Reply All - #136 The Founder

Episode Date: February 14, 2019

The story of a person who wanted to change the world using the internet — by committing crimes on an unprecedented global scale. Check out Evan's book on Paul Le Roux, The Mastermind, here.  Learn more about your ad choices. Visit podcastchoices.com/adchoices

From Gimlet, this is Repai-Off. I'm PJ Vote. A couple weeks ago, I talked to this reporter named Evan Ratliff. Okay, so how long have you covered technology? I have covered technology since 1998. So when I started at Wired Magazine, I don't know that you could say I was covering it at that time. I was an intern to open the mail, but in a theoretical way, I was partied to an institution that was covering technology. Evan's really interested in people who use the Internet to invent new kinds of crime and trickery. cyber extortionists, bounty hunters, biopirates.

But for the last five years, he's been working on this one book called The Mastermind. It's about a guy who Evan believes could be the most prolific cyber criminal of all time. A man who started out as a broke, nerdy computer programmer, and in an astonishingly short amount of time, built this criminal empire that spanned across the world, sowing devastation pretty much everywhere. The guy's name is Paul Leroux. He was born in Zimbabwe, which at the time when he was born in 1972, Christmas Eve,

1772 was Rhodesia. He's white, so he was part of the minority that was at the time controlling the country. Evan says there was nothing about Paul's early life that gave any indication about what this guy was going to become. He was not a bad kid. I mean, everyone says he was a good kid and he was a sweet kid. And there were even, you know, bad kids in the neighborhood, one of whom I talked to who said, no, Paul was never like that. You talked to a neighborhood bad kid? I did. I talked to like a neighborhood gang kid who said, yeah, we all did that stuff. and he was just like a kind of pudgy kid who was quiet and friendly, and his relatives loved him, and he was very smart. And then when he was a teenager, Paul's family moved to South Africa. After that, he started to struggle.

Paul went to school there and did not like it. He didn't like the people. He didn't like the kids. He was really, really upset for some reason with learning Afrikaans as a kind of dead language. And it was really in his teens. like with many teens, he started to sort of change. He started to kind of project an attitude of superiority. And then he got a computer.

His cousin told me that he got a computer for washing a car. And from that moment forward, he became obsessed. Paul spent the rest of his teens and his early 20s just teaching himself everything he could about coding. And then in 1999, he goes online and releases this computer program. It's this new kind of encryption software, that's extremely powerful and extremely effective. It's called the E4M, encryption for the masses.

And it was quite well known in the encryption community because it was a piece of disk encryption software that lets you encrypt your whole hard drive. But one of the things it did is that it sort of hid the fact that you had encrypted it. Because even if you've encrypted your hard drive, if the authorities or whoever's looking knows that it is, they sort of know where to look to try to break that.

Right. It's like if there's one house on the block that has like 80 locks on the day, like, oh, maybe a drug dealer lives there. Exactly. and they're trying to, then they can spend all their effort trying to break in there. So it was trying to solve that problem and also just be a more advanced, sophisticated piece of encryption software.

He incorporated a lot of different types of software and algorithms into it. And when he did so, he released it as open source software. So he released it for free. He released all the source code. And the idea being, under the principles of open source software, that other people could work on it and improve it and would all get better. That's exactly what happened. people took Paul's free software, and they improved it, they made it better, and then they charged money for the things that they'd made.

Some of those people got to cash in, and Paul didn't. He tried to start a company that failed. By 2001, he was reduced to this job working for a guy whose product was actually based off Paul's work, a commercialized version of E4M, and if that wasn't bad enough, that guy fired Paul. None of this had been the plan. He kind of thought he was participating in this open source world where everyone helped each other. and then he came to feel that he never got any money and everyone was taking advantage of him. So he had really been sort of exploited

in putting his code out there. And he expressed that on message boards. What would he say? He would say, he basically said, it's been nothing but trouble. I've released this thing for free. It's been nothing for trouble. And also, I'm broke.

And meanwhile, the guy who's running the commercialized encryption software company has a house in the Riviera. is living very high, and Paul Rue, he gets divorced, he kind of bounces around, and then he ends up in Rotterdam, and he needs someone new, and he gets married, but they're living in this small apartment, and they have a kid, and they have a beat-up car, and he really, he wants what he's seen these other tech people have, particularly this guy who owns this company. He wants that, and he's so far from it, despite having created a really valuable, interesting piece of software.

To make matters worse, all of this was happening. right at the end of the dot-com bubble. These years were everywhere Paul looked. He would have just seen the internet turning people, people nowhere near as smart as him, into millionaires. Paul Leroux was not going to let this happen again. This was going to be the last time anybody made a sucker out of him. For a couple of years, he lays low.

And in 2004, he shows up online with his new venture. An online pharmaceutical company called RX Limited. The sort of pitch for the company is that in the United States, there is a really messed up healthcare system. And as part of that healthcare system, people get prescriptions for painkillers for their back, for their headaches, migraines, what have you. Then they maybe lose their health insurance.

