Operation Chain Reaction Part II: The Organized Crime Overlay

Executive Summary

In February 2026, we published a cross-reference analysis of the DEA's 69-page OCDETF Fusion Center Target Profile on Jeffrey Epstein (Operation Chain Reaction, OCDETF case NY-NYS-0829). That report focused on the target profile itself — the shell companies, foreign bank accounts, Angel Watch circumvention, and Secret Service double-query. This report goes deeper.

A systematic search of every OCDETF-related document in the 2.91-million-page EFTA corpus reveals that the Epstein investigation was embedded in a far more complex law enforcement landscape than the public record suggests. The key findings:

A note on evidentiary levels. This report distinguishes among four categories: (1) direct documentary statements in government records; (2) cross-references generated by automated case-database matching; (3) analytical inferences drawn from document placement or chronology; and (4) unresolved questions created by missing records. It does not treat adjacency, cross-reference, or inclusion in the EFTA production as proof of criminal coordination.

1. A documented telephone intersection between the Epstein case and a network that included Gambino- and Colombo-linked figures. An FBI pen register analysis from 2011 (Operation STRIP DOWN) documents that a phone number in contact with a Gambino-connected strip club network was also captured in the Epstein case (031E-MM-108062) during two separate periods in 2004-2005. Separate corpus records show Epstein was personally aware of the Cheetah club network, which also appears in the Burnside pen-register memo: he discussed the Cheetah in emails, Maxwell forwarded him articles about its law enforcement connections, and advertising materials from the clubs were found among seized materials.

2. An FBI intelligence assessment from April 2025 uses Epstein as an internal analytic reference point for blackmail methodology. An ARMS Reach vetting document identifies Epstein's former publicist as a Russian-connected technology investor, and describes a Draper-affiliated executive who "collected information on members of 'Sanctum' for the purpose of blackmail, similar to Jeffrey Epstein." All named individuals have denied the memo's allegations; the claims have not been independently corroborated.

3. The OCDETF landscape in the corpus includes at least 10 distinct operation names, three of which directly touch the Epstein case: Chain Reaction (DEA drug/wire fraud), Leap Year (the original SDFL prosecution code name), and Likquid Longhorn (the Tartaglione case — Epstein's cellmate).

4. Every specific dollar amount from the DEA target profile — $4,193,637, $4,079,102, $2,754,983, and others — returns zero cross-references outside the profile itself. The actual SARs, CTRs, and UCTRs referenced in the profile's attachments were never included in the EFTA production.

5. The EFTA00129000-00129999 document cluster, initially flagged for the pen register memo, contains 97 documents spanning organized crime, counterintelligence, the complete Alfredo Rodriguez obstruction case file, Glenn Straub/Cuba trafficking allegations, darknet threats against Epstein victims, and MCC death investigation subpoena returns.

1. Operation STRIP DOWN: The Phone Nexus

The Document

EFTA00129058 is a 27-page FBI pen register/trap and trace analysis memorandum, classified U//FOUO, dated May 16-17, 2011. It was drafted by an FBI Miami C-9 Squad agent under case 281A-MM-114129, operation name "STRIP DOWN."

The target is Patricia Burnside, whose phone was monitored from April 28 through May 16, 2011. Every number that called or was called by Burnside's phone was run against FBI case databases. The results document a dense set of cross-references spanning organized crime families, drug trafficking organizations, public corruption, and — on page 6 — the Epstein child prostitution investigation.

A pen register/trap and trace captures every phone number that calls or is called by a monitored line. Running those numbers against FBI case databases produces automated cross-references — flags indicating that a number has appeared in another investigation. A cross-reference does not mean the subscriber was a target, suspect, or knowing participant in either case. It means the number appeared in both records.

The Epstein Intersection

On page 6, the analysis states:

Target number has been called by telephone number [redacted] eleven (11) times and has called that number five (5) times. The subscriber for that number is unknown at this time. Between October 29, 2004 and January 10, 2005 this number was captured in FBI case #031E-MM-108062, and captured again between July 7, 2005 and September 28, 2005. This investigation involves a child prostitution case in the West Palm Beach, Florida area. Captioned targets include JEFFREY EPSTEIN and [redacted].

The phone number appears in the Epstein case records during two separate windows:

• October 29, 2004 – January 10, 2005: This period predates even the Palm Beach Police Department's investigation, which began in March 2005 after a victim's parent contacted police. The PBPD executed its first search of 358 El Brillo Way on October 20, 2005.
• July 7, 2005 – September 28, 2005: This period coincides with the PBPD investigation and early FBI involvement. The FBI formally opened case 31E-MM-108062 on July 25, 2006, but phone records from the earlier investigative period were filed under that case number.

