VPN-enabled advance fee fraud

Mon Mar 21 19:38:51 UTC 2022

of course, jay is right (in the US, anyway).

vpn providers often keep the (verified) email address and ip addresses used for service establishment.
expressVPN takes bitcoin and what look to me like several other anonymous payment schemes, and there
are always prepaid debit cards.

following the money sometimes helps.

the more general problem is that, absent a govt regulator insisting that EVERYBODY do this (as in China)
few service providers will want to do this voluntarily because it represents a cost to them which many of their 
competitors don’t have.  (registrars are another example of a service provider with this conundrum.)

On Mar 21, 2022, at 11:56 AM, Jay Hennigan <jay at west.net> wrote:
> 
> On 3/21/22 11:00, Grant Taylor via NANOG wrote:
> ded.
>> What will ExpressVPN do regarding /established/ connections?  I would expect that network flows / netstat / etc. could provide some information for current, established, and ongoing.
> 
> If their intent is not to have data available for analysis, and it sure sounds like it is, they aren't going to log flows or netstat. Data will be in RAM during the TCP session, then poof.
> 
> -- 
> Jay Hennigan - jay at west.net
> Network Engineering - CCIE #7880
> 503 897-8550 - WB6RDV