They can't get their pain meds anymore. And then they go online looking for a cheaper place to find them. So the premise of the company was to satisfy that demand. Arx Limited was going to let Americans buy painkillers. quickly, cheaply, with very few questions asked. Instead of having to make an appointment with some doctor and then go to a pharmacy and get their drugs, Paul's website would take care of it.

Just put in your credit card, fill out a questionnaire, then somewhere on the internet, an American doctor will approve your prescription, send it to a pharmacy somewhere else in America, and then the pharmacy will just FedEx the drugs right to your house. That was the plan. Of course, for this to work, Paul needed doctors and pharmacists. So RX Limited starts just faxing all these mom-and-pop pharmacies

saying, hey, we have a very exciting opportunity for you. Using the internet, we're going to help connect you with customers, not just in your neighborhood, but all across America. Evan said, even though pretty much the only drugs that these pharmacists were going to be asked to sell were addictive painkillers, RX Limited was really good at making it sound like there was nothing shady going on. So, for instance, there's one pharmacist named Charles Schultz, who's this sort of 70-something pharmacist in Oshkosh, Wisconsin, who has two small pharmacies, their family-run, one of them is called Schultz Pharmacy,

and the other one's called Medicine Mart. And he gets a solicitation from Rx Limited, and he actually says, well, I'm not so sure about this, and he ignores it for a while. And then times get a little harder, and he sort of pulls it back out and says, you know what, maybe I will try this, and he contacts them. And when he calls Arx Limited back,

the obvious question he has is just like, is there any way this operation could possibly be legal? And they say, absolutely, because we're not dealing in controlled substances. We're not dealing in substances that are strictly speaking illegal under American law. But also that's true? That is true. None of the three painkillers that the network dealt in mass, mass quantities, none of them were controlled substances according to the DEA and the federal government.

You still need a prescription for them. But they aren't under the same legal controls that something like oxy-cotton would be or obviously heroin or marijuana or anything else. and they would even say, hey, call this ex-D-EA agent down in Florida, and he'll reassure you. And they did. They had a guy who the pharmacist could call. An actual X-D-A agent? No. No, it was not.

But very good at playing one. Got it. Or at least to the satisfaction of a 70-year-old pharmacist, you know, who would say, okay, well, you know what? It sounded too good to be true, but I guess it's not. Wow. What is the, even though these main painkillers aren't controlled substances, are they things that people are abusing? Is it like creating misery? Yes, something like Tramidol, there are plenty of users of Tramadol here who they're using it as an addictive drug. Like, many of the stories are the same stories that you hear around the opioid epidemic.

So when the, when the authorities started tracking this, they would go interview people. They'd try to find out who is buying all these drugs, this volume of drugs, who could it possibly be? The people they found were people who got into a car accident, lost their job, lost their health insurance. At one point, were prescribed painkillers, got hooked. and then they're just ordering tram it all online. The orders kept coming and coming. Paul Aru had call centers in Israel and the Philippines just filled with people who all day were taking orders from Americans, even calling them up and asking, do you need more?

This was years before the opioid crisis would become front-page news in America. But the people working in these call centers, they were seeing it. It was basically their business model. And it was profitable. Everybody in the chain was making lots of money. The pharmacists, the doctors, and more than anybody else, Paul, hundreds of millions of dollars. his big advantage over his competition was that he was able to make himself

untouchable online. For instance, this thing would happen to other questionable online pharmacies where they would just have their domain names taken away. Like GoDaddy or whoever would just kill their websites for violating the terms of service. That never happened to Paul.

What Paul Leroux did was, through RX Limited, he created a thing called A.B. Systems, which was a domain registrar. So it was basically, it was literally the... Oh, like, he himself was like a GoDaddy. He was a go daddy and he got it officially proved by ICAN to be the one of two domain registrars operating in the Philippines. Not only could they protect them in that way, if something did get taken down, let's say at a different place in the stream, a website got taken down, they could print a thousand more in an hour.

They could just mint domains in an unlimited fashion because they were approved by ICAN to make whatever domains they wanted. So they would have, you know, RX, biz, payouts, dot, three, four, five. Like, they could just make, add numbers, add random strings to the end, and just keep making them and making them and making them. And it made it essentially impossible to take the network down. They just, there was no way to do it. Devious. Yeah, it was brilliant. And what, like, like, at the height of Paul's success, like, how much of the online pharmacy market was just his?

There was one estimate at the time that half of the domains on the web that were devoted to Internet pharmacies, rogue Internet pharmacies, were. actually RX Limited. So it was potentially responsible for half of all of the gray black market distribution of pharmaceuticals on the internet. Again, impossible to know the exact numbers. If you asked anyone who was looking at like spam or pharmacies at that time, A-B systems was the absolute juggernaut. Almost from the beginning. Like in 2008, Paul's new business completely transformed his life. He's able to move with his wife and kids to the Philippines. Great weather, likes regulatory environment. He's bought a luxury penthouse condo and then another and then another. He has more money than he could ever spend. After a few years of this, Paul, like anybody who's outrageously

successful in a somewhat shady business, faces two options. One, he can take his somewhat shady business and just make it above board, like make sure that the doctors are actually reviewing all the prescriptions like they're supposed to. In that case, he probably makes a little less money. Or he just keep doing what he's doing and hope that he doesn't get in trouble. Paul chooses a third option. And nothing that happens next makes any sense, according to my understanding of how the world works. This is where the life of Paul Arou becomes completely absurd.