Important framing note: "Captured in FBI case #031E-MM-108062" means this phone number appeared in communications records that were later associated with the Epstein investigation. It does not mean the FBI was monitoring this number in real time during 2004-2005. The FBI case number 31E-MM-108062 was not formally opened until July 25, 2006. Records from the earlier investigative period — including phone records obtained by the Palm Beach Police Department or through grand jury subpoenas — were filed under that case number as a repository. The 2011 memo's database query matched the number against this repository, producing the cross-reference. The document does not establish when the FBI first acquired these records or under what legal process.

The subscriber of the phone number connecting the two investigations is listed as "unknown at this time." A duplicate/clean copy of the same analysis (EFTA00129085, 10 pages) provides some additional unredacted address details.

Who Is Patricia Burnside?

Burnside is identified in the memo as the registered agent for the majority of companies belonging to Michael Bilotti and Jack E. Galardi. This is stated explicitly on page 12:

ZEDECK, along with BURNSIDE, are listed as the registered agent on the majority of companies belonging to BILOTTI and JACK E. GALARDI.

Leonard E. Zedeck (Sunrise, Florida) is the other registered agent, whose phone was also captured in FBI case #281F-LV-39165 (criminal enterprise) and on Bilotti's own pen register.

The Bilotti/Galardi Network

Michael A. Bilotti is identified as the "main Subject of this investigation." His phone contacts cross-reference to Gambino LCN members and associates including:

Jack E. Galardi is the owner of Galardi South Enterprises (GSE), a strip club empire that at one time encompassed some 30 topless cabarets, based in Miami (address: [redacted], Miami, FL 33162). His son Michael Galardi was convicted in 2003 in Operation G-Sting, a federal corruption investigation into strip club bribes to politicians. GSE's phone number was captured in two additional FBI cases:

• #281A-MM-77849: Two Camorra brothers from Naples, Italy, trafficking heroin in the Miami area (1996)
• #245D-MM-111628: Violent gangs in the Davie, Florida area (2008)

The Palm Beach Strip Club

The memo identifies Thomas Farese as a phone contact of Burnside. The entry on page 26 reads:

THOMAS FARESE, a made member of the Colombo LCN family. FARESE has been a captioned Subject in many Italian organized crime cases, and is said to be operating an adult entertainment club in Palm Beach County.

A made Colombo member operating a strip club in Palm Beach County — the same county where Epstein's known South Florida activity was centered.

Also in Burnside's phone network: Joe R. Rodriguez (no relation to Alfredo Rodriguez), manager of The Cheetah adult entertainment clubs in Pompano Beach and Hallandale Beach, who was surveilled meeting with Philip Gori at the Hallandale location.

The Cheetah in the Epstein Corpus

The Cheetah is not just a name in the pen register memo. A corpus-wide search reveals that Epstein was personally aware of this strip club network and discussed it in his own communications:

• EFTA01803729 (DS10, also EFTA02002323 DS10 and EFTA02536669 DS11): A March 13, 2011 email from Epstein to PR agent Mike Sitrick and libel lawyer Paul Tweed, in which Epstein writes: "listen He was Miami-dade cop then ATF. He quit to work for RRA while under investigation for his undercover work at the cheetah strip club. RRA represented cheetah." Epstein is discussing someone's law enforcement background in the context of a media correction effort. Three copies survive across two datasets.

• EFTA00767704 (DS9, also EFTA02434671 DS11): A December 9, 2009 email forwarded by Ghislaine Maxwell to Epstein containing compiled news articles about the Scott Rothstein Ponzi collapse. The articles reference the Cheetah Hallandale raid, Joe Rodriguez's settlement, and former ABT (Alcohol, Beverages, and Tobacco) officials — Roberts, Fisten, Wheeler — going to work at Rothstein's firm after investigating the Cheetah.

• EFTA00761764 (DS9): A March 24, 2010 email from Story Cowles to Epstein forwarding a background investigation report on Richard David Fandrey (former Miami-Dade PD detective, Blueline Investigations). The report identifies partners including Kenneth C. Jenne (former Broward Sheriff) and Patrick M. Roberts (former ABT Major), and contains the same Cheetah Hallandale narrative with Joe Rodriguez's lenient settlement.

