EFTA00104787: Threatening Email Forwarded by Mark Epstein
Snapshot
Document: EFTA00104787
Direct evidence link: EFTA00104787 at Epstein Data
Date created: May 25 and May 26, 2020
Date sent or filed: Mark Epstein forwarded the chain on May 26, 2020 at 20:31:55 UTC
Date released: January 30, 2026, through Department of Justice Data Set 9
Author or creator: The threatening messages were attributed to an unidentified sender using the name “Puggie.” Mark L. Epstein created the documented forwarding email.
Sender: Mark L. Epstein forwarded the chain. The underlying messages came from an unidentified Fastmail account.
Recipient: Attorney Stacey Richman and at least one redacted recipient
Custodian or producing source: United States Department of Justice and Federal Bureau of Investigation
Evidence type: Forwarded email chain containing threats against Mark Epstein and members of his family
Length and format: One page PDF
Case or investigation: Related records connect the messages to NYPD complaint 2020-001-2753 and review by the FBI New York C 19 Violent Crimes Task Force
People named: Mark Epstein, Jeffrey Epstein, Stacey Richman, Kevin Ponder, an unidentified person described as “the boss,” and unnamed members of Mark Epstein’s family
Organizations named: Federal Bureau of Investigation, New York City Police Department, Richman Hill & Associates, Fastmail, and the United States Attorney’s Office for the Southern District of New York in related correspondence
Locations named: No physical location is stated in EFTA00104787. Related records place the recipients and investigating authorities in New York.
Content warning: This record contains threats of suffocation and threats to kill members of Mark Epstein’s family. This article summarizes the threats without identifying private family members or repeating unnecessary violent language.
Key takeaway: EFTA00104787 establishes that Mark Epstein forwarded a series of threatening messages to attorney Stacey Richman and a redacted recipient with instructions that the material be sent to Kevin Ponder. The unidentified sender threatened Mark Epstein and his family while claiming knowledge about Jeffrey Epstein’s death and an unnamed “boss.” The email documents that the threats were received and forwarded. It does not prove that the sender possessed inside information, that the claimed boss existed, or that Jeffrey Epstein was murdered.
What Is This Record?
EFTA00104787 is a one page email record dated May 26, 2020. It shows Mark L. Epstein forwarding a chain of threatening messages to attorney Stacey Richman and at least one recipient whose identity is redacted.
The subject line reads “Fwd: Ddddd. Forward to KEVIN PONDER.” This indicates that Mark wanted the material delivered to a person named Kevin Ponder. Related records identify a “SA Ponder” as a federal agent who had previously spoken with Mark about threatening communications. The available records support identifying Ponder as part of the law enforcement response, but EFTA00104787 does not display his address or prove that he personally received this particular forwarding email.
The underlying messages were attributed to a sender using the name “Puggie” and an account name that appeared designed to threaten the person addressed by that nickname. Public records identify “Puggy” as a nickname used for Mark Epstein, but the spelling in the threatening account and messages varies.
The anonymous sender made several escalating threats against Mark and his family. The sender also claimed to know who killed Jeffrey Epstein, referred to an unidentified “boss,” and asserted that Jeffrey had wanted to tell a court “everything.”
Those statements are claims made by an unidentified threatening sender. They are not law enforcement findings and do not establish that Jeffrey Epstein was murdered, that he planned to disclose particular information, or that an unnamed boss directed the messages.
The record must be distinguished from verified findings concerning Epstein’s death. The New York City Office of Chief Medical Examiner determined that Epstein died by suicide. The Department of Justice Office of Inspector General documented serious failures by Bureau of Prisons personnel but reported that it found no evidence contradicting the FBI’s determination that Epstein’s death was not caused by criminal conduct.
Source and Provenance
Primary source: EFTA00104787, threatening email forwarded by Mark Epstein
Epstein Data record: Searchable EFTA00104787 record
Official or court source: Department of Justice PDF for EFTA00104787
Archived copy: The Epstein Data record provides a searchable public copy associated with the same EFTA identifier.
