By Ransom Watch | 13 October 2026 | Evidence review
Targets of dossier sites tend to imagine removal as a request: prove the article false, and someone takes it down. Documented cases show something else - a playbook of counter-measures that begins the moment a target pushes back. Knowing the plays in advance is most of the defense.
The forged-order claim
In Goldstone Financial Group LLC and Anthony Pellegrino v. FinanceScam.com (N.D. Ill., case 1:25-cv-07283), the complaint describes a striking move: FinanceScam publicly asserted that the plaintiff and "his reputation managers" had sent a forged court order to the site's hosting provider - an accusation the complaint states is false. The documented effect is the point. The moment a target seeks removal, the operation reframes the removal effort itself as the fraud, and the target must now defend the legitimacy of his own paperwork in addition to his name.
How one post becomes many
The New York Times' investigation of the slander industry documented how a post multiplies: a constellation of copy sites duplicates it, and removal is then priced per post. For a target, every copy is one more search result to chase and one more item a removal service can price. The duplication is documented in the reported cases; new posts cost the operation very little.
The reprice
In the case this project monitors directly, businessman Priven Reddy states that demands following articles about him moved from $50,000 to $5,000 and then to a monthly fee when he refused. We have not independently established who sent those demands and do not claim that any particular site sent them. The documented shape, across his account and the reported cases above, is consistent: refusal is treated not as an answer but as a negotiation position, and the price adjusts until it finds the number a target will pay to make the pressure stop.
What this means for a target
Three practical conclusions follow. First, expect the removal request itself to be attacked; every notice you send should be factual, dated and written as if a judge will read it, because one may. Second, never fabricate anything - not a document, not a claim, not an affiliation. A single false item hands the operation the defense it wants, and the Goldstone docket shows exactly how that defense is used. Third, use the instruments with documented effect. ISNIC, the .is registry, states in its published domain rules that it closes a domain on a court decision or a final ruling of a competent body, or on a police request made after a court ruling. And in the Goldstone case it was a court, not a complaint, that acted against the operation: a temporary order finding likelihood of success on claims including cybersquatting, defamation per se and trade libel, then a default judgment awarding $100,000 in statutory damages on each of the eight cybersquatted domains. The documented cases point to formal instruments, not outrage. In our reading, the counter-attack playbook feeds on emotional reaction; a dated record and a court filing give it much less to work with.
Ransom Watch documents reported reputation-extortion networks and the evidence around them. Court references are to the public docket in case 1:25-cv-07283 (N.D. Ill.); statements attributed to Mr Reddy are his account, given on the record. Tips and documents: legal@reputationransom.com. More: reputationransom.com.
Top comments (0)