How Facebook Messenger and Meta Pay are used to buy child sexual abuse material
When police in Pennsylvania arrested 29-year-old Jennifer Louise Whelan in November 2022, they charged her with dozens of counts of serious crimes, including sex trafficking and indecent assault of three young children.
One month earlier, police said they had discovered Whelan was using three children as young as six, all in her care, to produce child sex abuse material. She was allegedly selling and sending videos and photos to a customer over Facebook Messenger. She pleaded not guilty.
The alleged buyer, Brandon Warren, was indicted by a grand jury in February 2022 and charged with nine counts of distribution of material depicting minors engaged in sexually explicit conduct. Warren also pleaded not guilty.
Court documents seen by the Guardian quote Facebook messages between the two in which Warren allegedly describes to Whelan how he wants her to make these videos.
“I’ll throw in a little extra if you tell him it makes mommy feel good and get a good length video,” he tells Whelan, according to the criminal complaint document used for her arrest.
Whelan received payment for the footage over Meta Pay, Meta’s payment system, according to the criminal complaint against him. “Another 250 right? Heehee,” she allegedly wrote to Warren after sending him a video of her abusing a young girl.
Meta Pay, known as Facebook Pay before rebranding in 2022, is a peerto-peer payment service enabling users to transfer money over the company’s social networks. Users upload their credit cards, debit cards or PayPal account information to Facebook Messenger or Instagram to send and receive money.
A spokesperson for Meta confirmed that the company has seen and reported payments via Meta Pay on Facebook Messenger that are suspected of being linked to child sexual exploitation.
“Child sexual exploitation is a horrific crime. We support law enforcement in its efforts to prosecute these criminals and invest in the best tools and expert teams to detect and respond to suspicious activity. Meta reports all apparent child sexual exploitation to NCMEC [the National Center of Missing and Exploited Children], including cases involving payment transactions,” the spokesperson said.
Meta fails to detect payments for child abuse material, say moderators
Through reviewing documents and interviewing former Meta content moderators, a Guardian investigation has found that payments for child sexual abuse content taking place on Meta Pay are probably going undetected, and unreported, by the company.
Court documents show Whelan and Warren’s actions were not spotted or flagged by Meta. Instead, Kik Messenger, another social platform, reported Warren had uploaded videos suspected to be child sexual abuse material (CSAM) to share with other users. This triggered a police investigation in West Virginia, where Warren lives. His electronics were seized, and police then discovered the eight videos and five images that he had allegedly bought from Whelan over Facebook Messenger.
“We responded to valid legal process,” said a Meta spokesperson, in response to the Guardian’s findings that the company did not detect these crimes.
Additionally, two former Meta content moderators, employed between 2019 and 2022, told the Guardian that they saw suspicious transactions taking place via Meta Pay that they believed to be related to child sex trafficking, yet they were unable to communicate with Meta Pay compliance teams to flag these payments.
“It felt like [Meta Pay] was an easyto-use payment method since these people were communicating on Messenger.
The amounts sent could be hundreds of dollars at a time,” says one former moderator, who spoke under the condition of anonymity because they had to sign a non-disclosure agreement as a condition for employment. The moderator, employed for four years until mid-2022 by Accenture, a Meta contractor, reviewed interactions between adults and children over Facebook Messenger for inappropriate content.
Payments for sex or CSAM are typically just a few hundred dollars or less in cases reviewed by the Guardian. According to the former Meta compliance analyst, transactions of such small amounts are unlikely to be flagged for review by Meta’s systems.
This means that payments connected to illicit activities are probably taking place undetected, financial crimes experts said.
A Meta spokesperson said that the company uses a combination of auto
mated and human review to detect suspicious financial activity in payment transactions in Messenger.
“The size of the payment is just one signal our teams use to identify potentially suspicious activity, and our compliance analysts are trained to assess a variety of signals,” said the Meta spokesperson. “If our teams had reason to suspect suspicious activity, especially activity involving a child and even if the payments are small, it would be investigated and reported appropriately.” The spokesperson also said that the company had “a strong ‘see something, say something’ culture”.
For situations where American men were targeting underage girls abroad to groom, payments could be for things like getting a phone and school supplies, the moderator said.
“Most of what we saw were older men from America, targeting girls in Asian countries and often travelling there,” the moderator added.
“When it comes to child exploitation and CSAM, it’s really all about small amounts,” said Silvija Krupena, director of the financial intelligence unit at RedCompass Labs, a Londonbased financial consultancy. “It’s a global crime and criminals, with different types of offenders. In lowincome countries like the Philippines, $20 is big money. The production usually happens in those countries. These are small amounts that can fall through the cracks when it comes to traditional money-laundering controls.”
