IRS Uses Cellphone Location Data To Find Suspects

The new program shows how anonymized information sold by marketers is increasingly being used by law enforcement to identify suspects. IRS Uses Cellphone Location Data To Find Suspects

IRS Used Cellphone Location Data To Try to Find Suspects

The Internal Revenue Service attempted to identify and track potential criminal suspects by purchasing access to a commercial database that records the locations of millions of American cellphones.

IRS Failed To Collect $2.4 Billion In Taxes From Millionaires

IRS Workers Who Failed To Pay Taxes Got Bonuses (#GotBitcoin)

Cyber Hack Got Access To Over 700,000 IRS Accounts (#GotBitcoin)

IRS Fails To Prevent $1.6 Billion In Tax Identity Theft (#GotBitcoin)

Six Million Tax Returns Are ‘In Suspension’ At The IRS, And That’s Preventing Many Families From Receiving A Valuable Tax Credit

Trump DOJ Declines To Charge Lois Lerner In IRS Scandal (#GotBitcoin)

IRS Uses Cellphone Location Data To Find Suspects

IRS Buying Spying Equipment: Covert Cameras In Coffee Trays, Plants (#GotBitcoin)

How A Lawsuit Against The IRS Is Trying To Expand Privacy For Crypto Users

The IRS Criminal Investigation unit, or IRS CI, had a subscription to access the data in 2017 and 2018, and the way it used the data was revealed last week in a briefing by IRS CI officials to Sen. Ron Wyden’s (D., Ore.) office. The briefing was described to The Wall Street Journal by an aide to the senator.

IRS CI officials told Mr. Wyden’s office that their lawyers had given verbal approval for the use of the database, which is sold by a Virginia-based government contractor called Venntel Inc. Venntel obtains anonymized location data from the marketing industry and resells it to governments. IRS CI added that it let its Venntel subscription lapse after it failed to locate any targets of interest during the year it paid for the service, according to Mr. Wyden’s aide.

Associated Resources:

Blockchain Technology Counters US Anti-Message Encryption Bill, AKA EARN IT Act (#GotBitcoin)

Cryptocurrency Technology Finds New Use Tackling Coronavirus

Here Are Some Steps That We Have Gathered To Protect You If And When You Choose To Publicly Take To The Streets:

If you are going to carry your phone with you, turn off your GPS, WiFi, and Bluetooth. All three of these can be used against you to locate your phone because they emit a signal while on. Turning off should be a daily practice already, but if it’s not, start now.
Store your phone in our Mobile-Blok Pouch , this allows your phone to be completely untraceable. Blocking all signals going in or out, and allowing access to your device when you feel safe to again. Know that your location and data are going to be safe and secure while you are out there practicing your rights.
Many outlets recommend airplane mode, but your phone can still be traced in this mode. This may turn off cellular, but that does not mean GPS or Bluetooth is turned off.
Turn Off Face ID or Touch ID. A more forceful law enforcement member could place the phone in front of your face or your finger on the bottom. What was designed to help us, hurts us in this instance.
Use secure messaging services. Applications such as Signal can ensure that your messages are only seen for a short period of time by the other party. This will allow you to go that extra step when you are unsure of how the other party is approaching their security.

Mobile-Blok Pouch (Blocks Cell Phone, RFID And Protects Your Cryptocurrency Hardware Wallet)

Justin Cole, a spokesman for IRS CI, said it entered into a “limited contract with Venntel to test their services against the law enforcement requirements of our agency.” IRS CI pursues the most serious and flagrant violations of tax law, and it said it used the Venntel database in “significant money-laundering, cyber, drug and organized-crime cases.”

The episode demonstrates a growing law enforcement interest in reams of anonymized cellphone movement data collected by the marketing industry. Government entities can try to use the data to identify individuals—which in many cases isn’t difficult with such databases.

It also shows that data from the marketing industry can be used as an alternative to obtaining data from cellphone carriers, a process that requires a court order. Until 2018, prosecutors needed “reasonable grounds” to seek cell tower records from a carrier. In June 2018, the U.S. Supreme Court strengthened the requirement to show probable cause a crime has been committed before such data can be obtained from carriers.

Location, Location, Location

Cell phones give off two different kinds of location data—cell tower data, which is collected by phone companies, and GPS data, which is mostly collected by apps running on the phone. Law enforcement authorities typically need a warrant to obtain cell tower data but can buy GPS data that is available through marketing firms.

But because marketing data doesn’t include names and cellphone numbers, attorneys at numerous government agencies have concluded the court decision doesn’t apply.