Paul Arou decides to grow and expand into new businesses. He decides that he knows exactly how to put his wealth to use. People who advised him would say, hey, invested in this or branch out into this. But he decided, well, if I branch out into cocaine trafficking and meth trafficking and moving gold across Africa, Those are very high margin businesses, and I can make 5,000% return on my money. Instead of eating out 5% at some, you know, some boring call center business, I can really, really maximize my money. And so what's his first step into sort of that, like going from being like, okay, I'm a businessman who's very good at the internet to like darker? The first step was probably he hired this guy named Dave Smith, who was a former soldier from the UK. He's actually from Northern Ireland. And he was operating the Philippines. There's all these security companies that sort of provide protection for projects, physical protection. If you're building a dam or something like that. And Dave Smith was a guy who had worked in Iraq. He'd worked in Afghanistan. He had a whole network of sort of mercenary ex-soldiers who were willing to do

pretty much anything, as it turned out, for a salary of $10,000 a month. Dave Smith sort of said, hey, I can open up this whole world for you. Now, I can give you the ability to project your growing power all over the world. And Leroux jumped at that opportunity. So that included starting to do gold purchases in Africa to launder money. So how would that work? He would send guys, I mean, all of this stuff sounds insane because one of the, one of the the things that's so remarkable about him is he would just send people to do something that

had come out of his head. So he had an idea in his head. And then he would say, hey, go, go try to do this. And if they failed, he'd just send another guy and another guy and another guy until either it worked or maybe it was a bad idea to begin with. But like he was like, he's doing this remotely. It's like he's playing a video game. Like it's like. Yeah, absolutely. I mean, he's sitting at his laptop, does not leave his house very often. He works as many hours in a day as you could possibly work and sleeps maybe a few hours a day. He's got a beat-up old Windows machine that he has outfitted exactly how he wants it with exactly the encryption software that he has written to make sure that he can hold

everything on there and it's all protected. So for the gold, for instance, he would just send a guy to like a craw in Ghana and say, okay, we're going to buy some black market gold. Literally ex-US soldier sent to a craw with a big bag of money walking around saying, who's got gold? Really? Yes. And so then they would, you can find it.

The crazy thing is it works. Like, you can find someone. How? Well, you start, I mean, it starts with, they just talk to a taxi driver. I mean, there's a known black market for gold. So there's, there's, there's, wherever there's gold mining, there is also an urban center where people are siphoning off gold from the mines. And it's ending up being sold in sort of back alley, so to speak. But it's like, you would expect that the way that story ends is like when your friends go to a city,

for the first time and try to buy weed, and they end up with, like, a bag of oregano or whatever. You know what I mean? Like, you shouldn't just be able to send somebody to go buy gold. I agree. Sometimes it would go that way. And so all the mercenary guys that I talked to, you know, they would have a story about,

oh, this one guy, you know, shy Ruvan, they sent Shai Ruvan into the Congo, and Shireun had a bag of money, and he just got jacked as soon as he arrived at the airport. They're like, you can't just show up in the Congo with a bag full of money and expect not to get jacked. But you can send a couple of guys into the Congo who first figure out weapons and security and safe houses and contacts.

And then you send the guy with a bag of money. And when he shows up at the airport, there are two guys with automatic weapons who are there to usher him into a safe house to then provide the money to get the gold. And then the gold is driven across borders in a pickup truck or an SUV with like five guys who are ex-U.S. military, British military, South African military guys who their entire job is to protect this gold. So that's how they did it. It really is like he thinks he's playing a video game. It's like he tried the level once. It didn't work. And it's almost like he's thinking like, oh, I just need to upgrade my weapons or like send in more guys. It is a video game and he was operating his video game. It was sort of like some combination of a set video game. And then

like, I'm trying to think a good example, maybe the Sims where, what's that one on my he's played, where you build... Minecraft? Where you can make your own rules, too. You can create worlds. So the craziest example of that is that he tried to start essentially his own militia in Somalia.

And he just, from the Philippines, he was just like, you know what was a good place to go? Somalia, because the government there has no control of the environment. And if I were to set up an operation there, I could operate entirely lawlessly. I could do whatever I wanted. So he said about creating

what was ostensibly a fishing, a tuna fishing operation. A tuna fishing operation. In Somalia. Okay. Which is actually not a terrible idea, by the way. So I didn't know this, but Evan told me that tuna fishing is actually a very lucrative industry. And apparently there used to be lots of fishing off the coast of Somalia, but it was all foreign fishermen, which not everybody in Somalia liked.

