INVESTIGATION LINE 4: November/December 2018 Wire Recipients
Forensic Financial Investigation Report
Database: the primary document text database
Date of Analysis: 2026-02-05
Classification: Investigative Working Document
EXECUTIVE SUMMARY
Analysis of text extracted from OCR layers of DOJ documents reveals that Jeffrey Epstein made two large wire transfers from a trust account he controlled in late November and early December 2018, totaling $350,000, to individuals identified as co-conspirators in his 2007 Non-Prosecution Agreement (NPA). The timing of these transfers -- occurring within days of the Miami Herald's publication of its "Perversion of Justice" investigative series on November 28, 2018, and just days before the FBI New York field office opened its investigation into Epstein on December 6, 2018 -- raises serious questions about whether these payments constituted witness tampering or obstruction of justice. The government cited these transfers in its bail/detention memorandum as evidence of obstruction, and they were deliberately concealed behind redactions in the publicly released documents.
I. PRIMARY EVIDENTIARY FINDING: THE REDACTED WIRE TRANSFERS
EFTA00028785 (Government Bail/Detention Memorandum)">Source Document: EFTA00028785 (Government Bail/Detention Memorandum)
Case Reference: U.S. v. Epstein, 19 Cr. 490 (RMB)
A. Complete Hidden Text Extraction (All Pages, Ordered by Page/Coordinates)
Page 3 (Flight Risk Section):
"The Defendant s Proposal Does Nothing to Mitigate His Flight Risk"
>
"Each of the relevant factors to be considered as to flight risk the nature and circumstances of the offense, the strength of the evidence, and the history and characteristics of the defendant -- counsel strongly in favor of detention, and the defendant's proposed package would do nothing whatsoever to mitigate those risks."
>
"[The defendant] is extravagantly wealthy and worth, according to records relating to the defendant recently obtained by the Government from a financial institution ('Institution-1'), more than $500 million."
Page 4 (Financial Resources):
"tens of millions of dollars per year outside of the United Sta[tes]"
>
"$10,000,000 per year, according to records from Institution-1"
>
"[the U.S. Virgin] Islands traveling extensively abroad and residing in part in Pari[s]"
>
"He already earns at least [...] living in the U.S. Virgin [Islands]"
Page 9 (Obstruction Section Header):
"Obstru[ction]"
(Partially recovered; the section header for the obstruction argument begins here)
Page 10 (THE KEY PASSAGE -- Wire Transfers):
"conviction and the non prosecution agreement ( NPA ). Records obtained by the Government from Institution-1 appear to show that just two days later, on or about November 30, 2018, the defendant wired $100,000 from a trust account he controlled to an individual named as a possible co-conspirator in the NPA. The same records appear to show that just three days after that, on or about December 3, 2018, the defendant wired $250,000 from the same trust account to another"
CRITICAL NOTE: The text is truncated at "another" -- the remainder of the sentence, which would identify or further describe the second recipient, was not found in the text layer. This truncation is significant because it means the identity of the $250,000 recipient is partially obscured even in the extracted text layer.
