Modus Operandi — 12+ Year Pattern
Across every documented case and every brand name, the operational pattern is identical:
1. Inbound outreachVia LinkedIn, Facebook, or Instagram — targeting businesses in distress over hacked or locked accounts.
2. Signed contractsUsed to establish legitimacy and deter immediate disputes.
3. Upfront payment requiredPayPal, wire transfer, or Bitcoin. Bitcoin specifically requested to eliminate chargeback options.
4. Initial reassuranceProfessional, prompt, confident written confirmation given.
5. Gradual ghostingDelays blamed on third parties, banks, or internal teams.
6. Refund promisesMade repeatedly over weeks or months. Never honored.
7. Platform blockingVictims blocked across all channels once they push back.
8. Legal threatsSent to intimidate victims into silence.
9. RebrandNew company name launched as complaints against the previous entity reach critical mass.
Critical warning: Deboer never admits wrongdoing and maintains calm, professional communication throughout every case — making him particularly dangerous. His composure is mistaken for legitimacy by victims who have no reason to suspect fraud until it is too late.
This dossier is published for public consumer protection purposes only. All information is sourced from publicly available records, victim testimonies, invoices, signed contracts, and documented reports. Last updated: September 2026.