We're not asking for a case, we're asking for help.
America First: free the American people first. A proposed free, nationwide, emergency-style service that sends vetted teams to clear people's devices and gather court-ready evidence, then hands it to the FBI and other agencies, with the victim's consent.
Victims report that when they can't afford an estimated $10,000–$50,000+ (more for persistent targeting) to detect and escape targeting, they can end up bankrupt or homeless, their lives destroyed. (Victims' reported experience; cost is our estimate.)
The gap: nobody provides hands-on help
911 and local police
In a PERF survey of local agencies, only 42% had a computer or cybercrime unit; 66% referred cyber cases to the FBI. (Survey from 2013, so dated.)
The FBI
IC3 received 1,008,597 complaints in 2025 and says the FBI "is unable to respond to every complaint." Complainants generally won't hear back.
The catch-22
Without proof, victims can't open a case. Without a case, nobody examines their devices. Many people also want help that doesn't run through their local department.
Too late, too costly
Victims often realize too late. Private forensics and sweeps are priced for businesses, so a lone person usually pays thousands or goes without.
How help would work: like an emergency service
24/7 hotline and app
Call or message anytime. No case, no proof needed to start.
Callback within 1 hour
A trained responder calls back and triages.
Same-day teams
For active or urgent compromise: a team or a clean-channel kit (clean phone, independent connection) the same day.
Walk-in help centers
Or go to a regional center to get devices checked and cleared.
Early detection
Free self-check
Warning signs: unexplained lockouts or password resets, unknown logins or devices, new profiles or apps, changed router settings, unexpected location sharing, threat alerts from Apple, Google or Meta.
Quick phone and router scan
Responders check using CISA guidance and Amnesty's open-source Mobile Verification Toolkit (MVT).
Early-warning service
Opt-in alerts when newly published indicators match what was seen on your devices, so help comes before the damage is done.
AI-assisted defense
Frontier AI models (e.g. xAI's Grok and others) could help responders triage, analyze logs and assemble evidence faster, keeping it free. Humans review everything; no client data used for training. No AI company has agreed to this.
All response times are proposed service targets, not guarantees.
How you'd activate help (proposed)
- Ask for help and consent. Contact by phone, web or encrypted channel. Sign written consent covering only the devices, accounts and network you own or control. Withdraw anytime.
- Protection and cleanup first. Safety steps, account lockdown, clean loaner devices if needed.
- Consent-based monitoring. A home network sensor or monitored VPN checks only your own traffic against CISA/FBI-published indicators (open-source Zeek and Suricata).
- On-site visit or walk-in center. Device spot checks, a detect-only bug and hidden-camera sweep, forensic imaging with chain of custody.
- Hand-off, if you choose. Evidence goes to the FBI and IC3 as a standard package. Help continues either way.
The threats: state-backed hackers and corrupt criminal groups
China
Volt Typhoon hijacked hundreds of U.S. home and small-office routers until a court-authorized FBI operation removed the malware (Dec 2023). An FBI official says Salt Typhoon took data from well over a million Americans.
Russia
FSB-linked Star Blizzard spear-phishes individuals in academia, government, NGOs and think tanks (CISA AA23-341A).
North Korea
Kimsuky impersonates journalists and academics to compromise individuals (FBI/State/NSA, June 2023).
Iran
IRGC-affiliated actors compromised U.S. water-utility controllers (CISA AA23-335A) and take over personal accounts by impersonating contacts and family (FBI-led advisory, Sept 2024).
Corrupt criminal groups
Stalkerware sells for about $140–$420 a year; trackers and hidden cameras for tens of dollars. Mercenary spyware vendors serve many buyers.
Your whole digital life
FDA recalled hackable insulin pumps and patched pacemakers; Commerce restricted PRC/Russia-linked connected-car software. Implants and robots are a forward-looking risk; no documented attacks on brain implants were found.
"Digital enslavement" is the founder's advocacy framing for losing control of your digital life, not an agency finding.
