Privateinvestigator

Customization

Before executing, check for user customizations at: ~/.claude/PAI/USER/SKILLCUSTOMIZATIONS/PrivateInvestigator/

If this directory exists, load and apply any PREFERENCES.md, configurations, or resources found there. These override default behavior. If the directory does not exist, proceed with skill defaults.

🚨 MANDATORY: Voice Notification (REQUIRED BEFORE ANY ACTION)

You MUST send this notification BEFORE doing anything else when this skill is invoked.

1. Send voice notification:

   curl -s -X POST http://localhost:8888/notify \
     -H "Content-Type: application/json" \
     -d '{"message": "Running the WORKFLOWNAME workflow in the PrivateInvestigator skill to ACTION"}' \
     > /dev/null 2>&1 &

2. Output text notification:

   Running the **WorkflowName** workflow in the **PrivateInvestigator** skill to ACTION...

This is not optional. Execute this curl command immediately upon skill invocation.

PrivateInvestigator - Ethical People Finding

Core Principle

PUBLIC DATA ONLY - No hacking, pretexting, or authentication bypass. All techniques are legal and ethical.

Workflow Routing

When executing a workflow, output this notification:

Running the **WorkflowName** workflow in the **PrivateInvestigator** skill to ACTION...

When to Activate

Direct People-Finding

• "find [person]", "locate [person]", "search for [person]"
• "reconnect with [person]", "looking for lost contact"
• "find an old friend", "locate a former coworker"

Reverse Lookup

• "reverse phone lookup", "who owns this email"
• "reverse image search", "find person by username"

Investigation

• "background check" (public data only)
• "what can you find about [person]"
• "research [person]"

Available Workflows

Research Strategy

MANDATORY: Extensive Parallel Research

Every investigation uses 15 parallel research agents (5 types × 3 each):

Agent Types: 1. ClaudeResearcher (3 agents) - People search aggregators, professional records, location intelligence, comprehensive identity, public records, education/alumni 2. GeminiResearcher (3 agents) - Alternative identities, multi-perspective synthesis, historical context 3. GrokResearcher (3 agents) - Social media deep search, contrarian analysis, real-time intelligence 4. CodexResearcher (3 agents) - Username enumeration, Google dorking, technical profiles

Each agent executes 3 sub-searches = 45 parallel search threads per investigation

Launch Pattern: All 15 agents launch in a SINGLE message with multiple Task tool calls.

Core Capabilities

1. People Search Aggregators

2. Social Media Investigation

• Facebook: Google x-ray searches, mutual friends, groups
• LinkedIn: Boolean search, alumni networks
• Instagram/Twitter/TikTok: Username patterns, cross-platform correlation

3. Public Records

• Voter Registration: Most states publicly available
• Property Records: County assessor/recorder sites
• Court Records: PACER (federal), state court portals, CourtListener
• Business Filings: Secretary of State websites
• Professional Licenses: State licensing boards

4. Reverse Lookup

• Phone: CallerID, NumLookup, carrier lookup
• Email: Epieos, Holehe, Hunter.io
• Image: PimEyes, TinEye, Google/Yandex Images
• Username: Sherlock, WhatsMyName, Namechk

5. Google Dorking

site:linkedin.com "John Smith" "Software Engineer"
site:facebook.com "lives in" "Austin" "marketing"
filetype:pdf resume "Jane Doe" "San Francisco"

Investigation Methodology

Information Hierarchy

Tier 1: Foundation Data

• Full name (and variations/maiden names)
• Approximate age or date of birth
• Last known location
• Context (school, workplace, relationship)

Tier 2: Primary Research

• People search aggregators
• Social media presence scan
• Google dorking

Tier 3: Deep Investigation

• Public records searches
• Reverse lookups on discovered info
• Cross-platform correlation
• Associate/family network mapping

Tier 4: Verification

• Multi-source confirmation
• Timeline consistency check
• Photo verification
• Confidence scoring

Confidence Scoring

Dealing with Common Names

1. Add Specificity - Include location, age, employer, school 2. Cross-Reference - Match DOB + address patterns across sources 3. Family Connections - Verify through known relatives 4. Timeline Analysis - Does the life history make sense? 5. Multiple Identifiers - Require 3+ matching data points

Legal & Ethical Boundaries

GREEN ZONE (Allowed)

✅ Search public records (property, court, voter, business) ✅ Access publicly posted social media content ✅ Use people search aggregator sites ✅ Perform reverse lookups on public data ✅ Google dorking with public search operators

RED ZONE (Never Cross)

❌ Access data behind login walls without authorization ❌ Bypass authentication or security measures ❌ Use pretexting or impersonation ❌ Access private databases (credit, financial, medical) ❌ Stalk, harass, or intimidate subjects ❌ Access PI-only databases without license

When to STOP

• If the purpose shifts to harassment or stalking
• If the subject has clearly opted out of contact
• If investigation requires illegal methods
• If you suspect the requestor has malicious intent

Examples

Example 1: Finding an Old College Friend

User: "Help me find my college roommate from 2005, John Smith from Austin"
→ Routes to FindPerson.md
→ Launches 15 parallel research agents
→ Cross-references people search + LinkedIn alumni + property records
→ Verifies identity through timeline analysis
→ Reports findings with HIGH confidence

Example 2: Reverse Phone Lookup

User: "Who called from 512-555-1234?"
→ Routes to ReverseLookup.md
→ Runs phone through CallerID, NumLookup
→ Cross-references with people search aggregators
→ Reports owner name, location, carrier

