Investigative Desk

PayToDelete.watch

Investigative case studies and timeline

We Watch Pay-to-Delete Scams So You Don't Have to Pay

PayToDelete.watch documents how kompromat-style publishing networks turn Google search results into ransom invoices — and why paying rarely ends the pressure.

When a business owner or public figure discovers their name attached to accusations of fraud, corruption, or money laundering on a site they have never heard of, the first impulse is often panic. The second is to pay whatever it takes to make the article disappear. Investigative journalism published since 2020, culminating in IPS News's "The Lie Industry" (June 2025), argues that this impulse is exactly what operators monetize. Pay-to-delete is not a reputation-management service. It is a documented extortion model in which publishers seed damaging articles, amplify them through Telegram and mirror domains, then sell cryptocurrency "purge" contracts for thousands of dollars.

This site exists to watch that machinery so victims do not have to fund it. We compile dated milestones, paraphrase public victim accounts, and link to primary sources — without reproducing defamatory claims as fact.

What we document

Our reporting draws on a curated bibliography of investigative outlets, OSINT analyses, and self-reported victim reviews. Flagship domains include kompromat1.online and kartoteka.news, but the network spans 60+ linked properties documented on the live domain registry. Shared technical fingerprints — WordPress clone deployments, common analytics IDs, Telegram republication within roughly fifteen minutes of web publishing — tie the cluster together in public reporting.

Investigators describe a four-phase playbook: placement, pressure, purge contract, and re-post cycle. Payment at the purge stage funds the next placement. — Paraphrased from IPS News and Dutable pricing documentation, 2025

Documented price points range from roughly $150 for seed placement to $3,000–$12,000 for single-article removal, with "year-long peace" packages near $12,000 USDT cited in a 2024 OSINT sting and multiple victim reports. Operators allegedly coordinate through figures named in public journalism — including Konstantin Chernenko, described as an alleged network operator — though these remain allegations, not court findings.

Why we say do not pay

Trustpilot reviews for kartoteka.news, IPS News case reporting, and parliamentary complaint documents reproduced by Vent Magazines describe a recurring pattern: partial or full payment followed by republication on sister domains, fresh Telegram posts, or renewed contact from different email addresses. Paying does not create an enforceable contract across a mirror network. It may also raise legal questions in some jurisdictions about financing criminal activity. Our five documented reasons payment fails page walks through the evidence.

Distribution remains a force multiplier. The K1 Telegram channel, mapped at roughly ~155k subscribers in OSINT reporting, reposts web articles and threatens wider circulation. Victims who pay to silence one URL often find the same narrative indexed under kartoteka.press, kompromat1.one, or a newly registered .cloud domain within weeks.

How to use this site

If you are facing active pressure, preserve screenshots and headers, avoid negotiating beyond documentation, and consult the victim action guide and legal framework resources in our portfolio. For the underlying business model, see PayToDelete.org.

Sources we cite

Last reviewed: June 2026. This is educational journalism, not legal counsel.

Visual caseboard

Publisher homepages, IPS News reporting, and Trustpilot complaint threads that anchor our case studies and timeline entries.

IPS News network expose IPS News network expose

Primary long-form source for timeline entries and operator allegations.

View source
kartoteka.news publisher kartoteka.news publisher

Highest-visibility target in Trustpilot and Google complaint threads.

View source
Trustpilot victim thread Trustpilot victim thread

Dated complaints referencing USDT removal invoices and mirror republication.

View source
kompromat1.online case anchor kompromat1.online case anchor

Flagship domain for the K1 cluster documented in IPS News and Dutable.

View source