The document was released through Department of Justice Data Set 9. It carries a sequential EFTA page number and preserves the visible forwarding header, date, subject, sender, recipients, and underlying message chain.
The document is an email record rather than a judicial finding, sworn declaration, or FBI interview report. Its evidentiary value differs depending on the claim being examined.
It is direct evidence that a threatening email chain was preserved and forwarded under Mark Epstein’s name. It is not direct proof that the anonymous sender’s claims were truthful.
The broader release is indexed through the DOJ Epstein Library and the EpsteinWiki page for DOJ Vault Data Sets 9, 10, and 11.
The DOJ warns that optical text generated from released records may contain errors. That caution applies to distorted symbols in email addresses, punctuation, and redacted recipient fields. Conclusions about account ownership should be based on original headers and provider records rather than optical text alone.
What the Record Contains
Mark Epstein’s Forwarding Email
The top of the record identifies Mark L. Epstein as the person forwarding the message. The email was sent on May 26, 2020 at 20:31:55 UTC.
The visible recipients include attorney Stacey Richman and at least one redacted person. The subject directs that the material be forwarded to Kevin Ponder.
Mark added no substantive analysis of the threats in the visible body. His action was to preserve and forward the chain to people involved in his legal or security response.
Initial Threat on May 25, 2020
The earliest message reproduced in EFTA00104787 is dated May 25, 2020 at 10:35 in the morning.
The sender presented Mark with two purported choices. The sender demanded that Mark tell a court he had been a partner with his brother or face the killing of his family “like your brother.”
This language combines an accusation with a violent threat. The message provides no documents, witness testimony, financial records, court filing, or other evidence establishing that Mark was Jeffrey Epstein’s partner in criminal conduct.
The phrasing also assumes that Jeffrey Epstein was killed. That assertion conflicts with the official determination of suicide and is not independently supported by EFTA00104787.
Claim About an Unidentified Boss
A second message dated May 25 at approximately 12:40 introduced an unidentified “boss.”
The sender described the boss as someone who had loved Jeffrey Epstein. The message claimed that Jeffrey’s mistake was wanting to tell a court “everything.” It then stated that the boss wanted to meet Mark and wanted to know whether Mark could identify him.
The sender asked Mark to provide the boss’s name. That unusual demand could indicate an attempt to make Mark disclose a name or belief rather than a genuine effort to provide verifiable information.
Nothing in the email identifies the supposed boss. No independent evidence in EFTA00104787 establishes that such a person existed, had a relationship with Jeffrey Epstein, participated in his death, or directed the sender.
Pressure to Respond
A later May 25 message warned that the boss would become upset if Mark did not answer. The sender again asked whether Mark knew the boss.
The message continued the pattern of demanding engagement without providing independently verifiable evidence. It also used the alleged boss as a source of pressure while leaving that person completely unidentified.
Threat Against Mark’s Children
A message reproduced as having been sent on May 26 asserted that the sender knew Jeffrey Epstein’s killers. It then threatened to kill Mark’s children if he provided information to police.
This is one of the most significant parts of the record because it directly discouraged contact with law enforcement. The threat does not prove that the sender actually knew anyone involved in Epstein’s death. It proves that the sender used such a claim as part of an effort to frighten and silence Mark.
No private family member is identified in this article. The existence of the threat is relevant to the investigation. The identities and personal information of family members are not.
Suffocation Threat
The most recent underlying message was dated May 26, 2020 at 12:08:42 Eastern time.
The sender demanded an answer and threatened to “suffocate you like your brother.”
The threat again presented Jeffrey Epstein’s death as a homicide by suffocation. It offered no supporting evidence. The official medical determination was death by suicide through hanging, not homicide by suffocation.
Escalating Pattern
The sequence preserved in EFTA00104787 shows escalation across approximately two days.
The first message threatened Mark’s family. Later messages introduced an alleged boss, claimed knowledge of Jeffrey Epstein’s killers, threatened Mark’s children if he spoke with police, and finally threatened Mark directly.
