The document analyzes leaked donation data from the Canadian Freedom Convoy 2022 fundraiser on GiveSendGo. The analysis found evidence of duplicate donations from the same names and email addresses using different credit cards, as well as donations from the same email addresses from different countries. This suggests some donations may have been fake. The analysis located some donors who appear to be real individuals. However, it calls for financial authorities to further investigate the data and GiveSendGo for potential money laundering and use of fraudulent credit cards.

1. LET’S TALK GIVESENDGO
WHAT DOES LEAKED DATA SHOW US?
An analysis of leaked online fundraising data
of the Canadian Freedom Convoy 2022
for points of interest

2. DISCLAIMER:
• This analysis utilizes leaked, or ‘hacked*,’ data. This data was acquired
through two separate sources- the Distributed Denial of Secrets organization,
and an independent security researcher
• An analysis was done of the two datasets, and the data was found to match
between datasets where data existed in both datasets
• If, in fact, the data is legitimate, this data set and subsequent analysis should
be considered factual and should be submitted for review by multiple
organizations and industry peers for coherency, consistency, and
completeness. If the data is not legitimate, this analysis should be considered
null and void
• At this time, GiveSendGo has not confirmed the legitimacy of the breach, nor
have they notified all of their donors of the breach. However, they have called
for the individual or individuals behind the breach to be investigated

3. GIVESENDGO SAYS THEIR PLATFORM TAKES NO $$$

4. BUT DATA SHOWS THEY MAY HAVE RECEIVED OVER
$500,000
FROM THE FREEDOM CONVOY 2022 FUNDRAISER
Sum of all numbers
In the “to_gsg_amount” column

5. THEN, THERE’S FINCEN & FINTRAC REPORTS (SARS, STR)
Note: the character “ does
appear in other comments
within the dataset

6. BUT WHAT ABOUT THIS DONATION?
SHOULD IT HAVE A FINCEN/FINTRAC REPORT AS WELL?

7. OK, THAT’S THE OBVIOUS STUFF,
LET’S TALK ABOUT THE DATA ITSELF

8. IS THE DATA VALID? WAPO SURE THINKS SO

9. EXCEPT HERE’S WHAT I FOUND-

10. SOME EXAMPLES, AKA THE SNIFF TEST
• 4 Donations, 4 Names, 4 Zip Codes, ONE EMAIL ADDRESS, $205 in donations
• Three from United States, one from Canada

11. CANADA AND US? THAT EMAIL ADDRESS IS JAPANESE!

12. AND HERE’S THE BEST PART-
FOUR
DIFFERENT
CARD
TYPES!

13. MORE SNIFF TESTING DUPLICATES
One name, one email, two zipcodes- Arizona and California, $100 in donations
EXCEPT: The domain is registrared through AND both the DNS AND the email server exist in NORWAY
Qanon Slogan

14. CONTINUED SNIFF TESTS
7 donations, 7 names, ONE EMAIL ADDRESS, 7 zipcodes- 5 Canada, 2 US, 1 Australia, $667 in donations
On two types of cards

15. MORE SNIFF TESTING DUPLICATES
8 donations, 8 names, 8 zip codes, ONE EMAIL ADDRESS, $750 in donations
On two types of cards
More strange
character
translation
errors

16. THE FINAL SNIFF
15 names, 16 Zip Codes, 8 Canadian, 8 US, $1049 in Donations- ONE EMAIL ADDRESS
2 American Express credit cards
6 Visa credit cards, 3 Visa debit cards
4 Mastercard credit cards
Even more
random character
translation
errors
Donation CC Types:

17. DO LEGITIMATE DONATIONS EXIST IN THIS DATASET?
YES
Utilizing First Name, Last Name, Zip Code data, we were able to locate individuals who match donation data
We have reached out to these individuals, but at this time have not received comment from them

18. REMEMBER THIS DONATION?
SHOULD IT HAVE A FINCEN/FINTRAC REPORT AS WELL?

19. WE FOUND HIM

20. ANOTHER INDIVIDUAL LOCATED, CONTACTED, NO RESPONSE
A Tarot Reader from Seattle, Washington made 4 donations of $5 each. Her LinkedIn and twitter accounts
were located. Previously this individual had a podcast which echoed IAM cult theosophy/spiritual woo
woo, and had as a guest the Romanian Tarot card reader below who is also a cybersecurity/technology
“Community Leader” with a background in editing, data analytics, and operations

21. A THIRD INDIVIDUAL LOCATED, CONTACTED, NO
RESPONSE
This individual donated
$100 four separate times,
and appears to be employed
by the
CANADIAN BORDER
SERVICES AGENCY

22. FOURTH INDIVIDUAL LOCATED, CONTACTED, NO
RESPONSE, 4 DONATIONS ($50,$50,$20,$10 AMEX)
Additional Info:
Reid Hoffman worked w Thiel at Paypal
They nicknamed themselves “The Paypal Mafia”
Reid is also the founder of LinkedIn

23. DISTRIBUTION OF DONATIONS BY DOLLAR AMOUNT

24. DISTRIBUTION BROKEN OUT BY CARD BRAND

25. PREPAID CARDS ARE OFTEN USED FOR MONEY LAUNDERING
Dollar amount of donations on “prepaid” and “blank” cards- $108389

26. THE WEIRDEST LITTLE DETAIL – A TEST RUN?

27. CONCLUSION
What we see in the data is a highly advanced mix of both possibly scripted fake and legitimate
donation behaviors. We feel this cursory investigation requires a more in-depth and exhaustive
investigation by financial authorities. Due to the multi-national jurisdictions brought about by the
GiveSendGo fundraiser for Freedom Convoy 2022, it would behoove the Department of Justice,
FinCEN, and FINTRAC to engage in a multi-party investigation of this fundraiser specifically, and
GiveSendGo’s financial and technology systems in general for signs of fake donations, previously
”hacked” credit cards, “network effect” donations, and money laundering.