Example 3: Social Media Investigation

User: "Find Jane Doe's social media, she's a marketing professional in Denver"
→ Routes to SocialMediaSearch.md
→ LinkedIn Boolean search + Google x-ray
→ Username enumeration if handle discovered
→ Reports all accounts with MEDIUM/HIGH confidence

---

Related Documentation:

• Complete workflow details in Workflows/ directory
• Integration with Research skill for parallel agent orchestration

Find Person - Complete Investigation Workflow

Voice Notification

curl -s -X POST http://localhost:8888/notify \
  -H "Content-Type: application/json" \
  -d '{"message": "Running the FindPerson workflow in the PrivateInvestigator skill to locate individuals"}' \
  > /dev/null 2>&1 &

Running the FindPerson workflow in the PrivateInvestigator skill to locate individuals...

Purpose: Systematically locate a person using all available public data sources

When to Use:

• User wants to find a specific person by name
• User wants to reconnect with an old friend, classmate, or contact
• User needs to locate someone for legitimate purposes
• Comprehensive people search is required

Prerequisites:

• Subject's name (ideally full name)
• Any additional context (location, age, workplace, school, how they know them)
• Legitimate purpose for the search

---

Workflow Steps

Step 1: Gather Initial Information

Description: Collect all available starting data from the user

Questions to Ask: 1. What is the person's full name? (including maiden name, nicknames, variations) 2. What is their approximate age or date of birth? 3. Where did you last know them to be located? 4. How do you know this person? (school, work, family, etc.) 5. When did you last have contact? 6. Do you have any old phone numbers, emails, or addresses? 7. Do you know any family members or mutual contacts? 8. Do you have any photos of them?

Build Subject Profile:

Name: [Full name]
Aliases/Variations: [Maiden name, nicknames]
Age/DOB: [Approximate or exact]
Last Known Location: [City, State]
Connection Context: [How user knows them]
Last Contact: [Year/timeframe]
Known Associates: [Family, friends, colleagues]
Additional Identifiers: [Old phone, email, employer, school]

Expected Outcome: Complete subject profile for investigation

---

Step 2: LAUNCH PARALLEL INVESTIGATION (9+ Agents)

CRITICAL: Launch ALL agents in a SINGLE message with multiple Task tool calls

This is the main investigation step. Deploy 9+ agents across 3 categories simultaneously.

---

CATEGORY 1: People Search Aggregators (3 agents minimum)

Agent 1: ClaudeResearcher - Primary Name Search

Prompt: Search for [FULL NAME] with these exact spelling variations: [list all].
Location: [CITY, STATE]. Age approximately [AGE].
Search TruePeopleSearch, FastPeopleSearch, Spokeo concepts.
Return: current address, phone, relatives, associates, email.

Agent 2: ClaudeResearcher - Comprehensive Search

Prompt: Comprehensive people search for [NAME] from [LOCATION].
Try phonetic and ethnic spelling variations of the surname.
Focus on: address history, family tree, employment history.
Return all possible matches with confidence assessment.

Agent 3: GeminiResearcher - Alternative Spellings

Prompt: Find person whose name sounds like [NAME] from [LOCATION].
The surname is likely Eastern European - try: [variations].
Search for family members who might have similar surname.
Return any matches with spelling variations that worked.

---

CATEGORY 2: Social Media Search (3 agents minimum)

Agent 4: ClaudeResearcher - LinkedIn/Facebook

Prompt: Search LinkedIn and Facebook for [NAME] from [LOCATION].
Use Google x-ray: site:linkedin.com/in "[NAME]" "[LOCATION]"
Also search: site:facebook.com "[NAME]" "[SCHOOL/CONTEXT]"
Return profile URLs and any contact information visible.

Agent 5: GrokResearcher - Twitter/X Deep Search

Prompt: Search Twitter/X for [NAME] or username variations.
Try handles like: [firstname][lastname], [first]_[last], etc.
Search for mentions, tagged posts, location-based posts.
Check for any public posts mentioning [LOCATION] or [CONTEXT].

Agent 6: CodexResearcher - Username Enumeration

Prompt: If we find any username, enumerate across platforms.
Try common patterns: [first][last], [first].[last], [first][last][birthyear]
Conceptually search: Instagram, TikTok, Reddit, GitHub.
Cross-reference any found usernames across platforms.

---

CATEGORY 3: Public Records & News (3 agents minimum)

Agent 7: ClaudeResearcher - Property/Voter Records

Prompt: Search California public records for [NAME].
Focus on: Alameda County property records, CA voter registration.
Also check neighboring counties: Santa Clara, Contra Costa.
Return any official records with addresses or DOB.

Agent 8: GeminiResearcher - Court/Business Records

Prompt: Search for [NAME] in California court records and business filings.
Check: CA Secretary of State business search, court records.
Look for any legal filings, business registrations, professional licenses.

Agent 9: ClaudeResearcher - News & Mentions

Prompt: Search for news articles, obituaries, or public mentions of [NAME].
Check: local Newark/Fremont news archives, alumni mentions.
Search for family members that might lead to subject.
Include any professional or community involvement.