“The tool provided information as to where a phone with an anonymized identifier (created by Venntel) is located at different times,“ Mr. Cole said. ”For example, if we know that a suspicious ATM deposit was made at a specific time and at a specific location, and we have one or more other data points for the same scheme, we can cross reference the data from each event to see if one or more devices were present at multiple transactions. This would then allow us to identify the device used by a potential suspect and attempt to follow that particular movement.”

IRS CI “attempted to use Venntel data to look for location records for mobile devices that were consistently present during multiple financial transactions related to an alleged crime,” Mr. Cole said. He said that the tool could be used to track an individual criminal suspect once one was identified but said that it didn’t do so because the tool produced no leads.

Venntel is a wholly-owned subsidiary of the Dulles, Va.-based Gravy Analytics Inc., a company that works with some of America’s largest corporations on marketing and advertising campaigns using location records from millions of cellphones. Venntel said its data is sourced only from apps, not the mobile carriers.

“The data that Venntel uses is pseudonymized. Due to the confidential nature of our clients’ businesses and/or missions, we are not able to comment further,” Venntel President Chris Gildea said in an email.

Governments’ use of purchased location data has exploded in recent months, as officials around the world have sought insights on how people are moving around during the Covid-19 pandemic. In general, governments have assured their citizens that any location data collected by the marketing industry and used by public health entities is anonymous.

But the movements of a phone give strong clues to its ownership—for example, where the phone is located during the evenings and overnight is likely where the phone owner lives. The identity of the phone’s owner can further be corroborated if their workplace, place of worship, therapist’s office or other information about their real-world activities are known to investigators.

“The IRS appears to be one of a growing number of federal agencies that are buying Americans’ private data as part of an end-run around the Fourth Amendment,” which protects against unreasonable search and seizure, Mr. Wyden said.

“There are clear rules against tracking Americans’ phones without court oversight and buying data from Venntel and other shady data brokers shouldn’t amount to a free pass to violate our civil liberties,” Mr. Wyden said.

Location data is typically drawn from ordinary cellphone apps, including those for games, weather and e-commerce, for which the user has granted permission to log the phone’s location, though sometimes location data firms get anonymized data from cellphone carriers or collect a user’s location from Bluetooth beacons located in stores and other physical locations.

Venntel’s data is drawn from the robust ecosystem of advertising companies that collect location data from consumer cellphones and make it available for purchase on an opaque marketplace of brokers who deal in huge amounts of bulk cellphone movement data.

Many purchasers of the bulk data are advertisers trying to target customers or companies trying to understand more about their customer base. Some Wall Street firms use mobile location data to help guide investment decisions. But a small number of firms in this marketing ecosystem have started selling that location data to the U.S. government.

The Journal reported in February that Department of Homeland Security agencies were buying Venntel subscriptions for immigration enforcement purposes—to detect the presence of underground border tunnels or other sites of illicit crossings. The department said at the time that the data didn’t include “the individual user’s identity.”

Federal contracting records show IRS CI paid approximately $20,000 for access to the Venntel platform—roughly the cost of a single login to the service, according to documents reviewed by the Journal.

The Journal reviewed one marketing database similar to the kind used by Venntel. In many cases, the data is precise enough to clearly identify the home address of the phone’s user, which can then be cross-checked against public databases showing property ownership records or rental address history.

“What happens any time you have location on for any purpose to any website or app—you’re giving them permission to collect that GPS data. And they are not restricted by law by what they can do with it,” said Mark Rasch, a lawyer at Kohrman Jackson & Krantz who specializes in privacy issues.

“Even if it’s anonymous…it might be quite revealing,” he said.

Two Ways to Locate a Cellphone

There are two main ways to determine a cellphone’s location.

The first uses three or more cell towers to estimate it; that data is generally maintained by phone carriers.

The other way relies on the Global Positioning System (GPS), a network of orbiting satellites that helps digital devices orient themselves. Makers of apps that deliver services based on a phone’s location—such as mapping, weather and games—collect the satellite-derived coordinates.

The FCC estimates that cellphone tower data is accurate to within three fourths of a square mile of a phone’s location, whereas GPS data is generally accurate within 16 feet, though buildings, bridges and other obstacles can degrade accuracy.

GPS data is typically collected anonymously by the app makers, meaning no names or phone numbers are attached. Users are generally represented only by an alphanumeric string called the Identifier for Advertisers (IDFA) on iPhones and the Android Advertising ID (AAID) on phones running Google operating systems.

Cell tower data kept by the carrier is associated with phone numbers and account holders. However, some carriers strip out those numbers and sell the data to marketers—meaning that some location data brokers can also sometimes obtain anonymized cell tower data to supplement their trove of GPS data. Venntel said its data is sourced only from apps, not the mobile carriers.

