I. The Eye
It’s morning. The money mule—or lavador, as the cartels call their pet launderers—steers into a sweltering strip mall parking lot somewhere in Miami. He pulls into an open space, looks around, opens his trunk. Before long the adjacent space is occupied by a bagman, who emerges with a package full of cash. A silent greeting, or maybe a quick pleasantry, and the bag goes into the trunk before the two men roar off in opposite directions. Easy as that, and several hundred thousand dollars changes hands. Glance at your phone and you might miss it.
But 50 yards away, a chic, striking young Russian woman catches it all while idling in her blacked-out Pontiac. She looks like she’s on her way to the office, but she’s already at work. She’s Special Agent Lili Infante, a rookie DEA officer in the Miami unit, on her first field surveillance lead.
The mission is a setup. The bagman is an undercover agent. Arrayed in position around the strip mall are a dozen or so heavily armed federal agents, all waiting on Lili’s command. Less than a year out of the academy, this is her first major test. She’s not just coordinating surveillance, but she’s taking “the eye,” meaning she is tracking the target so the entire unit can follow, undetected.
So far everything is going to plan, which is a relief, because Lili is desperate to prove herself. She’s an Ivy League grad and a Russian immigrant, and she was the only woman in her academy class. In the most macho, all-American branch of US law enforcement, that’s three strikes against her, even in 2014. She’s sure everyone expects her to blow it. But Lili’s a lifelong overachiever. She volunteered to take the eye precisely because it’s a tough assignment nobody wants.
“Target is on the move,” Lili calls into her radio. A dozen keys turn in their ignitions.
Lili lets the target pass by, plus a few cars for cover, then slips into the line of commuters. On the radio: chatter from the team out of sight. “Target location?”
Taking the eye is stressful. You have to stay close and not draw attention, or stay back and not lose visual, or both, and all the while be prepared for the target to get spooked. At any moment, they might rip a sudden U-turn or swerve onto an exit, trying to suss out a tail. Or pull a heat run, having been made. Then you’re in pursuit, calling in a helicopter, turning a dangerous situation more dangerous. Lili has seen it before, many times. What you want is for it to go smoothly.
“Target direction?”
Lili glances at her phone, trying to note the next cross street to report back to the team. She’s newish to Miami and doesn’t know this area well. It’s hard to know any area well when it all looks the same—a featureless landscape of wide, long blocks with medians, a strip mall on each corner at every intersection, fringed by endless palms. She doesn’t know the direction. This is why she’s consulting her phone. But the map app isn’t working. The radio is crackling with confusion. It’s not going smoothly.
The problem is this is not her phone. It belongs to her husband, Luis. He’s also a DEA agent. And this morning, while Lili was prepping for the mission and getting their daughter ready for preschool, she couldn’t find her phone. So on her way out the door, she grabbed Luis’ old Android.
WhatsApp needs to be updated, says the persistent notification, blocking the map screen. Driving with her knees, Lili tries to deal with the phone while watching the target. He’s turning. WhatsApp needs to be updated. Fuck, she thinks, this can’t be happening. She’d planned to overcome the prejudice against her, and female agents everywhere. Now, on her first mission as surveillance lead, she’s losing her cool because of a phone snafu? Furiously tapping the exit icon, she accidentally opens WhatsApp. “What the fuck!” she shouts. Then she notices something—a message from a very young, very beautiful woman: “I miss you.”
At first, Lili’s confused. Then she opens the chat and sees a history of carnal correspondence between this woman and Luis. Her heart drops. She pulls over.
With Lili’s silence, the radio comms grow frenetic. “Is he pulling a heat run?” Lili is frozen. The DEA has assembled a massive unit to shut down a high-powered narco money launderer, and she is on the side of the road, reading flirty texts from her husband’s mistress. She’s losing the target. But all Lili can think about is betrayal. The messages are endless. It’s not the first time. The image she’s had of herself and Luis, the eager greenhorn agent and hotshot husband, is coming apart in real time. What about their 3-year-old daughter?
She remembers the mission. The target they’re tailing is surely armed. A key rule of leadership is full faculties. One mistake and someone could get killed. She’s clearly lost tactical command. Just as they all expected, she thinks. Failing when it counts.
Lili knows this could hurt her career. What she doesn’t know, in this moment, is just how far her career will eventually go; that this gut punch will catalyze her emergence as an unlikely pioneer in an entirely new kind of criminal investigation. That she will help seize millions of dollars in illicit cryptocurrency, arrest some of the world’s most treacherous criminals, and help write the playbook still used in digital money-laundering investigations. Her colleagues will know her as a principled, dogged, ruthless, sometimes frustrating but always inventive woman waging a highly personal crusade. And when she helps take down the largest and most sophisticated dark-web marketplace in history, her targets will place a $4 million bounty on her head.
But right now, she’s just heartbroken.
“Infante!” she hears over the radio. “Where are you?”
II. The Wire
Lili Infante became a DEA agent by accident.
It was spring 2007, Lili’s sophomore year at Columbia University. She was a serious and studious economics major who cut a notable figure on campus, a tall Russian émigré who rarely socialized. Having grown up in the chaos of post-Soviet Moscow, in an unstable household, Lili sought structure, discipline, and excellence. She planned to outwork her peers and land a coveted internship on Wall Street her first summer.
Among the few diversions Lili permitted herself were weekly Skype calls with her grandmother Nina, back in Russia. Lili had a complicated relationship with her mom, a divorced drinker with a string of boyfriends, but Nina was her closest confidante, the only person she truly trusted. Lili would stay up late to tell Nina about life in America, her inability to integrate into campus culture, and her ballroom dance club, which was her other recreational indulgence. Lili didn’t like “fun,” per se, but she liked dancing for the same reason she liked school—it’s orderly, choreographed, predictable. Critically, it’s also nonverbal. Conversation doesn’t come easily to Lili. All her life, she’s felt like an outsider, an amateur anthropologist peering in on humanity rather than participating in it. A room full of twisting, twirling, silent strangers is one of the few places Lili feels ordinary.
As the spring semester drew to a close, Lili set her eye on summer jobs. She’d applied for a financial analyst position at Citi’s wealth management division and another position, described only as “Russian language analyst,” which she’d stumbled across on a career board. One day, she received offers from both jobs, minutes apart. She could report to duty at Citi Wealth, fulfilling a longtime goal. Or she could accept the analyst position, which mysteriously listed no employer, only an address: 99 10th Avenue. This turned out to be the Manhattan headquarters of the Drug Enforcement Administration. She was intrigued. As a child in Moscow, Lili had been obsessed with American police procedurals. She was drawn to their clean message of good versus evil and the inevitability of justice, which was the opposite of the lawless kleptocracy she knew. During her childhood, Moscow was ruled by gangs. The police often worked for bribes. Here, the police came when you called. She admired them. But should she begin her career on Wall Street or realize her childhood dream of fighting crime?
The following Monday, Lili showed up at DEA headquarters, a giant industrial box in Chelsea just south of the neighborhood’s blue-chip art galleries. A receptionist guided her through a warren of fluorescent-tube-lit hallways and deposited her in a room with a huge bulletin board, classically arranged with mug shots, question marks, thumb tacks, and byzantine constellations of yarn. An agent straight out of central casting—bald, no-nonsense, sturdy—introduced himself and showed her around. Lili couldn’t believe it. The agent told her what she’d be working on, a RICO investigation into Russian gangsters based in Brighton Beach. She would operate a wiretap and translate in real time the conversations of drug runners, money mules, foot soldiers, and hit men.
