A mechanism sized for the house. This week the house is yours.
The Operative’s Observation
|
◆ THE OPERATIVE'S OBSERVATION
A lock you cannot operate is not a lock. It is a decoration that lets you feel the door is secure while it stands open. The opt-out, as 38 companies have built it, is that decoration. The law in 21 states says a citizen may refuse the sale of his own life. The interface says otherwise, in a hundred small ways that never quite rise to the level of a lie a regulator can name in a courtroom. This is the craft of the dark pattern. It never forges a signature. It never says the words you could quote back to a judge. It moves the link. It greys the toggle. It splits one request into four separate forms. It writes a sentence that is true in its letter and hopeless in its effect. Each move is deniable. The sum is a wall. The company never has to deny you your rights. It only has to make exercising them cost more time, more attention, and more certainty than you have on a Tuesday night. A right that is real on paper and impossible in practice is the most useful kind of right a company can offer. It satisfies the statute. It satisfies the press release. It changes nothing. |
The Criminal Playbook
Begin with the worst of them, because the worst of them are also the most honest. The people-search brokers, Spokeo and Whitepages and National Public Data, turn a name into an address, the same kind of site written by hand into that notebook in Minnesota, and their entire product is you, packaged and findable to anyone with a few dollars and a grievance. What sets them apart from the other 35 companies audited is not cruelty but candor, because once you locate the opt-out they built, it does the one thing the careful companies never risk. It tells you the truth.
Spokeo's own opt-out page tells anyone trying to disappear from it exactly where they stand, word for word. "Since we continually receive new and updated records from public sources, your information may reappear on Spokeo in the future without notice. Please regularly check Spokeo for additional listings that may appear." A company whose business is the sale of your home address has written, on the page you visit to make that sale stop, a standing instruction to come back forever and check whether it has quietly begun again. The opt-out is not a door you close behind you; it is a door the broker expects you to stand and hold shut by hand for the rest of your life, while the man who built it keeps a key.
Whitepages runs a different play, one with the procedural cruelty of a toll booth. Opting out requires you to submit the web address of every listing of yourself on the site, which means searching your own name to find them, and when you do, the full report, the one with the detail you most want gone, sits behind a box marked Powered by Whitepages Premium. To see your information clearly enough to ask the company to stop selling it, you may first have to buy a subscription from the company doing the selling, paying the broker for the privilege of escaping the broker. EPIC gave it a flat, accurate name, a financial barrier. National Public Data, the third broker, pulls a listing down when asked but refuses to say whether it will sell you again tomorrow, and none of the three will ever promise to stop, though all three will gladly hand you the paperwork.
That is the floor, the most honest level of the building. The other 35 companies work with more subtlety, and EPIC sorted their methods into 8 categories, each one, alone, a small and almost forgivable thing, but stacked one on another they become the wall that holds you in.
The link that is not there. At least 15 of the 38 companies, Google and Meta and OpenAI among them, never clearly link the opt-out on their homepage, and at least 17 leave it out of the privacy policy too, so the right exists in full while the doorway to it stands unmarked, and no one walks through a door he cannot find.
The form that is not one form. At least 15 companies make you file the same request more than once, scattered across separate pages, with Epsilon treating "do not sell" and "do not share" as two distinct submissions, and every extra click becomes another place a tired person quits, which is exactly what the design is built to produce.
The toggle that lies. Teach this one to your family tonight. On Bumble, the switch that decides whether the app sells you sits, by default, in the position that sells you, and the design dresses that default to look like its opposite, greying the opted-in state until it wears the finish of a task already done, while the protective state glows in bright contrast like a button still unpressed. A person who glances for half a second sees the job complete and moves on, when the job has not been started and the grey is the trap. EPIC caught Uber, Lyft, and Grindr preselecting the same way, all feeding on a documented reflex called the default effect, the human tendency to leave a setting wherever someone else has placed it.
The sentence that is true and useless. OpenAI offers, once you find it, an option to "remove personal information from ChatGPT responses," a phrase built to sound like deletion while delivering nothing of the kind, because it governs only a filter on what the chatbot says back to you, not the data the model was trained on, and that data never moves. EPIC asks for something modest, that companies be required to state, in plain language, the exact limit of what an opt-out does. Most decline, and the truth sits on the page in plain sight, technically available and arranged to be misread.
The map drawn for the wrong country. HireVue and the surveillance vendor DataTrust frame their opt-out as something for California residents only, though 20 other states carry the same right. A man in Texas reads the page, sees California, concludes the door was never meant for him, and the page has done exactly what it was built to do, because the door is his, and all that stands between him and it is a sign designed to turn him around.
Eight categories of manipulative design across 38 companies, and not one of them needed to forge your signature. They simply built the process so you would never quite finish signing it yourself.
| ◆ |
Field Manual
How to make an opt-out that actually holds.
