WhatsAppThreat Intelligence
Identifying a Persistent Digital Stalker Across WhatsApp and Instagram
March 20, 2025
Outcome
Stalker identified as a former colleague; evidence package delivered for restraining order filing.
Background
A client had been receiving threatening messages from 4 different WhatsApp numbers over a 6-month period. Each number was a prepaid burner, and local police lacked the resources to investigate.
Investigation Methodology
- Number Corroboration: Each WhatsApp number was reviewed for source-limited registration clues, line-type context, and public account overlap.
- Linguistic Fingerprinting: We deployed NLP analysis across all threatening messages to identify unique writing patterns, vocabulary preferences, and syntactic structures.
- Behavioral Correlation: The timing of threatening messages was mapped against the online activity patterns of the client's known contacts.
Key Findings
- Public-source context showed the numbers shared activation timing and local availability patterns consistent with a single operator.
- Linguistic analysis revealed a 91% match with the writing style of a specific individual from the client's professional network.
- Message timing correlated with a pattern: threats were sent within 30 minutes of the client posting Instagram stories, suggesting close manual observation of public activity.
Outcome
The identified individual was a former colleague who had been terminated 8 months prior. A comprehensive evidence package was compiled and delivered to the client's attorney, who successfully obtained a restraining order. Total investigation time: 3 weeks.