• EFTA01720419, EFTA01720322, EFTA01720503 (DS10): Adult entertainment magazines listing Cheetah locations at North Miami Beach, Hallandale Beach, West Palm Beach, and Pompano Beach. These publications were among Epstein's seized materials.

The significance is geographic and contextual: the Cheetah clubs operated in Pompano Beach, Hallandale Beach, and West Palm Beach, within the same South Florida corridor that appears repeatedly in the Epstein record. Epstein discussed the Cheetah in email, received forwarded reporting about its law enforcement issues, and possessed advertising materials from the clubs. These materials establish awareness and thematic overlap, not direct contact between Epstein and Joe Rodriguez or any identified Burnside-network figure. But they make the pen register cross-reference harder to dismiss as a one-document oddity.

The Bilotti/Kadosh Network in the Corpus

The Bilotti/Zedeck network also appears outside the pen register documents:

• EFTA01128435 (DS9, 95 pages): The full deposition of Michael Kadosh in State of Florida v. Michael Bilotti, Case No. 08-3720CF10A, Broward County Circuit Court, April 30, 2015. Kadosh testifies to Bilotti's involvement in threats, extortion, and discussions of murder. Zedeck is discussed extensively as Bilotti's partner at TransCapital Bank. On page 51, Kadosh refers to "Jeff LaGardi" — a phonetic rendering of Galardi spoken under oath. The deposition attorney responds: "Yeah, I know who that is." This supports the conclusion that the Bilotti-Zedeck-Galardi network described in the pen register memo was real and the subject of active Florida state prosecution.

• EFTA01114020 (DS9, 8 pages): Miami-Dade County property records showing "MICHAEL BILOTTI TRS" (trustee) in a $100 transfer dated October 27, 2011, for the same hotel property (411 Washington Avenue, Miami Beach) described in Kadosh's testimony.

• EFTA01106213 (DS9, 40 pages): An index from the Epstein v. Rothstein case production (Conrad Scherer document set, PRODA 53342-43) listing "David Zedeck" among names for which database research was pulled. Note: the pen register names Leonard E. Zedeck; whether David Zedeck is a relative or the same network is not established by the corpus. The surname overlap is noted but not confirmed as a direct connection.

The presence of these documents in the EFTA corpus does not establish that Epstein had a direct relationship with Bilotti, Kadosh, or Galardi. The Kadosh deposition appears to have been collected as part of the broader investigative file. This supports the conclusion that the organized crime network identified by the pen register's automated cross-reference was real, active, and the subject of Florida state prosecution — not a phantom artifact of database matching.

The Full Case Cross-Reference Map

The pen register analysis references 35+ distinct FBI case numbers spanning:

What This Does NOT Show

The pen register documents do not establish that anyone in the Strip Down investigation had direct knowledge of, or involvement in, Epstein's crimes. A shared phone number captured in two FBI cases could reflect coincidental social overlap in South Florida's interconnected nightlife and real estate worlds. The document explicitly notes that several subscribers were "not referenced" in the FBI cases where their numbers appeared — meaning the phone was captured passively, not because the subscriber was a target.

What it does show is that the FBI's own analytical tools flagged a telephone intersection between the Epstein child prostitution case and a Gambino/Colombo-connected adult entertainment network in South Florida — and that this intersection involved a phone number whose subscriber remains unidentified.

2. The OCDETF Landscape: Parallel Investigations

Operation Names in the Corpus

A comprehensive search of every OCDETF reference in the 2.91-million-page corpus identifies at least 10 named operations, three of which directly intersect with the Epstein case:

"Operation Leap Year" — The Forgotten Code Name

The original Epstein prosecution at the Southern District of Florida was code-named Operation Leap Year. This detail — absent from virtually all public reporting — is documented across multiple case initiation forms (EFTA00187109, EFTA00223932).

How obscure was this code name? A June 2013 email chain (EFTA01657290) reveals that even FBI supervisors didn't recognize it. When AUSA Villafana needed the "Operation Leap Year Case File" produced for in camera review by Judge Marra, SSA Julio Quinones asked: "What is Leap Year?" SA Kuyrkendall had to respond: "Epstein case."

The context: Judge Marra had ordered production of the FBI case file for the Jane Doe #1 and #2 v. United States civil litigation (Case No. 08-80736-CIV-MARRA). The file had been sent to RMD (Records Management Division) for a FOIA request and was "up at headquarters." SSA Michael J. Donohoe noted the deadline: "The USAO has been ordered to produce an FBI case file and all evidence for a civil case on July 19, 2013."