“Think you can handle that?” the agent asked.
Lili was stunned. “Yes,” she said, after collecting herself. “Hell yes.”
“Good,” he said. He handed her a set of headphones. “Welcome to the DEA.”
That summer, Lili learned that she was built for the life of an investigator.
The moment she tuned into the wire and heard unfamiliar voices, she was hooked. Lili has always loved the puzzle-solving aspect of surveillance. Growing up, she often eavesdropped on her mother’s phone calls, trying to decipher the mechanics of adults and their relationships. The wire provided a new outlet for that voyeuristic impulse. Spying felt right. She happily pulled triple shifts.
Lili was aiding an investigation into a gang led by a man named Boris Nayfeld. He came to power by seizing control of the Bratva—the Russian mob—in Brighton Beach after an alleged assassination. His gang had hooks in every racket imaginable: drugs, diamond smuggling, human trafficking, Medicaid fraud, murder for hire. Lili’s primary targets were two Ukrainian brothers, Nikolai and Arthur Dozortsev, who were linked to importing ecstasy tabs by the million from Southeast Asia and laundering the profits through shell companies and luxury items. They were rumored to own a hilltop villa in the French Riviera, a Riva Vertigo yacht, and an Aston Martin Vanquish coupe. They were high-profile fixers—and very scary men—who turned out to have very ordinary conversations with family, friends, girlfriends, dentists. Lili was fascinated by the mobsters’ quotidian chatter. She wondered: Was everyone capable of evil? Lili is a dogmatically ethical person. Dishonesty, betrayal, and violence confound her. And here were stone-cold criminals, leading otherwise normal lives.
As Lili translated, agents worked in the field, acting on the intel she gathered—raiding stash houses, making arrests. Others supervised her surveillance. One of those was a brash, handsome 32-year-old lead case agent named Luis Infante.
Surveillance is like war: mostly boring. Between crucial moments, there’s a lot of time spent lounging, spinning around in cheap swivel chairs. Eventually, Luis and Lili got to talking. Luis was half Puerto Rican, half Cuban, born in Yonkers; he’d become a special agent after four years with the NYPD and the state troopers. His was not such a strange path. But how did an Ivy League sophomore, Luis wondered, end up in a basement operating a wiretap?
Lili started at the beginning. She was born Lilita Shabazian in 1987, in Moscow. Her mother, Katya, had aspired to be an actress but got pregnant at 19. Unwilling to sacrifice her own youth, Katya spent nights partying. Alone at home, an 8-year-old Lili made her own dinner and sat in front of the TV, sipping her mother’s booze and watching reruns like Walker, Texas Ranger. Katya maintained their meager household by selling clothes in the local market. At times, Katya traveled, leaving Lili in the countryside with her grandmother, Nina, a strict and independent woman. Nina grew her own food and made her own elaborate dresses. She had high hopes for Lili and would sit with her granddaughter and read the classics: War and Peace, Crime and Punishment, and Lili’s favorite, The Three Musketeers, with its themes of loyalty and courage in the face of corruption. Nina was a bright spot in a bleak childhood, much of which Lili spent wandering the streets of Moscow with other aimless children. “For us,” Lili told Luis, “there were no piano lessons.”
One night, Lili told Luis a story about how, when she was a child, a local gang threatened her mother. In Moscow at the time, anyone who sold goods had to pay for protection; Katya paid a gang that came cheap and was low in the local hierarchy, which left her open to intimidation. One day a bigger gang decided to target Katya’s business partner, kidnapping him, beating him, and leaving him for dead in the forest. Then they set their sights on Katya and demanded $50,000, threatening to abduct Lili and send her back in the mail, piece by piece. Lili recalled seeing her mother in tears on the phone, begging for mercy. No one came for Lili, but Katya blamed herself for the predicament. She started drinking heavily to dull the regret. That was when Katya started disappearing, eventually for days at a time—and when Lili’s obsession with American cops and robbers took on new meaning. On Law & Order, the law wins. For Lili, justice became a fantasy.
Now in America, at the DEA, Lili could live that dream. By midsummer, she was anxious for a breakthrough in the case. She wanted Nayfeld and his goons—Russian gangsters just like the men who tormented her mother—behind bars. Luis explained that RICO investigations could take years. Law enforcement is often about patience, he said. Lili had a hard time with that. They listened for hours, waiting for Nayfeld’s henchmen to make evidentiary mistakes. What they heard was mobsters running errands around Brighton Beach.
The long shifts spent listening meant more late-night chats. Luis asked how Lili came to the States. She thought she was doomed to live and die in Russia, she said, but one day, when she was 11, the phone rang. “Hello, Lili,” a man said. “This is your father.”
It was the first time Lili could remember crying. Her father had disappeared when she was a toddler. She had never known his voice. A few days later he was at the door, a burly man with dark brows, fitted into an expensive suit. He didn’t explain why he’d left, or now returned. In the US, he had become successful. Something about selling tires. Later Lili would come to realize his business was “connected,” but as a poor girl in Russia, she was amazed as he introduced her to a world of ease and excess. Lili had grown up with a single pair of pants and no winter coat, and now her father waltzed into Moscow’s elite boutiques and gave her free run of the stores. He took her to Moscow’s finest restaurants. Then he said he was bringing her to America. Lili didn’t want to abandon her family, but her mother and grandmother urged otherwise. She should leave, they said, and have a life. The other children in their neighborhood had already turned to crime. Some kids she knew were drug dealers and prostitutes. In Moscow, they said, there was nothing for her.
America was as different from post-Soviet Moscow as Lili imagined, but she was still mostly on her own. Her father remained wildly generous at times but could also turn manic or sadistic; he’d shower her with gifts, then beat her for any perceived imperfection. He sent Lili to the Windsor School in Queens and then to Loomis Chaffee, an elite private academy in Connecticut. It took Lili only a few months to become fluent in English, but she didn’t make many friends. “I didn’t know how to act,” Lili told Luis. “I was like a hood rat.” And so she studied and studied, outpaced her peers, skipped a grade, and found herself 17 years old and enrolled at Columbia University in New York.
Before Luis, Lili had shared her story with very few people. But something about him made her feel comfortable. Luis was charming, funny, and incredibly handsome. He had a wide smile, dark hair, and bright green eyes. He was married, though, so Lili hid the feelings she was starting to have for him. Toward the end of the summer, Luis came clean: He was falling for her too. He was separated from his wife, he said. He begged Lili to be with him. She demurred. She admitted her own attraction, but an affair went against her ethics. His marriage was already through, he said. She remained resolute.
Now it was awkward. They were still up late together in the wiretap room. Alone, side by side, listening to the mobsters chat—or worse, have phone sex with their girlfriends—Lili and Luis batted romantic repartee at each other. He loved her, he said. Midlife crisis, she shot back. I’m only 32, he said. I’m not yet 20, she replied. Lili stood her ground.
Come Autumn, Lili returned to school and passed the wiretap to a new analyst. Luis and his wife entered couples therapy. As the leaves turned and Lili settled into her sophomore classes, she moved on.
And then, one morning, her phone buzzed.
“I left her. It’s over. I need to see you.”
Lili and Luis stepped off the plane into the heavy San Salvadorian air. Katya trailed behind, thickly made up, stumbling beneath a blanket of blown-out hair. Lili wondered whether she had made a terrible mistake by inviting her mother to come here and live with them. It was 2012. Just three years after graduating from Columbia, Lili was already a mother herself. She held her baby, Lia, in her arms.