Page 13 (Signature Block):
"Assistant United States Attorn[e]y"
B. Extracted Entities from EFTA00028785
| Page | Entity Type | Value | Context |
| ------ | ------------ | ------- | --------- |
| 3 | amount | $500 [million] | Net worth from Institution-1 |
| 4 | amount | $10,000,000 | Annual income per year |
| 10 | amount | $100,000 | Wire on November 30, 2018 |
| 10 | amount | $250,000 | Wire on December 3, 2018 |
| 10 | date | November 30, 2018 | Date of first wire |
| 10 | date | December 3, 2018 | Date of second wire |
II. TEMPORAL ANALYSIS: THE CRITICAL TIMELINE
Key Dates Established from Hidden Text Across Multiple EFTAs
| November 28, 2018 | Miami Herald publishes "Perversion of Justice" series | EFTA00010136 (timestamp: "November 28, 2018 at 9:37:02 PM EST"); EFTA00010136 page 1 references "Miami" |
| November 28, 2018 | Epstein's conviction and NPA become subject of renewed public scrutiny | Context from EFTA00028785, p.10 |
| November 30, 2018 | Epstein wires $100,000 from trust account to NPA co-conspirator #1 | EFTA00028785, p.10 |
| November 30, 2018 | Multiple email communications referencing Epstein sex trafficking case | EFTA00009976 ("Subject: Re: Jeffrey Epstein: About the sex trafficking case", Friday November 30 2018 7:0[x]); EFTA00023707 ("Friday November 30 2018 2:33 PM") |
| December 3, 2018 | Epstein wires $250,000 from same trust account to NPA co-conspirator #2 | EFTA00028785, p.10 |
| December 4, 2018 | Follow-up email communications | EFTA00009977 ("Tuesday December 4 2018 8:27 PM") |
| February 25, 2019 | DOJ discussing Julie Brown/Miami Herald follow-up | EFTA01657871 ("Subject: Julie Brown is planning another story / Request for comment", dated Feb 25 2019) |
| July 6, 2019 | Epstein arrested at Teterboro Airport | EFTA01660622 timeline |
| July 8, 2019 | Bail/detention hearing; Government files memorandum | EFTA00014560 (emails referencing "Government bail memorandum", case 19 Cr. 490 (RMB)) |
ANALYTICAL FINDING: The $100,000 wire occurred exactly
two days after the Miami Herald's "Perversion of Justice" series brought renewed public attention to the Epstein case and the failures of the 2007 NPA. The $250,000 wire followed three days later. Both occurred
six days or fewer before the FBI formally opened its new investigation on December 6, 2018. The government characterized this timing as indicative of obstruction.
III. THE NON-PROSECUTION AGREEMENT AND ITS CO-CONSPIRATORS
A. The NPA's Protection of Co-Conspirators
The 2007 NPA is extensively documented across multiple EFTAs. Key hidden text reveals the scope of its protections:
EFTA00027666, Page 7:
"paid for by Epstein.' The NPA also provided that if any of the victims elected to bring suit under 18 U.S.C. Section 2255"
>
"not institute any criminal charges against any potential co-conspirators of Epstein, including but not limited to"
CRITICAL: The text after "including but not limited to" is truncated/redacted -- the specific names of the protected co-conspirators were removed.
EFTA00027666, Page 10:
"Lefkowitz sent a letter to U.S. Attorney Alex Acosta stating, in pertinent part: 'Neither federal agents nor anyone from your Office should contact the identified individuals to inform them of the resolution of the case'"
EFTA00027666, Page 11:
"In addition to Jane Doe I, FBI agents only talked to two other victims out of the 34 identified victims about the general terms of the NPA, including the provision providing a [federal civil remedy to the victims]"
B. Known Named Co-Conspirators
From EFTA00014493 and EFTA00016748 (identical text in both):
"co-conspirator -- and for whom Epstein obtained protectio[n]"
This confirms that the NPA co-conspirators received legal protection arranged by Epstein. The individuals named as co-conspirators in the NPA who appear across the database include:
Ghislaine Maxwell -- Extensively referenced across hundreds of EFTAs; described as madam/recruiter
Nadia Marcinkova -- Referenced in EFTA01525405 ("NADIA [M]A[R]CINKOVA"), EFTA01286686 ("NADIA")
Sarah Kellen -- Referenced by surname in EFTA01689379 ("KELLEN would [contact her]")
Lesley Groff -- Extensively referenced across 100+ EFTAs; FBI document EFTA01684300 identifies her with "(U) LESLEY GROFF date of birth (DOB)" in a trial subpoena context
Adriana Ross -- No direct hidden text hits but known from public NPA records
C. The Alfredo Rodriguez Precedent
The database reveals a critical prior obstruction case directly relevant to this pattern:
EFTA01660622 (FBI Investigation Timeline):
"10/28/2009 - FBI West Palm Beach RA opens obstruction case into Alfredo Rodriquez"
"12/8/2009 - Rodriquez arrested - black book seized"
EFTA01326107:
"Case ID #: 72-MM-113327 (Pending) 415M-HQ-C1424550-OST Title: ALFREDO RODRIGUEZ OBSTRUCTION OF JUSTICE SPECIA[L]"
EFTA01660622, Page 3:
"[FBI] ed an obstruction of justice case with [employ]ee of Epstein. Rodriquez failed to comply [with a]ll the requested documents to the [FBI and hid a b]lack book and handwritten notes regarding [obst]ruction [in a]n undercover operation"
This establishes that Epstein and his associates had a documented history of obstruction, making the November/December 2018 wire transfers part of a pattern.
