We're not asking for a case, we're asking for help.
America First: free the American people first. A proposed free, nationwide, emergency-style service that sends vetted teams to clear people's devices and gather court-ready evidence, then hands it to the FBI and other agencies, with the victim's consent.
Victims report that when they can't afford an estimated $10,000–$50,000+ (more for persistent targeting) to detect and escape targeting, they can end up bankrupt or homeless, their lives destroyed. (Victims' reported experience; cost is our estimate.)
The gap: nobody provides hands-on help
911 and local police
In a PERF survey of local agencies, only 42% had a computer or cybercrime unit; 66% referred cyber cases to the FBI. (Survey from 2013, so dated.)
The FBI
IC3 received 1,008,597 complaints in 2025 and says the FBI "is unable to respond to every complaint." Complainants generally won't hear back.
The catch-22
Without proof, victims can't open a case. Without a case, nobody examines their devices. Many people also want help that doesn't run through their local department.
Too late, too costly
Victims often realize too late. Private forensics and sweeps are priced for businesses, so a lone person usually pays thousands or goes without.
Most cyber victims are left on their own
Among 49,112 NIBRS 2023 incidents coded to a cyberspace location, only 2.85% were cleared.
J. Criminal Justice 104 (2026), art. 102638
IC3 leadership's estimate of how many victims it captures. Applied to ~1.01M 2025 complaints, that implies roughly 8–10 million U.S. victim-incidents a year. Not an official FBI table.
IC3 (Donna Gregory); IC3 2025 report
181,565 complaints / $11.366B. AI-related complaints broke out for the first time: 22,364 / about $893M. Cyber-enabled fraud is about 85% of reported dollars, and people 60+ took a large share.
FBI IC3 2025 Internet Crime Report
Across 3,900 incidents, with $1.164B in attempted losses. Fast reporting is what makes recovery possible.
FBI IC3 2025 Internet Crime Report
How these numbers are framed. We never present unofficial estimates as official crime statistics. Police clearance (NIBRS) is not the same as IC3 complaints, which are not the same as all victimization. We show each layer, with its source, and label estimates as estimates.
How help would work: like an emergency service
No case number and no proof needed to start. A trained responder checks the whole envelope: phone, accounts, router, rooms and vehicle.
24/7 hotline and app
Call or message anytime. No case, no proof needed to start.
Callback within 1 hour
A trained responder calls back and triages.
Same-day teams
For active or urgent compromise: a team or a clean-channel kit (clean phone, independent connection) the same day.
Walk-in help centers
Or go to a regional center to get devices checked and cleared.
Early detection
Free self-check
Warning signs: unexplained lockouts or password resets, unknown logins or devices, new profiles or apps, changed router settings, unexpected location sharing, threat alerts from Apple, Google or Meta.
Quick phone and router scan
Responders check using CISA guidance and Amnesty's open-source Mobile Verification Toolkit (MVT).
Early-warning service
Opt-in alerts when newly published indicators match what was seen on your devices, so help comes before the damage is done.
AI-assisted defense
Frontier AI models (e.g. xAI's Grok and others) could help responders triage, analyze logs and assemble evidence faster, keeping it free. Humans review everything; no client data used for training. No AI company has agreed to this.
All response times are proposed service targets, not guarantees.
How you'd activate help (proposed)
- Ask for help and consent. Contact by phone, web or encrypted channel. Sign written consent covering only the devices, accounts and network you own or control. Withdraw anytime.
- Protection and cleanup first. Safety steps, account lockdown, clean loaner devices if needed.
- Consent-based monitoring. A home network sensor or monitored VPN checks only your own traffic against CISA/FBI-published indicators (open-source Zeek and Suricata).
- On-site visit or walk-in center. Device spot checks, a detect-only bug and hidden-camera sweep, forensic imaging with chain of custody.
- Hand-off, if you choose. Evidence goes to the FBI and IC3 as a standard package. Help continues either way.
The threats: state-backed hackers and corrupt criminal groups
China
Volt Typhoon hijacked hundreds of U.S. home and small-office routers until a court-authorized FBI operation removed the malware (Dec 2023). An FBI official says Salt Typhoon took data from well over a million Americans.
Russia
FSB-linked Star Blizzard spear-phishes individuals in academia, government, NGOs and think tanks (CISA AA23-341A).
North Korea
Kimsuky impersonates journalists and academics to compromise individuals (FBI/State/NSA, June 2023).
Iran
IRGC-affiliated actors compromised U.S. water-utility controllers (CISA AA23-335A) and take over personal accounts by impersonating contacts and family (FBI-led advisory, Sept 2024).
Corrupt criminal groups
Stalkerware sells for about $140–$420 a year; trackers and hidden cameras for tens of dollars. Mercenary spyware vendors serve many buyers.
Your whole digital life
FDA recalled hackable insulin pumps and patched pacemakers; Commerce restricted PRC/Russia-linked connected-car software. Implants and robots are a forward-looking risk; no documented attacks on brain implants were found.
Tools of surveillance are cheap and tiny
Commercial trackers, hidden cameras and stalkerware put surveillance within reach of almost anyone. That is why responders, not victims alone, should do the checking.
"Digital enslavement" is the founder's advocacy framing for losing control of your digital life, not an agency finding.
Go after the operators, not patch work
Every case becomes evidence, linked across cases, so U.S. law enforcement can lawfully go after the people, infrastructure and money behind the attacks. The service itself never hacks back.
Disruption
KV Botnet: court-authorized DOJ/FBI removal of Volt Typhoon malware from U.S. routers (announced Jan 2024).
