How one brave 16-year-old girl helped cops nail Matthew Falder, Britain’s ‘worst’ pervert
The victim who teamed up with cops to ensure he finally faced justice said: 'I knew what his game was and knew I could help'
THE online nicknames he chose – 666devil and Evilmind – were no empty boast.
Perverted Matthew Falder’s skill with computers allowed him to hide his true identity on the Dark Web as he brought misery to hundreds of helpless victims across the globe.
The outwardly respectable University of Birmingham lecturer was one of the most prolific blackmailers and exploiters of children the world has seen.
And after the 29-year-old was jailed this week for 32 years, we can reveal how he was snared by a remarkable four-year investigation that involved crime fighters from around the world.
Falder operated in the murky world of “hurtcore” forums, where perpetrators drive their victims to the brink of suicide.
So well disguised and encrypted were his Dark Web activities he was convinced he would never be caught.
He evaded capture for years, even though as many as 300 victims came forward to report his depraved crimes.
Falder promised large sums of money, which he never paid, for naked or partially-clothed images of people.
His victims would then be blackmailed into sending increasingly horrific images, which Falder threatened to send to their friends and relatives if they did not meet his demands.
One victim was a 16-year-old girl from East Anglia, whose bravery in challenging Falder helped nail him.
Last night the victim, now a 21-year-old mum, told how Falder contacted her after she put an ad on Gumtree offering her services as a babysitter.
Falder, posing as a depressed female life artist called Liz Candell, approached the girl using the now defunct Tor Mail.
Within minutes he had offered £1,200 for naked pictures of the teenager with her face showing.
She accused Falder of being a man and he sent her vile child porn photos in revenge, saying they were “a gentle start”.
The girl reported it to the local police but nothing happened.
A few months later she posted on Facebook: “This man is a sicko and police aren’t doing anything.”
That message came to the attention of Britain’s National Crime Agency (NCA) who interviewed the girl and examined the photos he had sent her.
"It all helped eventually identify Falder.
She recalled: “When he sent the pictures I went straight downstairs to my mum. I was sobbing.
“Even today I can’t forget those pictures. I don’t think I ever will.
“I knew what his game was and knew I could help get him caught. I felt like I was a detective.”
Yet for some time it felt like he would escape justice.
Police and spy catchers in Europe, New Zealand, America, Slovenia and Israel spent more than two years tracking his activities on the Dark Web but still there was not enough to identify him.
NCA senior investigating officer Matt Sutton recalls: “I had no scene, the internet is a virtual scene.
"I had no forensics whatsoever, nothing, no trace whatsoever. And no witnesses and over 200 potential victims. I had a needle in a haystack.
"There are 32million UK males over the age of 18 so I had to reduce that down to one.”
Then 18 months ago, at Interpol’s HQ in Lyons, France, Matthew Long, from the NCA, told investigators: “We need to step up to a level never before seen.”
His call sparked a 24/7 operation involving the FBI, America’s Homeland Security, Australia’s federal police force, Europol and GCHQ, Britain’s intelligence and security organisation in Cheltenham.
For five months the taskforce worked on unravelling the encrypted email addresses and TOR software which Falder used to share sick images with other paedophiles and to blackmail victims into performing perverted tasks.
Many of these acts are too vile to mention here, but included forcing victims into licking toilet seats and eating dog food.
He posted a list on one forum called “100 things we want to see at least once” which included a “young girl being used as a dartboard” and a video depicting a child’s bones being “slowly and deliberately broken”.
Uncovering Falder’s true identity was no easy task.
He used around 70 online identities to contact around 200 people from Cornwall to north-east Scotland, Wales to Northern Ireland, as well as in the US and Canada.
There was no money trail to follow. Falder’s currency was kudos in his perverted community rather than cash.
Finally, in March last year, a breakthrough led police to a scruffy flat in Birmingham. And in the following month, Falder was unmasked.
He did not conform to the stereotype of a computer geek living alone and friendless in a grotty dump.
He was from Knutsford, Cheshire, taught geophysics at Birmingham University, had a PhD from Cambridge and was sociable and well-liked.
He was said to be the life and soul of the party and his unsuspecting girlfriend doted on him.
Falder had an affluent upbringing and a top class education.
His Twitter feed revealed his love of dinosaurs, baking, table tennis and 3D-printing.