IV. THE TRUST ACCOUNT AND FINANCIAL INFRASTRUCTURE
A. "Institution-1" and Trust Accounts
The bail memo refers to "Institution-1" three times (pages 3, 4, and 10). DS9 confirms that Institution-1 is Deutsche Bank, as established by the NYDFS Consent Order (EFTA00151495) and the co-conspirator payment exhibit account numbers matching Deutsche Bank accounts documented in KYC files. The financial records in the database reveal Epstein maintained accounts at multiple institutions, with the following trust structures identified:
EFTA01381149 (Bank Account Balance Report, dated 08/17/18 -- two months before the wires):
| Account Name | Category | Balance |
| ------------- | ---------- | --------- |
| JEFFREY EPSTEIN | N | $1,243,515.74 |
| THE HAZE TRUST | D | $2,503,667.84 |
| THE HAZE TRUST | D | $40,583,100.79 |
| BUTTERFLY TRUST | - | $323,679.36 |
| SOUTHERN TRUST COMPANY, INC. | - | $704,736.63 |
| SOUTHERN FINANCIAL LLC | D | $534,440.04 |
| GRATITUDE AMERICA, LTD | N | $2,075,025.07 |
| ZORRO MANAGEMENT, LLC | O | $424,475.56 |
| DARREN K. INDYKE PLLC | D | $259,740.02 |
| HBRK ASSOCIATES, INC | D | $149,498.33 |
The Haze Trust held over
$40 million as of August 2018 and was initially considered the most likely candidate for the "trust account he controlled" referenced in the bail memo. However, DS9 contains the definitive government exhibit (
EFTA00092643 /
EFTA00105307) confirming that both obstruction wires originated from the
Butterfly Trust (Deutsche Bank account 44130552), not the Haze Trust. The Butterfly Trust balance shown above ($323,679) reflects a snapshot date before the relevant payments were funded.
EFTA01359500)">B. The Full Epstein Account Network (EFTA01359500)
A comprehensive account listing reveals the following entities managed under the same banking relationship with officers Jj Litchford and Paul Morris:
- JEFFREY EPSTEIN (personal)
- THE 2007 JEFFREY E. EPST[EIN TRUST]
- SOUTHERN TRUST COMPANY, INC.
- ELLMAX (Ghislaine Maxwell entity, per EFTA00011365: "Darren Indyke helped Maxwell create Ellmax")
- LEON D. BLACK (personal account)
- CHRISTOPHER A. BOIES (personal account)
- LEIMER DOMINIQUE (personal account)
- TODD & KAREN WANEK JTWRO (personal account)
C. Trust Account with Female Beneficiary
EFTA01360504:
"The attached alert does certain[ly pertain] to our client. She will also never have her own personal account here at [the bank]. [Th]e accoun[t f]or w[hich] s[h]e wi[ll be] [th]e associated is a trust account which names her as a beneficiary."
This document describes a female individual associated with a trust account as a beneficiary -- potentially one of the co-conspirators who received wire transfers.
