Case 1:14-mj-00121-TCB Document 2 Filed 03/07/14 Page 1 of 11 PageID# 2

IN THE UNITED STATES DISTRICT COURT FOR EASTERN DISTRICT OF VIRGINIA Alexandria Division

UNITED STATES
v.

) ) )

1:14-MJ-121

COREY ROBERT SCHOCK

AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT

I, Lisa Kite Hill, a Special Agent with the Federal Bureau of Investigation (FBI),
Washington Field Division, Washington, D.C., being duly sworn, depose and state as follows: 1. I have been employed as a Special Agent of the FBI since August of 2003 and am

currently assigned to the Washington Field Office, Northern Virginia Resident Agency, Crimes
Against Children Task Force. Since 2003, I have received training and experience in

interviewing and interrogation techniques; and arrest and search procedures. Since joining the
FBI, I have investigated violations of federal law. As a federal agent, I am authorized to
investigate violations of laws of the United States and as a law enforcement officer I am

authorized to execute warrants issued under the authority of the United States.

2.

From 2003 until March 2012,1 investigated white collar crimes, including fraud

and corruption. Since March 2012, I have been assigned to investigate violations of law concerning child pornography and the sexual exploitation of children. I have gained experience through trainingand work related to conducting thesetypes of investigations
3. This affidavit is made in support of a Criminal Complaint for the arrest of

COREY ROBERT SCHOCK, for the following offense: on or about and between November
10, 2013 and December 10, 2013, in the Eastern District of Virginia, COREY ROBERT

SCHOCK did unlawfully and knowingly receive and attempt to receive any child pornography

Case 1:14-mj-00121-TCB Document 2 Filed 03/07/14 Page 2 of 11 PageID# 3

that has been mailed, or using any means or facility of interstate or foreign commerce shipped
or transported in or affecting interstate or foreign commerce by any means, including by

computer, in violation of 18 United States Code, Section 2252(a)(2); and did unlawfully and
knowingly use facilities of interstate commerce, that is a cellular telephone and the Internet, to

knowingly attempt to persuade, induce, entice, and coerce an individual, under the age of
eighteen to engage in sexual activity for which a person can be charged with a criminal offense,
in violation of 18 United States Code, Section 2422(b).

4.

The following information contained in this affidavit is based on my training and

experience, my personal participation in this investigation, and, information provided to me by

other law enforcement officials. Unless otherwise indicated, where I have referred to written or

oral statements, I have summarized them in substance and in part, rather than verbatim. Not all

of the facts of the investigation known to me are continued herein, only those necessary to establish probable cause for the arrest of COREY ROBERT SCHOCK, a 43-year-old individual
who received visual depictions of individuals under the age of 18 engaged in sexual activities;

and who used facilities of interstate commerce, that is a cellular telephone and the Internet, to knowingly attempt to persuade, induce, entice, and coerce an individual, under the age of eighteen to engage in sexual activity for which a person can be charged with a criminal offense.
As will be shown below, there is probable cause to believe that SCHOCK has violated Title 18, United States Code, Section 2422(b) (Online Enticement).

Case 1:14-mj-00121-TCB Document 2 Filed 03/07/14 Page 3 of 11 PageID# 4

PROBABLE CAUSE

I.

Initial Investigation Regarding Juvenile 1

5.

On December 10,2013, a 15-year-old female and her mother were interviewed

at their home in Woodbridge, Virginia by a Fairfax County Police Detective. The 15-year-old
female will hereafter be referred as Juvenile 1. With the consent of both Juvenile 1 and her

mother, the detective took possession of an Apple iPhone cellular phone and also obtained permission to assume the online identities of the minor. 6. A review of the cellular telephone revealed that Juvenile 1 was using a

messaging application known as "KIK" to communicate with other users. KIK Interactive is a messaging application owned by a Canadian company that allows users to exchange messages,
images and videos using the Internet over cellular phones or similar devices. An examination

of the messages stored in the KIK messenger account resulted in the discovery that Juvenile 1 had been communicating with an individual using the profile name "Nick Nick" and Username "spiderx99" who was purporting to be a 40-year-old school teacher residing approximately two hours from the home of Juvenile 1. It was apparent from references observed at the beginning

of the KIK messenger communication that the adult and Juvenile 1 began their communication
elsewhere, then moved the communication to KIK.

7.