The Case Number Evolution

The Epstein investigation used at least three FBI case number prefixes over time, all sharing the base number 3027571:

A separate case number — 90A-NY-3151227 — was assigned to the death investigation specifically.

The Tartaglione Overlap

Nicholas Tartaglione — Epstein's cellmate during the first neck-injury incident on July 23, 2019 — was investigated under Operation Likquid Longhorn (OCDETF #NY-NYS-1106, case 245D-NY-7786783). Tartaglione, a former police officer, was convicted of a quadruple homicide connected to drug trafficking and sentenced to four consecutive life terms. His case was run by Squad C-32 (Hudson Valley Safe Streets Task Force) at the FBI New York Field Office — the same squad that ran Operation New Blood and Operation Heroin Mill (EFTA00174481).

The Epstein case was run by Squad C-20. Both squads operated within FBI NYO's Criminal Division Branch C.

Weekly Status Reports — The Forensic Accountant

A series of Weekly Status Activity Reports (WSARs) from an FBI NYO forensic accountant reveal the ongoing post-death investigation alongside other financial crime cases:

These confirm an active financial investigation through at least August 2021 — two years after Epstein's death — with the forensic accountant issuing subpoenas and meeting with prosecutors. The same analyst simultaneously worked Operation Whirling Dervish (Venezuelan money laundering), Operation Blanca (financial fraud), and the Corinna Slusser missing person case (Squad C-20).

What This Does NOT Show

The existence of parallel OCDETF cases does not establish coordination between them. The pen register cross-reference (Section 1) was flagged by automated database matching, not by an analyst drawing operational connections. The Tartaglione-Epstein cellmate overlap may be coincidental — MCC housing assignments are made by BOP, not by the FBI squads investigating the inmates. The forensic accountant's weekly reports describe routine document review, not breakthrough findings.

3. The Draper/Drokova Intelligence Nexus

The Document

EFTA00129096 is a 3-page FBI internal email chain dated April 3, 2025, classified UNCLASSIFIED//LES. It originates from the FBI Washington Field Office (WFO), Squad CR05 — Transnational Organized Crime, Eastern Hemisphere — in response to an Enterprise Vetting Center (EVC) request. The import form header is at EFTA00129095, which bears the designation "OPERATION TRIP KNOT; PA-CAE-0525; OCDETF - EURASIAN ORGANIZATIONS."

The EVC processes ARMS Reach vetting requests — security checks for individuals who will be within arm's reach of the President of the United States, authorized under 18 U.S.C. 3056 and 3056A.

The subject is Timothy Cook Draper, a billionaire venture capitalist.

The Intelligence Assessment

The FBI agent's response identifies a network of connections radiating from Draper to Epstein:

Masha Drokova (aka Mania Drokova, aka Mariya Bucher): The document states Draper hired her as publicist for his hedge fund DFJ Financial — though Draper has categorically denied hiring her. Previously famous as a senior leader — head of the Moscow headquarters and federal commissioner — of the Russian youth movement Nashi, who kissed Vladimir Putin on television as a teenager — earning the nickname "Putin's kiss." The document states she "was also the former publicist for JEFFREY EPSTEIN." Her extensive presence in the Epstein files — over 1,600 mentions — has been independently confirmed by multiple outlets (CNN, TechCrunch, SF Standard). Currently a Silicon Valley technology investor residing in Switzerland. Also publicist for Quantum Wave Fund (QWAVE Capital) and Runa Capital, both headed by Russian technologist Serguei Beloussov.

Ted Waitt: Associate of the Foresight Institute. The document identifies Waitt as "the broker of the introduction between deceased convicted sex offender JEFFREY EPSTEIN and billionaire BILL GATES." Note: public reporting attributes the Gates-Epstein introduction to other intermediaries, including Melanie Walker and Boris Nikolic, not Waitt — and Waitt is more commonly linked to Ghislaine Maxwell as a romantic partner. The FBI memo's claim that Waitt brokered the Gates introduction has not been independently confirmed.

Charles Lieber: The document describes him as a "convicted Chinese spy and researcher." In fact, Lieber was convicted of false statements and tax crimes related to his undisclosed participation in China's Thousand Talents Plan — not espionage. He was sentenced to time served plus supervised release. Also associated with the Foresight Institute alongside Waitt and Draper.