D. Fedwire Transaction Records
The database contains extensive Fedwire debit records from Epstein's JPMorgan account (EFTA01482260 through EFTA01528492 range). Key transactions involving known entities:
- EFTA01482260: "Fedwire Debit Via: Firstbank PR/221571473 A/C: Nautilus Inc"
- EFTA01482283: "Fedwire Debit Via: Wells Fargo NA/121000248 NC: Zorro Development Corp."
- EFTA01482300: "Fedwire Debit Via: Mfrs Buf/022000046 NC: International Jet Interiors"
- EFTA01482331: "Fedwire Debit Via: Sovereign Bk NE/011075150 NC: Martin G Weinberg PC"
- EFTA01483035: "Fedwire Debit Via: BancoPopular PR/021502011 NC: Caricement"
- EFTA01483039: "Fedwire Debit Via: Firstbank PR/221571473 NC: Lsj, Lic"
- EFTA01483057: "Fedwire Debit Via: Firstbank PR/221571473 NC: Scott Graf"
- EFTA01483085: "Fedwire Debit Via: Bk Amer Nyc/026009593 NC: Nationsbank N.A. Lakeworth FL"
- EFTA01483129: "Fedwire Debit Via: Gulfstream Bus Bk/067014712 A/C: Wades Builders Lic"
- EFTA01483164: "Fedwire Debit Via: Darby B & T CO/061211168 NC: Tsg Technologies Inc"
- EFTA01483165: "Fedwire Debit Via: Wachovia Bk NA FU063000021 NC: Black Srebnick Kornapan &" [Epstein's criminal defense firm]
EFTA01483299 (November 2018 transactions):
"11/24 Book Transfer NC"
"11/29 Fedwire Debit Via [Ba]nco Popular"
"[Fedw]ire Debit Via: Nexity Fin[ancial]"
"11/29 Fedwire Debit Via [...] [Wa]chovia Bk NA"
These November 29 Fedwire transactions are one day before the $100,000 wire documented in the bail memo. The specific November 30 and December 3 wire transactions themselves may be in properly redacted portions of the bank statements.
EFTA01527665)">E. JPMorgan November 2018 Bank Statement (EFTA01527665)
This document is identified as a JPMorgan Private bank statement covering November 2018. Key entries:
- Multiple Fedwire debits via Firstbank PR (Puerto Rico), Banco Popular PR, Nexity Financial Corp, TD Bank
- Page 7: "11/16 Book Transfer" to "Zorro Trust"
- Page 10: Amount entry of "1 000 000 00" ($1,000,000.00)
- Numerous redacted/empty entries indicating heavy redaction of the November 2018 statement
V. THE GOVERNMENT'S OBSTRUCTION THEORY
A. Structure of the Bail Memo Argument
The government's bail memorandum (EFTA00028785) was structured with an explicit obstruction section beginning on page 9. The section header "Obstru[ction]" appears on page 9, and the wire transfer evidence follows immediately on page 10. This placement indicates the government viewed these payments as evidence of obstruction of justice, not merely suspicious financial activity.
The memo states that the wires went to:
$100,000 on November 30, 2018 -- to "an individual named as a possible co-conspirator in the NPA"
$250,000 on December 3, 2018 -- to "another [individual/co-conspirator]" (text truncated)
B. Key Legal Significance
The government's language is precise:
- "Records obtained by the Government from Institution-1 appear to show" -- indicating these were financial records subpoenaed from the bank
- "from a trust account he controlled" -- establishing Epstein's personal control over the source of funds
- "to an individual named as a possible co-conspirator in the NPA" -- directly linking the recipient to the 2007 criminal case
- "The same records appear to show" -- confirming both wires came from the same Institution-1 records
- "from the same trust account" -- both payments from one account
C. Defense Team Awareness
Multiple EFTAs document the defense team's reaction to the bail memorandum:
EFTA00014560:
"Subject: Epstein Arrest Seiz[ure]" (July 2019)
EFTA00014560, page 2:
"Subject: RE: U.S. v. Epstein, 19 Cr. 490 (RMB), Government bail memorandum"
CC: "Martin Weinberg" and "[email protected][om]" (Reid Weingarten)
The defense team, including Martin Weinberg and Reid Weingarten of Steptoe & Johnson, was directly briefed on the government's obstruction allegations regarding these wire transfers.