The KIK communications saved on the Apple iPhone began on November 10,

2013, and continued until a few minutes prior to the arrival of the Fairfax County Detective at
the adolescent's home.

8.

On November 14, 2013, at 8:08 a.m. EST, after a short conversation in which

the victim stated that her "SnapChat" (another messenger application in which users
communicate by attaching short messages to images) had been deleted, "Nick Nick" sent the

Case 1:14-mj-00121-TCB Document 2 Filed 03/07/14 Page 4 of 11 PageID# 5

following message, "We were mid convo on snap, you said to send you pics. 1 sent a bunch and you were gone [followed by a sad face emoticon]". At 9:38 a.m. EST on November 14, 2013, "Nick Nick" messaged "Mmmm show me that perfect body" and at 10:02 a.m. Juvenile

1 sent a pornographic photograph of herself, to which "Nick Nick" responded, "Oh holy fuck yes. I am hard in class. I m going to be on Bethesda md area this weekend.... Mmmm fill
those holes!!!!" The aforementioned image that was distributed to "Nick Nick" was an image

of a nude female bending over, exposing her genitalia. This was an actual image of Juvenile 1. 9. During the communication on November 14, 2013, "Nick Nick" made several

statements indicating that he was in class during the time of the communication. Some of the statements included the following: "My dick is hard under the desk. I want to jack off in class

when you say that"; "I have them work, am rubbing under my desk"; "Hard to do in class, hold
on. It's not out, rubbing through pants. The girl next to me can see." "Lemme move to back
table! This is bad....hard at school."

10.

At one point in the communication on November 14, 2013, "Nick Nick" sent a

close up photograph portraying his groin area, and then messaged, "See the bulge lol. ...It's a
tough angle Lol If I get it fully hard, u remember how big it is? Lol They would see!!!!." In
additional communications on this date, "Nick Nick" stated, " I deleted the vid and pic of you

filling your ass, afraid wife would see [sad face emoticon] I loved the tail." An examination of
the media stored on Juvenile l's Apple iPhone revealed images and videos of her with sexual

toys penetrating her anus. One such toy observed in the images and videos had an animal-like
tail attached to the device. Later in the communication, "Nick Nick" stated, "I want to show

you my dick later Get so hard 4 u."

11. On November 15,2013, at 10:52 a.m. EST, Juvenile 1 asked "Nick Nick" if he

was in school, to which he replied, "Yes. Are you." Juvenile 1 responded, "Yeah I am

Case 1:14-mj-00121-TCB Document 2 Filed 03/07/14 Page 5 of 11 PageID# 6

[tongue out emoticon]. "Nick Nick" responded "Lol

Mmmm rub under ur desk" and Juvenile

1 sent a pornographic image of herselflying nude on a bedwith her legs spread apart and her
genitalia exposed.

12.

Later in communications on November 15,2013, "Nick Nick" sent Juvenile 1

two images of his exposed erect penis. These images were preceded by a message stating, "I
am in the bathroom.. .u want it out?" In the background of the two images sent to Juvenile 1,
the following is clearly observed: a whitish-gray tile floor with small tiles and dark colored

grout; a white wall consisting of approximately 4" x 4" white tiles and light colored grout.

"Nick Nick" appears to be wearing beige khaki pants with bright yellow sneaker type shoes
with dark shoelaces. After sendingthe aforementioned images, "Nick Nick" messaged,
"Anything else? Go on Skype I will jerk it 4 u lol".

13.

In additional communications on November 15, 2013, "Nick Nick" requested to

see more images of Juvenile 1. She responded by stating, "I can't in school remember." She
then sent a video of her performing oral sodomy on an unknown male." When "Nick Nick"

questioned who the individual was, and how old he was, Juvenile 1 stated, "Lol hes a friend

but way older... Yeah hes 22." "Nick Nick" responded, "Lol hot I am wayyyyy older than that
lol.. ..I came to your video!" Juvenile 1 asked "Nick Nick" how old he was, to which he

responded "40" and Juvenile 1 stated that he was "like 25 years older" than her. After being
advised that he was 25 years older than Juvenile 1, "Nick Nick" stated, "That's hot". In

further communications about her age, "Nick Nick" said that she appeared to be 13 - 14 years
of age, then requested an image of her when she was 13 years of age.
14. On November 18,2013, at 9:11 a.m. EST, Juvenile 1 offered to send "Nick

Nick" a "bad vid" to which he responded, "Mmm yes I am in school but have break until 940.