Cell tower data—long used in criminal investigations—was at issue in the landmark U.S. Supreme Court case Carpenter v. U.S., where the court ruled in 2018 that a warrant was required to access historical location data from cellphone carriers.

“Whether the Government employs its own surveillance technology…or leverages the technology of a wireless carrier, we hold that an individual maintains a legitimate expectation of privacy in the record of his physical movements,” a majority of the court held in Carpenter.

But the court didn’t address GPS data—more precise, more widely collected, and sold in bulk by the marketing industry. Because it doesn’t contain consumers’ names or phone numbers, many government lawyers have concluded that the decision doesn’t apply.

Updated: 10-6-2020

Tax Agency Watchdog Is Investigating IRS Use of Cellphone Location Data

Internal Revenue Service criminal unit was using data to try to identify phones present at scene of crimes.

The inspector general who oversees the Internal Revenue Service said he would open a review into the legal basis for the agency’s use of a commercial tool that allows the warrantless surveillance of mobile phones.

In a letter to Capitol Hill shared with The Wall Street Journal on Tuesday, Treasury Inspector General for Tax Administration J. Russel George said he was examining the agency’s use of software sold by Venntel Inc., a data company that caters to government clients in the intelligence, military and law enforcement space.

The investigation came at the request of Sens. Ron Wyden (D, Ore.) and Elizabeth Warren (D, Mass.), who wrote to the inspector general last month raising concerns that the warrantless surveillance of mobile phones might violate the holding in a landmark 2018 Supreme Court case that requires law enforcement to obtain a warrant to track mobile phones of suspects. Mr. Wyden is leading an investigation into the use of cellphone location data for domestic surveillance.

“We are going to conduct a review of this matter and we are in the process of contacting the CI division about this review,” Mr. George wrote to the senators. A spokesman for the inspector general didn’t immediately respond to a request for comment.

The IRS Criminal Investigation unit, or IRS CI, had a subscription to access Venntel’s data in 2017 and 2018, and unsuccessfully attempted to use the data to try to identify mobile devices that were present at the scene of a crime, the Journal has reported. The unit stopped using the service after it failed to generate any investigative leads.

“CI takes the privacy of citizens very seriously and follows all laws and regulations surrounding that privacy while administering the very important law-enforcement mission of protecting our nation’s tax system,’ said a spokesman for IRS CI.

Venntel didn’t immediately respond to a request for comment.

The use of a tool that collects the location records of millions of U.S. cellphones has raised privacy and civil liberties concerns about the bulk collection of Americans’ personal data and its use by law enforcement.

Venntel has contracts with several components of the Department of Homeland Security, and numerous other specialized brokers sell similar data to a range of federal law enforcement and intelligence agencies.

Brokers like Venntel obtain mobile phone location data from the marketing industry and sell access to it to government agencies through its software platform. The data is drawn from ordinary cellphone apps that record location information to serve targeted advertisements.

Typically, the phones’ owners aren’t identified in these data sets—users are instead represented by an alphanumeric string. However, the real-world movements of the phone often give clues to its ownership. For example, where a phone is located during the evening and overnight hours is usually where its owner lives, allowing analysts and investigators to identify the owner.

Marketing data has a tremendous amount of surveillance potential. The Journal reported that a group of academics could track the movements of Russian military officers using a commercial platform similar to Venntel. In addition, Venntel’s tool has been used to identify and track suspects unlawfully crossing the U.S. border.

The National Security Agency warned in an August bulletin to government personnel that location services on cellphones should be sharply limited or disabled whenever possible.

“Location data can be extremely valuable and must be protected. It can reveal details about the number of users in a location, user and supply movements, daily routines (user and organizational), and can expose otherwise unknown associations between users and locations,” the bulletin warned.

The use of such data also raises novel legal questions that have yet to be addressed by the courts.

At issue is a 2018 Supreme Court ruling in Carpenter v. United States saying that geographic location data drawn from cellphones in the U.S. is a specially protected class of information because it reveals so much about Americans’ personal lives.

The court put limits on law enforcement’s ability to obtain such data directly from cellphone carriers without court supervision.

But the data used by Venntel comes not from mobile carriers but from marketing companies that collect it through software applications.

Marketing data is widely purchased within the commercial world, and government lawyers contend that they are buying a commercial product on the open market just like the thousands of marketing companies, investment firms and other commercial entities that routinely use such data.

IRS Uses Cellphone Location Data To Find Suspects

Related:

Related Articles:

Vast Troves of Classified Info Undermine National Security, Spy Chief Says

Your Questions And Comments Are Greatly Appreciated.

Monty H. & Carolyn A.

Leave a Reply Cancel reply