Frank Moyle Creer: CEO of Draper Hero Institute (55 East 3rd Avenue, San Mateo, California). Previously an officer at DFJ Capital alongside Draper. The document states:

CREER was an active member of a private, high-end, high-initiation-fee sex/swingers club in Los Angeles and Northern California called "Sanctum," and collected information on members of "Sanctum" for the purpose of blackmail, similar to JEFFREY EPSTEIN. CREER actively blackmailed fellow DFJ CAPITAL managing partner STEVE JURVETSON.

The agent then draws an explicit structural parallel:

Similar to how EPSTEIN previously funneled money into a research lab at the MASSACHUSETTS INSTITUTE OF TECHNOLOGY (MIT), which he used as a means for gaining access to politicians and decision-makers who were also interested in the research being conducted, CREER funneled money into quantum computing research through QWAVE CAPITAL, through which he also gained access to politicians and decision-makers, possibly susceptible to his blackmail operations.

The Network Map

The following diagram summarizes the connections as described in the FBI memo. Lines represent associations alleged by the agent, not independently verified relationships. All named individuals have denied the allegations (see Post-Publication Responses below).

TIMOTHY DRAPER (billionaire VC)
├── DFJ Financial / DFJ Capital
│   ├── MASHA DROKOVA (publicist) ← also publicist for JEFFREY EPSTEIN
│   │                               ← "Putin's kiss" / Russian youth movement Nashi
│   │                               ← now Silicon Valley investor, Switzerland
│   ├── FRANK MOYLE CREER (CEO, Draper Hero Institute)
│   │   ├── "Sanctum" sex club member
│   │   ├── Blackmail operation "similar to Jeffrey Epstein"
│   │   ├── Blackmailed STEVE JURVETSON (DFJ partner)
│   │   └── Funneled money through QWAVE CAPITAL → politicians
│   └── STEVE JURVETSON (managing partner, blackmail victim)
├── FORESIGHT INSTITUTE
│   ├── TED WAITT ← "broker of the introduction between Epstein and Bill Gates"
│   └── CHARLES LIEBER ← convicted Chinese spy
├── Ukraine: Met VIKTOR YUSHCHENKO + MICHAEL CAPUTO re: opposing Russia sanctions
└── QWAVE CAPITAL / RUNA CAPITAL
    ├── SERGUEI BELOUSSOV (Russian, Singapore-based)
    └── SERGUEI KOUZMINE (co-founded FINTECH VENTURES + RITZIO ENTERTAINMENT
                          with Russian oligarch OLEG BOYKO)

Source Reliability Assessment

This document is an FBI internal assessment — a formal response from a counterintelligence squad (CR05) to a security vetting request. It shows how one FBI agent was thinking about a set of associations in the context of presidential security, not a set of established facts. The significance is institutional: within the FBI's own counterintelligence apparatus, an agent used Epstein's methods as a reference framework for assessing another individual's conduct. That is a notable analytical choice, regardless of whether the underlying allegations are accurate.

However, the document does not provide:
- The source of the "similar to Jeffrey Epstein" assessment (whether from investigation, informant, or analytical inference)
- Independent corroboration of the Creer blackmail allegation
- Any indication that Draper himself was aware of or complicit in Creer's alleged activities
- The nature of Drokova's publicist work for Epstein (timeline, scope, or whether it predated or postdated his criminal exposure)

The Waitt-Gates-Epstein introduction claim is not independently confirmed by public reporting (see note above). The Lieber characterization as a "convicted Chinese spy" is the memo's language, not a legal finding — a useful calibration marker for the document's analytical precision.

Post-Publication Responses

After the EFTA release of this document, all named individuals denied the memo's allegations:

• Draper stated he never hired Drokova and had no idea who she was.
• Creer denied membership in Sanctum, denied blackmailing Jurvetson, stating: "I have never blackmailed Steve Jurvetson" and "We are close friends."
• Jurvetson stated the memo "reads like a game of telephone based on hearsay" and denied being blackmailed.

The memo's allegations derive from a single FBI agent's assessment and have not been independently corroborated. The denials are categorical.

What This Does NOT Show

The document does not allege that Draper was involved in any criminal activity. It does not allege that Drokova participated in Epstein's crimes. It describes a network of associations that one FBI agent deemed relevant to a presidential security assessment — which is a lower threshold than criminal culpability. Its presence in the EFTA production indicates that DOJ/FBI deemed it responsive to the production process, though the specific basis for inclusion is not clear from the document itself.