Indictments and seizures
DOJ charged 12 i-Soon/APT27 hackers and officers (Mar 2025); 41 Star Blizzard domains seized (Oct 2024).
Sanctions
Treasury sanctioned the Intellexa spyware consortium (Mar 2024) and more enablers (Sept 2024).
Proposed structure
FBI-led, with CISA
FBI sets evidence standards and receives referrals; CISA provides indicators and guidance; DOJ handles prosecution.
A separate apolitical company
A private operator, not SpaceX itself, under federal contract, chartered with a binding ban on political tasking. Big tech firms are options only; none has been approached. Fallback: a dedicated federal unit or task force.
Insulated from politics
Independent board, outside audits, mostly private funding, no political appointees in case decisions, every victim served regardless of party.
Independent of local police
Intake doesn't run through local departments; out-of-area responders on request; complaints go to an independent board or inspector general.
Where to get help right now
The service above doesn't exist yet. These real organizations do. We have no affiliation with any of them.
Stalking or intimate-partner abuse? Technical steps are not enough. Use real advocates: RAINN or your local victim services.
A child's safety involved? Contact local authorities and child-protection resources. Never use hidden cameras on a child in intimate spaces.
If every device you own may be compromised
A full-permission "always-on AI guardian" on a compromised phone is just another implant with better copy. It can lie, delay or eat the evidence. The detector has to live on hardware they don't control.
- Stop hunting for a "secret" chat on that handset. New apps or accounts on the same device share the same compromise.
- Don't brief strangers on the plot. You'll attract fake helpers and recovery scams.
- Anything hashed, recorded or typed on that device can be swapped before you hit save. Treat it as hostile until a trusted custodian already holds a copy.
Evidence basics
- Photograph a suspected device in place before touching it.
- Log the date, time and room.
- Don't power it off if police may need it. Ask them first.
- Never destroy or "clean up" evidence.
- Photograph what normal looks like (car OBD port, router) so the unusual stands out.
Don't buy
- RF / GPS jammers. Illegal (47 U.S.C. § 333), and they knock out safety radios too.
- Planting or intercept kits. Covert cameras, microphones or trackers on others are crimes.
- An always-on AI guardian on a phone you think is compromised. Use the Witness protocol and trusted custodians instead.
Legal guardrails
- Consent only. One-party consent under federal law (18 U.S.C. § 2511(2)(d)); procedures default to all-party standards because about a dozen states require it.
- Only what you own or control. Family, roommates and guests are filtered out or must consent.
- No jamming, no hack-back. Jamming is illegal (47 U.S.C. § 333); accessing attackers' systems is barred by the CFAA (18 U.S.C. § 1030). Detect, document, refer. A disclaimer is not a warrant: no notice or terms page makes unauthorized access legal.
- Licensing. Responders hold private-investigator licenses where states require them.
- Privacy. Minimum collection, encryption, published retention limits, no data sold or used for model training.
Legal summary for discussion; not legal advice.
FAQ
Is this service available now?
No. It's a proposal. In immediate danger call 911; report cybercrime at ic3.gov.
Is any agency or company involved?
No. The FBI, CISA, SpaceX, xAI and others are named as proposed roles or options only. None has agreed or endorsed it.
Will it cost me anything?
The proposal is free at the point of use for every victim, funded by sponsors, philanthropy and grants.
Do I need proof?
No. Your good-faith account is enough to start; the team gathers the evidence.
What if nothing is found?
You'd get a clear, respectful explanation of what was checked, hardening steps and support referrals.
Is it political?
No. It's strictly nonpartisan and serves every victim regardless of party.
Can someone use it to spy on another person?
No. It only works on devices and accounts you own or control, with consent and a good-faith screen.
I need help / get updates
This form opens your email app with a message to hello@personaltscm.com. Nothing is stored on this website. This is not an emergency line: in danger, call 911.
Sources
- FBI IC3, 2025 Internet Crime Report and FAQ — ic3.gov
- FTC, Protecting Older Consumers 2023–2024 (Oct 2024) — ftc.gov
- PERF, The Role of Local Law Enforcement Agencies in Preventing and Investigating Cybercrime (2014)
- CISA Advisories AA24-038A (Volt Typhoon), AA25-239A (Salt Typhoon-overlapping activity), AA23-341A (Star Blizzard), AA23-335A (IRGC / Unitronics) — cisa.gov
- FBI/State/NSA Kimsuky advisory (June 2023); FBI-led IRGC advisory (Sept 27, 2024)
- DOJ: KV Botnet disruption (Jan 2024); i-Soon/APT27 charges (Mar 2025) — justice.gov
- Microsoft, Star Blizzard domain action (Oct 2024); Treasury OFAC, Intellexa sanctions (Mar & Sept 2024)
- FDA cybersecurity communications (Abbott pacemakers 2017, Medtronic MiniMed 2019); BIS connected-vehicle rule (Jan 2025)
- Google TAG, Buying Spying (Feb 2024); Amnesty Mobile Verification Toolkit; FTC stalkerware cases (2019, 2021)
- NIBRS cyberspace-location clearance analysis, Journal of Criminal Justice 104 (2026), art. 102638
- IC3 capture-rate estimate (10–12%), IC3 leadership (Donna Gregory), public remarks
- FBI IC3 2025 report: crypto, AI-related, Recovery Asset Team and 60+ figures — ic3.gov
- 47 U.S.C. § 333 and 18 U.S.C. § 1030 — law.cornell.edu
- Help directory: IdentityTheft.gov, RAINN, NIST, OpenTimestamps
- Full source list in the brief (PDF).