After Luis left his wife, Lili dated him through college and fell madly in love. After class, she met him downtown in pubs and dives, where Luis talked about the day’s dangers and shared stories from his time at the NYPD: chasing a dealer down a Bronx alleyway; wrestling a gun from a man’s hand in a high-rise hallway. Then they went back to his place. With each date, Lili’s world of exams and problem sets seemed increasingly frivolous. By the time she graduated, in 2009, the idea of Wall Street was long gone and she was set on becoming a federal agent.
But it was the Great Recession, and the DEA didn’t seem to be accepting applications. So Lili and Luis married, moved in together, and had a daughter. Lili loved being a mother but quickly understood that she did not want to be only a mother.
Lili roamed their apartment cradling Lia. During nap time, she called her grandmother. Once, when Lili was lamenting the challenges of motherhood, Nina offered a startling idea: Why not bring Katya to live with them and help raise Lia? Lili was reluctant. Chaos followed Katya everywhere, plus she was still drinking. But Nina said that she just needed something to live for. Otherwise, it was only a matter of time before she overdosed in her apartment or passed out in a snowbank.
Nina had never steered Lili wrong. Lili booked her mother a flight.
Katya made a strange addition to their home. She couldn’t drive and spoke almost no English. Her Russian was stilted and aristocratic, an affectation she had picked up while nannying for a Russian oligarch in Dubai after Lili left for America. Her typical uniform was a fur coat, silk pantsuit, and 5-inch stilettos. Katya is something of a post-Soviet Blanche DuBois, an aging beauty obsessed with status and regret, always complaining, or boasting about her greatest achievement: almost being cast, at 17, as the lead in a 1980s Soviet film.
With Katya available to watch Lia, Lili contemplated the most prestigious way to fill her time while she waited out the dismal job market. On a whim, she applied to Harvard Extension School, got accepted, and began taking classes. She loved being back in the world, learning, striving. But then Luis accepted a plum but dangerous post in El Salvador, where he would be investigating high-level drug trafficking operations and acting as a diplomatic liaison. Lili, Katya, and baby Lia joined him, and the Infantes moved into a palatial embassy house, complete with a cook and a maid, whom Katya relished ordering around.
Theatrics aside, Katya improved once she was surrounded by family. She quit drinking and threw herself into caring for her granddaughter, just as Nina had predicted. She was a doting and careful (if theatrical) babushka, seemingly intent on making up for the ways she had neglected her own daughter. For Lili, it was healing to watch.
But she was still restless. Determined to finish her degree, Lili started flying back and forth to Cambridge weekly—a five-hour flight, during which she crammed case studies. At home in El Salvador, she finished problem sets while rocking Lia to sleep. After two years, she graduated from Harvard with honors and submitted her application to the DEA.
III. Miami
“Are you a bitch, or a slut?”
At the DEA academy in Quantico, Virginia, Lili considered the question, which she assumed was rhetorical. It wasn’t, as she discovered when her instructor, an older, bulging, terrifying woman, repeated it, much louder.
“Neither?”
“WRONG!” the instructor said. “As a woman, to survive in this agency, you’ll have to become either a bitch or a slut. Take your pick.” (The DEA declined to comment on the record for this story.)
It was 2014. Lili was the only woman in her class. Her peers were very large men accustomed to violence: former police looking to up the stakes and Afghanistan vets in search of a new thrill. Lili dominated many of them academically, answering questions first or correcting their errors. In athletic training, she was ferocious, pouncing on her training partners in boxing, wrestling, and jiu-jitsu, even though she was half their size. She wanted to dispel any suspicions about female timidity. She succeeded. No one at Quantico had ever met anyone—man or woman—quite like her. “Instead of a bitch or a slut, I chose a third option,” Lili says. “I was annoying.”
After 20 weeks of training, Lili graduated near the top of her class. She would be stationed in Miami, where Luis had already been reassigned after his stint in El Salvador.
Ever since the cocaine explosion of the 1980s, Miami had been America’s central depot for the drug. Geography made it inevitable. The city leans into the Atlantic, pointing toward the Caribbean—the source of endless contraband, smuggled in by imaginative cartels. In the heyday of the cocaine trade, powerboats rocketed across Biscayne Bay, their hulls stuffed with powder. Cessnas drifted in low over the skyline, dodging radar to land on airstrips in the Everglades. Cartel divers attached magnetic parcels to cargo ship hulls. Homemade narco subs slipped unseen beneath the surface.
For the Miami DEA office, this still meant constant action and late nights on dangerous cases—exactly what Lili was looking for. Compared to the dingy New York office, the Miami DEA was a gleaming palace of spotless glass and marble. Agents drove fast cars and hit the extensive first-floor gym before their shift, setting personal records on the bench or running combinations on punching bags before heading upstairs. This was the office that had brought down Noriega, rooted out a Hezbollah money-laundering ring, and once intercepted the sale of a $35 million Soviet submarine to cartel leaders in Colombia. Lili wanted in.
Instead, she was given trash detail. On one of her first days on the job, Lili stood alone in a remote warehouse, tossing ziplocks full of drugs into an incinerator, marking the destroyed evidence on a clipboard. She was also pulling stints on the Miami DEA’s most dreaded post: the Duty Box, a closet-sized post where her two jobs were to answer the anonymous tip line and buzz visitors into the boss’s office.
Lili was one of four women in her unit. The DEA culture was dated—the veterans who dominated the agency were called Jurassic narcs—and her office had a hard-partying style. After work, agents hit the bars and clubs together. But Lili didn’t drink. Having watched her mother’s undoing, Lili likes to say she “got sober at 12 years old,” when she left Russia. Instead, she stayed late at the office, filling out busywork reports with dizzying thoroughness. On weekends there were backyard barbecues, but Lili was rarely invited. Instead she went to Yuca 105, a Cuban restaurant in South Beach where she danced salsa. Yuca had serious dancers, the kind who don’t party, or make small talk, or do anything to compromise their focus and coordination. Lili fit right in. She’d drive home drenched in sweat, a momentary bliss.
Meanwhile, the assholes back at work called Lili “Sochi,” after the Russian city that was hosting the upcoming winter Olympics. On a team-building trip to the International Spy Museum, they pointed at placards on Russian agents through history: “Friends of yours, Sochi?”
“Don’t take it personally,” Luis said. He wanted to support Lili, but he was stationed in a different office, across town. He knew Lili would be a great agent, but he also knew that her social graces, or lack thereof, might be holding her back. She tended to ruffle feathers. She was bad at reading the cues of an institutional culture. Lili always admired how easily Luis navigated social situations, how he could charm anyone. “I know it’s silly,” he said, “but maybe try smiling? Make small talk. The men are going to look down on you, especially since you’re smarter than them. Act impressed. Flattery helps.” Lili wasn’t interested in flattery, but she knew Luis was right. “You’re gonna have to make some friends,” he said.
If there was one friend to make in Lili’s office, it was Jose Irizarry, a rising star in the Miami DEA whose desk was just across from Lili’s. Irizarry was a top agent in Group 4, an international money-laundering unit and a linchpin division: The entire narco economy is built around clandestine finance. The members of Group 4 were like the DEA’s SEALs, running deep-cover operations, posing as mules, or cultivating informants to infiltrate outfits in Cartagena, Madrid, Amsterdam, and throughout the Caribbean. Theirs was a game of trust; for some, making friends with criminals meant partying alongside them. For years, Jose and his team had been working a cartel smuggler named Diego Marin. The “Contraband King” allegedly laundered dope money with nested shell companies offshore, misvalued imported goods, and engaged in other astonishingly inventive misdirections. To run elaborate stings on their targets, Jose’s team used what’s called Attorney General Exempt Operations, which gave DEA agents authority to act as actual money launderers for cartels to understand the narco traffickers’ financial pathways. Group 4 was creative, restless, and reckless. Lili gazed with envy across the office as they planned their missions.