4. Financial Fingerprints: What the DEA Found, and What's Missing

The SAR/CTR Landscape

The DEA's target profile (EFTA00173953) catalogues the financial intelligence on all 15 targets. For Epstein specifically:

The UCTR details identify Deutsche Bank Trust Company Americas (345 Park Avenue, NY 10154) as the filing institution (FinCEN BSA ID 31000040594074), with a redacted associate conducting transactions "on behalf of" Epstein. The specific account — 35266976 — is identified in separate corpus documents (EFTA01583482, EFTA01589449, and hundreds of other Deutsche Bank records) as Epstein's primary Deutsche Bank account.

The Redacted Associates' Financial Profiles

The profile lists recurring USAR amounts that appear to be shared across multiple targets:

Zero Cross-References

We searched every one of these dollar amounts across the full 2.91-million-page corpus. Every search returned zero results outside EFTA00173953 itself. The actual SARs, CTRs, and UCTRs that the profile summarizes were never included in the EFTA production.

The profile explicitly references three attachments:
- Attachment 1: USAR details
- Attachment 2: Epstein's CTR details
- Attachment 3: Additional CTR details (22 CTRs, $730,000)

None of these attachments appear in the corpus. This is a significant gap: the financial intelligence that triggered the DEA's interest — the specific suspicious transaction reports filed by banks — is absent from the 2.91-million-page production.

The FBAR Corroboration

While the SARs themselves are missing, the corpus does contain FinCEN FBAR (Foreign Bank Account Report) transcripts that corroborate the profile's foreign account data:

The Deutsche Bank BCTR (Bank Currency Transaction Report) transcript confirms Harry Beller — HBRK Associates co-founder — as the person conducting transactions on Epstein's behalf at Deutsche Bank. This is consistent with the Part 1 report's finding that Beller was an account manager for Epstein's entity constellation.

FD-794 Operational Expense Forms

The corpus contains seven clusters of FD-794 forms (FBI operational expense requests) directly tied to the Epstein investigation:

Early Investigation (2007):
- EFTA01728810: $340 to Delaware Secretary of State for certified corporate records of JEGE, Inc. (File #3284812) and $946 for Hyperion Air, Inc. (File #2268758). Requested by AUSA for prosecution and potential seizure of aircraft registered to these entities. Authorized from FY 2007 Asset Forfeiture Fund.
- EFTA01689427: $306.50 to American Express/DATAMARK for subpoenaed financial records (9 hours at $17/hour labor + $207.50 reproduction).
- EFTA01688746: Sprint phone bill reimbursement, case 31E-MM-108062 (JEFFREY EPSTEIN; GHISLAINE N. MAXWELL; WSTA - CHILD PROSTITUTION).

Reopened Investigation (2011):
- EFTA01688916: FD-794 dated April 7, 2011 — confirming the Miami investigation was active in 2011, consistent with the DEA's OCDETF case opening in December 2010.

Maxwell Trial (2021):
- EFTA00038871: Reimbursement for trial witness meals on June 23, 2021, case 50D-NY-3027571. Program classification: (RIRI) Violent Crimes Against Children.

The 2007 asset forfeiture requests targeting JEGE Inc. and Hyperion Air — the same entities flagged by the DEA eight years later — confirm that the FBI was pursuing Epstein's corporate infrastructure as early as 2007, before the NPA terminated the prosecution.

5. The EFTA00129000 Cluster: Satellite Findings

The document range EFTA00129000-00129999 contains 97 documents spanning 1,091 pages across at least 10 distinct investigative matters. Beyond the pen register memos and the Draper vetting, several documents contribute to the broader picture.

Glenn Straub and the Cuba Trafficking Allegation

EFTA00129165 is a 2-page FD-302 from August 29, 2019, filed under case 318B-NH-2050945 (Glenn Straub financial fraud investigation). A witness reports that a man identified as "Danny" from Miami used advertisements on Telemundo to recruit girls from Cuba — approximately fifteen years old — and that Epstein "was not the only one" involved.

EFTA00129169 is a 5-page screenshot capture of text messages from the same witness, stating:

"Danny from Miami knows Epstein and said [redacted] procured girls from Cuba for Glenn and Epstein"

The messages also reference a trip Straub took to Cuba, a photo book he kept in his yacht bedroom, and a figure named Bash Kazi — described as "some type of foreign arms dealer" — who lived on Straub's yacht during polo seasons. Straub's polo team Palm Beach Polo combined with Kazi's team KIG.

Source reliability: The document form is Tier 1 (FD-302), but the content is multiple layers of hearsay: a witness relaying what "Danny from Miami" allegedly said. The Cuba-Telemundo recruitment allegation is specific and falsifiable, but "Danny" is identified only by first name, and the investigation targeted Straub for financial fraud (South Atlantic Regional Center, Royal Palm Business Center, Highland Global Solutions), not trafficking. The Epstein connection is peripheral to the main case and comes through an intermediary's reported statements, not direct evidence.