VI. CROSS-REFERENCE: WHO RECEIVED THE MONEY?
A. Identified NPA Co-Conspirators and Their Financial Connections
Based on the evidence in the database, the following individuals were named co-conspirators in the NPA and had documented financial relationships with Epstein:
1. Ghislaine Maxwell
- Operated through ELLMAX entity (EFTA00011365: "Darren Indyke helped Maxwell create Ellmax")
- Maxwell was "paid [as] personal assistant for more than 10 years" (EFTA00011365)
- Maxwell had extensive documented financial dependence on Epstein
2. Lesley Groff
- Appears in 100+ EFTAs, primarily as email sender/recipient in Epstein's inner circle
- FBI document (EFTA01684300) identifies her with DOB and trial subpoena
- Connected to Darren Indyke's office and Deutsche Bank communications
- Named alongside Jeffrey Epstein in email headers across dozens of documents
3. Nadia Marcinkova
- Referenced in banking records (EFTA01286686: "TOMBANK NA AC 4312480538 NADIA")
4. Sarah Kellen
B. The Trust Account Beneficiary Connection
EFTA01360504 describes a female individual for whom a trust account was maintained as beneficiary:
"She will also never have her own personal account here... the associated is a trust account which names her as a beneficiary."
This matches the profile of a co-conspirator who received financial support through Epstein's trust structures rather than direct personal accounts.
EFTA00037629)">C. The Epstein Co-Conspirator Email (EFTA00037629)
An email with subject line "Epstein Co-conspirator pits" (EFTA00037629) exists in the database but contains minimal recoverable hidden text beyond the subject line. The word "pits" may be a truncation of "pitfalls" or similar, suggesting internal DOJ discussion about challenges related to co-conspirator identification.
A. November 28, 2018: "Perversion of Justice"
EFTA00010136:
Timestamp: "November 28, 2018 at 9:37:02 PM EST"
Page 1 reference: "Miami"
EFTA00009976:
"Subject: Re: Jeffrey Epstein: About the sex trafficking case"
Timestamp: "Friday, November 30, 2018 7:0[x]"
EFTA01657871:
"Subject: Julie Brown is planning another story / Request for comment"
Date: February 25, 2019
Julie Brown's "Perversion of Justice" series in the Miami Herald, published November 28, 2018, brought massive renewed public attention to Epstein's sex trafficking operation and the failures of the 2007 NPA. The wire transfers occurred two and five days after this publication, respectively.
B. Reaction Chain
The email traffic shows immediate response:
- November 29, 2018: Communications reference the case (EFTA00009977: "Thursday, November 29, 2018 4:[xx]")
- November 30, 2018: Multiple emails about Epstein trafficking case; $100,000 wired
- December 3, 2018: $250,000 wired
- December 4, 2018: Follow-up communications (EFTA00009977: "Tuesday December 4 2018 8:27 PM")
- December 6, 2018: FBI New York opens formal investigation (EFTA01660622)
EFTA01660622)">VIII. THE FBI INVESTIGATION TIMELINE (EFTA01660622)
Complete Recovered Timeline from FBI Document
| 7/24/2006 | FBI West Palm Beach RA opened investigation |
| 6/2008 | Epstein accepts plea deal |
| 9/2008 | Epstein begins 18-month sentence |
| 10/28/2009 | FBI West Palm Beach RA opens obstruction case into Alfredo Rodriguez |
| 12/8/2009 | Rodriguez arrested - black book seized |
| 12/6/2018 | FBI New York opens investigation into Epstein |
| 7/6/2019 | Epstein arrested at Teterboro Airport, New Jersey |
| 7/8/2019 | Detained; psych evaluation |
| 7/10/2019 | Placed [with] Tartaglione in the [cell] |
| 7/23/2019 | Suicid[e attempt] |
| 7/29/2019 | MCC approves Epstein [off] suicide watch |
| 7/30/2019 | New c[ell] in SHU |
| 8/9/2019 | Cellma[te removed] |
Case Numbers:
- 31E-MM-1080[xx] (Sex Trafficking)
- 72-MM-113327 (Obstruction of Justice - Rodriguez)
- 50D-NY-30275[x] (Sex Trafficking - NY)
- 90A-NY-31512 (Investigation)