Go after the operators, not patch work
Every case becomes evidence, linked across cases, so U.S. law enforcement can lawfully go after the people, infrastructure and money behind the attacks. The service itself never hacks back.
Disruption
KV Botnet: court-authorized DOJ/FBI removal of Volt Typhoon malware from U.S. routers (announced Jan 2024).
Indictments and seizures
DOJ charged 12 i-Soon/APT27 hackers and officers (Mar 2025); 41 Star Blizzard domains seized (Oct 2024).
Sanctions
Treasury sanctioned the Intellexa spyware consortium (Mar 2024) and more enablers (Sept 2024).
Proposed structure
FBI-led, with CISA
FBI sets evidence standards and receives referrals; CISA provides indicators and guidance; DOJ handles prosecution.
A separate apolitical company
A private operator, not SpaceX itself, under federal contract, chartered with a binding ban on political tasking. Big tech firms are options only; none has been approached. Fallback: a dedicated federal unit or task force.
Insulated from politics
Independent board, outside audits, mostly private funding, no political appointees in case decisions, every victim served regardless of party.
Independent of local police
Intake doesn't run through local departments; out-of-area responders on request; complaints go to an independent board or inspector general.
Legal guardrails
- Consent only. One-party consent under federal law (18 U.S.C. § 2511(2)(d)); procedures default to all-party standards because about a dozen states require it.
- Only what you own or control. Family, roommates and guests are filtered out or must consent.
- No jamming, no hack-back. Jamming is illegal (47 U.S.C. § 333); accessing attackers' systems is barred by the CFAA (18 U.S.C. § 1030). Detect, document, refer.
- Licensing. Responders hold private-investigator licenses where states require them.
- Privacy. Minimum collection, encryption, published retention limits, no data sold or used for model training.
Legal summary for discussion; not legal advice.
FAQ
Is this service available now?
No. It's a proposal. In immediate danger call 911; report cybercrime at ic3.gov.
Is any agency or company involved?
No. The FBI, CISA, SpaceX, xAI and others are named as proposed roles or options only. None has agreed or endorsed it.
Will it cost me anything?
The proposal is free at the point of use for every victim, funded by sponsors, philanthropy and grants.
Do I need proof?
No. Your good-faith account is enough to start; the team gathers the evidence.
What if nothing is found?
You'd get a clear, respectful explanation of what was checked, hardening steps and support referrals.
Is it political?
No. It's strictly nonpartisan and serves every victim regardless of party.
Can someone use it to spy on another person?
No. It only works on devices and accounts you own or control, with consent and a good-faith screen.
I need help / get updates
This form opens your email app with a message to hello@personaltscm.com. Nothing is stored on this website. This is not an emergency line: in danger, call 911.
Sources
- FBI IC3, 2025 Internet Crime Report and FAQ — ic3.gov
- FTC, Protecting Older Consumers 2023–2024 (Oct 2024) — ftc.gov
- PERF, The Role of Local Law Enforcement Agencies in Preventing and Investigating Cybercrime (2014)
- CISA Advisories AA24-038A (Volt Typhoon), AA25-239A (Salt Typhoon-overlapping activity), AA23-341A (Star Blizzard), AA23-335A (IRGC / Unitronics) — cisa.gov
- FBI/State/NSA Kimsuky advisory (June 2023); FBI-led IRGC advisory (Sept 27, 2024)
- DOJ: KV Botnet disruption (Jan 2024); i-Soon/APT27 charges (Mar 2025) — justice.gov
- Microsoft, Star Blizzard domain action (Oct 2024); Treasury OFAC, Intellexa sanctions (Mar & Sept 2024)
- FDA cybersecurity communications (Abbott pacemakers 2017, Medtronic MiniMed 2019); BIS connected-vehicle rule (Jan 2025)
- Google TAG, Buying Spying (Feb 2024); Amnesty Mobile Verification Toolkit; FTC stalkerware cases (2019, 2021)
- Full source list in the brief (PDF).