---

What to Compile from ALL Agent Results:

• All addresses found (current and historical)
• All phone numbers discovered
• All relatives/associates mentioned
• All social media profiles/URLs
• All official records found
• Best spelling variations that returned results
• Confidence level for each finding

Expected Outcome: Comprehensive parallel search results to synthesize

---

Step 5: Reverse Lookups on Discovered Info

Description: Use discovered phone/email/username for additional data

Invoke: Read ReverseLookup.md

For Each Phone Number Found:

• Run through CallerID, NumLookup
• Cross-reference with people search sites

For Each Email Found:

• Run through Holehe (account discovery)
• Check Hunter.io for company email patterns

For Each Username Found:

• Run through Sherlock or WhatsMyName
• Check for cross-platform usage

Expected Outcome: Additional accounts and verification data

---

Step 6: Associate Network Mapping

Description: Investigate known relatives and associates for additional leads

Actions: 1. Search each relative/associate name found in Step 2 2. Check their social media for subject mentions/tags 3. Look for mutual connections on LinkedIn 4. Search for family events (weddings, obituaries) that may mention subject

Associate Search Strategy:

• Parents often have more stable addresses
• Siblings may be connected on social media
• Spouse/partner records may show current address
• Colleagues may have professional network connections

Expected Outcome: Indirect paths to subject through network

---

Step 7: Verification & Confidence Assessment

Description: Confirm you've found the correct person

Invoke: Read VerifyIdentity.md

Verification Checklist:

• [ ] Age/DOB matches expected range
• [ ] Location history makes sense chronologically
• [ ] Family connections match known information
• [ ] Employment/education aligns with context
• [ ] Photos (if available) match known appearance
• [ ] Multiple independent sources confirm same data

Confidence Scoring:

Expected Outcome: Confidence level for findings

---

Step 8: Compile Investigation Report

Description: Present findings in structured format

Report Template:

# People Search Report: [Subject Name]

**Search Date:** [Date]
**Requested By:** [User]
**Confidence Level:** [HIGH/MEDIUM/LOW]

## Subject Profile
- **Name:** [Full name]
- **Age:** [Approximate/confirmed]
- **Last Known Location:** [From original request]

## Findings

### Current Contact Information
- **Address:** [Current address if found]
- **Phone:** [Phone numbers found]
- **Email:** [Email addresses found]

### Social Media Presence
- **LinkedIn:** [URL or "Not found"]
- **Facebook:** [URL or "Not found"]
- **Instagram:** [URL or "Not found"]
- **Other:** [Any additional platforms]

### Verification Points
- [Point 1 that confirms identity]
- [Point 2 that confirms identity]
- [Point 3 that confirms identity]

### Investigation Path
1. [Source 1] → [What was found]
2. [Source 2] → [What was found]
3. [Source 3] → [What was found]

## Confidence Assessment
[Explanation of why confidence level was assigned]

## Recommended Next Steps
- [Suggested action 1]
- [Suggested action 2]

## Sources Used
- TruePeopleSearch
- [Other sources]

---
*This investigation used only publicly available information*

Expected Outcome: Complete investigation report

---

Outputs

What this workflow produces:

• Comprehensive subject profile with all discovered information
• Contact information (address, phone, email) if available
• Social media account URLs
• Confidence assessment
• Investigation report

Deliverable Format:

• Markdown report as shown in Step 8
• All sources documented
• Confidence level clearly stated

---

Common Challenges

Challenge: Common Name

Solution: Add specificity - require location + age + additional identifier. See VerifyIdentity.md for detailed guidance.

Challenge: No Results in People Search

Solution: Try variations (maiden name, nickname), expand location search, focus on social media and public records.

Challenge: Subject Appears to Have Intentionally Hidden

Solution: Respect their privacy. Report finding to user with ethical guidance about whether to pursue.

Challenge: Multiple Possible Matches

Solution: Use verification workflow to eliminate candidates based on timeline, family, and corroborating data.

---

Related Workflows

• SocialMediaSearch.md - Deep dive on social platforms
• PublicRecordsSearch.md - Government record searches
• ReverseLookup.md - Phone, email, image lookups
• VerifyIdentity.md - Confirming correct person

---

Last Updated: 2025-11-25

Public Records Search Workflow

Voice Notification

curl -s -X POST http://localhost:8888/notify \
  -H "Content-Type: application/json" \
  -d '{"message": "Running the PublicRecordsSearch workflow in the PrivateInvestigator skill to search records"}' \
  > /dev/null 2>&1 &

Running the PublicRecordsSearch workflow in the PrivateInvestigator skill to search records...

Purpose: Search government and official records databases for person information

When to Use:

• User needs official/verified information about a person
• Social media and people search haven't yielded results
• User needs to verify identity through official records
• Property, court, or business records are specifically needed

Prerequisites:

• Subject's full name
• Location (state at minimum)
• Approximate age or DOB (helpful for filtering)

---

Workflow Steps

Step 1: Property Records Search

Description: Real estate ownership is public record in all US states

How to Search: 1. Identify the county where subject lives/lived 2. Find County Assessor or County Recorder website 3. Search by owner name

Multi-County Aggregators:

• NETR Online: https://publicrecords.netronline.com
• Links to property records for every US county
• ParcelQuest (California): https://parcelquest.com

What to Search:

• Current county of residence
• Previous counties from address history
• Counties where family members own property

Information Available:

• Property address
• Owner name(s)
• Property value/assessment
• Purchase date and price
• Deed history
• Liens and mortgages

Expected Outcome: Current/historical addresses, property ownership confirmation

---

Step 2: Voter Registration Records

Description: Voter rolls are public in most states (varies by state)

State Availability:

How to Search: 1. Visit state Secretary of State or Board of Elections website 2. Look for "Voter Registration Lookup" or "Am I Registered?" 3. Search by name + county or DOB

