Operation Carder Kaos

Richard K. LaTulip is a cybersecurity expert, retired U.S. Secret Service Special Agent, and Field Chief Information Security Officer (Field CISO) for Recorded Future. With a career spanning law enforcement and cybersecurity, he has led high-profile investigations into cybercrime, financial fraud, and digital threats. He holds a bachelor’s degree in Criminal Justice and is pursuing a Master of Science in Cybersecurity Policy and Governance at Boston College. His professional certifications include CISM, CISSP, CEH, and CySA+. Richard is also a sought-after speaker on cybersecurity, insider threats, and cybercriminal methodologies. His firsthand experience in undercover cyber investigations and penetrating criminal networks gives him a unique perspective on digital crime and espionage.

Operation Carder Kaos is a rare and compelling contribution to the cybersecurity and law-enforcement literature. Blending a true-crime narrative with operational insight, Richard K. LaTulip offers readers an unfiltered view of the realities of long-term undercover cyber investigations, an area typically obscured by classification barriers, redactions, or institutional silence.Unlike most books that examine cybercrime from a defensive or technical perspective, this work places the reader directly inside the criminal ecosystem. LaTulip recounts how he embedded himself within international carding communities, navigated the culture of underground markets, and earned the trust of high-value actors whose activities fueled a global underground economy. The narrative is fast-paced yet reflective, balancing operational detail with the personal toll of maintaining a criminal persona over extended periods.A particular strength of the book is its emotional honesty. The author does not romanticize undercover work. Instead, he documents the isolation, moral ambiguity, and bureaucratic friction that accompany such missions. The foreword and preface contextualize these challenges within the broader institutional environment, highlighting the constraints imposed by limited training, internal politics, and leadership misalignment. This framing elevates the book beyond memoir into a serious examination of the human cost of cyber investigations.From a professional standpoint, Operation Carder Kaos delivers substantial educational value. Readers gain insight into carding ecosystems, trust-building mechanisms within criminal forums, international law-enforcement coordination, and the operational realities of digital infiltration. The glossary, abbreviations, and detailed case progression make the work accessible to both practitioners and academics, while preserving its narrative integrity.This book will resonate strongly with cybersecurity leaders, law enforcement professionals, intelligence analysts, and students of cybercrime and digital forensics. It also fills an important niche within CRC Press’s Security, Audit and Leadership Series by demonstrating how leadership, adaptability, and personal resilience intersect in the most hostile operational environments.Operation Carder Kaos is not simply a story about chasing criminals...it is an essential account of what it truly means to live inside the systems we seek to dismantle. - Josh CopelandOperation Carder Kaos is a gripping, real-world cybercrime thriller that reads like fiction—but every page is true. Former U.S. Secret Service Agent Richard LaTulip takes readers deep inside one of the first long-term undercover operations targeting the global digital underground, where stolen credit card data, encrypted forums, and international intrigue collide. What sets this memoir apart is its raw honesty. LaTulip doesn’t just recount high-stakes meetings in Phuket, Macau, and Dubai—he exposes the bureaucratic roadblocks, internal politics, and personal toll that nearly derailed his mission. His portrayal of building trust with elite cybercriminals—while navigating language barriers, cultural nuances, and moral ambiguity—is masterful and deeply human. More than an action-packed narrative, this book is a masterclass in operational patience, strategic deception, and the psychological weight of living a double life. It’s essential reading for cybersecurity professionals, law enforcement, intelligence analysts, and anyone fascinated by the shadowy intersection of crime and technology. LaTulip’s story isn’t just about catching criminals—it’s about what it truly costs to walk the line between order and chaos. A must-read debut that redefines the boundaries of investigative storytelling.- Gary Craven, I.S.P., ITCP. FCMC“This is a rare, grounded account of what cybercrime investigations actually demand. It captures the operational reality, ethical tension, and personal cost of undercover work in a way only someone who lived it could write.”- Brian AlbertsonThis is the true story you have never heard. And, it is told by the agent who lived it. He didn’t just chase cybercriminals—he became one of them.In this electrifying blend of true crime, cyber espionage, and undercover spycraft, former U.S. Secret Service Agent Richard LaTulip recounts his covert mission to infiltrate one of the world’s most dangerous online criminal networks.Assuming a false identity, LaTulip embedded himself deep inside the digital underground, building trust with elite carders, traffickers, and hackers, while secretly gathering the intelligence that would bring them down.Operation Carder Kaos offers a rare inside look at the murky world of cybercrime, where deception is currency and exposure can be deadly. It’s a high stakes, real world thriller about betrayal, digital warfare, and the price of living two lives.