| 01 | Assume the listing comes back. Treat removal as maintenance, not a one-time act. Spokeo's model, reappear without notice, is the quiet default across the people-search industry. Put a recheck of the major people-search brokers on your calendar every 90 days. The work is never finished. It is only renewed. |
| 02 | Throw the universal switch first. Install Global Privacy Control. It is a browser-level signal that broadcasts your opt-out to every site you visit, and 12 states now legally require companies to honor it. One setting, enforced by law, instead of 38 separate forms. It does not cover everyone. It covers the easy 80% so you can spend your hours on the hard 20%. |
| 03 | If you live in California, file one DROP request. California's Delete Request and Opt-out Platform went live this year. One verified request reaches every data broker registered in the state, more than 500 of them, and obligates them to delete you. Brokers must begin honoring requests in August 2026. It is the highest-leverage 20 minutes available to a California resident. No other state has this yet. Use it. |
| 04 | For the people-search sites, hunt every listing. Spokeo, Whitepages, and the rest remove by URL, one listing at a time. Search your name. Then search your spouse's name, your old addresses, a maiden name. Each variant is a separate listing with its own link. Submit the removal for every one, and save the URLs and the date in a note. When a listing reappears, and it will, you will have a record instead of a guess. |
| 05 | Read the verb, not the headline. "Remove from responses" is not "delete." "Your privacy choices" is not "opt out of sale." Before you trust a control, find the sentence that states its limit. If a company will not tell you plainly what its opt-out does not do, assume it does nothing you actually care about. |
| 06 | Opt out before you need it. Nobody who suddenly needs a home address gone has the spare weeks to make it happen. Danger does not schedule itself. The survivor, the witness, the official whose name lands on a notebook, none of them get advance notice. The time to clear yourself off the open market is a quiet month, not a frightening one. Do the boring version now. |
|
◆ THE FRAUDFATHER BOTTOM LINE
A right you cannot use is not a right. It is a receipt the company keeps to prove it followed the law. |
|
◆ OPERATIVE TIP
Run this one-hour drill this week. Not someday. This week. First 20 minutes. Turn on Global Privacy Control in your browser today, and if you are a California resident, file a single DROP request. Two settings, and most of the population of registered data brokers is handled for you by law. Next 30 minutes. Search your own name on Spokeo, on Whitepages, and on one more people-search site. Submit the removal for every listing you find, including the ones filed under old addresses and former names. Save each URL in a note with the date you submitted it. Last 10 minutes. Set a recurring calendar reminder, every 90 days, titled "the listing comes back." Because it does. An opt-out you submitted once and never checked is a guess. An opt-out you verify on a schedule is a control. |
|
GRAY MATTERS · THE DARK PATTERN
The Lock That Was Always a Drawing.Every con depends on a gap between what a thing appears to be and what it is. The short con closes that gap in minutes, takes the money, and runs. The dark pattern is the long con's patient cousin. It never closes the gap at all. It furnishes it, comfortably, and lets you move in. A toggle is a promise. It tells you there is a control and the control is yours. When Bumble greys the option that sells you and brightens the option that protects you, it is not breaking that promise. It is doing something more elegant. It keeps the promise in its form and empties it of its content. The control is real. The control is yours. The control has simply been dressed so that the average person, moving fast, reads done where the truth says undone. This is why the dark pattern is fraud and not merely nuisance. Fraud is not defined by the forged document. Fraud is defined by engineered belief, by a person led to act against his own interest while certain he is doing the opposite. A man who clicks a greyed-out toggle and walks away believing he is protected has been worked as surely as a man who wired money to a stranger. He paid. He paid with the thing the broker wanted, which was his data, and his fee was the false certainty that he had kept it. The most effective lie is a true statement, arranged to be misread.
The house edge in this game is enormous, because the cost is paid on a delay and by someone else. You click the toggle in 2024. The data sells for 2 years. The address surfaces in a notebook in 2025. The distance between the click and the harm is so wide that the victim never connects the two, and a harm you cannot trace is a harm nobody has to answer for. They did not take your right. They took your certainty that you had used it. EPIC's conclusion, stripped to its center, is that the burden sits on the wrong shoulders. A citizen should not have to find 38 forms, read 38 limits, and stand guard over a hundred listings forever. The honest fix is not a better form. The honest fix is a world where the company is barred from collecting what it never needed, so there is nothing to opt out of. Until that world arrives, the form is what you have. Treat it the way you would treat any instrument handed to you by a party that profits when it fails. Stay sharp.
The Fraudfather
|
The Pardon Ledger
Week 8 of a continuing record.
|
RESTITUTION ERASED
~$2B
In court-ordered restitution, forfeitures, and fines wiped by clemency actions across both Trump terms.
|
LETTERS ANSWERED IN PUBLIC
0 of 17
Public responses to the bicameral pay-to-play letters since the May 22 deadline. Recipients are not required to answer.
|
The clemency page at justice.gov has not posted a new financial-crime grant since the winter batch. The official tally is patient. The Ledger is not. This week we post a name the Ledger held back, and we mark a deadline that arrived and left without a sound.
David Levy. Pardoned January 15, 2026. Former president of Platinum Partners, a New York hedge fund that managed more than $1 billion before it collapsed into one of the larger financial fraud cases of the decade. A federal jury in Brooklyn convicted Levy in 2019 of conspiracy and securities fraud for a roughly $70 million scheme against the bondholders of Black Elk Energy, an offshore energy company Platinum controlled. The case was not clean. Judge Brian Cogan set the convictions aside once before the Second Circuit reinstated them on the government's appeal, and at sentencing Levy received no prison time and walked out free. He asked for the pardon anyway. A man who had already avoided prison wanted the conviction itself struck from the record, and the President struck it. Financial crime did not disqualify him. It almost never does.
Last week the Ledger flagged May 22. That was the deadline for 17 clemency recipients to answer Representatives Dave Min and Raul Ruiz and Senator Peter Welch, who had asked them, in writing, whether money or influence bought their pardons. May 22 came. May 22 went. Not one recipient has made a response public. We told you the deadline would be quiet. The deadline was quiet. The lawmakers who sent the letters sit in the minority in both chambers, hold no subpoena power, and cannot compel a single sentence. A question with no subpoena behind it is a press release. The recipients can read.
The fraud is not being prosecuted. The fraud is being pardoned, and the pardon is being investigated by the people with the least power to do anything about it. So the Ledger keeps the record. The record is the one thing in this story that does not need a subpoena.
|
This newsletter is for informational purposes only and promotes ethical and legal practices.