And so some people actually started going out and capturing the boats. That's apparently how Somali pirates first became a thing. Anyway, now there's a lot less big commercial boats fishing. And if you're Paul Leroux, all of this is somehow just something. you know. And Paul Roo, always looking for a market, an opening, an opportunity, he said, you know what, I bet there's, it's just teeming with fish there. So if we set up a fishing operation and we just coordinated with the pirates, we can just buy them off, we can use them for protection, we can protect them, we have our own forces, then we could fish for tuna there.

So is his superpower, like a combination of, he has lots of ideas for illegal things to do, and he's very audacious? Like, what is, why is he the person who has that idea and does it? Whereas, like, another person, even like another criminal, doesn't do it. I think the combination of he made so much money in this pharmaceutical business that he really had the ability to kind of just splash it around on crazy ideas. So he really was like, you know, his version of like Richard Branson or actually a better example is his version of Elon Musk who's sort of, you know, now I'm going to start this. Now I'm going to start that. I'm going to start Tesla. I'm to start this. His version of that was, hey, why not Somalia? Hey, why not gold mining? Hey, why not arms

dealing. That's where he wanted to splash his money around. He thought, I can be the biggest global criminal in history. Evan actually managed to get a picture of what Paul was like as a CEO. Turns out kind of annoying. Like, he had too many ideas. For instance, in Somalia, he never even gets to the tuna fishing. He decided that was going to take too long. So instead he flew in a botanist to try to see if he could grow poppies and cannabis in Somalia. Stuff like that completely frustrated his militia. Plus, he was just a micromanager. He would call you up in the middle of the night and have some complaint about the gold deal you were doing. And that's just not what the CEO should be spending time on.

Like, the CEO should delegate that task. And how did his, like, mercenary hitman feel about getting hassled by, like, the computer nerd boss who's micromanaging them? Well, they didn't like it. But a lot of them, the mercenary guys, they were like, this is better than working in Afghanistan or Iraq. Like, some of them thought it was incredible fun. They're getting paid $10,000 a month, flying around the world. doing crazy shit, and they couldn't get enough of it. And how would he hire?

Like, how do you pick which mercenaries are the good mercenaries? They would do it through networks. It's just networking. Dave Smith just had contacts who had worked with him at like crucible, like a security contractor that's contracted to work in Iraq. So he's got people that he can email and say, hey, I've got a rich guy. This rich guy is paying really good money for gray area work, show up in the Philippines, we'll have a meeting. If he likes you, we'll hire you. That's how they would do it.

So it's like, it's not like they're on LinkedIn. Like, it's like informal word of mouth, phone calls. Well, they did not hire through LinkedIn, but it is like they were on LinkedIn. Really? Yeah. As a matter of fact, well, so they had, they would have front companies. So they had a front company called Eschelon. Eschelon or Southern Ace was the name of the company that operated in Somalia. They would take resumes. You submit your resume at Eschelon. Your resume says, I have, you know, close protection combat experience. And so when I started looking for these guys, at first I was sort of like, I'll never find these mercenaries.

How could I possibly find them? They're a hold up somewhere. If they haven't been arrested, they're in hiding. It literally went on LinkedIn, typed in Southern Ace, and a guy just comes up. He just got Southern Ace on his resume as a place that he worked. That's wild. He's described the work in a way that's very sort of sounds vaguely like it's any other security company, you know, provided protection for projects in Papua New Guinea and, you know, management

of equipment. And, like, what I found out that he did was he burned another operation. They had a timber operation in Papua New Guinea. He burned the other operation to the ground, the competitive operation. And, like, the guy that worked for Southern Ace, he was a hitman. He was hired by LaRue as his personal hitman under a company called Southern Ace, and he just put it on his resume. He didn't say, it just had Southern Ace, like, human troubleshooting or whatever. It didn't say like hitman. Exactly.

That's so wild. It's weird. Also, I guess I never thought of it, but just that there is like a, that it's an industry. Do you know what I mean? That there's like a world of people who kind of know each other and used to work together and like, oh, that guy's great. That guy's terrible. It's just strange that a computer nerd finds himself in that industry. I think that was one of the things that was so remarkable to me was how you could get into so many worlds so easily.

Evan found a bunch of early Usenet posts that Paul wrote. He doesn't come across this. someone with some special insight into the world beyond coding software. He actually comes across as super blinkered, misogynist, racist, he has an idiotic stereotype for every country. So, turns out, here's what happens when you give a misanthropic internet troll access to lots of funds and lots of mercenaries. He's moving cocaine and meth throughout the world.

He's selling weapons to Iran. At one point, he even considers an armed coup of the government in the Seychelles. And by 2010, he's already gone a long way to making sure that none of this stuff can get traced back to him. His business is just a web of shell companies, and he's even started to erase his name from the internet. And in the real world, it was like he had the Philippines totally under his control. Evan said Paul had bribed so many cops that even the ones who wanted to investigate him were too scared of their bosses. They figured Paul probably paid them off.

He had moles in the American embassy. He could buy and sell intelligence reports. He converted his money into gold bars, which he was then hiding under his estates in the Philippines. Some of it apparently went under a hot tub. He seemed totally untouchable. But what Paul Laroo didn't know was that somewhere in Minnesota, two DEA employees had already begun to pull on a tiny thread.