- Kathy Rainey, Continuity e-GuideThis is an amazing and absolutely captivating story about an agent of the U.S. Secret Service, who embarked on a covert mission to infiltrate international credit card fraud networks on the dark web.It is hard to stop reading about the intricate details of the agent's collaboration with foreign law enforcement agencies, navigating cultural and legal complexities, and building trust with individuals whose livelihoods were rooted in crime and deception.It is very important for both professionals and general public to understand how this complex machinery of fraud and deception works.Strongly recommended.- Dr Vladas Leonas, Adjunct Professor at the Australian Graduate School of Leadership.There is so much here packed into 200 plus pages. LaTulip can spin a story.And it’s a thriller so well captured in the title: the sole focus of Operation Kaos was to identify, infiltrate and disrupt a global network of credit card counterfeiters the lived in the Dark Web stealing millions from bankers and consumers. I kept turning the pages, really less for the sex scenes, than to learn if he was going to get caught or the op collapse or if his risk averse, frugal, and meddling managers ever got the message—this is messy complex and costly work. Turns out some learned and helped and others went to ground and and remained roadblocks surfacing for until the award ceremony as the story winds down. (FYI, carders were credit card thieves and Kaos is an alternative spelling of chaos)In fairness, looking back LaTulip confesses that in the early 2000s the mechanics—and the bureaucracy--of fighting cybercrime online were still suffering from growing pains, but at the time the inexperience certainly proved of little comfort to LaTulip. He repeatedly returns to detail bureaucratic constraints and his managers’ the risk aversion, frugality, careerism, and just plain clumsiness, that constantly put him and the operation at risk. At times he was fighting criminals and his managers at the same time. Indeed, as the story unwinds USSS agents arrested Tulip’s most important contact--the kingpin of counterfeiters--to beat the FBI.Turning to his background LaTulia tells that a penchant for operations showed up early in LaTulip’s DNA and it promised an eventful life. Clearly clever and street smart, his schooling followed a start-stop path to earn his BA, and he barely survived a DUI and wrecked US Government car to finally get cleared to join as a Special Agent. Quickly he found the intensity and risks and rewards of undercover work to his liking and jumped in.For LaTulip his life became “always mission first” (Chapter 1). Indeed, from start to finish he remains laser focused on the mechanics of the operation and as the pieces of the puzzle came together his passion never dimmed. But his success meant constant tradeoffs and the costs to his personal life as he tried to sustain both his cover and relationships from a distance were equally apparent. LaTulip became his own invented cover and turning it on and off between the field and headquarters became increasingly difficult and risky.As LaTulip moves through his yarn the details become fascinating, indeed often riveting. He immersed himself in his cover—Surfrider aka Rich—and built out Carder Kaos from a single incidental arrest into his own ring of card counterfeiters ranging from Southeast Asia to Hong Kong to Turkey. Step-by-step we come to know about LaTulip’s skills and audacity and the lives of his cast of very able characters that are some of the then-world’s most accomplished, and high tech, credit card thieves. We see how components parts from online global suppliers build the cards, track how they are marketed and shipped, and then how LaTulip constructs his own list of aliases to use on the cards to track them as their users tap ATMs and purchase high end merchandise for black market resale much to the chagrin of bankers and his managers.We also learn about the essential qualities that make operatives like LaTulip successful: flexibility, adaptability, and the power of small talk to build trust that is the real currency among thieves that keeps his network expanding. The other stars were his savvy counterparts in the field and cooperative local US and foreign law enforcement. Managers traveling with him, however, and his ostensible security detail all of whom retired way too early at midnight were clearly an uneven bunch. At every turn, the number of moving parts he must endlessly juggle to stay ahead of his targets and his demanding poorly equipped managers and at the same time protect himself.LaTulip over comes these obstacles as they come, and as the cases build he cultivates senior USSS managers that keep the operation alive and funded and give him top cover to blunt the impact of recalcitrant managers. We share his risks and observe the careful planning that precedes every meeting and every trip abroad…and the stream of exotic women he brings into his life overseas on late nights wandering around the glaringly lite cities of Southeast Asia.The story is well structured. Each chapter takes us through another phase of the operation that step by step peels back another layer of the network and marks progress in the operation. A glossary of terms and list of abbreviations up front are helpful. The writing is clear although dense at times and readers need to pay attention to the details because of the dialogue. I found myself referring to the index as a useful guide and then turning back to the text to pick up threads.The absence of any dates to mark progress start to finish is its most serious and easily fixed shortfall. I found