Information Available:

• Full name
• Address
• Date of birth
• Party affiliation (some states)
• Voting history (when they voted, not how)

Expected Outcome: Address confirmation, DOB verification

---

Step 3: Court Records Search

Description: Civil and criminal court records are generally public

Federal Courts - PACER:

• URL: https://pacer.uscourts.gov
• Registration required
• Fees: $0.10/page (max $3/document), waived if under $30/quarter
• Covers: Federal civil, criminal, bankruptcy, appeals

FREE Alternative - CourtListener:

• URL: https://www.courtlistener.com
• Free access to federal court opinions and filings
• Maintained by Free Law Project

State Courts:

• Search "[State] court records search" for state portal
• Many states have unified case search systems
• Some require county-by-county searching

What to Search:

• Civil cases (lawsuits, divorces, name changes)
• Criminal cases (arrests, convictions)
• Family court (if publicly accessible)
• Bankruptcy filings

Information Available:

• Case parties and addresses
• Case type and status
• Filing dates
• Attorney information
• Some case documents

Expected Outcome: Legal history, name changes, address confirmation from filings

---

Step 4: Business Registration Records

Description: Business entity filings are public in all states

How to Search: 1. Go to state Secretary of State website 2. Find "Business Entity Search" or "Corporation Search" 3. Search by individual name (as registered agent or officer)

Key State Portals:

• California: https://bizfileonline.sos.ca.gov
• Texas: https://mycpa.cpa.state.tx.us/coa/
• New York: https://apps.dos.ny.gov/publicInquiry/
• Florida: https://search.sunbiz.org

What to Search:

• Subject's name as officer/director
• Subject's name as registered agent
• Business names they may be associated with

Information Available:

• Business name and type
• Registered agent name and address
• Officer/director names
• Formation date
• Status (active/inactive)
• Annual reports (some states)

Expected Outcome: Business affiliations, registered agent addresses, professional connections

---

Step 5: Professional License Search

Description: Licenses for regulated professions are public record

Professions to Check:

• Medical (doctors, nurses, dentists)
• Legal (attorneys)
• Financial (CPAs, financial advisors)
• Real estate (agents, brokers)
• Contractors and trades
• Teachers and educators

How to Search: 1. Identify relevant licensing board for profession 2. Search by name on board's website

Multi-State Resources:

• Attorneys: State bar associations have public directories
• Doctors: State medical board, also NPDB
• Real Estate: ARELLO for national search

Example State Portals:

• California DCA: https://search.dca.ca.gov
• Texas Licensing: Various by profession

Information Available:

• License number and type
• License status (active/expired)
• Address of record
• Disciplinary actions
• Education/training records

Expected Outcome: Professional credentials, business address, disciplinary history

---

Step 6: Death Records / Obituaries

Description: Confirm if subject is deceased; find family connections

Resources:

• Social Security Death Index: Via Ancestry.com or FamilySearch
• Obituary Search: Legacy.com, newspapers.com
• FindAGrave: https://www.findagrave.com

Why Search:

• Confirm subject is still living
• Find family members mentioned in obituaries
• Identify maiden names or married names

Expected Outcome: Death confirmation or family/associate leads

---

Step 7: UCC Filings (Liens and Secured Transactions)

Description: Commercial financing records are public

How to Search:

• State Secretary of State UCC search
• Search by debtor name

Information Available:

• Secured party (lender)
• Debtor name and address
• Collateral described
• Filing date

When Useful:

• Looking for someone with business assets
• Verifying financial relationships
• Finding registered addresses

Expected Outcome: Business addresses, financial relationships

---

Step 8: Compile Public Records Findings

Description: Organize all discovered official records

Report Template:

## Public Records Report: [Subject Name]

### Property Records
| County | Address | Owner Name | Purchase Date |
|--------|---------|------------|---------------|
| [County] | [Address] | [Name] | [Date] |

### Voter Registration
- **State:** [State]
- **Address:** [Address]
- **DOB:** [If available]
- **Status:** [Active/Inactive]

### Court Records
| Court | Case Type | Case Number | Status |
|-------|-----------|-------------|--------|
| [Court] | [Type] | [Number] | [Status] |

### Business Affiliations
| Business Name | Role | State | Status |
|---------------|------|-------|--------|
| [Business] | [Officer/Agent] | [State] | [Active] |

### Professional Licenses
| License Type | Number | Status | State |
|--------------|--------|--------|-------|
| [Type] | [Number] | [Active/Expired] | [State] |

### Verification Summary
- Official records confirm address at: [Address]
- DOB confirmed/estimated: [DOB]
- Professional status: [Description]

Expected Outcome: Comprehensive public records summary

---

State-Specific Notes

California

• Strong privacy protections
• Voter data restricted
• Good business entity search
• DCA license lookup comprehensive

Texas

• More open public records
• Good business entity portal
• County-by-county for many records

Florida

• Very open public records (Sunshine Law)
• Voter data readily accessible
• Court records widely available online

New York

• Moderate access
• Good court records system (eCourts)
• Business entity search available

---

Outputs

What this workflow produces:

• Verified addresses from official sources
• DOB confirmation
• Legal history overview
• Business affiliations
• Professional credentials

Quality Notes:

• Official records provide highest confidence data
• Cross-reference with people search results
• Note date of records (may be outdated)

---

Related Workflows

• find-person.md - Full investigation workflow
• verify-identity.md - Using records for verification

---

Last Updated: 2025-11-25

Reverse Lookup Workflow

Voice Notification

curl -s -X POST http://localhost:8888/notify \
  -H "Content-Type: application/json" \
  -d '{"message": "Running the ReverseLookup workflow in the PrivateInvestigator skill to trace identifiers"}' \
  > /dev/null 2>&1 &

Running the ReverseLookup workflow in the PrivateInvestigator skill to trace identifiers...