IX. ANALYTICAL CONCLUSIONS
A. Were the Wire Transfers Witness Tampering or Obstruction?
The evidence strongly supports the government's characterization of these transfers as potential obstruction of justice. The analytical basis:
Timing is devastating. The $100,000 wire occurred exactly two days after the Miami Herald's "Perversion of Justice" series renewed public scrutiny of the Epstein case. The $250,000 wire followed three days later. Both occurred before the FBI formally opened its new investigation on December 6, 2018. This is consistent with urgent payments designed to secure silence or continued cooperation from co-conspirators who might face renewed legal exposure.
Source is telling. Both wires originated from the Butterfly Trust (Deutsche Bank account 44130552) -- a trust that the NYDFS Consent Order (EFTA00151495, paragraph 29) confirms "included, among others, CO-CONSPIRATORS 1-3" as beneficiaries. Deutsche Bank knew at onboarding that the Butterfly Trust had co-conspirator beneficiaries, yet failed to flag the Nov 30 and Dec 3 wires.
Recipients are specifically identified as NPA co-conspirators. The government did not say the recipients were associates, friends, or business partners. They were "individual[s] named as a possible co-conspirator in the NPA." This precise legal language means the recipients were among those who received immunity protection under the 2007 agreement -- individuals who could potentially be charged if the NPA were reopened.
Pattern of obstruction. The Alfredo Rodriguez obstruction case (2009) demonstrates that Epstein's circle had a documented history of obstructing justice by concealing evidence. The 2018 wire transfers fit this pattern of using money to manage potential witnesses and co-conspirators.
The amounts are significant. $100,000 and $250,000 are not trivial sums. While Epstein was worth over $500 million, these amounts are consistent with what would be needed to secure someone's financial dependence or cooperation.
The text was deliberately hidden. The fact that this passage was concealed behind a "bad_overlay" redaction in the bail memorandum -- meaning it was covered by a graphic element rather than properly redacted -- suggests an intent to keep this information from public view. The confidence score of 0.99 indicates near-certainty that this text was present and intentionally obscured.
B. Identity of Recipients -- Resolved and Unresolved
$100,000 recipient (Nov 30, 2018): CONFIRMED -- Aviloop LLC (Nadia Marcinkova)
DS9 contains the government's own prosecution exhibit (EFTA00092643 / EFTA00105307), titled "EXHIBIT: TIMELINE OF PAYMENTS TO (OR ON BEHALF OF) POTENTIAL CO-CONSPIRATORS (PAYMENTS > $10,000)" (Grand Jury material, Rule 6(e)). This 4-page exhibit confirms:
- $100,000 on Nov 30, 2018 to Aviloop LLC at TD Bank, from Butterfly Trust (account 44130552)
- $45,000 on Nov 27, 2018 to Aviloop LLC at TD Bank, from JEGE LLC (account 42953475) -- a previously unknown wire, one day BEFORE the Miami Herald publication
Aviloop LLC = Nadia Marcinkova is confirmed definitively by EFTA00921756 (Epstein to Kahn: "please wire nadia 50k, either to aviloop or to where directed by her") and EFTA00678472 (Marcinkova advising Epstein on wire labeling: "100 can be sent in two parts - one billed as commission for buyer representation in the purchase of the G-IV... another wire for pilot services for Hyperion air"). Marcinkova received $145,000 within 4 days.