The Darknet Threat

EFTA00129366 is a 13-page case file (9A-NY-3144791) documenting an anonymous darknet threat against Epstein victims. On July 25, 2019 — nineteen days after Epstein's arrest — a poster on a darknet forum announced "a planned execution of two of subject JEFFREY EPSTEIN's publicly named victims" and asked readers to provide their names, addresses, and phone numbers to "take everyone out."

The FBI deployed Online Covert Employee (OCE) #10179 to unmask the poster via Tor browser. International dissemination was authorized. The case was cross-referenced to 31E-NY-3027571 (EPSTEIN, JEFFREY; CHILD SEX TRAFFICKING).

The Rodriguez Case File

EFTA00129379 is a 258-page FBI case file (72-MM-113327) for the Alfredo Rodriguez obstruction prosecution. Rodriguez, a former Epstein employee, attempted to sell documents to attorney Bradley James Edwards for $50,000. The file contains the complete operational record: the $50,000 "show money" request from FBIHQ, the operational plan for the November 2, 2009 undercover meeting, FD-302s documenting the consent search of Rodriguez's vehicle, and the December 8, 2009 arrest.

Buried in the file (page 230) is an FD-302 interview with Robert Couturier, an interior decorator who visited Epstein's USVI house in June 2010. Couturier states that Epstein showed him a room in which he wanted to place "four beds and wanted to have it decorated in a very colorful palette for his girls." Epstein then:

stated that he has girls coming to spend time with him in the island. EPSTEIN then lamented that "the girls" are only interested in Facebook and MySpace and that he wanted the space in this bedroom to be comfortable and have access to the Internet as they were online so much. COUTURIER did not ask how old these girls were or anything about them.

Couturier also describes a massage room in Epstein's 71st Street Manhattan home with "photographs ('artistic renditions' according to COUTURIER) of young women in the nude, ranging from age 15 through 20 all hanging from the walls." He ultimately declined the job: "EPSTEIN had not changed his pattern of behavior obviously if he was having the home in the USVI decorated for girls to stay with him."

The MCC Death Investigation Returns

EFTA00129264 and surrounding documents contain subpoena returns from AT&T, Sprint, and 4chan responsive to SDNY case 2019R01059 (Epstein death at MCC). The 4chan records cover four specific posts on /pol/ (post numbers 222520442, 222518349, 222520257, 222518664) made on August 10, 2019 — the date of Epstein's death. AT&T toll records cover July 6 through August 11, 2019. Sprint subscriber identified as Michael Thomas.

6. Dead End: Operation New Blood

One OCDETF cross-reference proved spurious. EFTA00067077 is an FBI Guardian complaint from Forest Fate, an inmate and "repeat complainant" at Five Points Correctional Facility, who wrote to Judge Berman claiming information about an unnamed woman connected to Epstein. A Sentinel query cross-referenced Fate to Operation New Blood (OCDETF #NY-NYS-0879, a Newburgh NY narcotics/RICO case targeting the Yellow Tape Money Gang) — but only because Fate had previously written about New Blood targets. No substantive connection to Epstein.

7. The Missing Pieces

What the EFTA Production Does Not Contain

1. The SARs, CTRs, and UCTRs referenced in the DEA target profile. The financial intelligence that triggered the DEA's interest — specific suspicious transaction reports filed by banks — was not produced.

2. The identities of the 14 co-conspirators. All names, dates of birth, SSNs, and most identifying details are redacted. Two of the 15 targets are business entities; the rest are individuals.

3. The subscriber of the Epstein-connected phone number in the Strip Down pen register. Listed as "unknown at this time" in a 2011 document — fourteen years ago.

4. The DEA case file (C1-11-0049) itself. The target profile is a 69-page summary prepared by the OCDETF Fusion Center; the underlying investigation file — which ran from December 2010 through at least May 2015 — is not in the production.

5. Operation Chain Reaction's disposition. The FOIA request we have drafted (Request #01) specifically seeks the case closure memorandum. The available records show the investigation opened December 17, 2010 and was active through at least the May 2015 target profile. Its precise closure date and disposition are unknown. The OCDETF program itself was shuttered by the DOJ in 2025 — announced for dissolution in May, operations wound down by September 30, officially closed in November.