Soon she made a habit of sneaking over to buttonhole Jose about his division, peppering him with questions about mirror trading and tax havens, hawaladars and mules. She told him how badly she wanted to do the kind of work he was doing. Sweeping, sophisticated, international cases with real consequences. “Be patient,” he said. “You’ll catch your break.”
Olga Rostova was flying across the causeway at 70 miles per hour, a few feet above Biscayne Bay; windows down, hair flying in the tropical evening. Glittering above the water ahead was South Beach. She was on her way to meet a few men. Businessmen, you could say. The kind who were high enough up the criminal chain that they would fit right in at a Dade County Chamber of Commerce meeting. Olga parked and stepped out in her heels and miniskirt—Gucci and Louis Vuitton, head to toe. She introduced herself to her clients. They ordered and got down to business. Olga was a money-laundering wunderkind, here to advise them. Except Olga was not a money launderer. Olga was Lili, wired for sound.
It had been six months since Lili joined the DEA, and she’d distinguished herself quickly. She was now deep into the most dangerous casework available: undercover operations. What made her unusual at the DEA—being a young, pretty, Russian émigré—was ideal for cover. She developed an alter ego, Olga: a cunning, mysterious, seductive money mule.
As Olga, she dined alongside some of Miami’s scariest, most powerful men. She always arrived a little late, so that targets and layout could be confirmed by physical surveillance agents posing as diners. Her provocative but elegant dress came courtesy of the DEA’s drug seizure money. Lili dressed plainly in real life, but Olga felt powerful strutting down Collins Avenue, turning heads.
Undercover bios should be just different enough to minimize the need for fabrication. So Olga was born in Moscow and moved to New York when she was 12. There, she got involved with the Russian mob out in Brighton Beach. Just like Lili’s old friend Boris Nayfeld, Olga knew how to wash even the dirtiest money by filtering it through a variety of real businesses and shell companies. She’d present her services, and then, with the cash in her care, the DEA would arrest or flip the unwitting target.
Olga called her services “business development”: luring in prospective clients for a subsequent bust. They talked shop, made plans, and toasted to the future. Olga drove home, up Collins Avenue with the glassy intracoastal on the left, full of meandering pleasure craft, and then on the right a line of deco palaces that eventually gave way to the dunes of the Atlantic. The most beautiful drive in the world, as far as Lili was concerned, and one she took often, heading home after undercover nights to look in on sleeping Lia and unwind with Luis, trading stories about targets, networks, informants.
As Olga, Lili was thrust into the byzantine realm of cartel cat and mouse, where the DEA cultivated an array of CIs, or confidential informants. These were mostly unsavory characters, either pressured with prison time or, worse in Lili’s mind, attracted to the power and the financial rewards. In the criminal underworld, the key currencies were cocaine, cash, and information, and the market for the latter was extremely gray. Informants were either paid for their efforts or given a cut of DEA hauls, or they were sociopaths allowed to trade testimony for a light sentence.
One of Lili’s primary sources was a chubby, charismatic Columbian businessman, codenamed Igor. Jose, Lili’s mentor, had cultivated Igor over many years and entrusted him to Lili after she showed her prowess in the field. Igor owned a used-car dealership and a series of electronics stores. Since mobsters are always looking for beater cars and burner phones, his outlets attracted prime targets for the DEA. Lili, Jose, and Igor always met in public, sometimes at swank spots, sometimes at Dunkin Donuts. Jose and Igor acted like old pals, laughing and reminiscing about past stings. For the arrests Igor helped arrange, he would often take a 20 percent cut of the DEA’s seized proceeds. By the time Lili met Igor, in 2014, he was rumored to have racked up millions.
Igor was useful. He introduced Olga to his clientele and had his ear to the rail in the underworld. But Lili was growing uneasy. It didn’t sit right with her that a venal huckster could get rich by working both ends of the drug war. “This is just how it goes,” Jose would explain to her. The people who have information on criminals are, by definition, mixed up with criminals. But Lili liked her ethical lines tidy—and it felt strange to be handing Igor envelopes full of cash. Igor is a small fish, Jose said. And you need small fish to catch the big ones.
Lili followed Jose’s lead. He was the pro, after all. Luis advised similar. When Lili would catch her grandmother over Skype, Nina was only proud. “You are succeeding in America,” she said. “What else is there?”
Around the office, Lili was finally getting some respect. She set her sights on doing consequential work just like Group 4, Jose’s elite squad. Their beat was international. The big show. To get there, she had to prove herself in domestic money laundering. And she needed to show tactical capability on a bust. This was how she found herself chasing a money mule through the streets of suburban Florida, with a chopper overhead. How she ended up pulled over on the highway, looking at her husband’s phone, and realizing that not only was her target getting away, but Luis, the man of her dreams, was cheating on her.
Lili sat at home, in shock. She’d radioed HQ and pulled out of the mission, surprising everyone. “Family emergency,” she’d said. The irony, she thought, stepping over Lia’s toys on the living room floor. The house was empty. Her mother was out of town, and Lia was at school. She waited in silence for Luis to come home. Out of curiosity, she typed a flirty message to the mistress on his phone and got an immediate response in kind. Her heart shattered anew.
Lili had suspected that Luis had strayed at least once before, when she was pregnant. He insisted nothing ever got physical, but he still had to beg for forgiveness. He followed her to Russia, where she’d sought refuge with family, and stood outside her window, crying inconsolably. “All men are liars, Lili,” Nina had told her back then. “But at least this one seems to have a conscience.” She advised Lili to take Luis back. But this time, Lili couldn’t forgive. When Luis walked in with Lia, laughing, Lili called him into the bedroom and dropped the phone at his feet. On cue, he fell to his knees.
“You don’t have to lie anymore, Luis,” she said. “I did the reconnaissance.”
After booting Luis from the house and putting Lia to bed, Lili called Nina. Her grandmother was comforting but blunt, as always. “You are a survivor, Lili. You can survive on your own, like I have.”
Lili filed for divorce, and they split custody of Lia. To shut out her grief, Lili threw herself further into work. She still wanted to make a name in money laundering, but her first field lead had been a fiasco. In the DEA, you’re only as good as your last bust. She felt like she needed to prove herself. One night, alone in her newly empty bed, her mind raced. She remembered an episode of The Good Wife she’d seen, where the plot revolved around a new, anonymous, decentralized cryptocurrency called bitcoin. A clever technology, she thought, and likely also a perfect tool for cartels. Rather than smuggle duffel bags full of cash across the border, they could make the same transfer online.
The next morning, Lili scoured the DEA case management system for investigations involving crypto. If she had the idea that criminals could use bitcoin to launder money, likely they had too. But she found only one major case: the Silk Road, the world’s first dark-web marketplace, where users traded bitcoin for drugs, guns, and counterfeit documents. Federal agents had shut down the site and arrested its founder, Ross Ulbricht, a year earlier.