So the story of how Paul Laru would eventually be caught, it started slowly and it started far away. In 2007, in an office building in Minnesota, there were these two obscure DEA investigators whose whole job is basically just to regulate pharmacies in the U.S. They were what you call diversion investigators, which means they're not like DEA agents. They don't carry guns.

they don't bust people with cocaine and things like that. They only investigate the diversion of prescription drugs onto the illegal market. That's their job. Got it. So Kimberly Brill and Stephen Holdren, they would raid pharmacies, pharmacies that were selling controlled drugs online. So one day they're investigating a suspicious pharmacy in Chicago. This place called Altgeld Garden.

Altgild Garden is part of Paul's rogue pharmacy empire, but they don't know that. All they know is Altgill Garden is shipping way too many painkillers. And Kimberly Brill wants to know exactly how many and to who, and so she subpoenas Alt-Kild's FedEx account. And when she does, she sees something that catches her completely by surprise. The FedEx account is being shared with dozens of other pharmacies all across the United States. It's like the shady pharmacy version of 80 people who all use the same Netflix password. So it's like someone got a hold of a FedEx number account and shared it with all their friends and everyone's shipping on it. Oh, which is really sloppy.

Like RXLM is having multiple pharmacies in their network, like share login, basically? Basically, yeah. So that's when those investigators realized, oh, now we can see that the other entity, RX Limited, is the thing behind all of this. Were they surprised at just to realize they'd found something like maybe bigger than what they'd been looking for? They were stunned. I mean, when Kimberly Brill opened up this spreadsheet, she was basically said, oh, my God, this is unbelievable and like called her partner, Stephen Holdren. It was like, you have to come look at this right now. Because they think they knew that a network might, involved multiple pharmacies, but the volume of shipments that were happening was just staggering. And we were talking about tens of thousands of drug orders that are happening all on the same FedEx account. And so this is where the game of Cat Mouse really starts, because she knows that there's a network,

but she doesn't know who's running it. And by her own admission, she and her partner are not internet experts. So in order to understand what RXLIMIT is up to, they have to teach themselves how the internet works. They have to learn about like domain registrars, and IP addresses, peer locations. It's funny because they're learning, they like understand drug dealing and they're trying to learn the internet. He understands the internet and is learning like real life drug dealing. And he's operating with hundreds of millions of dollars, whatever equipment he wants, anything he wants to buy. No bureaucracy. And they're operating in cubicles in a tower in Minneapolis with literal notebooks, like five by seven notebooks where they're keeping ledgers on everything they

found and like an old desktop computer, and they're taking on this man and his network. Online, Paul's network doesn't look like a network. It looks like an infinite number of unrelated, spammy pharmacy websites. But when Kimberly and her partner map it all out, they realize that even though there's all these websites, when you actually buy the drugs, like at checkout, you get redirected to a payment page, and that payment page is only hosted at one of two different places. And so they subpoena one of those domains. This place called SystemC.A. And so that was a sort of centralized point where they could say, okay, where is that hosted? They found it hosted at a place in Canada.

They could get a subpoena to go in there and try to get the information off who's paying for this. And they came across the name Paul Roo. He had just put his name as like the owner? When he first started, he put his name on everything. Because he didn't know what it was going to be. He didn't know what was going to be. He didn't know what else he was going to be doing. He didn't know the extent to which he was going to be tracked by the.

the U.S. authorities all over the world. He figured it out later, and he started taking his name off of everything. And actually, one of the investigators involved basically said to me, if he had done that a little bit earlier, he would be free today. And they don't understand at this point, I guess, that the thing that they're looking at is the least shady thing that he probably does at this point. Yeah, at the beginning, I mean, he wasn't doing as many shady things at the time they first started looking. In 2007, 2008, he was just getting into real serious other types of crime, but then they would start to see these, just these anomalies that they couldn't understand. Like, they couldn't understand why he's making phone calls to Somalia. He's not running a fucking

pharmacy in Somalia. And so these pieces like slowly started to cohere, because it was almost just impossible to believe that he was involved in the scope of things that they eventually discovered. Like, you wouldn't sit there and be like, oh, you know what? We should look into whether or not he's buying meth out of North Korea. I wonder if he's trying to take over a country. Wait, was he really buying meth out of North Korea? He was buying meth. of North Korea. How does that work? That's, uh, that's classic Paul Leroux. He had a, he had a guy who worked for him. He was actually a bartender. He owned a bar in Manila. And then the guy came to him and said, hey, look, I know this man and this man has contacts in the Chinese triads in the,

in the organized crime in Hong Kong. And you should talk to him. And so Leroux goes and talks to him and this guy had, the, the bartender guy, it's like his brother's friend or something. And eventually, it comes to light that actually the man does have contacts. He is part of organized crime in Hong Kong and he knows how to get meth out of North Korea. So they start up an operation, figure out

how they're going to get it out of there, where it's going to go. It seems like they bought, you know, 50 kilos initially and then eventually he bought a ton and... You mean a literal ton. I mean a literal ton. It's manufactured by under the direction of the state in North Korea and so it's like 99.9% pure.