What Congress Could Request

The core problem: the public has the summary layer but not the underlying financial-intelligence records that would allow independent evaluation of the DEA's conclusions.

The Congressional Subpoena Guide (Section 4) identifies the withheld FinCEN records as a priority. This report adds specificity:

• The three attachments to EFTA00173953 (USAR, CTR, and CTR details for all 15 targets)
• The DEA case file C1-11-0049 (the underlying Chain Reaction investigation)
• The pen register subscriber identity for the phone number connecting case 031E-MM-108062 to case 281A-MM-114129
• The case closure memorandum for Operation Chain Reaction

Timeline

Significance

1. The Organized Crime Overlay. The Strip Down pen register establishes that the FBI's own analytical tools flagged a telephone intersection between the Epstein child prostitution case and a network that included Gambino and Colombo organized crime figures, Camorra heroin traffickers, and operators of adult entertainment venues in South Florida — including Palm Beach County. The broader club ecosystem referenced in the pen register memo also appears elsewhere in the Epstein corpus: Epstein discussed the Cheetah in email, Maxwell forwarded him articles about its law enforcement connections, and Cheetah advertising materials were found among seized materials. That does not validate the pen register cross-reference by itself, but it shows the overlap was not confined to one automated database hit. Whether it reflects operational connections or ambient South Florida social overlap remains an open question.

2. The Blackmail Pattern. The FBI's 2025 ARMS Reach vetting document explicitly compares Creer's alleged blackmail operation to Epstein's — the first such instance identified in the EFTA production of a formal FBI intelligence product using Epstein as a reference framework for analyzing another individual's blackmail methodology. All named individuals have denied the memo's specific allegations (see Section 3). The significance is institutional, not evidentiary: within the FBI's own counterintelligence apparatus, an agent used "similar to Jeffrey Epstein" as an analytical category.

3. The Financial Intelligence Gap. The DEA's 2015 target profile references specific SAR, CTR, and UCTR filings across 15 targets totaling tens of millions of dollars in suspicious activity. None of these underlying financial intelligence reports appear anywhere in the 2.91-million-page EFTA production. The profile is the map; the territory it describes was not released.

4. The Duration. The available records show Operation Chain Reaction opened on December 17, 2010 and remained active at least through the 2015 target profile. The investigation's precise disposition is unknown — a drafted FOIA request (Request #01) seeks the closure memorandum. The OCDETF program that housed it was shuttered by the DOJ in 2025. The investigation's complete record — the case file, the closure memorandum, and the identities of the 14 co-conspirators — remains unreleased.

5. The Investigative Palimpsest. This report and its predecessor together document at least five parallel federal investigative tracks touching Epstein: the SDFL prosecution (Operation Leap Year, 2006-2009), the FBI Miami case (31E-MM-108062, 2006-ongoing), the DEA OCDETF investigation (Operation Chain Reaction, 2010-?), the FBI SDNY case (31E-NY-3027571, 2019), and the post-death investigation (50D/SOD-NY-3027571, 2019-2021+). Each operated under different case numbers, different agencies, and — as the "What is Leap Year?" exchange demonstrates — sometimes without awareness of the others.

Methodological Notes

• All EFTA citations verified against full_text_corpus.db. Dataset assignments confirmed via SQL query before URL construction.
• Quoted passages are from OCR-processed text. Where OCR artifacts are obvious, corrections are made silently. Original text is preserved in the database at epstein-data.com/full_text_corpus/pages?efta_number=EFTA....
• The pen register analysis (EFTA00129058) is a U//FOUO law enforcement document. Names and case numbers reproduced here are from the unredacted portions of the EFTA production. Phone numbers are redacted throughout.
• The ARMS Reach vetting document (EFTA00129096) is classified UNCLASSIFIED//LES. It was produced under the EFTA and is part of the public record.
• Document counts and page ranges verified against the documents table in full_text_corpus.db.
• The "Galardi" search returned only 3 EFTA hits corpus-wide, all within the pen register documents. The Kadosh deposition (EFTA01128435) refers to the same person as "LaGardi" — a phonetic variant that does not appear in a literal "Galardi" text search. Aside from the phonetic "LaGardi" deposition reference, Galardi/GSE appear in the broader EFTA record only through the pen register materials.
• Cross-reference to the Part 1 report for the target profile's full entity analysis (SLK Designs, Hyperion Air, foreign banking, Angel Watch, Secret Service query).

This analysis relies on automated corpus search and Claude Code running Opus 4.6, which can make mistakes. All citations should be verified against the source documents.