Surely, Lili thought, Silk Road was just the beginning. She asked around the office. Most had never heard of the Silk Road investigation. Others were uninterested. But Lili was certain this was the future of crime. Alone at night, she started plumbing the depths of the dark web and discovered that dozens of sites had filled the Silk Road vacuum. There was an entire illicit economy operating right under the nose of the DEA, a new narco trafficking paradigm fueled by a revolutionary transactional system. In a way, this was the ultimate money laundering case. With cryptocurrency, the money didn’t even need to be laundered.
IV. Tornado
“I need to buy drugs with bitcoin.”
Lili had marched into her supervisor’s office unannounced, as usual. It was late 2014. She wanted authorization to spend crypto on the dark web. Sitting behind his desk, surrounded by his awards and challenge coins, her supervisor asked, “Who’s bitcoin?”
“The future,” Lili replied.
Lili had been up all night, ruminating on the endless criminal possibilities of cryptocurrency, and she rattled off an impassioned crash course on the history of dark-web marketplaces.
The dark web, she explained, relied upon two innovations: bitcoin, with its anonymous transactions, and an encrypted network called Tor, which routed web traffic through an enormous number of servers worldwide, hiding a cybercriminal’s IP address among a sea of decoys. The combination of bitcoin and Tor supposedly rendered dark-web drug transactions completely untraceable, and so dealers were migrating online in droves. Why stand exposed on a street corner and risk your life defending territory when you could sit in your home, wait for customers to send you bitcoin, and then mail them your product? The previous year, US police had made 1.5 million arrests for narcotics-related crimes, but the drug epidemic was getting worse. The cocaine crisis had been replaced by the even more destructive opioid crisis. And synthetic opioids, which could be manufactured anywhere, were hitting the streets. Now, with digital marketplaces, they were available like mail-order retail. The drug war was changing, and they had to get ahead of it. Lili, of course, was the woman for the job.
Her supervisor, nonplussed, allotted some money in deference to Lili’s dissertation, if only to get rid of her. It would be a proof of concept, Lili said. If the drugs show up in the mail, we know the problem is real. He filled out a form and released $200.
Lili used a marketplace called Blue Sky to purchase cocaine from a vendor named HonestCocaine. When other agents caught wind of what Lili was up to, they gave her a hard time. “Stick to your casework, Sochi,” they said. “Don’t get distracted by internet funny money.”
A week later, a package arrived at a DEA post office box. The white powder went to the lab, and HonestCocaine lived up to their name: The delivery was real, and high quality. Lili marched back into her boss’s office. There are dozens of sites, she said, and thousands of dealers. “We have work to do,” Lili said.
To take down dark-web marketplaces, Lili needed to know how they worked. She’d been attending local cryptocurrency meetups in Miami: oddball gatherings of techies, gambling addicts, and libertarians who met at local Cuban spots to sip café con leche. Her presence as the only young woman, yet again, caused a stir at first—the crypto demographic at the time was decidedly male and nerdy—but they were impressed by her focus and interest. While the crypto acolytes waxed poetic about freedom from fiat currencies and the beauty of the blockchain, Lili was enticed by the opposite implication. The fact that every bitcoin transaction was indelibly recorded meant it was perhaps not anonymous. Once she figured out how to trace it, following the money would be easier than ever.
Dark-web investigations paired well with single motherhood. No longer able to stay late at the office, Lili was home by 6 every night, in mom mode, playing with Lia and talking about her day at school. After putting her to bed, Lili cracked open her laptop and clocked back in, working late, sometimes chatting with her grandmother as she scrolled through listings of drugs, guns, and stolen passports.
After a few weeks, Lili was ready to select a target. She felt like “a kid in a candy store” deciding who to go after first. One vendor, username Owlcity, stood out for his potent inventory: Alpha-PVP, aka bath salts, and fentanyl.
The DEA had no playbook for how to pursue a dark-web case. She began by purchasing some product from Owlcity, 2.5 grams of Alpha-PVP. The package came a week later and clearly incriminated the dealer. But who was Owlcity? A dark-web case, Lili realized, is the exact reverse of a typical narcotics investigation. Here, the crime is visible for all to see—the drug arrives at your doorstep—but you can’t prove who sent it.
Lili examined the package. Owlcity had been careful. Fake name and return address. A generic stamp, untraceable. She dusted the cardboard for fingerprints, but the exterior had been handled many times, by couriers and warehouse workers. Changing tack, Lili attempted to penetrate Tor and pin down Owlcity’s IP address. She taught herself to analyze the blockchain. As with English, she picked it up quickly. But every effort was a dead end. Her target remained a disembodied string of characters, a ghost.
Finally, in February 2016, Lili had a flash of inspiration. She messaged Owlcity and politely explained that a package she had ordered from him earlier had never arrived. Because the dealer seemed to pride himself on good customer service—he had a 98 percent positive rating—she had a hunch the dealer would respond. He did, and she asked him to track the package, hoping that when the user went to USPS.com, they wouldn’t think to use Tor. Which they didn’t. Owlcity had no idea that the DEA could access the post office web-traffic tracking logs, which led Lili to an apartment only a few miles away, in the suburb of Miramar, and a name: Chrissano Leslie.
A week later, Lili surveilled Leslie, a young Jamaican man, driving beneath the palms to his local post office, where he dropped off a package with fentanyl in it. A few months after that, Leslie awoke to the sound of his front door splintering off its hinges. Shooting out of bed, he grabbed his stash, ran half naked to the bathroom, and shook a cascade of pills and powders into the toilet. Close behind was Lili’s Clan Lab team—a special unit trained to handle lethal substances like Fentanyl: 10 guys in hazmat suits, armed. “Freeze!” He flushed the toilet, but the pills clogged the drain. He was trying to flush again as agents tackled him. Leslie’s apartment was brimming with home-pressed pills, and underneath his bed they found a stash of weapons: handguns and an Uzi. A serious dealer, just sitting in the suburbs, with no visibility to police or DEA. Just as Lili figured. As the agents got cuffs on Leslie, the toilet overflowed, pushing a cloudy fountain of fentanyl-laced water across the tile.
The Owlcity arrest made the papers, and Lili earned some stripes. She moved full-time to cybercrime, and her supervisor even suggested she lead a team. But she says she had a tough time recruiting in her own office; even worse than a know-it-all rookie was a know-it-all rookie with a promotion. The Jurassic narcs didn’t want to be her subordinate.
So Lili widened her approach. Throughout the Owlcity investigation, she’d enlisted outside federal agencies to help her when the DEA’s resources fell short of the demands of a complex, drawn-out cybercrime investigation. To access banking records, she’d used IRS investigative tools; to track Leslie’s packages, she’d employed Postal Inspections; to kick down his door, she’d called in FBI SWAT. To bring each of these agencies onboard, she’d visited them in person and pitched a PowerPoint-enhanced presentation on the looming dangers of dark-web drug dealing. Her renegade enthusiasm was contagious, and at each agency she convinced a few agents to help her out.
Now, Lili had a new pitch: What if these agents stayed with her and formed an official task force? She found takers and even added agents from Homeland Security. Almost unintentionally, Lili had formed one of the first interagency cybercrime task forces. She was 28.
Later that year, Lili was at a crypto conference when she met Tigran Gambaryan, already a legend in cybercrime for developing the capability to decipher the blockchain. Tigran had been an investigative state auditor before picking up a badge and gun to join the IRS’s elite Criminal Investigations Division, the law enforcement arm of the federal tax authority, where agents used specialized techniques to bring down criminals in the field.