Purpose: Identify a person from partial information (phone, email, image, username)

When to Use:

• User has a phone number and wants to know who it belongs to
• User has an email and wants to find the person
• User has a photo and wants to identify the person
• User has a username and wants to find the real identity
• Any "reverse" search scenario

Prerequisites:

• At least one identifier (phone, email, image, username)
• Legitimate purpose for the search

---

Reverse Phone Lookup

Step 1: Free Phone Lookup Services

CallerID Test:

• URL: https://calleridtest.com
• Enter phone number
• Returns: Name, carrier, location

NumLookup:

• URL: https://www.numlookup.com
• Free carrier and location lookup
• Limited name information

USPhoneBook:

• URL: https://www.usphonebook.com
• Free reverse phone search
• Shows name, address, relatives

Step 2: People Search Aggregator Reverse Lookup

TruePeopleSearch:

• Has reverse phone lookup feature
• Enter number in search
• Often provides full contact record

That's Them:

• URL: https://thatsthem.com
• Reverse phone feature
• Shows associated names and addresses

Step 3: Additional Phone Research

Check Carrier Type:

• Mobile vs. landline
• VoIP (may be harder to trace)
• Prepaid (limited registration data)

Search Phone Number in Google:

"512-555-1234"
"5125551234"

May find:

• Business listings
• Online classified ads
• Public posts with number

Check Whitepages/Yellow Pages:

• Landlines especially
• Business associations

Phone Lookup Output:

## Reverse Phone Results: [Phone Number]

**Carrier:** [Carrier name]
**Type:** [Mobile/Landline/VoIP]
**Location:** [City, State]

**Associated Names:**
- [Name 1] - [Confidence level]
- [Name 2] - [Confidence level]

**Associated Addresses:**
- [Address 1]
- [Address 2]

**Sources Checked:**
- CallerID Test
- NumLookup
- TruePeopleSearch
- Google search

---

Reverse Email Lookup

Step 1: Email Account Discovery with Holehe

Tool: Holehe (checks 120+ services)

# Install
pip install holehe

# Run
holehe target@example.com

Output Shows:

• Services where email is registered
• Social media accounts
• Dating sites
• Forums and communities

Step 2: Epieos Email Lookup

URL: https://epieos.com Features:

• Links email to social accounts
• Shows Google account info (name, photo)
• Breach data associations

Step 3: Hunter.io

URL: https://hunter.io Best For:

• Corporate email patterns
• Finding all emails at a domain
• Verifying email validity

Use Case: If you have company domain, can find other employees and patterns

Step 4: Google the Email

"target@example.com"

May Find:

• Forum posts
• Public profiles
• Documents with email listed
• Business directories

Step 5: Check Social Media Registration

Manually check if email might be used for:

• Facebook (via forgot password - shows partial email)
• LinkedIn
• Twitter
• Instagram

Note: Do not attempt to reset passwords or gain access

Email Lookup Output:

## Reverse Email Results: [Email]

**Email Provider:** [Gmail/Yahoo/Corporate]
**Validity:** [Valid/Invalid/Catch-all]

**Linked Accounts (Holehe):**
- [Service 1]: Registered
- [Service 2]: Registered
- [Service 3]: Not found

**Google Account Info (Epieos):**
- Name: [If available]
- Photo: [If available]

**Other Findings:**
- [Any forum posts, profiles, etc.]

---

Reverse Image Search

Step 1: Google Images

URL: https://images.google.com Method:

• Click camera icon
• Upload image or paste URL
• Review matching images

Best For: Finding image across websites, identifying public figures

Step 2: TinEye

URL: https://tineye.com Features:

• 79.5+ billion indexed images
• Shows where image appears online
• Finds modified versions of image
• Sort by oldest (find original source)

Best For: Finding image origin, detecting photo manipulation

Step 3: Yandex Images

URL: https://yandex.com/images Features:

• Excellent for faces
• Strong European/Russian coverage
• Often finds what Google misses

Best For: Face matching, Eastern European sources

Step 4: PimEyes (Paid)

URL: https://pimeyes.com Features:

• Dedicated facial recognition
• Billions of indexed faces
• Finds social media profiles

Legal Note: Verify legality in your jurisdiction; some areas restrict facial recognition

Step 5: FaceCheck.id

URL: https://facecheck.id Features:

• Alternative to PimEyes
• Social media focused
• Browser extension available

Image Search Output:

## Reverse Image Results

**Image Analyzed:** [Description/filename]

**Google Images:**
- [Number] results found
- Key matches: [URLs]

**TinEye:**
- [Number] results
- Oldest source: [URL, date]

**Yandex:**
- [Number] face matches
- Notable matches: [URLs]

**Identified Person:**
- Name: [If determined]
- Confidence: [HIGH/MEDIUM/LOW]
- Source: [How determined]

---

Reverse Username Search

Step 1: Sherlock (Command Line)

# Install
pip install sherlock-project

# Run
sherlock target_username --print-found

# Output to file
sherlock target_username -o results.txt

Checks 400+ platforms for username registration

Step 2: WhatsMyName (Web)

URL: https://whatsmyname.app Features:

• Web-based alternative to Sherlock
• Hundreds of sites checked
• Shows direct profile URLs

Step 3: Namechk

URL: https://namechk.com Features:

• Quick availability check
• Major platforms covered
• Social and domain availability

Step 4: Search Username in Google

"target_username"
inurl:"target_username"

May Find:

• Profiles not in database
• Forum posts
• Comments on websites
• Code repositories

Step 5: Check Common Patterns

If you found one username, try variations:

• target_username → targetusername → target.username
• target_username1 → target_username2
• Check if matches real name pattern

Username Lookup Output:

## Reverse Username Results: [username]

**Platforms Found (Sherlock):**
| Platform | URL | Status |
|----------|-----|--------|
| GitHub | github.com/[username] | Found |
| Instagram | instagram.com/[username] | Found |
| Reddit | reddit.com/u/[username] | Not Found |

**Profile Analysis:**
- Most active: [Platform]
- Consistent identity: [Yes/No]
- Real name indicators: [Any found]

**Cross-Reference:**
- Email pattern: [If discovered]
- Location indicators: [From bios]
- Other usernames used: [Variations found]

---

Outputs

What this workflow produces:

• Identity information from partial identifier
• Associated accounts and profiles
• Cross-reference data for verification
• Confidence assessment

Deliverable Format:

• Structured report per identifier type
• All sources documented
• Confidence level stated

---

API Options (For Automation)

Phone APIs:

Email APIs:

Use Apify MCP for social scraping automation

---

Related Workflows

• find-person.md - Full investigation workflow
• social-media-search.md - After identifying username
• verify-identity.md - Confirming findings

---

Last Updated: 2025-11-25

Social Media Search Workflow

Voice Notification

curl -s -X POST http://localhost:8888/notify \
  -H "Content-Type: application/json" \
  -d '{"message": "Running the SocialMediaSearch workflow in the PrivateInvestigator skill to find profiles"}' \
  > /dev/null 2>&1 &

Running the SocialMediaSearch workflow in the PrivateInvestigator skill to find profiles...

Purpose: Systematically search social media platforms to find a person's online presence

When to Use:

• User specifically wants to find someone's social media accounts
• Main investigation needs social media component
• User wants to verify someone's online presence
• Cross-platform correlation is needed

Prerequisites:

• Subject's full name
• Any known usernames, handles, or email addresses
• Location and/or age for filtering
• Context (profession, interests) for verification

---

Workflow Steps

Step 1: LinkedIn Search (Professional Presence)

Description: LinkedIn is often the most reliable for professionals

Method 1: Direct LinkedIn Search

• Use LinkedIn's search bar with name
• Filter by: Location, Company, School, Industry
• Note: Limited results without Premium

Method 2: Google X-Ray (Recommended)

site:linkedin.com/in "[Full Name]" "[City]"
site:linkedin.com/in "[Full Name]" "[Company Name]"
site:linkedin.com/in "[Full Name]" "[University]"

Method 3: Alumni Search

• If you share a school, use LinkedIn Alumni feature
• Filter by graduation year and major

What to Record:

• Profile URL
• Current employer and title
• Location
• Education history
• Connection count (for verification)

Expected Outcome: LinkedIn profile URL and professional details

---

Step 2: Facebook Search

Description: Most extensive personal network data

Method 1: Google X-Ray (Bypasses Facebook Limitations)

site:facebook.com "[Full Name]" "[City]"
site:facebook.com "[Full Name]" "[School]"
site:facebook.com "[Full Name]" "[Employer]"

Method 2: Facebook Direct Search

• Search by name in Facebook search bar
• Filter by: Location, Education, Workplace
• Check "People" tab specifically

Method 3: Mutual Friends

• If you have mutual friends, check their friend lists
• Look for tagged photos and mentions

Advanced Techniques:

• Search for family member profiles, then check their friends
• Look for group memberships (alumni groups, local groups)
• Check public events they may have RSVP'd to

What to Record:

• Profile URL
• Profile photo (for verification)
• Location listed
• Mutual friends if any
• Public posts/check-ins

Expected Outcome: Facebook profile URL and personal details

---

Step 3: Instagram Search

Description: Visual platform, often shows current lifestyle

Method 1: Direct Search

• Search by name in Instagram
• Search by username variations

Method 2: Google X-Ray

site:instagram.com "[Full Name]"
site:instagram.com "[Username]"

Method 3: Username Pattern Matching Common username patterns to try:

• firstname.lastname
• firstnamelastname
• firstinitial.lastname
• firstname_lastname
• lastname.firstname

Method 4: Location/Hashtag Search

• Search location tags in their city
• Search hashtags related to their profession/interests

What to Record:

• Username and profile URL
• Bio information
• Location tags in posts
• Cross-references to other platforms

Expected Outcome: Instagram handle and profile details

---

Step 4: Twitter/X Search

Description: Public commentary and professional presence

Method 1: X Advanced Search

from:username - Search specific user's tweets
"[Full Name]" - Search mentions
near:"[City]" within:15mi - Location filter

Method 2: Google X-Ray

site:twitter.com "[Full Name]"
site:x.com "[Full Name]"

Method 3: Username Search

• Try same username patterns as Instagram
• Check if username from other platforms exists on X

What to Record:

• Handle and profile URL
• Bio and location in profile
• Website links in bio
• Tweet activity level

Expected Outcome: X/Twitter handle and public profile

---

Step 5: TikTok Search

Description: Increasingly important for younger demographics

Method 1: Direct Search

• Search by name or username in TikTok
• Check "Users" tab in search results

Method 2: Google X-Ray

site:tiktok.com/@"[username]"
site:tiktok.com "[Full Name]"