But on the Dark Web he was a VIP member of child abuse forums and he used popular and legal sites such as Gumtree to con young people into sending him nude photos of themselves — before the blackmail began.
Mr Long, who led the NCA investigation, says: “What was a surprise to us was that here was a very respectable man of good standing, with no previous convictions, working in a very reputable institution.
"But we also knew we were dealing with someone who was intelligent, committed and very sadistic.
"The level of dedication to remaining anonymous was significant. He was almost living a double life.”
For three months NCA detectives tailed him, even filming him using his laptop on a train journey.
Footage of Falder’s arrest in June 2017 shows him asking: “What is it I am supposed to have done?”
When his crimes were read out he said it sounded “like the rap sheet from hell”.
Police seized his computers and a USB stick but its information had been double-encrypted to hide its vile contents.
Computer experts working on both sides of the Atlantic cracked them and discovered a file marked “BM”. Mr Long says: “We presumed that was his blackmail folder.
"In there were hundreds of images of his victims which were absolutely horrific.
“Over the last four years we had been tracing these victims all over the world, interviewing them on video, suddenly the jigsaw pieces came together.
“Once we had arrested him and got that information from his devices we could conclusively say that Dr Matthew Falder was Evilmind.”
Evilmind had first come to the attention of the police in August 2013, when the FBI closed down “the worst website in the world”, Hurt 2 The Core.
One of its vilest contributors was a man calling himself, among 70 other aliases, “Inthegarden” — who posted blackmail images of a teenage girl.
Mr Long explained: “We believed he was in Britain but we could not be sure.”
For the next two years investigators tracked Inthegarden’s web trail and discovered the same person was posing as a woman artist on legitimate sites such as Gumtree.
They also ascertained that 666devil, Evilmind and Inthegarden were the same person.
Falder’s conviction was hailed as a “watershed moment” this week by NCA staff, but The Sun can reveal that already other forums on the Dark Web are filling with users trying to work out how to beat the cops.
Jamie Bartlett, best-selling author of The Dark Net, said: “They will be discussing what mistake Falder might have made to get caught and be working out how not to repeat it.
“It is getting easier to access child porn, but harder for the authorities to trace the offenders.
"The Dark Net has become more user-friendly. And you don’t need to be a tech nerd like Falder any more to use it.
“It takes GCHQ, dozens and dozens of police officers, working with several other police forces around the world, several years to catch just one person.
Timeline to capturing a monster
- AUGUST 2013 – FBI begins investigating Dark Web paedophile sites, identifying user “Inthegarden” and sending files to the NCA
- APRIL 2015 – NCA investigates 666devil posting on a Dark Web forum using an icon of his “daughter” and planning to “torture” her during “hell week”. They find links between 666devil, Evilmind and Inthegarden while seeking to safeguard the girl
- AUGUST 2015 – Suspect’s webmail accounts are accessed, identifying the girl in his profile and other US victims. Taskforce set up between NCA, GCHQ, US Homeland Security, Europol and Australian Federal Police
- MARCH 2017 – “Person of interest” identified at an address in Birmingham
- APRIL 2017 – Matthew Falder, 29, is identified as the suspect
- JUNE 2017 – Falder arrested while at work at the University of Birmingham. Devices seized and his Edgbaston home raided. Three days of questioning reveals Falder is behind 666devil
- JUNE to OCTOBER 2017 – Falder admits to and is charged with 137 offences. A further 51 remain on file
- FEBRUARY 2018 – Jailed for 32 years
“I am afraid there are many people like him out there who are not getting caught. There aren’t those kind of resources for all of them.
“I am sure GCHQ would not have got involved in this had it not needed the kind of data analysis and number-crunching that they are capable of. They use all different techniques to de-anonymise people.
But what this case shows is that the authorities will keep going until they get you.
“It is great that the police got Falder because it sends out a signal that they will come after you.”
Mr Long said last night: “There is nowhere a child abuser can hide that we will not follow.
Everything we have learned from the investigation and conviction of Matthew Falder will be redeployed in earnest against any offender hidden within the Dark Web.
“I’m not going to say the Dark Web is cracked, it isn’t. But with a significant effort the taskforce will continue to focus on dangerous offenders and bring them to justice.”
GOT a story? RING The Sun on 0207 782 4104 or WHATSAPP on 07423720250 or EMAIL exclusive@the-sun.co.uk