Lili watched Tigran present his investigation into the corrupt DEA agent Carl Force, who had skimmed more than $700,000 in bitcoin while investigating Silk Road. Force was tempted by his belief that bitcoin was untraceable, but Tigran linked the theft back to him with ingenious innovations in blockchain analytics. It was the first time blockchain evidence was introduced in court. Nearly awestruck, Lili took notes and then introduced herself afterward.
They had a lot to talk about. Tigran stood 5’5″ and wore thick-rimmed glasses and, usually, a tight shirt around conspicuous biceps; like Lili, he was a nerd with an adrenaline dependency. She was surprised to learn that Tigran, too, grew up poor in Moscow, even in the same district as Lili. This was why he also hated corrupt cops. They exchanged numbers and decided to keep in touch. They might need each other down the line.
With the Silk Road gone, a dark-web marketplace known as Dream Market was now the largest in the US—the new emporium for drugs, counterfeit documents, and stolen data. And Dream, Lili decided, would be the target of her newly minted Counternarcotics Cyber Task Force. Lili codenamed her investigation Operation Tornado, after Tor. Historically, drug trafficking investigations are looking to catch the leadership in conspiracy cases. But dark-web drug vendors and administrators rarely communicate directly and never learn each other’s real names. It’s like a cartel but with the operational security of a terror cell. Lili figured she should start with some vendors, then move on to the leadership—OxyMonster and Kitt3n, or the “Dream Team,” as they called themselves.
Of Dream’s many vendors, one stood out to Lili: UStoUS, who peddled some of the most experimental products on the dark web. His signature item was called the “God Pill,” a gumbo of cocaine, amphetamines, and fentanyl. Via an undercover buyer account, Lili ordered the God Pill to Miami. Using the technique she learned in the Owlcity case, she traced the IP address of the computer used to buy the postage, which led her to a smoke shop called Heady Warez in Cape Girardeau, Missouri, on the edge of the Ozarks. An excellent lead. But the question remained, who was UStoUS: the owner, an employee, or simply a customer checking on his shipments while waiting in line?
Operation Tornado caught a break when local police in Cape Girardeau called in to report a tip. A woman, fresh out of rehab, walked in and told detectives that her boyfriend was trying to kill her. She was addicted to opioids, and he was a dealer who sold on the internet. He knew that she was trying to get clean but deliberately tempted her with his product, leaving pills out where he knew she would find them. His name was Joshua Kelly, and he owned Heady Warez smoke shop.
A week later, two task force agents lounged in an unmarked car outside of Kelly’s shop. Kelly was a skeletal young man whom local law enforcement suspected was linked to a string of recent overdoses. This was a novel threat of drugs delivered through the mail, Lili realized: People often OD’d alone in their homes, and word of a tainted batch was slow to spread. Unlike a corner dealer, a dark-web trafficker is cut off from his customers and might have no idea that he’s poisoning them.
It wasn’t until Lili had her agents search Kelly’s trash that they found damning evidence: the same labels he used when he shipped out his God Pills. On May 9, 2017, Lili and a SWAT team broke down Kelly’s door.
The entire house was a factory for pill production. While searching the rooms, an agent accidentally knocked over a vacuum cleaner. A cloud of fentanyl mushroomed out and settled onto the carpet. Lili found Kelly slumped over in a chair. Up close, he was disturbing to behold. Bone-thin and covered in open wounds, he was heavily addicted to his own supply.
When Lili questioned Kelly outside, he had only one thing to say.
“What took you so long?”
Lili was haunted by what she’d seen. The takedown was satisfying, but the tragedy stayed with her. The opioid epidemic sweeping the nation was leaving broken, desperate people in its wake. On another bust, soon after, Lili found herself face-to-face with a dealer who used his own infant as a human shield. She had to talk him into setting the child down before she could cuff him. It reminded her of the desolate, hopeless flood of opiate addiction that took hold in Russia in the 1990s, which she’d fled because of the related crime and poverty. That addiction wave only continued; Nina had recently told Lili that her cousin Dennis, only 16, was starting to use and sell drugs, hang around gangsters, and disappear for days at a time. She was worried. Nina told Lili it felt like raising Katya all over again.
Alone, Lili took care of Lia and tunneled into work. At night, she’d sometimes call Luis. As angry as she was, he remained a sympathetic ear. He was proud, and not surprised that she’d already surpassed him professionally. And he was useful for helping Lili navigate prosecutorial personalities and the intricacies of building indictments.
Her next move, she told him, was the Dream Market management, starting with OxyMonster. Using tricks she’d learned from Tigran and her own research, Lili discovered OxyMonster’s identity by tracing his bitcoin wallet address, which he’d optimistically and foolishly made public so he could receive tips. The address was linked to a private server, which, oddly enough, also hosted websites related to competitive beard growing, like Beardsociety.com and Mybeard.org. This led her to a rising star in the competitive beard-growing world, a Frenchman named Gal Vallerius.
On August 31, 2017, at 1:05 pm, Gal Vallerius arrived at Atlanta International Airport, accompanied by his wife, Yasmin, and his incredible beard—30 centimeters of resplendent vermillion. Lili had been researching Vallerius for months. He was a homebody from a small Breton village who liked to take walks with his wife and tend to his pet rabbits. He was also a man of international distinction, as both an elite beard competitor and a global drug kingpin.
Vallerius and his wife were, in fact, en route to the World Beard and Mustache Championships in Austin, Texas, where Vallerius hoped to clinch the title. Homeland Security records indicated that Vallerius had never visited America before, and France is reluctant to extradite its citizens, so Lili seized the opportunity to catch him on US soil. She waited at customs with officials from the Transportation Security Administration and Customs and Border Protection, who pulled the couple aside and asked for their electronics for a routine search.
“What are you in town for?” an agent asked.
“A facial hair competition!” Vallerius replied. “In Texas.”
“Oh,” Lili said, feigning shock. She appraised his beard. “Well, you’ll definitely win!”
“Oh, I don’t know,” he said, modestly.
They all laughed. Then Lili took the electronics aside. Within seconds, she spotted Tor, a bitcoin wallet, and a text file that contained the schedules for Dream administrators.
She phoned Miami: “We got him.”
At home that night, Lili examined Vallerius’ computer. To seize his bitcoin, she had to get into his wallet, which was password protected. But she’d stalked Vallerius so thoroughly that she knew enough personal details to hack his wallet the old-fashioned way: by guessing. She made a list of important dates (birthdays, anniversaries), sentimental names (pets, his wife), hobbies (beards, rabbits, the Bible), and then settled into an adrenalized fugue state in which she tried every permutation of every term until it opened. There it was: half a million in bitcoin.
Soon, Vallerius’ bearded face appeared on the pages of the Miami Herald, the Daily Mail, Vice, and The Guardian. With her signature on indictments and her name in the media, Lili was quickly gaining a reputation in the nascent world of cyber policing. She was invited to speak at conferences for bitcoin fanatics and cybercrime experts alike. She gave an interview to Bloomberg about the changing scope of criminal crypto transactions and was named law enforcement officer of the year by the US Attorney’s office in the Southern District of Florida.
But she could still fly under the radar on her home turf in Miami. She resurrected her Olga character with the express purpose of luring cartels into crypto. Now that she could trace web transactions, crypto would be the ultimate medium for the DEA’s money-laundering stings. Back out in the field, she set meetings with Sinaloa Cartel accountants, pitching a brand-new package of instantaneous digital transactions.