It's like the purest in the world. And so that was one business that he had was getting some meth out of North Korea. He actually tried to buy a submarine from North Korea as well because he wanted to use it to ship the stuff. And because why not? Yeah. And do you have a sense of like how he was, was he feeling like, was he enjoying it? Was he like stress that? Like, what is the experience of this like for this guy who started in a very different place and is now remote micromanaging, a burgeoning drug empire? I sort of think like any, you know, CEO of something that becomes massive and sprawling and you're trying to keep it entirely under your control, that there were times when he was,

frankly, doing the thing he had always dreamed of. Like, he loved deals. He loved making deals. The bigger the deal, the better. And he would talk with this sort of satisfaction about how many deals he had going on in all of these different industries. He's like he had diversified his company, and he was just succeeding in so many areas. But then I also got a hold of a lot of chats that he had with his cousin.

And in those chats, you can also see the stress that comes with that. You know, he owes people money and people owe him money, and there's violence involved, and it starts to get very serious. And that is wearing on him. And he will periodically say, hey, I need a death certificate because I need to disappear. and I need people to think that I'm dead. And then he sort of works through whatever problem that was. And he doesn't need the death certificate anymore.

He's like, I'll forget the death certificate. Yeah. Then six months later, he's like, I need surface to air missiles. So we've got to get surface to air missiles. You know, he's just kind of like always, always churning. And there's one sense in which that's what he was born to do. And there's nothing more satisfying than that. And there's another sense in which it seems like the world was kind of closing in on him

by 2011- 2012. Evan says that by this point, Paul had just started to lose it. He got very paranoid and very bloodthirsty. For years, he'd used Dave Smith, his chief mercenary, to threaten people. Some employee who he thought could talk to the cops or somebody who he thought had stolen his money.

But now, he just wanted those people killed. And the list of people who should be killed kept expanding. It wasn't just people who were threats to Paul. It was anybody who crossed him. His cousin owed him 50 grand. Paul had his house fire bombed. A real estate agent lost his money in a deal. He had her murdered.

So he really kind of like got so deep into his head on betrayal that he would just have anyone. By the end, he would have anyone killed. His hit list included people who owed him $1,000. Really? And he made hundreds of millions of dollars. And he had a woman on his hit list, another real estate agent, who had supposedly built him for $1,000. It's insane.

What's the closest he got to like the things he was doing? Like what's the part where he was most actually like not directing a video game of violence? The closest he got was he participated in three of the murders that he ordered. So he had this South African hitman

and he was kind of his personal hitman. So he had a security team but then he had his personal hitman who nobody else. knew about so he could use him carry out murders that he didn't want anyone in the rest of his operation to know about those murders involved people in his operation itself so for instance you need a hitman to kill your hitman you need a hitman to kill your hitman and that's exactly what he did he used the south african hitman to kill dave smith who was his head of hitman operations why well dave smith had

gotten very frustrated that he was not making more money so he was doing all this dirty work for lorou and had gotten him into all this drug dealing, all these lucrative ventures and gotten him all these mercenaries, felt that he wasn't getting paid enough, was also using a lot of drugs. And he started stealing from Leroux. He started stealing gold.

Luru laundered a lot of his money in gold, and they hid it all over the Philippines. So Dave Smith was digging it up and selling it, borrowing, so to speak, from Leroux, to feed increasingly expensive appetites. Because Leru had said, don't buy fancy cars, don't buy fancy watches. We're low profile. We don't want any attention. So this guy's driving up and down the main drag of their red light district in Manila in a Lamborghini. Like it wasn't a secret that he was out there going crazy. He just didn't care. And I think probably because he thought, I'm Leru's hitman. What's he going to do? Ordered me to kill myself? Right. But Leru had another hitman. And so they lured him to a piece of property in the south of the main island of the Philippines where Manila is. He had a kind of

of a beachfront property there under the guys that they were going to bury some gold. So they brought Dave Smith there and then the South African guy shot him. And then it became a kind of like black comedy in a way like the guy's gun jammed. Dave Smith was still alive and they were trying to get the gun unjammed. And then some dogs ran onto the scene. They were like chasing off the dogs. And then they got the gun unjammed and shot him. And then Leroux also had a gun on jammed.

gun. So then LaRue shot him too. And that was a moment where it felt like when I learned about that, that he, he had gone so far that he really wanted to participate in that element of the business. But then, you know, I interviewed this hitman and he was like, and then Leroux, you know, he could have fucking killed me. Like he was like shooting this crazy automatic weapon all over the place. He has no idea what he's doing. And I'm lucky I wasn't killed because I was standing right across from him. And then he handed me a roll of like plastic wrap and was like, wrap up the body. And Hitman, being experienced hitman, was like, you're fucking out of your mind. Like, we've got to, like, wrap up this body in something bigger and then, like, dump it in the ocean.