Method 3: Cross-Platform Username

• Try usernames found on other platforms

What to Record:

• Username and profile URL
• Bio information
• Content themes (helps verify correct person)

Expected Outcome: TikTok profile if exists

---

Step 6: Username Enumeration

Description: If you found a username, check across 400+ platforms

Tool: Sherlock (Command Line)

# Install if needed
pip install sherlock-project

# Run enumeration
sherlock [username] --print-found

Alternative: WhatsMyName (Web)

• URL: https://whatsmyname.app
• Enter discovered username
• Returns all platforms where username exists

Alternative: Namechk

• URL: https://namechk.com
• Quick availability check across major platforms

What to Record:

• All platforms where username is claimed
• Which accounts appear active
• Profile consistency across platforms

Expected Outcome: Complete cross-platform presence map

---

Step 7: Email Account Discovery

Description: Find which services are associated with known email

Tool: Holehe

# Install
pip install holehe

# Run
holehe email@example.com

Checks 120+ websites for account existence without sending notification.

Alternative: Epieos

• URL: https://epieos.com
• Enter email address
• Returns linked accounts and breach data

What to Record:

• Services where email is registered
• Social accounts linked to email
• Any Google account info

Expected Outcome: Services associated with email address

---

Step 8: Cross-Reference and Verify

Description: Confirm all found accounts belong to same person

Verification Points: 1. Photo Consistency: Do profile photos match across platforms? 2. Bio Consistency: Similar job titles, locations, descriptions? 3. Connection Overlap: Do friends/followers overlap? 4. Content Themes: Similar interests and posting patterns? 5. Timeline Consistency: Does activity timeline make sense?

Red Flags (May Be Wrong Person):

• Drastically different photos
• Conflicting locations/ages
• No connection overlap with known associates
• Different professional background

Expected Outcome: Confidence level for each account

---

Outputs

What this workflow produces:

• List of all discovered social media accounts
• Username patterns identified
• Profile URLs for each platform
• Verification confidence for each account

Report Format:

## Social Media Presence: [Subject Name]

### Confirmed Accounts (HIGH Confidence)
| Platform | URL | Username | Verified By |
|----------|-----|----------|-------------|
| LinkedIn | [URL] | [username] | Photo + employer match |
| Facebook | [URL] | [username] | Mutual friends + location |

### Probable Accounts (MEDIUM Confidence)
| Platform | URL | Username | Notes |
|----------|-----|----------|-------|
| Instagram | [URL] | [username] | Same username, location matches |

### Possible Accounts (LOW Confidence)
| Platform | URL | Username | Notes |
|----------|-----|----------|-------|
| Twitter | [URL] | [username] | Common name, needs verification |

### Username Patterns
- Primary pattern: [firstname.lastname]
- Found on: LinkedIn, Instagram, GitHub

---

Platform-Specific Notes

LinkedIn

• Most reliable for professionals 30+
• Limited search without Premium
• Google x-ray works better than native search

Facebook

• Privacy settings vary widely
• Check "About" section for contact info
• Friends list often more revealing than profile

Instagram

• May be private account
• Stories/highlights visible even if posts hidden
• Location tags are goldmine

Twitter/X

• Usually public by default
• Check replies and quote tweets
• Bio links often lead to other platforms

TikTok

• Younger demographics
• Username often matches other platforms
• Comments may reveal real name

---

Related Workflows

• find-person.md - Full investigation workflow
• reverse-lookup.md - Reverse email/username lookup
• verify-identity.md - Confirming correct person

---

Last Updated: 2025-11-25

Verify Identity Workflow

Voice Notification

curl -s -X POST http://localhost:8888/notify \
  -H "Content-Type: application/json" \
  -d '{"message": "Running the VerifyIdentity workflow in the PrivateInvestigator skill to confirm identity"}' \
  > /dev/null 2>&1 &

Running the VerifyIdentity workflow in the PrivateInvestigator skill to confirm identity...

Purpose: Confirm that discovered information belongs to the correct person

When to Use:

• User has common name problem (multiple possible matches)
• User wants to verify findings before making contact
• User needs confidence assessment on investigation results
• Multiple candidates need to be narrowed down

Prerequisites:

• Initial investigation completed
• One or more potential matches identified
• Original subject profile for comparison

---

Workflow Steps

Step 1: Establish Verification Criteria

Description: Define what unique identifiers we have for matching

Build Comparison Framework:

Minimum for Confirmation:

• 3+ independent matches for HIGH confidence
• 2 matches with logical timeline for MEDIUM confidence
• 1 match only = LOW confidence (needs more research)

Expected Outcome: Clear criteria for evaluation

---

Step 2: Timeline Consistency Check

Description: Verify the life timeline makes logical sense

Timeline Analysis: 1. Birth Year: Does approximate age match? 2. Education Timeline:

• High school graduation ~18 years old
• College graduation ~22 years old
• Do dates align with age?

3. Career Timeline:

• Does employment history flow logically?
• Are there unexplained gaps?

4. Location Timeline:

• Do address changes make sense?
• Can you trace the path from last known to current?

Red Flags:

• Age doesn't match graduation dates
• Lives in location that doesn't fit history
• Career path doesn't match known profession
• Unexplainable timeline gaps

Expected Outcome: Timeline validation or concerns noted

---

Step 3: Family/Associate Verification

Description: Cross-reference through known connections

Verification Steps: 1. If you know subject's family members:

• Search for those family members
• Check if candidate is connected to same family

2. If people search shows relatives:

• Do relative names match any known family?
• Are relative ages appropriate (parents older, siblings similar)?

