By Ransom Watch | 12 October 2026 | Evidence review
The sites documented in reputation-ransom cases are designed to pass a five-second credibility test. They borrow the vocabulary of consumer advocacy and financial-crime reporting: "watchdog", "alert", "why people should be cautious". Readers encountering one article in isolation, as a search result, have no frame of reference. These six markers, drawn from sites named in court filings and investigations we have reviewed, are that frame of reference.
1. No masthead, no names
Legitimate watchdog and investigative outlets name their reporters, editors and organisation, because accountability is their product. Dossier sites publish under the site's own voice, unsigned. If every article on a site is bylined to the site itself, or to rotating generic personas, the reader has no author whose record can be checked. That is a design choice, and it is the first marker.
2. Real events, missing outcomes
The effective dossier article does not invent events; it truncates them. A dispute is described but not its settlement. A case is cited but not its result. In one documented example, an article references a domain dispute, an arson attack and an insolvency matter involving businessman Priven Reddy, while omitting that the domain was handed over voluntarily, that he was the arson victim who reported it to police, and that the insolvency matter was defended and won. Every sentence can be technically true while the article is false. Check whether the article tells you how each story ended. If none of the stories have endings, you are reading a dossier.
3. The verdict is in the headline
"Why people should be cautious." "What you need to know before dealing with." Journalism reports; dossier products instruct. When the headline delivers a conclusion about a named private individual and the body supplies atmosphere rather than evidence, the article is performing a warning, not documenting one.
4. A registration designed to be unhelpful
Look up the domain. Dossier sites cluster behind privacy registration services and extensions whose registries require court process to act, and behind CDNs that shield the host. None of this is illegal and all of it has legitimate uses, but the combination, on a site that also publishes unsigned accusations, means the reader cannot learn who is speaking. Anonymous speech is a right; anonymous accusation presented as consumer protection deserves scrutiny proportional to its anonymity.
5. A target list, not a beat
Real outlets have a beat: an industry, a region, a subject. Dossier sites publish about whoever appears in the funnel: a financier one week, a software founder the next, a doctor the week after, across unrelated countries. In documented cases the same small cluster of sites recurs across unrelated targets, sometimes cross-citing each other to simulate corroboration. If a "watchdog" site's only consistent subject is people, rather than a field, treat it accordingly.
6. The demand that follows
The final marker is not on the page. In documented cases, publication is followed by contact: a proposal that the content can be removed for payment, sometimes repriced downward when refused, sometimes converted to a monthly fee. A complaint filed in the Northern District of Illinois in June 2025 described this as a paid removal program; a July 2026 investigation by Jack Poulson reported another site offering commissioned dossiers payable in cryptocurrency. An article followed by an invoice is not journalism with a business model problem. It is the business model.
The use of these markers
None of these markers alone convicts a site; legitimate outlets can be anonymous-critical, privacy-protected or blunt. But six out of six is not a coincidence, it is a template. If you find an article about yourself or a partner that fits the template, preserve it with dates before doing anything else, and compare it against the documented cases. You are unlikely to be the template's first subject, and the record built by earlier targets is the strongest thing you can stand on.
Ransom Watch documents reported reputation-extortion networks and the evidence around them. Court and investigation references are to Goldstone Financial Group LLC v. FinanceScam.com, No. 1:25-cv-07283 (N.D. Ill.) and Poulson's July 2026 reporting. Tips and documents: legal@reputationransom.com. More: reputationransom.com.
Top comments (0)