The messages repeatedly attempted to provoke a response. They also mixed threats with claims about secret knowledge. That combination is consistent with coercive intimidation or extortion, but EFTA00104787 alone does not reveal the sender’s motive, identity, location, or actual capabilities.
Key Evidence Points
- Mark Epstein received a sequence of threatening messages on May 25 and May 26, 2020.
- Mark preserved and forwarded the chain to attorney Stacey Richman and at least one redacted recipient.
- The subject line instructed that the messages be forwarded to Kevin Ponder.
- Related correspondence identifies “SA Ponder” as a law enforcement contact who had previously spoken with Mark about threatening messages.
- The anonymous sender threatened Mark, his children, and other members of his family.
- The sender attempted to discourage Mark from providing information to police.
- The sender claimed knowledge of people responsible for Jeffrey Epstein’s death.
- The sender introduced an unidentified boss and claimed that the boss had loved Jeffrey Epstein.
- The sender claimed Jeffrey Epstein had wanted to tell a court “everything.”
- None of those claims was supported by evidence within EFTA00104787.
- The threats escalated after Mark did not respond.
- The chain was part of a larger series of suspicious contacts reported to attorneys, federal prosecutors, the FBI, and the NYPD.
- Related FBI records document a technical investigation into associated accounts, internet addresses, proxy use, telephone numbers, and a single mobile device.
- The technical records do not identify the owner of the Fastmail account in EFTA00104787.
- The record does not prove that the threatening sender had any connection to Jeffrey Epstein, the Metropolitan Correctional Center, or a government agency.
What the Record Does and Does Not Prove
What It Establishes
EFTA00104787 establishes that a threatening email chain existed in the produced records.
It establishes that the underlying messages were dated May 25 and May 26, 2020.
It establishes that the sender threatened Mark Epstein and members of his family.
It establishes that the sender attempted to discourage Mark from contacting police.
It establishes that the sender invoked Jeffrey Epstein’s death while making the threats.
It establishes that the sender claimed to represent or communicate with an unidentified boss.
It establishes that Mark forwarded the messages to Stacey Richman and a redacted recipient.
It establishes that Mark requested that the messages be sent to Kevin Ponder.
Related records establish that Richman contacted federal authorities about demands for bitcoin and threats against Mark. They also establish that a federal agent identified as Ponder had previously spoken with him.
What It Does Not Establish
The record does not identify the threatening sender.
It does not authenticate the name “Puggie” as the sender’s legal identity.
It does not establish that the sender knew Jeffrey Epstein or Mark Epstein personally.
It does not establish that the unidentified boss existed.
It does not identify any person as Jeffrey Epstein’s killer.
It does not prove that Jeffrey Epstein was murdered.
It does not prove that Jeffrey Epstein intended to reveal information to a court before his death.
It does not establish that Mark Epstein was involved in Jeffrey Epstein’s criminal conduct.
It does not establish that Mark possessed secret information concerning Jeffrey’s activities or death.
It does not establish whether the sender had the ability or intention to carry out the threats.
It does not prove that the threatening Fastmail account was controlled by the same person who used every account appearing in related records.
It does not establish Iranian government or Islamic Revolutionary Guard Corps involvement.
It does not show that money was paid to the sender.
It does not document an arrest, criminal charge, prosecution, or conviction arising from this specific threat.
Unresolved Questions
- Who created and controlled the Fastmail account used to send the threats?
- What complete header information was preserved for the messages?
- Did Fastmail provide subscriber records, login history, recovery information, or internet address records?
- Was the Fastmail account linked technically to the other accounts investigated by the FBI?
- Did the sender obtain Mark’s family information from public records, data brokers, prior communications, or another person?
- Why did the sender use the spelling “Puggie” when public references commonly use “Puggy” as Mark’s nickname?
- Was the demand that Mark identify the boss an effort to discover whom Mark suspected?
- Did the sender possess any nonpublic information about Mark, Jeffrey Epstein, or the federal investigation?
- What court proceeding did the sender allegedly mean when claiming Jeffrey wanted to tell a court “everything”?