Career ascendent, Lili was still raising Lia solo, occupying herself with work, and relishing late-night chats with her grandmother. One day, she came home and found Katya distraught. “It’s Grandma,” she told Lili. “She’s sick.” Lili’s grandmother had collapsed suddenly, and doctors eventually found an aggressive tumor in her brain: glioblastoma.
Lili sent her mother to Moscow to help Nina recover. Her brain was badly swollen from an emergency operation, but she was awake. Each morning, she seemed to be getting stronger, more alert. But then one night, on the phone, Katya told Lili that Nina had slipped away. It was a rare moment when Lili stopped in her tracks. Nina had been the strongest person she knew. And now, gone.
“Lili,” Katya said quietly, “there’s something else.” Late one night, Katya said, Nina had made a confession. Two years earlier, Dennis had gotten into trouble with a local gang. He’d sold drugs on consignment but then never paid the gang back. Men started coming around, threatening to kill him. To save him, Nina paid up.
“How?” Lili asked. She knew Nina had no money.
“She sold drugs,” her mother said. “On a dark-web marketplace called Hydra.”
V. Hydra
Hydra was the largest darknet marketplace and among the most sophisticated in the world, a pseudo-corporate behemoth with 17 million users and thousands of vendors. It not only sold drugs but also accounted for about 80 percent of the darknet’s crypto transactions. For years, Lili had known about the market, often discussing it with Gambaryan, her fellow cybercrime crusader. Since Hydra operated only in Russia, Lili never thought it would cross her desk, much less sweep up her family.
She was gobsmacked. How in the world had a 72-year-old woman in the countryside, who had never committed a crime in her life, become a dark-web heavyweight seller? Nina was the most honest person Lili had ever known. When everyone else in Lili’s world had taught her to cheat and steal, Nina had modeled integrity. In silence, Lili listened as Katya relayed Nina’s confession. “She felt like there was no other way out,” Katya said.
Nina and Dennis hatched a plan to grow and sell marijuana to raise the payoff money. In Russia, dealing any amount of weed carries a mandatory four-year sentence—up to life, for large quantities—so prices are steep and profits can be significant for those willing to take the risk. Nina was a lifelong gardener. So she sourced an industrial quantity of marijuana seeds on Hydra, which was already dominant in Russia.
Much like Lili, Nina taught herself Tor, VPNs, and bitcoin, all while wrapped in a quilt in her country cottage. When harvest time came, Nina set up a vendor profile on Hydra, and Dennis became their grandmother’s delivery system. Hydra operated differently from other dark-web drug marketplaces; because the Russian post office often inspects packages for contraband, mail order was too risky. Instead, Hydra couriers stashed parcels in public places and sent buyers coordinates to recover them. A geocached delivery was known as a “hidden treasure”—klad—and couriers were called kladsmen.
As Nina’s kladsman, Dennis transported their product and hid it throughout Moscow—in gutters and bushes, buried in parks and snowbanks, stuck to magnets under benches. It was dangerous work. He dodged police, thieves known as “seagulls,” and vigilantes trying to interfere with Hydra. Hydra, meanwhile, had its own legion of enforcers, known as “sportsmen,” who punished seagulls and negligent kladsmen by drenching them in “brilliant green,” an antiseptic dye that’s nearly impossible to wash off, beating them with pipes, setting their hair on fire, or nailing their hands to trees. In Russia, the dark web wasn’t a hidden shadow economy. It was a war raging in the streets.
Nina and Dennis did well for themselves. It helped that Dennis, unbeknownst to Nina, was dealing harder stuff on the side. In a few months, Dennis’ debt was paid off—but the two kept going. Katya only realized the scale of her mother’s operation when she inquired about her medical costs. Did she need help? Lili could send some money. Nina told Katya not to worry. “You know,” she said. “I’m a very rich woman.”
When Katya was finished, Lili hung up without saying a word. Stunned, she thought about all her chats with her grandmother, sharing drug-busting tales, or the woes of her complicated family, and receiving advice and kind words in return. In the tumult of so many disappointments and betrayals, Nina had been Lili’s unshakable, centering constant. Now this? She decided then and there: Her next target was Hydra.
Around the DEA office, Lili’s new obsession was swatted away. She felt like a rookie again—here comes Sochi, spouting off another wild idea. She told her bosses that she felt compelled to take on this criminal powerhouse, that Hydra was consolidating power. Hydra administrators were advertising on Telegram and posting ads on YouTube. But she was firmly reminded that a crime needs to be committed against American citizens. Neither Lili nor the DEA had jurisdiction.
Then, Tigran Gambaryan called with news: He was serving on a team which had secured “extraterritorial jurisdiction” to take on Hydra and had found a federal attorney in San Francisco willing to take on the case. He knew Lili might have an interest in Hydra. He offered her a spot on the team.
“I love you,” Lili said.
“My pleasure,” Gambaryan replied.
Gambaryan brought Lili up to speed: The team had infiltrated Hydra’s finances and mapped its internal hierarchy. The market, it turned out, employed a diverse roster of salaried professionals: marketers, lawyers, IT people, an HR department, purity testers, and doctors who provided telehealth services to buyers. Highly educated, capable people. Hydra’s efficiency was unprecedented, and unsettling.
They had tracked down the market’s central bitcoin wallet. Meticulous blockchain analytics had led them to a Hetzner data center in Germany. German law enforcement took over from there, and after a long wait, the US team learned that the server housed all of Hydra’s funds.
But they still needed a foolproof argument for jurisdiction, so Gambarayan turned to Lili’s undercover skills. By sending in photos of the DEA’s own laboratory, Lili posed as a chemist and got herself hired by Hydra as a purity tester, yielding further revelations about the inner workings of the market.
Next, she turned her attention to the owner of the server housed in the Hetzner data center, a man named Dmitry Pavlov. Lili mined Pavlov’s social media, dating profiles, and forum posts to stitch together a picture of a 32-year-old web host from Cherepovets, a northwestern steel town, who drove a suspiciously expensive Audi, taught music lessons, and had a girlfriend named Dima. Pavlov, she learned, had allegedly hosted several other Russian darknet markets. She cracked into Pavlov’s private correspondence and got a clearer picture of Hydra’s origin. An anonymous figure, moniker No Name, had merged about a hundred Russian darknet sites into Hydra in 2015. Pavlov came aboard as Hydra’s IT administrator, joining a cadre of operators: There was Zog, the site’s main programmer; Fat Cat, its admin; Handsome Jack and Fatality, the customer dispute moderators; GlavRed, marketer extraordinaire; and Hydra’s two leaders, Satoshi Nakamoto (named for the mysterious inventor of bitcoin) and the Observer.
In 2016, Pavlov found himself in the middle of a digital turf war. Hydra was being targeted by another site, RAMP, Russia’s leading drug marketplace at the time. Hydra was luring RAMP’s vendors away with better advertising, wider distribution, stronger connections to Chinese precursor manufacturers, and a pioneering, utopian vision: a darknet marketplace run like a tech startup, staffed by talented programmers and finance whizzes as opposed to RAMP’s team, whom they called “simple addicts.” In their ads, blasted out on WhatsApp, Telegram, and YouTube, Hydra called itself “the internet” whereas RAMP was just “television.” RAMP fired back by poaching Hydra’s chemists, and Hydra retaliated by overwhelming its competitor’s site, temporarily shutting it down. RAMP was rumored to have hired armed thugs to go after turncoat vendors. Hydra doxed RAMP’s admins, eroding its users’ trust. Then came the leak that won the war: screenshots of a 20-year-old RAMP admin arguing with his mother over text. The site shut down soon after.