$250,000 recipient (Dec 3, 2018): STILL UNIDENTIFIED
The $250,000 wire went to a redacted beneficiary at Bank of America from Butterfly Trust (same account 44130552). The name is redacted in both copies of the government exhibit. Analysis of the co-conspirator profile in footnote 3 of the exhibit -- female, on flight logs, Butterfly Trust beneficiary 2011-2014, resided at the model-housing address (301 E 66th), opened accounts in multiple names -- is consistent with Sarah Kellen or another inner-circle facilitator. Not Marcinkova (separate TD Bank entry), not Groff (Bankwell/E*Trade), and probably not Maxwell (different account infrastructure).
C. Why This Matters
The government used these wire transfers as a cornerstone of its obstruction argument in seeking Epstein's detention without bail. The fact that this specific passage was hidden behind a bad overlay redaction in the public document means the full force of the government's obstruction evidence was concealed from public view. The recovered text demonstrates that:
The government had financial institution records proving the transfers
The transfers went to specifically identified co-conspirators
The timing directly correlated with renewed media attention on the case
The funds came from trust accounts in Epstein's complex financial web
The government viewed this as evidence warranting detention
X. EVIDENCE INVENTORY
Primary Documents Referenced
| EFTA Number | Document Type | Key Content |
| ------------ | -------------- | ------------- |
| EFTA00028785 | Government Bail/Detention Memorandum | Wire transfer evidence, $100K and $250K |
| EFTA00027666 | NPA/CVRA Legal Filing (Doe v. USA) | NPA terms, co-conspirator protections |
| EFTA01660622 | FBI Investigation Timeline | Complete case chronology |
| EFTA01381149 | Bank Balance Report (08/17/18) | Epstein account balances two months before wires |
| EFTA01527665 | JPMorgan November 2018 Statement | Contemporaneous bank records |
| EFTA01483299 | Bank Statement with 11/29 Fedwires | Day before first wire |
| EFTA01657871 | DOJ Email | "Subject: Julie Brown is planning another story" |
| EFTA00010136 | Communication | Timestamped November 28, 2018, references Miami |
| EFTA00009976 | Email | "Subject: Re: Jeffrey Epstein: About the sex trafficking case" (Nov 30, 2018) |
| EFTA00011365 | Analysis Document | "Darren Indyke helped Maxwell create Ellmax" |
| EFTA01326101-01326156 | FBI Reports | Alfredo Rodriguez obstruction case files |
| EFTA00015532 | Duplicate/Related Bail Memo | Contains same "Obstru[ction]" section |
Database Statistics for This Investigation
- Total redactions searched: 1,808,915
- Total extracted entities searched: 107,422
- Total reconstructed pages searched: 39,588
- Co-conspirator references found across database: 5 distinct EFTAs
- Trust account references found: 9 distinct EFTAs
- Fedwire transaction records examined: 90+ distinct EFTAs
- November/December date references in wire transfer range: 100+ entries
XI. RECOMMENDATIONS FOR FURTHER INVESTIGATION -- STATUS
Identify the specific trust account. RESOLVED: Butterfly Trust (account 44130552) confirmed by government exhibit EFTA00092643.
Trace the recipients. PARTIALLY RESOLVED: $100K recipient = Aviloop LLC (Nadia Marcinkova) at TD Bank. $250K recipient remains redacted (Bank of America).
Examine EFTA01360504 further. Remains relevant -- the female trust beneficiary profile matches the $250K recipient's co-conspirator profile described in footnote 3 of the government exhibit.
Analyze the $1,000,000 entry. EFTA01527665 page 10 shows a "$1,000,000.00" entry in the November 2018 statement that warrants investigation.
Recover the truncated text. SUPERSEDED by discovery of the complete government exhibit in DS9, which provides the full tabular record.