- Why did the sender accuse Mark of being his brother’s partner?
- Were the claims copied from media coverage, conspiracy discussions, or earlier messages?
- Who were the redacted recipients of Mark’s forwarding email?
- Did Kevin Ponder personally receive EFTA00104787?
- What investigative steps followed receipt of this specific message?
- Was a formal threat assessment completed for Mark and his family?
- Were protective measures offered or continued after the May 2020 escalation?
- Was the sender interviewed or identified?
- Were any subpoenas, preservation requests, warrants, or international assistance requests issued?
- Why did a later FBI email state that the investigation had closed?
- Did the investigation close because the sender was identified, because the threat was assessed as not credible, because jurisdiction was transferred, or because investigators lacked sufficient evidence?
- Are additional reports or technical records withheld, redacted, or absent from the public production?
People and Entities Appearing in the Record
Mark Epstein
Mark Epstein is Jeffrey Epstein’s brother and the recipient of the underlying threats. He forwarded the chain to attorney Stacey Richman and a redacted recipient.
The email shows Mark reporting threatening communications rather than creating them. Nothing in EFTA00104787 establishes that Mark participated in the threatened conduct, possessed the information demanded by the sender, or was involved in Jeffrey Epstein’s crimes.
Jeffrey Epstein
Jeffrey Epstein is referenced throughout the threatening messages as Mark’s brother. The sender claimed Jeffrey had been killed and had wanted to tell a court “everything.”
Those statements were made by an unidentified person and remain unsupported within the record. Jeffrey Epstein died in federal custody on August 10, 2019. The official manner of death was suicide.
Stacey Richman
Stacey Richman was the visible recipient of Mark’s forwarding email. Related records identify her as an attorney with Richman Hill & Associates.
Richman forwarded the threats to federal contacts and expressed concern that the communications were becoming more aggressive. She also told federal authorities that demands for bitcoin had developed into death threats.
Her forwarding actions help establish that the threats were reported rather than kept private.
Kevin Ponder
Kevin Ponder is named in the subject line as the person who should receive the email.
A related chain in EFTA00104756 states that “SA Ponder” had spoken with Mark after Mark forwarded an earlier message. This supports identifying Ponder as a federal investigative contact.
The public record does not display Ponder’s full address in EFTA00104787 or document his complete role in the investigation.
Unidentified Sender Using “Puggie”
The underlying sender used the display name “Puggie” and an account label that referenced killing the person associated with that nickname.
The display name is not proof of identity. Email accounts can be created with false names, impersonated identities, stolen credentials, or intentionally misleading labels.
The sender should therefore remain classified as unidentified unless provider records, device evidence, admissions, or law enforcement findings establish an identity.
The Unidentified Boss
The threatening sender repeatedly invoked a boss who allegedly loved Jeffrey Epstein and wanted to meet Mark.
No name, address, organization, photograph, telephone number, or independently verifiable description was provided. The existence and identity of the purported boss remain unverified.
Federal Bureau of Investigation
Related records show that the FBI New York C 19 Violent Crimes Task Force reviewed threats directed at Mark. An FBI email dated June 25, 2020 discussed telephone numbers, account identifiers, a mobile device, proxy servers, and internet addresses.
New York City Police Department
EFTA00146889 references NYPD complaint 2020-001-2753, titled “MARK EPSTEIN COMPLAINT.” The record documents communication between an NYPD detective and the FBI concerning the technical investigation.
United States Attorney’s Office for the Southern District of New York
Related correspondence in EFTA00104756 shows Richman contacting personnel identified as USANYS. The chain indicates that the office requested relevant emails and messages and arranged for a federal agent to contact Mark.
Timeline Significance
August 10, 2019: Jeffrey Epstein died in federal custody at the Metropolitan Correctional Center in New York.
August 2019: Related records show that Mark received other unsolicited communications from people claiming secret or intelligence related knowledge about Jeffrey Epstein.
October 31, 2019: A related email shows the Southern District of New York arranging to reschedule a meeting concerning Mark.