3. Social media connections:

• Do mutual friends match expected network?
• Are they connected to people from known history?

Strong Verification:

• Candidate is listed as relative of known family member
• Mutual friends include known associates
• Social media shows interaction with known people

Expected Outcome: Family/network verification result

---

Step 4: Photo Verification

Description: Compare photos across sources

Visual Comparison: 1. Collect photos from all discovered sources 2. Compare for consistency:

• Same person across platforms?
• Age-appropriate for expected age?
• Any distinguishing features match?

Photo Analysis Points:

• Facial structure consistency
• Approximate age in photos
• Background clues (location, activities)
• Metadata if available (date, location)

Tools for Comparison:

• PimEyes (paid) - facial recognition search
• Manual comparison across found profiles
• Google reverse image search on profile photos

If No Photos Available:

• Rely on other verification methods
• Note as limitation in confidence assessment

Expected Outcome: Photo verification result or limitation noted

---

Step 5: Cross-Source Verification

Description: Confirm data appears in multiple independent sources

Verification Matrix:

Independence Requirement:

• Sources should be truly independent
• People search sites often pull from same databases (count as 1 source)
• Best independent sources:
• Social media (they created it)
• Public records (government verified)
• Different people search aggregators with different data sources

Expected Outcome: Cross-source verification matrix

---

Step 6: Common Name Disambiguation

Description: Special handling for very common names

For Common Names (John Smith, etc.):

1. Require More Identifiers:

• Full DOB, not just age
• Middle name or initial
• Specific location history
• Unique employment/education

2. Elimination Strategy:

• List all candidates found
• Eliminate based on age mismatch
• Eliminate based on location impossibility
• Eliminate based on profession mismatch

3. Differentiation Points:

• Unique middle name
• Specific employer
• Exact graduation year
• Distinctive family names

4. When Uncertain:

• Report all viable candidates
• Provide distinguishing factors for each
• Let user determine based on additional knowledge

Expected Outcome: Single candidate or ranked candidates with differentiators

---

Step 7: Calculate Confidence Score

Description: Assign formal confidence level to findings

Scoring Criteria:

HIGH Confidence (Safe to Act On):

• 3+ unique identifiers match from independent sources
• Timeline is fully consistent
• Family/network verification positive
• Photo verification (if applicable) positive
• No red flags or contradictions

MEDIUM Confidence (Verify Before Acting):

• 2 identifiers match
• Timeline is generally consistent
• Some network verification
• Minor inconsistencies explainable

LOW Confidence (Needs More Research):

• Single source confirmation
• Some timeline questions
• Limited verification options
• Common name with limited differentiation

UNCONFIRMED (Do Not Act):

• Name match only
• Contradictory information
• Cannot differentiate from other candidates
• Significant timeline problems

Expected Outcome: Confidence score with justification

---

Step 8: Generate Verification Report

Description: Document verification analysis

Report Template:

# Identity Verification Report

## Subject
**Original Profile:**
- Name: [Known name]
- Age/DOB: [Known/estimated]
- Last Known Location: [City, State]
- Context: [How user knows them]

## Candidate Evaluated
**Discovered Profile:**
- Name: [Found name]
- Age/DOB: [Found]
- Current Location: [Found]
- Sources: [List sources]

## Verification Analysis

### Timeline Check
[Analysis of timeline consistency]
**Result:** [Consistent/Minor Issues/Major Concerns]

### Family/Network Verification
[Analysis of family and connection matches]
**Result:** [Verified/Partial/Unverified]

### Photo Verification
[Analysis of photo comparison, if available]
**Result:** [Match/Possible Match/No Photos Available]

### Cross-Source Verification
| Data Point | Sources Confirming | Consistent |
|------------|-------------------|------------|
| [Point] | [Count] | [Yes/No] |

### Common Name Analysis
[If applicable - how candidate was differentiated]

## Confidence Assessment

**Final Confidence Level:** [HIGH/MEDIUM/LOW/UNCONFIRMED]

**Justification:**
1. [Reason 1]
2. [Reason 2]
3. [Reason 3]

**Limitations:**
- [Any gaps in verification]
- [Information not available]

## Recommendation

[Whether it's safe to proceed with contact/action]

---
*Verification completed: [Date]*

Expected Outcome: Complete verification report

---

Outputs

What this workflow produces:

• Formal confidence score (HIGH/MEDIUM/LOW/UNCONFIRMED)
• Verification analysis across multiple dimensions
• Clear recommendation on whether to proceed
• Documentation of verification methodology

Confidence Level Meanings:

---

Special Cases

Case: Married Name Change

• Search both maiden and married names
• Check marriage records
• Look for social media with relationship status changes

Case: Deceased Subject

• Check Social Security Death Index
• Search obituaries
• Verify with family before continued search

Case: Privacy-Conscious Subject

• Limited online presence may be intentional
• Consider whether to respect their privacy choices
• Focus on public records if legitimate need

Case: Multiple Candidates Remain

• Present all candidates with differentiating factors
• Ask user for additional information to narrow down
• Do not guess if truly uncertain

---

Related Workflows

• find-person.md - Full investigation workflow
• social-media-search.md - For additional verification data
• public-records-search.md - For official record verification

---

Last Updated: 2025-11-25