Meta has a team of about 15,000 moderators and compliance analysts who are tasked with monitoring its platforms for harmful and illegal content. Possible criminal behavior is supposed to be escalated by Meta and reported to law enforcement. Anti-money laundering regulations also require money service businesses to train their compliance staff to have access to enough information to be able to detect when illegal financing occurs.
Yet contractors monitoring Meta Pay transaction activity do not receive specific training for detecting and reporting money flows that could be related to human trafficking, including the language, codewords and slang that traffickers typically use, a former Meta Pay payment compliance analyst contractor said.
“If a human trafficker is using a codeword for selling girls, we didn’t get into that. We didn’t really get trained on those,” said the former compliance analyst. “You don’t even give it a second thought or even dig into that kind of stuff at all.”
A Meta spokesperson disputed the payment compliance analyst’s claims.
“Compliance analysts receive both initial and ongoing training on how to detect potentially suspicious activity – which includes signs of possible human trafficking and child sexual exploitation. Our program is regularly updated to reflect the latest guidance from financial crime regulators and safety experts,” the spokesperson said.
Meta’s history with accusations of child exploitation
Meta’s platforms have been linked to alleged child exploitation and the distribution of CSAM in the past. In December, the New Mexico attorney general’s office filed a lawsuit against the company, alleging Facebook and Instagram are “breeding grounds” for predators targeting children for human trafficking, grooming and solicitation. The suit followed an April 2023 Guardian investigation, which revealed how child traffickers were using Meta’s platforms to buy and sell children into sexual exploitation.
As a money services business, Meta Pay is subject to the US antimoney laundering and “know your client” (KYC) banking regulations, which require businesses to report illicit financing to the US treasury department’s Financial Crimes Enforcement Network (FinCEN).
If Meta fails to detect and report these payments, it could be in violation of US anti-money laundering laws, financial crimes experts have said.
“Regulations apply to any company that participates in a payments business. But for social media because they can see users, they see their lives, their transactions, they can see abuse and see contact. It’s such a low-hanging fruit for them to detect this,” said Krupena.
Other peer-to-peer payment apps have faced scrutiny for their practices in preventing illicit activity. In 2023, Senate Democrats requested detailed fraud detection and prevention methods from PayPal, Venmo and Cash App. Sex trafficking “ran rampant” on Cash App, according to a report last year by US investment research firm Hindenburg. Block, Cash App’s owner, disputed these claims, threatening legal action.
Meta introduced end-to-end encryption to Facebook Messenger in late 2023, but even before this, payment compliance analyst contractors could not access the Messenger chat between the two users exchanging funds. The former Meta compliance analyst told the Guardian their team could only see transactions with notes and the relationship between the two users.
“I don’t know how you do compliance in general without being able to see intentions around transacting,” said Frances Haugen, a former Facebook employee turned whistleblower, who released tens of thousands of damaging documents about its inner workings in 2021. “If the platforms actually wanted to keep these kids safe, they could.”
Siloed work prevents flagging suspicious transactions, say exmoderators
Other former content moderators interviewed by the Guardian compared their jobs to call center or factory work. Their jobs entailed reviewing content flagged as suspicious by users and artificial intelligence software and making quick decisions on whether to ignore, remove or escalate the content to Meta through a software program. They say they could not communicate with the Meta Pay compliance analysts about suspicious transactions they witnessed.
“We were not allowed to contact Facebook employees or other teams,” one former moderator said. “Our managers didn’t tell us why this was.”
Gretchen Peters, who is the executive director of the Alliance to Counter Crime Online, has documented the sale of narcotics, including fentanyl, over Meta’s platforms. She also interviewed Meta moderators who were not permitted to communicate with other teams in the company. She said this siloing was a “major violation” of “know your customer” banking regulations.
“We’ve heard from moderators at Meta they can see illegal conduct is occurring and that there are concurrent transactions through Meta Pay, but they have no way of communicating what they are seeing internally to moderators at Meta Pay,” said Peters.
A Meta spokesperson said the company prohibits the sale or purchasing of narcotics on its platforms and removes that content when it finds it.
“Meta complies with all applicable US anti-money laundering laws,” the spokesperson said. “It is also untrue to suggest that there is a lack of communication between teams. Content moderators are trained to escalate to a specific point of contact, who brings in the appropriate specialist team.”
Messenger’s encryption will hide illicit behaviors on Meta Pay, say advocates
In December, Meta announced it had rolled out end-to-end encryption for messages sent on Facebook and via Messenger. Encryption hides the contents of messages from anyone but the sender and intended recipient by converting text and images into unreadable cyphers that are unscrambled on receipt.
Yet this move could also affect the company’s ability to prevent illicit transactions on Meta Pay. Child safety experts, policymakers, parents and law enforcement criticized the move, arguing encryption obstructs efforts to rescue child sex trafficking victims and the prosecution of predators.