May 11, 2020: A person using another account contacted Mark and claimed to know how Jeffrey Epstein had been killed. The sender attempted to move Mark into private communications and discouraged him from speaking with his lawyer or the FBI.
May 19 through May 20, 2020: Related messages claimed access to confidential police information, requested money, discussed video footage, and warned Mark that people might harm him.
May 24, 2020: Mark forwarded earlier communications to Stacey Richman.
May 25, 2020: The threatening chain preserved in EFTA00104787 began with an ultimatum directed at Mark and his family.
May 25, 2020: Richman notified federal contacts that demands for bitcoin had developed into death threats. She requested guidance and a law enforcement response.
May 25, 2020: Related records show Richman forwarding multiple messages to people identified as USANYS recipients.
May 26, 2020: The sender threatened Mark’s children and warned him against speaking with police.
May 26, 2020: The sender directly threatened to suffocate Mark.
May 26, 2020 at 20:31:55 UTC: Mark forwarded the chain with instructions that it be sent to Kevin Ponder.
June 25, 2020: An FBI technical email associated multiple accounts with one mobile device and said that internet addresses were changing through proxy servers, with a majority appearing to originate in Iran.
July 7, 2020: A related FBI email stated that the investigation had closed. The visible record does not explain the basis for closure.
August 9 and August 10, 2020: Mark forwarded additional threatening or extortionate communications to FBI contacts.
June 27, 2023: The DOJ Office of Inspector General released its review of Epstein’s custody and death. It documented major institutional failures but found no evidence contradicting the FBI’s determination that Epstein’s death involved no criminal conduct.
January 30, 2026: The Department of Justice released Data Set 9 containing EFTA00104787 and related records.
Related Evidence
EFTA00104751 contains a longer version of the threatening chain. It includes an additional May 26 message threatening one of Mark’s children within seventy two hours and referring to documents that allegedly connected Mark to Jeffrey.
EFTA00104756 documents Stacey Richman contacting federal authorities. She reported that demands for bitcoin had escalated into death threats. The chain states that Special Agent Ponder had previously spoken with Mark and that federal recipients requested the relevant emails and messages.
EFTA00104759 records the beginning of a related approach on May 11, 2020. A sender calling himself “John” claimed knowledge of Jeffrey Epstein’s death, attempted to gain Mark’s trust, and instructed him not to speak with anyone, including his lawyer or the FBI.
EFTA00104761 contains claims about prison video, correctional officers, an alleged killer, and demands for money. These are statements by an unidentified sender and should not be treated as verified investigative findings.
EFTA00104763 contains a message stating that information had been sold to Jeffrey Epstein’s alleged killers. The sender expressed concern for Mark while simultaneously applying pressure. The claim was not substantiated.
EFTA00104764 shows Richman forwarding the first May 25 threat to federal contacts and stating that the communication appeared more aggressive and required serious concern.
EFTA00104773 contains a related message claiming that information had been sold and warning Mark to leave the country.
EFTA00104777 preserves the portion of the chain threatening Mark’s children if he spoke to police.
EFTA00104779 preserves the message introducing the alleged boss and claiming that Jeffrey Epstein wanted to tell a court “everything.”
EFTA00104785 contains another produced copy of the May 25 chain.
EFTA00146889 documents an FBI technical inquiry connected to NYPD complaint 2020-001-2753. The FBI stated that several email accounts were associated with the same device and that proxy server addresses appeared to be moving among locations, with a majority appearing in Iran.
The Fastmail account displayed in EFTA00104787 does not appear in the visible account list in EFTA00146889. The technical report therefore cannot be treated as conclusive attribution of this specific message.
EFTA00037248 contains a July 2020 FBI communication stating that the investigation had closed. It also preserves additional communications received by Mark after the May threats.
EFTA00146850 contains an August 2020 demand for $10,000 from a sender claiming to be an informant connected to the Islamic Revolutionary Guard Corps. The claim was made by the sender and was not verified in the visible record.
