An advanced multi-platform investigation by Probe Division that uncovered a widespread impersonation and e-commerce fraud ring operating under the name Joanna Kazmierczak Pietka across Facebook, Instagram, and cloned websites.
Our investigation exposed a network of Nigerian and Cameroonian scammers responsible for defrauding victims of more than $250,000 USD across North America, Europe, and Australia.
The Situation
In mid-2022, Probe Division received multiple reports from consumers claiming they had purchased lifelike silicone dolls advertised on Facebook and Instagram pages impersonating the renowned Polish doll artist Joanna Kazmierczak Pietka—a legitimate sculptor known for her hyper-realistic, full-body silicone reborn dolls.
The scammers duplicated her identity and branding across social platforms, using stolen photos and videos of genuine dolls. Victims were persuaded to send high-value payments through bank transfer, cryptocurrency, gift cards, Zelle, and PayPal, believing they were buying from the original artist.
These fake accounts targeted collectors and new parents worldwide—particularly in the United States, Canada, Germany, Australia, Netherlands, Spain, France, and Poland—generating an estimated $250,000 USD in fraudulent sales.
The Challenge: Coordinated Cross-Platform Identity Fraud
This case represented a new level of social-engineering sophistication. The perpetrators combined social media impersonation, fake logistics companies, and deceptive after-sales operations to reinforce legitimacy.
After victims made payments, they received follow-up messages claiming that their packages were held by customs. They were then redirected to bogus courier websites:
- Express Post Mails (www.expresspostmails.com)
- Pro Line Mail (prolinemail.com)
Both were designed to collect additional "insurance" or "duty" fees from victims. Probe Division's cyber-forensics unit later confirmed that these websites were controlled by the same actors running the social media impersonations.
Our Investigative Approach
Probe Division applied a multi-layered forensic and intelligence framework, integrating open-source intelligence (OSINT), blockchain tracing, and international law-enforcement cooperation.
1. Digital Forensics and OSINT Mapping
- Conducted deep web analysis of cloned websites, WHOIS records, hosting infrastructure, and DNS histories.
- Identified common registrant fingerprints across over 20 fraudulent domains.
- Mapped Facebook and Instagram accounts through metadata correlation, image hashing, and linguistic profiling.
2. Blockchain and Financial Tracing
- Traced cryptocurrency transactions linked to wallet addresses provided to victims.
- Located multiple Binance accounts holding over $300,000 USD in crypto assets.
- Coordinated with Binance compliance officers to freeze funds associated with fraudulent inflows.
3. Domain and Platform Intervention
- Submitted verified reports to domain providers; both expresspostmails.com and prolinemail.com were disabled permanently.
- Filed platform takedown requests with Meta's Brand Protection Unit, leading to the removal of dozens of impersonation accounts.
4. Law-Enforcement Collaboration
- Worked with the Cameroon Gendarmerie and Nigerian EFCC to identify and detain principal suspects.
- Evidence revealed that the same individuals managed both fake doll accounts and logistics sites.
- All suspects are currently under prosecution in their respective jurisdictions.
5. Victim Restitution
Through collaboration with banks and crypto-exchanges, Probe Division reimbursed 37 verified victims, recovering $52,390 USD—with ongoing proceedings to return additional frozen assets as new claims are validated.
"Probe Division uncovered the truth within weeks. Their professionalism and persistence helped victims recover losses and dismantled a massive impersonation network."