only one date in the text and another on a picture of the award the team received in 2020, the year he retired. The more I got into the story the more easily it was to get lost in the sequence of events. The question of the authenticity of the story may come from bother skeptical readers, but I did not spend much time pondering it. It’s truly an insider’s view and whether every detail should not distract from the thrust and importance of the story. The operation took place, LaTulip drove the bus, meetings were carefully documented in the after action reporting, arrests were made and the justice department, if not the USSS in particular, belatedly recognized its success.It’s a remarkable story well told and we learn much about the challenges of managing the complexities of operating in the field and the personal qualities required to manage them and survive to tell the tale. So sit back and enjoy the ride.- Jay Grusin, PhDOperation Carder Kaos is not a cybercrime book in the abstract, and it is not a glamorized spy thriller dressed up as nonfiction. It is something rarer and more uncomfortable: a first-person account of what it actually costs to infiltrate the digital underground when the work is real, the danger is sustained, and the consequences do not end when the operation does.Richard LaTulip’s story follows his years-long undercover mission inside global carding and cybercrime networks—an environment where trust is currency, deception is survival, and a single misstep can be fatal. What makes this book compelling is not just the access it provides to a hidden world of stolen data, fraud markets, and international crime syndicates, but the psychological and institutional reality behind that access. The reader sees how an undercover identity is built, maintained, and constantly at risk of collapse, both online and in face-to-face encounters across multiple countriesThe narrative reads with the pacing of a crime thriller, but its strength lies in its restraint. LaTulip does not romanticize the work. Instead, he shows the grind: the long nights, the repetitive trust-building, the moral ambiguity required to remain believable, and the isolation that comes from living two lives simultaneously. The tension is not manufactured; it accumulates slowly, chapter by chapter, as relationships deepen with people who would destroy him if they ever learned the truth.One of the most striking elements of Operation Carder Kaos is its treatment of institutions. The book offers an unvarnished look at the bureaucratic friction, internal politics, and leadership failures that can exist even inside elite federal agencies. LaTulip makes it clear that operational risk does not come only from criminals—it also comes from underfunding, misaligned incentives, and leadership that prioritizes optics over outcomes. This perspective adds depth and credibility, transforming the book from a personal memoir into a broader commentary on how cyber investigations are actually carried outThe technical material is handled with care. The book explains carding, dumps, underground forums, and early cybercrime ecosystems without turning the narrative into a manual or losing non-technical readers. Instead, the technology is always subordinate to human behavior: trust, ego, fear, greed, and loyalty. This framing makes the book accessible to readers outside cybersecurity while still offering meaningful insight for professionals who understand the stakes.Perhaps most importantly, Operation Carder Kaos succeeds because of its honesty. LaTulip acknowledges compromises, regrets, and moments of doubt. He does not present himself as infallible or heroic. The result is a story that feels lived-in rather than performed. It respects the reader enough to let the discomfort stand.This book will resonate with cybersecurity professionals, law enforcement, intelligence analysts, and anyone interested in how digital crime actually operates beyond headlines and dashboards. It is also a valuable read for leaders and policymakers, because it exposes the human cost behind “successful” operations and the fragility of systems that depend on individual endurance rather than institutional resilience.Operation Carder Kaos is a reminder that cybercrime is not just code and infrastructure—it is people, pressure, and prolonged risk. And that truth makes this book both gripping and necessary.- Scott O Andersen, AI Strategist“Operation Carder Kaos” by Richard K. LaTulip is a rare, firsthand account of one of the U.S. Secret Service's most daring undercover operations and it reads like a thriller, because it is one.Former Special Agent LaTulip takes readers inside his transformation into "Richard Druc" (alias: "Surfrider"), a false identity he used to infiltrate elite international cybercrime networks trafficking stolen credit card data. The operation spanned Dubai, Hong Kong, Macau, and Thailand, placing LaTulip face-to-face with some of the digital underground's most dangerous players including "Maksik," one of the world's most prolific vendors of stolen financial data.What sets this book apart is its authenticity. LaTulip pulls back the curtain on real undercover tradecraft, building false identities, navigating encrypted criminal forums, and managing high-stakes informant relationships. All while living the constant pressure of a double life. It's equal parts cyber espionage, true crime, and spy thriller, with the credibility only a participant can provide.As Kevin R. Powers notes in the foreword: the book "reads like a gripping crime novel" except every word of it is true.A must-read for anyone fascinated by cybercrime, covert operations, or the human cost of pursuing justice in the digital age.