Hydra grew unchecked, amassing 1 million users, then 2 million, then 17 million, in more than a thousand towns, expanding past Russian borders into Kazakhstan, Armenia, Ukraine, and Belarus. Hydra’s money trail ran through Russia’s crypto underworld, much of it flowing into exchanges headquartered in a razor-shaped Moscow skyscraper, Federation Tower, then home to Garantex, Suex, and Chatex, three crypto exchanges later sanctioned by the US Treasury for money laundering.
Keeping pace with Hydra’s expansion, Pavlov rented more servers each year, eventually up to 50, to house its operations. Sourcing cheap synthetic precursors from India and China, Hydra vendors were able to serve provincial villages previously untapped by darknet markets. Rural unemployment made the life of a kladsman attractive to disaffected young people. Less agile Russians—even grandmothers—signed on as vendors. Hydra’s presence became ubiquitous, normalized, the logical end point of all darknet marketplaces before it. In an ad depicting the entire history of human drug use, Pavlov and company claimed they were bringing about “the onset of a new level in the spiritual development of humanity.”
Tigran and the rest of the team weren’t terribly concerned with Pavlov. They were more interested in Hydra itself—in seizing its funds and crippling its infrastructure. Lili shared their goal but wanted more. She wanted justice: real people behind bars, punished for their crimes. It became an obsession. A personal quest couched within the greater investigation.
Linking Pavlov to Hydra was the easy part. Arresting him would be more complicated. Lili couldn’t arrest him on Russian soil, and, unlike OxyMonster, he didn’t seem to have any international competitions on the calendar.
Then war broke out. In February 2022, the case suddenly accelerated when Russia invaded Ukraine and NATO levied economic sanctions. Hydra’s crypto exchange stood to allow blackhat hacker cells, arms merchants, and private militaries to move money into Russia, skirting sanctions. Lili’s dark-web target was in the midst of an international crisis. Alliances and animosities had been awakened. If Pavlov is smart, Lili thought, he’ll move the site onto a Russian server, where it—and he—would be safe from adversarial governments. Out of Lili’s reach forever.
As Russian tanks battled Ukrainian guerillas, drones clashed in the sky, and the rest of Europe looked on in terror, Lili sprinted to assemble enough evidence against Pavlov. On April 5, 2022, the team made its move. German police descended on the narrow, labyrinthine halls of the Hetzner data center, pulling servers from the walls. Meanwhile, at the Phillip Burton Federal Building in San Francisco, Lili stood before a federal grand jury convened in secret and carefully laid out the meticulous digital trail from IPs to wallets to Hydra for Pavlov’s indictment.
With each server removal, Hydra lost functionality. Finally, the site went dark.
Without leaving the United States, Lili had helped topple the largest dark-web marketplace in the world. Pavlov was still free, which exasperated her. But she had a plan. One that relied, bizarrely, on the services of an organization which had never once helped her, or her family: Russian law enforcement. Lili was angling to force their hand. Once the Hydra news broke, with Pavlov’s name attached in her indictment, it would be a national embarrassment. Russia’s Federal Security Service, she was betting, would have to cuff him.
Her gamble paid off. On April 11, 2022, Pavlov was reportedly arrested while trying to flee his home province of Vologda. The Germans, meanwhile, seized the Hydra bitcoin wallet, flush with $25 million.
That evening, the Miami DEA emptied out, and Lili was the last to leave the office. As she crossed the parking lot alone, a little melancholy stirred. For the first time in years, there was nothing to chase. She’d proven herself, outlasted the skeptics, and somehow, from a desk in Miami, taken revenge on the same kind of crooks who had haunted her childhood. But she wanted to share it with someone who really understood what it meant to her. She called Luis. When he picked up, she said quietly, “I did it.”
VI.
The following year, 2023, Lili received an award for Outstanding Investigative Accomplishments in Cybercrime from Homeland Security. The ceremony was in DC, a ballroom full of badges and banquet tables. Lili was handed a small Lucite desktop ornament with her achievement engraved into it.
It was strange to receive such an honor, as Lili was no longer a federal agent. The Hydra case had made her an even bigger star—at a money-laundering investigations conference in Bangkok, Lili was told by a former intelligence agent that surviving Hydra admins had placed a $4 million bounty on her—but she quit the DEA a few months later.
Lili was eager for something new. Plus it was a good time to get out. Lili’s former mentor, Jose Irizarry—the swaggering superstar who’d taught her the ropes—had been arrested a couple of years before Lili’s exit and quietly left his post. Then, in 2022, Irizarry granted the Associated Press a bombshell interview. He had been skimming millions from undercover ops and, alongside other agents, had partied his way through Madrid, Cartagena, and the Caribbean with the very traffickers he was meant to catch. There were yachts, Hublot watches, Tiffany rings, reported WhatsApp threads full of drunk agents trading porn and arranging sex tours on the government dime. Irizarry was not posing as a money launderer to catch the cartels; he was just laundering money for the cartels. Diego Marin, the alleged “Contraband Kingpin,” was not an informant but a collaborator. By the time Irizarry confessed, $9 million had vanished into thin air. It remains the most consequential arrest of a corrupt DEA agent. “The drug war’s a game,” Irizarry shrugged to an AP video crew. “A very fun game that we were playing.”
Lili had been shaken. Irizarry’s corruption was staggering. And he damaged the clever, deep-cover casework she’d been developing outside of Hydra, where Lili-as-Olga had been successfully enticing criminal organizations into the trap of crypto laundering—until that entire operation was compromised by Irizarry’s bust, since all those introductions had been made by Igor. As one of Irizarry’s confidential informants, he was now forever tainted. “You can’t win an unwinnable war,” Irizarry had told the Associated Press. Fuck you, Lili thought. It was one of several corruption scandals that tarnished the entire DEA. And now Lili was onstage representing that agency, in a dark suit, hair pulled tightly, smiling for photos.
Back in Miami, Lili wondered what was next. She was 32 years old, and for the first time she felt the uncertainty of that youth. Her hard edges were softening. The road ahead wasn’t a clear line of duty or a strict moral code. She’d spent her whole life trying to impose order on the chaos of her childhood. It gave her a world of binaries. The law provides justice. People love you or they betray you. But this belief set the stage for a lifetime of disappointments. She’d spent all these years seeing everyone’s flaws, but not her own.
She’d become deep friends with Luis. She reflected on the ways she hadn’t always been the easiest partner either, leaving him for Harvard with an infant while he was undercover. And as much trouble as Katya had always been, she was still Lili’s mother. Every time Katya seemed to fall off the wagon, Lili took her in. It felt liberating, the idea of mercy. In this light, she could even understand her grandmother and her inability to abandon her grandson, no matter his misdeeds. You can’t erase pain with structure, she learned. Or purity. Or anything. You can’t outthink heartbreak.
So what can you do? You can recognize that the world is messy; that people fail you, and you fail them. You make peace with ambiguity. You realize that love and imperfection can coexist. You see that knowing this is the real safety net. Institutions may not be the answer, but people are. You forgive your mother. You forgive your grandmother. You look in the rearview mirror and see that your daughter in the back seat is likable and chatty, a sociable spitfire, like her father. You raise her the best you can, the way your mother could not do for you, to see the world for all its possibilities.
Spot illustrations: Chris W. Kim
Let us know what you think about this article. Submit a letter to the editor at [email protected].
The post She Was the DEA’s Premier Crypto Detective. The Clues Led Straight to Her Own Family appeared first on Wired.