The DOJ Inspector General report on Epstein’s custody and death provides the official investigative context against which the anonymous homicide claims must be evaluated.
An R Howard Stone research index documents other unsolicited and harassing communications sent to Mark after Jeffrey Epstein’s death. It is a secondary research source and should be checked against each cited EFTA record.
Reliability and Limitations
EFTA00104787 is reliable evidence that the produced email and forwarding chain existed in the government record. The visible dates, subject line, sender field, recipient field, and quoted messages can be compared with overlapping copies in related EFTA records.
The repeated production of portions of the chain provides internal corroboration that the messages were preserved and circulated among Mark, Richman, and federal contacts. Repetition does not independently prove that the anonymous sender’s claims were true.
The document does not contain complete technical headers. It therefore cannot establish the originating internet address, device, account registration information, or physical location of the sender.
The sender’s display name and email account label may have been deliberately chosen to frighten Mark. Neither is reliable identity evidence without provider records or forensic attribution.
Several messages use awkward phrasing, inconsistent capitalization, grammatical errors, and changing account identities. Those features may be relevant to attribution, but they do not establish the sender’s nationality or native language.
The June 2020 FBI technical record states that related internet addresses used proxy servers and that a majority appeared to originate in Iran. Proxy use can conceal or misrepresent location. An Iranian internet address does not establish Iranian citizenship, government direction, intelligence involvement, or membership in the Islamic Revolutionary Guard Corps.
Some later messages claimed an Islamic Revolutionary Guard Corps connection. The available evidence shows that the claim was made. It does not verify the claim.
EFTA00104787 also cannot resolve the circumstances of Jeffrey Epstein’s death. Anonymous threats and unsupported assertions do not outweigh medical findings, video analysis, institutional records, or a completed official investigation.
The EpsteinWiki Evidence Framework requires separating the authenticity of a record from the truth of statements contained within it. This email is authentic evidence of a threat report. The alleged inside information remains unverified.
Survivor Safety and Privacy Review
The threats concerned Mark Epstein and members of his family. This article does not identify his children or reproduce their personal information.
No private email address belonging to a family member has been published in the article text.
The sender also accused Mark of involvement with Jeffrey Epstein without supplying evidence. That accusation is reported as part of the coercive message and not as a factual finding.
The anonymous messages repeatedly invoked Jeffrey Epstein’s death and alleged hidden information. Those claims should not displace the experiences of survivors or turn the Epstein investigation into speculation centered exclusively on his death.
Epstein’s death deprived survivors of a federal criminal trial and the opportunity to obtain a verdict against him in the 2019 prosecution. The DOJ Inspector General found that extensive Bureau of Prisons failures created the conditions in which Epstein was able to die by suicide. Those institutional failures remain a legitimate accountability issue even though the anonymous homicide claims in this email are unverified.
Why This Record Matters
EFTA00104787 matters because it documents the intimidation and opportunistic contact directed at Mark Epstein after his brother’s death.
The messages combined several pressure tactics. They threatened family members, claimed secret knowledge, invoked an unidentified boss, discouraged police contact, accused Mark of criminal involvement, and demanded engagement. Related records added requests for money and bitcoin.
This pattern helps researchers distinguish evidence about Epstein’s death from attempts to exploit public uncertainty surrounding it.
The record also documents that Mark did not simply retain the message privately. He forwarded it to an attorney and requested that it reach a federal investigative contact. Related correspondence shows Richman reporting the escalation to federal authorities and asking for guidance.
The larger chain provides evidence of a law enforcement response. Federal personnel requested the relevant communications, an agent spoke with Mark, the NYPD created a complaint, and the FBI conducted at least some technical analysis.
At the same time, the released record leaves the outcome unclear. A later FBI email says that an investigation had closed, but the public documents do not explain whether investigators identified the sender, assessed the threats as not credible, encountered an international obstacle, or closed the matter for another reason.
The record therefore has two distinct forms of evidentiary value.
First, it documents a real threat report and the actions taken to transmit it to authorities.
