Sponsored by
Username and handle tracing is the systematic cross-referencing of pseudonymous online identifiers across platforms, breach databases, and domain registration records to reconstruct the real-world identity behind an alias. Individuals routinely reuse handles, email addresses, and writing styles across forums, social media, cryptocurrency wallets, and domain registrations; each reuse creates a linkage point. The cumulative chain of these linkages forms the basis of a converging identity dossier that meets evidentiary standard.
The method applies when identifying the person behind a pseudonymous forum account or dark web vendor, verifying or refuting attribution of a handle to a known individual, reconstructing a platform footprint before deletion, tracing cryptocurrency addresses to named exchanges, or locating the operational security failure that links a pseudonym to a real identity. A single matched handle is not attribution. The convergence of independently sourced identifiers, corroborated across breach data, WHOIS records, and on-chain activity, is.
IDN-002 sets out the methodology for cataloguing pseudonymous identifiers, tracing them across platforms and breach records, and building a convergence dossier to evidentiary standard.
Eight workflow steps, six tooling sources, five false-positive checks, six chain-of-custody requirements.
|
01
Required Tools
Six platforms covering username enumeration, breach data, WHOIS, and blockchain tracing.
|
02
OPSEC
Query isolation, sock puppet discipline, breach database logging risks, and legal exposure.
|
|
03
Workflow
Eight-step sequence from identifier catalogue to verified convergence dossier.
|
04
False Positives
Common handle collision, breach email validity, blockchain clustering, and stylometric limits.
|
|
05
Chain of Custody
Six imperatives covering screenshot hashing, query logging, and linkage rationale documentation.
|
06
Key Queries
Five operator-tool query patterns across Sherlock, HIBP, Intelx, Blockchair, and DomainTools.
|
Download the card.
A PDF version of IDN-002 is available below for Signal subscribers.
This reference card is for Signal subscribers.
Signal subscribers get the full OSINT Reference Card library, plus every Methods tutorial and Forensic Dossier.
Join SignalA Signal subscription gives you:
- Full OSINT Reference Card library
- Methods, all tradecraft tutorials in full
- Shadow Analysis, all evidence-based reporting
- Forensic Dossiers, full access
- Discord access included