Cross-reference with Maxwell indictment. The government exhibit (EFTA00092643) includes a footnote that Darren Indyke paid Maxwell's defense firm Haddon, Morgan and Foreman P.C. three times ($6,422 on 10/5/2017, $7,756 on 6/14/2018, $3,795 on 6/19/2018 -- total ~$17,973), adding a legal fee channel to the co-conspirator financial infrastructure.
NEW: Identify the $250K Bank of America recipient. This remains the single most important open question. The co-conspirator profile (female, flight logs, Butterfly Trust beneficiary 2011-2014, model-housing address, multiple bank names) narrows the field but does not conclusively identify the recipient.
NEW: Investigate "Miss [REDACTED]" UK payments. Two payments in 2019 to "Miss [REDACTED]" at Barclays Bank (UK) from LSJE LLC: GBP 12,841 (1/14/2019) and GBP 19,395 (4/30/2019). The "Miss" honorific and Barclays suggest a young, unmarried woman in the UK.
XII. DS9 REVISIT: COMPLETE CO-CONSPIRATOR PAYMENT TIMELINE (2026-02-12)
The government exhibit EFTA00092643 / EFTA00105307 provides a 4-page, 50+ entry timeline of payments to potential co-conspirators from December 2013 through April 2019. The two originally investigated wires ($100K and $250K) were not isolated incidents but part of a continuous 6-year pattern that included:
- MC2 Model Management: $25K (12/4/2013), $29.4K (12/10/2013), $25K (1/21/2014)
- Larry Visoski (pilot): $225K (12/11/2013), $50K (3/28/2017), $150K (1/12/2018), $175K (12/19/2018), $57K (1/16/2019)
- Lesley Groff: $100K (1/3/2017), $100K (12/19/2017)
- Coffey Burlington (Alan Dershowitz legal fees): $20.5K (3/5/2015), $10K (5/7/2015)
- 301/66 Owners Corp (model housing): $182K (4/10/2014), $50K (5/2/2014), $62.7K (1/23/2015), $189.3K (3/27/2015), $210.6K (1/27/2017), $229.8K (2/15/2019)
- Aviloop LLC: $45K (11/27/2018 -- one day before Miami Herald), $100K (11/30/2018)
- [REDACTED]: $250K (12/3/2018) at Bank of America
- Miss [REDACTED]: GBP 12.8K (1/14/2019), GBP 19.4K (4/30/2019) at Barclays Bank UK
- Multiple redacted recipients: $14K-$110K from Butterfly Trust, Jeffrey Epstein personal, and Southern Financial accounts
The NYDFS Consent Order (EFTA00151495) independently confirms: Deutsche Bank processed "at least 18 wires in the amount of $10,000 or more" to co-conspirators; the Butterfly Trust had "CO-CONSPIRATORS 1-3" as beneficiaries; and DB's transaction monitor normalized suspicious payments, noting "[Once] this type of activity is normal for this client it is not deemed suspicious." ATTORNEY-1 (Indyke) "withdrew $100,000.00 in cash... more than $800,000 in cash from Mr. Epstein's personal accounts" over four years and "inquired into how often he could withdraw cash... without triggering an alert."
SDNY prosecutors were reading the Miami Herald on the same day as the $100K wire: EFTA00040217 (Nov 30, 2018 at 1:28 AM, subject: "Epstein," body: "FYI, from the Miami Herald article...").
Key DS9 Documents
| EFTA00092643 | Government co-conspirator payment timeline exhibit (Grand Jury material, 4 pages) |
| EFTA00921756 | "please wire nadia 50k, either to aviloop" -- definitively confirms Aviloop = Marcinkova |
| EFTA00678472 | Marcinkova advising on wire labeling structure -- evidence of co-conspirator financial coordination |
| EFTA00040217 | SDNY prosecutors sharing Miami Herald on same day as $100K wire |
Investigation Line 4 Complete. Original findings derived from hidden text, extracted entities, and reconstructed pages in primary document text database. DS9 revisit (2026-02-12) added government exhibits, recipient identification, and complete co-conspirator payment timeline.