And that's what they did. Although then it wouldn't sink. So then Leroux, like, got in the water and, like, cut holes in it so it would sink. Yeah. There's something so bizarre about Leru's sort of amateurish approach to killing people. And it's all really like someone who's been playing a first-person shooter who suddenly is in the real world doing first-person. shooting and really has no idea what they're doing. Eventually they were able to dispose of Dave Smith's body and then they killed two other people in sort of similar ways. At that point,

like how many years away is he from having just been a guy who invented some encryption software that was open source? From the encryption thing, he's a decade away. Like in a decade, he went from a guy who was making open source software for this community and also going on message boards and saying, hey, does anyone have contract programming they need, done? I can do it, I'm great, you can see my resume. He went from that to being a guy who is, you know, killing his longtime number two deputy and, you know, dumping his body in the ocean.

I know this is sort of impossible to answer, but do you think that that person was always inside him? That's, I've really puzzled over that. And I've in some ways tried to refrain from being the person who psychoanalysis. I mean, if you interview anyone in his orbit, they will provide that kind of analysis and say either, yeah, he was like the nerd kid who everyone beat up. And so he was forever taking vengeance on the world. So he was always that. And then other people will say he was not, he was the sweetest kid and teenager and even young adult and actually something changed in him. But he kind of like went down a path that led him to, exercise impulses that he maybe already had some version of. Like he always felt sort of superior to other people intellectually.

And then that just gets metastasized within this network where he also feels like that's part of business. Killing people is how you work in this business. That's just too bad. If you want to be in this business, you've got to kill people. I can see why you picked this place. This is a video from the day that Paul was arrested. He's in a hotel room in Liberia, sunk into a big red vinyl couch.

He's got a shaved head, oversized royal blue polo. He's almost 40 years old. And he's there to make a deal with the head of a Colombian cartel. Paul's going to help him build a meth facility in Liberia. He just sent him the precursor chemicals. Already shipped. It's already shipped. We already sent it to you.

This week, there's new regulations we have to comply with, which we finally did. It went out last week. The conversation moves on, from meth to coke to drug kingpin small talk. Paul actually starts telling this cartel guy about Dave Smith, about the murder, about why he got so pissed off. He's put it that way. That asshole stole. $5 million. This motherfucker stole.

Can you believe that dude? This asshole bought for himself a fucking hammer. His Mercedes is a fucking S-L-65 AMG. Yeah. It's like a $300,000 car. I had a bikini. What else did he hear? You know what, Granny pissed me off?

His yacht is bigger than my yacht. No, does he respect to the yacht. Paul doesn't know it, but all the people in the room laughing sycophantically, they're recording for the DEA. The cartel boss is actually a paid informant. What had happened was that months before this meeting, Paul had relocated some of his criminal operations to Brazil. He wanted to traffic cocaine out of South America. The problem was the Minnesota DEA investigators that could get way better cooperation

from the Brazilian authorities than they ever could in the Philippines. They got a wiretap on his cell phone. They were following him all over the place. They were reading his emails and his texts. And so at that point, they were really starting to get information they'd never been able to get.

And he was talking about all of his businesses, drugs, huge amounts of drugs moving out of South America. He was talking about the pharmacy business, money laundering, all of it. Evan said now way more people to the DA were excited about trying to arrest Paul. The 960 group, which is the DA's elite narco-terrorism squad, full of agents with actual guns and badges and real resources, now they jumped onto the case. After a long time of not being interested, they became interested in trying to catch Leroux. And so they took over the job of actually catching him.

To do that, they set up an elaborate sting operation, which required that they find an insider from Leru's organization who could help them. lure him into basically a fake drug deal. And they found a guy who had worked for Leroux, who had actually contacted the U.S. government trying to turn in Leroux, but no one had ever paid attention to his email. How often does that happen? Well, apparently a lot because there were multiple people who worked for Leroux who attempted to contact the U.S. government, and these people didn't hear from anyone for like six months. But now they wanted to arrest him, which meant setting up a sting operation. The tricky part about that was actually just finding a way to get Paul to physically come to the meeting.

to go in person to a drug deal. That wasn't Paul style. Remember, this is the guy who wants to do everything remotely. But the way they got him there was by playing to his ego. They told him, this is a boss-to-boss situation. This powerful Colombian cartel head wants to meet his equal in person. And as paranoid and cautious as Paul was on the internet, it turned out that in the room, not so much.

It was like immediately he was just talking so much. He was showing off his whole criminal operation, like he was some nerdy kid talking about his prize-winning science project to his mom's new boyfriend. We actually right now, we manufacture in Philippines, and we also buy from the Chinese. We're getting it from North Korea. The quality they do, so it's very high. That's not very high. That's awesome.

Yeah. I was going to tell you that later on, but now you talk about it. Yeah. That's fucking incredible. It's clear that he gets off on making these deals and being an international operator. I mean, it's an incredible power trip. That helps me understand because it's almost like the disgusting little, like, jolt you get in your brain when you name drop, when you like brag that you like saw some celebrity on the street or something. It's like he gets that,

but for buying like North Korean math. Right. Right. If you felt like you could, you know, go anywhere in the world and sort of meet with high level people. Like, I could see that out that would be it, you would feel like, oh, like, look at the power that I have at my fingertips. The sting operation was a success. Paul left the meeting in the hotel room, got back to his own hotel, and was arrested. They threw him on a plane and extradited him to the U.S. He started cooperating before the plane had even landed. But what happened next confounded a lot of people who followed this, especially Evan.