Second, it documents unverified claims about Jeffrey Epstein’s death. Those claims are historically relevant because they were used to threaten and pressure Mark. They are not proof that the alleged events occurred.
Fact Check
Verification status: Verified as a Department of Justice released email record from Data Set 9.
Verified: EFTA00104787 is a one page email dated May 26, 2020.
Verified: Mark L. Epstein is identified as the person forwarding the chain.
Verified: Stacey Richman is a visible recipient.
Verified: At least one other recipient is redacted.
Verified: The subject line directs that the email be forwarded to Kevin Ponder.
Verified: The underlying messages are dated May 25 and May 26, 2020.
Verified: The sender threatened Mark Epstein and members of his family.
Verified: The sender threatened Mark’s children if he provided information to police.
Verified: The sender directly threatened to suffocate Mark.
Verified: Related records show Richman reporting demands for bitcoin and escalating death threats to federal contacts.
Verified: EFTA00104756 identifies “SA Ponder” as someone who had spoken with Mark about the messages.
Verified: EFTA00146889 references NYPD complaint 2020-001-2753 and an FBI technical review of associated accounts and devices.
Verified: The FBI reported that several associated accounts were connected to the same device and that internet addresses were moving through proxy servers.
Verified: A majority of the observed internet addresses in that technical record appeared to originate in Iran.
Verified: The New York City Office of Chief Medical Examiner determined that Jeffrey Epstein died by suicide.
Verified: The DOJ Office of Inspector General found severe Bureau of Prisons failures but no evidence contradicting the FBI’s determination that Epstein’s death involved no criminal conduct.
Not established: The identity of the person who sent the threatening Fastmail messages.
Not established: That the claimed boss existed.
Not established: That the sender knew Jeffrey Epstein.
Not established: That Jeffrey Epstein was murdered or suffocated by another person.
Not established: That Jeffrey Epstein planned to reveal information to a court immediately before his death.
Not established: That Mark Epstein participated in Jeffrey Epstein’s criminal conduct.
Not established: That the sender had access to confidential law enforcement records.
Not established: That the Fastmail account in EFTA00104787 was technically linked to the mobile device described in EFTA00146889.
Not established: That an Iranian government agency or the Islamic Revolutionary Guard Corps directed the messages.
Not established: That Mark paid money or bitcoin to the sender.
Not established: That anyone was arrested, charged, or convicted for sending this specific threat.
Privacy protected: The identities and personal information of Mark Epstein’s private family members have not been published.
Last checked: September 11, 2026
Related EpsteinWiki Pages
Criminal Case: United States v. Jeffrey Epstein
EFTA00160038: FBI Internal Emails Referencing Jeffrey Epstein Death Investigation and Island Travel
Epstein Files Guide: Evidence Framework
DOJ Vault Data Sets 9, 10, and 11
Source List
- EFTA00104787: Threatening Email Forwarded by Mark Epstein
- Official Department of Justice PDF for EFTA00104787
- EFTA00104751: Expanded Threatening Email Chain
- EFTA00104756: Stacey Richman Correspondence With Federal Authorities
- EFTA00104759: Initial Unsolicited Contact Claiming Knowledge of Epstein’s Death
- EFTA00104761: Messages Seeking Money and Claiming Inside Information
- EFTA00104763: Message Claiming Information Had Been Sold
- EFTA00104764: Richman Warning About Escalating Threats
- EFTA00104773: Message Warning Mark to Leave the Country
- EFTA00104777: Threat Concerning Contact With Police
- EFTA00104779: Message Referencing an Unidentified Boss
- EFTA00104785: Additional Produced Copy of the Threat Chain
- EFTA00146889: FBI Technical Email and NYPD Complaint Reference
- EFTA00037248: FBI Email Stating the Investigation Had Closed
- EFTA00146850: Later Extortion Demand and Unverified IRGC Claim
- Department of Justice Epstein Library
- DOJ Inspector General Report on Epstein’s Custody, Care, and Supervision
- DOJ Inspector General Summary of Findings
- R Howard Stone Epstein Research Findings
- EpsteinWiki Evidence Framework