“When Meta Pay is linked to Messenger or Instagram, the messages associated with payments could uncover illicit behaviors,” said Krupena. “Now that this context is removed, the implications are significant. It almost feels like encryption is inadvertently facilitating illicit activity. This opens many opportunities for criminals to hide in plain sight.”
A Meta spokesperson said the decision to move to encryption was to “provide people with privacy”, and that the company encourages users to selfreport private messages related to child exploitation to the company.
“Moving to an encrypted messaging environment does not mean we will sacrifice safety, and we have developed over 30 safety tools, all of which work in encrypted messaging,” said the spokesperson. “We’ve now made our reporting tools easier to find, reduced the number of steps to report and started encouraging teens to report at relevant moments.”
FinCEN declined to comment. PayPal did not respond to a request for comment.
If a human trafficker is using a codeword for selling girls, we didn’t get into that. We didn’t really get trained on those
Former Meta compliance analyst
“The industries have created a situation where illegal logging traps people inside this job,” she says.
“Valdir has no other option in his town – he didn’t get to have an education.”
Greene says their team received death threats during one of their expeditions. “We left immediately,” she says. “A different group of loggers found out what we were doing, and they wanted us dead.”
The illegal timber market, she says, compounds already heightened tensions between Indigenous peoples and loggers. “If the US, Europe and China were not buying this protected and endangered hardwood, then Valdir wouldn’t be in that situation,” Greene says.
Parallel to Duarte’s story, the documentary follows two leading Indigenous figures: Marçal Guajajara, the 32-year-old regional coordinator of the forest guardians from the Indigenous territory of Araribóia; and Puyr Tembé, an Indigenous leader and activist from the territory of Alto Rio Guamá.
The film opens with shots of loggers sawing down a 500-year-old tree. “For us, they killed a life, and that’s sad,” Marçal Guajajara says after inspecting the felled tree. He is later seen donning urucum – red face-paint derived from the achiote plant (Bixa orellana) – in preparation for a surveillance mission.
Puyr Tembé, who wears a cocar feather headdress when she defends her territory and western clothes when she travels to the Amazonian city of Belém for activism, stresses the critical role of Indigenous peoples in protecting forests.
“Five per cent of the world’s population is Indigenous, and we protect 80% of the remaining biodiversity on the planet,” she says in the film. “At least 600 of us land defenders have been murdered since 2014.”
Another key person in the film is Tadeu Fernandes, who bought 28,000 hectares (69,000 acres) of forest land in the 1970s to create an ecological sanctuary. But his land has since been prey to numerous invasions. Aerial shots show a complete town carved out of his land, with 3,200 people living there illegally.
“This is the biggest environmental crime in Brazil,” Fernandes says about his battle against governmental indifference. Most of his 500 or so official complaints have gone unheeded.
The documentary, filmed between 2019 and 2022, also adds a political backdrop to its intimate, characterfocused narrative. Tembé is warned that powerful politicians are connected to timber companies, cattle ranchers and encroaching miners. An ex-mayor becomes a wood exporter, while parliamentarians are accused of receiving money from agribusiness associations.
However, the film ends on a positive note, as Luiz Inácio Lula da Silva defeats the far-right incumbent, Jair Bolsonaro, to become Brazil’s president. Edivan Guajajara says Lula’s time in office has already shown positive effects, such as the government’s decision “to support the demarcation of the Indigenous territories”, even though Brazil’s National Congress has struck down some measures.
“I think you have to have the participation of an Indigenous person if you’re talking about Indigenous issues, no matter what,” says Edivan Guajajara, a member of Maranhão state’s Guajajara people, whose leading representative became Brazil’s first minister for Indigenous Peoples.
“The Indigenous people’s struggle is a struggle for all of us, not just those in the territory,” he says. “It’s a fight for all of humanity.”
Grobman says a tangible change in the fate of the Amazon will only happen if the world understands “that the Amazon is critical to the health of the entire planet”.
He adds: “We all need to recognise our part in its destruction.”
The three film-makers launched an impact campaign to further the work covered in the documentary and recently received a $200,000 grant from the Erol Foundation to support reforestation and agroforestry projects in the Tembé and Guajajara territories.
“Most of the destruction of the Amazon comes from a small handful of companies,” Greene says. “People around the world need to stand up and say something to these companies because if enough people speak out, they won’t continue this unacceptable behaviour.
“All of us have a deep-down intuition and understanding that when you harm nature, we’re harming ourselves, and we all feel this anguish at what’s happening on this planet.”
We Are Guardians will be screened at theHuman Rights Watch film festival on 15 March at the Rich Mix arts centrein Shoreditch, London. Itcan beseen online from18-24 March