So he said the Minnesota DEA, they actually lost control of the case. That elite squad, the 960 unit, they took over. And for some reason, that team, along with the federal prosecutors in New York, they decided to go after Paul's organization in this very unusual way. Normally, the way the government arrested Drag Kingpin is they try to get the lowest level people in the organization. They arrest them. They offer them leniency to turn on their bosses and they just move their way up. But in Paul's case, they did the opposite.

The government offered Paul what Evan says was a generous cooperation deal in order to use him as a witness against his own underlings. For instance, all the operators of the pharmacy business where you say, okay, these are people who, were some of them scared for their lives working for Leroux. If you had gone to them and said, hey, will you come through America and testify against Paul Leroux? They would have jumped at that opportunity. And instead, they were using Paul Leroux in custody to lure these people, for instance, out of Israel to Romania so they could be arrested and brought here and prosecuted.

The government strategy created a very bizarre spectacle. So picture this, okay? It's fall of 2013. You've got Preet Bharara, who at the time is the U.S. attorney for the Southern District of New York. Now he's a podcast host. He is doing this press conference where he's announcing these huge arrests that they've made.

The bone-chilling allegations in today's indictment read like they were ripped from the pages of a Tom Clancy novel. The charges tell a tale of an international band of mercenary marksmen who enlisted their elite military training

to serve as hired guns for evil ends. He talks about these murderous contract killers who they've nabbed, but what he doesn't talk about is who these guys are working for. All five defendants, allegedly worked to help import hundreds of kilograms of cocaine into the United States.

He doesn't talk about Paul, even though they had him in custody. And the reason was that they'd ended up in a situation where they couldn't actually charge him for the worst of what he'd done, for the murders. The evidence that they gathered about those murders, a lot of it came from Leroux. So they would say, well, okay, we wouldn't even know about these murders if he hadn't told us. If he hadn't given him the plea deal in the first place, and then you can't charge him with what he tells you under the cooperation agreement. Now, again, there's two sides of the DEA on this, and the ones that investigated the Roo for a very long time say that's bullshit.

They say, you didn't have to just flip him. You could have done it the way we do a traditional operation, which is get the lower level people to talk about the higher level people. So there's some dispute there. It's hard to even fully measure the scope of all the damage Paul caused. All the countries were his mercenaries ran amok, Somalia, the Philippines, all the painkillers he pumped into America. Whatever it was, it feels like it was bigger than what anybody got punished for.

As far as anybody knows, it's not like Paul was able to flip on some big fish above him. No Iranian arms dealers went to jail, no big-time meth manufacturers. Paul himself has now been in custody for seven years, but he hasn't even been sentenced. Evan says it might happen in the next few months. What do you think will happen? What do you expect his sentence to look like? I'm scared to predict it because I've heard everything. People involved, like, an agent at the 960 group has been a lot of time,

Leroux said, I think he said, you know, he'll get 10 and he's already served almost seven. It'll be seven this year. So they'll serve three more and he'll get out and they'll never bother the United States again. He'll probably go back to his business, but he'll never mess with us again. And that's the person who worked to catch Leroux and have him prosecute. and then worked with him in a cooperation scenario to catch all these other people. So whether or not that's what the judge will think is, I mean, that's not an implausible scenario to me that that would happen. But then it seems like three years from now, if he's back out in the world,

it's really hard to imagine him changing his behavior. Like it feels like he would just pick up where he left off. It's almost impossible to imagine. I mean, certainly when I saw him testify for many, many hours. At one point he said, I'm trying to turn over a new leaf. And it was the most unconvincing cliche I've ever heard, someone utter. Like, it was actually dripping with the opposite feeling. Like, he's not actually trying to turn over a new leaf. Now, there's certainly not any evidence that you can see from the outside that it would make any sense that he would do anything other than go back into business. In fact, Evan said, Paul doesn't even seem to be waiting until he gets out of prison. He got into prison. He got into.

trouble recently for trying to open new call centers in the Philippines from his cell. Evans' book about Paul LaRue is called The Mastermind. There is so much more absurd detail and craziness in that book than we could cover here. Go check it out. We're probably all is hosted by me, PJ Vote, and Alex Goldman. We're produced by Shruti Pinnaminani, Fia Bannon, Damiana Marquetti, Anna Foli, and Jessica Young. Our show is edited by Tim Howard. We're mixed by Rick Kwan.

Fact-checking by Michelle Harris. Our intern is Christina Ayale DiJosa. Our theme song is by the mysterious breakmester cylinder. Our ad music is by Build Build Buildings. Matt Lieber is a Sunday at the farmer's market. You can listen to the show on iTunes, Spotify, wherever you get your podcasts. Thanks for listening. We'll see you in two weeks.