- Sorin TomaWhen I first picked up this Operation Carder Kaos, I expected another neatly packaged law enforcement memoir with sanitized details and considerable bureaucratic speak. Instead, my experience turned out be a real, messy, and unfiltered look at life inside the criminal underground across Thailand, China, Dubai, and Turkey.The technical content accurately captures the cybercrime landscape of the mid-2000s. The descriptions of carding forums, BIN list trading, and the shift from relatively simple fraud schemes to more organized international operations provide useful historical context for understanding how today’s threats developed. For practitioners studying the evolution of cybercrime, these details provide a foundation for understanding how these networks and practices took shape.What stuck with me was how he captures the human side of these criminal networks. Instead of picturing them as faceless hackers in hoodies we get to see them as everyday individuals worrying about travel plans, arguing within their communities, managing reputations, and navigating trust issues.The book is very candid about how unprepared law enforcement was to deal with this kind of crime. LaTulip lays out clearly descriptions of dealing with encryption, conducting forensic imaging, and coordinating across international jurisdictions in this book. For anyone familiar with the challenges of investigating cybercrime within traditional law enforcement structures and the associated politics, these problems will feel frustratingly relatable.Far from the run of the mill version of undercover work, LaTulip captures the psychological stress of juggling multiple identities, the sleepless nights, the paranoia, and the moral gray areas in a way that feels cumulative, personal, and remarkably honest. His struggle with the ethics of befriending people he intended to arrest raises important questions about the human cost of these operations.If you work in cybersecurity, threat intelligence, or law enforcement, this book is a must-read. Not because it is a quick read, but because it gives you a perspective that you cannot get anywhere else. Operation Carder Kaos is the kind of book that makes you understand why some investigations succeed and others fail, and why the human element, just like in cyber threat response, is still the most important factor in all of this.- Suraj Raghupathy IswaranOperation Carder Kaos is a gripping first-person account of an undercover cybercrime investigation that reads with the pacing of a thriller while retaining the weight of lived experience. Richard K. LaTulip pulls readers into the digital underground, where stolen credit card data, encrypted chat platforms, and fragile alliances define the terrain. The strength of the book lies in its immersive detail: hotel rooms in Dubai, vodka-soaked negotiations, coded ICQ exchanges, and the constant mental calculus required to maintain a criminal persona. The narrative effectively conveys the tension of living between identities—law enforcement officer by day, trusted cybercriminal by night.What distinguishes this work from typical true-crime or cyber-exposé titles is its candid examination of institutional friction and personal cost. LaTulip does not romanticize undercover work; instead, he presents it as psychologically corrosive, bureaucratically constrained, and strategically complex. The operational tradecraft—backstopping identities, navigating informant dynamics, and managing interagency politics—adds authenticity and technical depth. At the same time, the memoir format humanizes the mission, tracing the author’s personal evolution from an unremarkable Midwestern upbringing to a high-stakes international operative embedded in the global underground economy.Ultimately, Operation Carder Kaos succeeds as both a cybercrime case study and a reflection on identity, resilience, and moral ambiguity. It offers practitioners in cybersecurity and law enforcement valuable insight into early dark-web investigations, while general readers will appreciate its narrative momentum and emotional honesty. The book stands as a sober reminder that digital crime is fought not only with code and warrants, but with psychological endurance—and that the cost of infiltration extends far beyond the operational objective.- Ron Baklarz

• 1. It was always about the mission, 2. How did I get there?, 3. Feeling special, at least for the time, 4. When one door closes another opens, 5. Life always has a curve ball to throw, 6. A brief history lesson, 7. It all started in San Diego, 8. Time to put this to bed and move on!, 9. Breaking new ground, 10. The ground game starts, 11. The clock is ticking, let’s get moving!, 12. With a small bang the show begins, 13. His name was Slimbady, 14. Kutsenov comes through again, 15. Can you buy a database?, 16. A club, a chance encounter, and a room, 17. Maksik goes to Egypt, 18. A man called Vincent, 19. Vincent’s last night in Phuket, 20. Vincent and I go to Bangkok, 21. Doctor’s orders—it’s time to go home, 22. How nice it is to be home, 23. Take 2—rinse, refresh, repeat, 24. Time to fix what was screwed up, 25. Time to rebuild damaged relationships , 26. One down, two to go, 27. Vincent joins the party, 28. An advocate, antagonist, and a deal!, 29. Finally—a Russian Carder!, 30. Maksik wants to explore Phuket, 31. Dumps and PINs anyone?, 32. The magic of Dubai, 33. How many times can my family get sick?, 34. You only have to RSVP!, 35. They wait for us in Ankara, 36. Antalya Türkiye, 37. Change of plans!, 38. An unexpected phone call, 39. My second time in handcuffs, 40. Where do we go from here?