Case 1:14-mj-00121-TCB Document 2 Filed 03/07/14 Page 6 of 11 PageID# 7

Love getting hard at school for you." Juvenile 1 then sent him a video of her performing oral
sodomy on an unknown male.
15. Over the course of additional communications on November 18, 2013, Juveni le

1 sent additional pornographic images to "Nick Nick". In one of these images, her genitalia was exposed in a lewd and lascivious manner.

16.

On November 24,2013, "Nick Nick" distributed an image of his exposed erect

penis to Juvenile 1. The image appears to be a close up shot taken by himself, in which his foot is also captured. Also observed in the image are what appear to be a hardwood floor and a
wood dresser with brass handles.

17.

On December 3, 2013, at 5:35 p.m. EST, "Nick Nick" asked Juvenile 1, "Show

me that body." Juvenile 1 sent "Nick Nick" an image of her exposed genitalia and anus, with
an object inserted into her anus. At 7:11 p.m. on the same date, he stated to her, "I came all

over my stepdaughters panties and licked it out, thinking if you, as if they were yours. ...I
wrapped my penis up, lol thought bout wearing them."
II. Identification of SCHOCK

18.

On December 12, 2013, an administrative subpoena and additional documents

were sent to KIK requesting subscriber information and Internet Protocol (IP) logs associated with the user of the KIK profile for "Nick Nick". An IP address is unique to a particular
computer during an online session and provides a unique location to make it possible for data to

be transferred between computers. On January 30, 2014, KIK responded to the request and
provided documents showing the KIK account was repeatedly accessed from a Comcast Cable
Communications IP address 76.104.101.131.

19.

On February 3, 2014, pursuant to an administrative subpoena, Comcast Cable

Communications was served with an administrative subpoena for IP address 76.104.101.131

Case 1:14-mj-00121-TCB Document 2 Filed 03/07/14 Page 7 of 11 PageID# 8

for 01/28/2014 at 23:25:44 EST and 01/29/2014 at 22:53:32 EST, which had been identified

from the subpoena served to KIK Interactive. The results from an administrative subpoena
issued to Comcast Cable Communications revealed that on that day and at that time, the IP address was assigned to the account leased by SCHOCK at an address in Charlottesville,
Virginia 22901. 20. On February 5, 2014, SCHOCK was listed as a Fourth Grade teacher on

http://www.ccs.kl2.va.us/StaffDirectory.aspx?locationID+18,
Elementary School in Charlottesville, Virginia.

the

website

for

Venable

III.

Search Warrant and Interview of SCHOCK

21.

On February 10, 2014, a Federal search warrant was executed at SCHOCK's

residence in Charlottesville, Virginia, based on the aforementioned investigation. 22. SCHOCK was present when law enforcement officers executed the search

warrant. Immediately after law enforcement officers announced that there was a Federal search

warrant for the home, and before any of the law enforcement officers had stated the purpose for
the Federal search warrant, SCHOCK stated words to the effect of "I didn't do it. I didn't know
it was real. I didn't know it was real."

23.

During the execution of the Federal search warrant, SCHOCK was voluntarily

interviewed. During the interview, SCHOCK stated that he owned and used the iPhone cellular

telephone which was located in his home and that he used the messenging program "KIK." Additionally, law enforcement officers showed SCHOCK two child pornography images and a

screen shot of a child pornography video. These images were of Juvenile 1 and were recovered
from the KIK chats on her iPhone which were discussed above. SCHOCK stated that he had

received these specific images on his iPhone, that he remembered seeing them, and that he was

Case 1:14-mj-00121-TCB Document 2 Filed 03/07/14 Page 8 of 11 PageID# 9

attracted to the adolescent female whose images were portrayed. SCHOCK stated that the

female appeared to be "young," and that she had at one point prior to their KIK communications
told him that she was 17 years old.

24.

During the search, the following items were found in the bedroom of SCHOCK:

bright yellow sneakers, red floral bed comforter, wood floor, and wood dresser. The yellow sneakers were compared to the yellow sneakers in the background of an image containing the
erect exposed penis of SCHOCK, which had been sent to Juvenile 1. The yellow sneakers found

in the bedroom appeared to be identical to those captured in the image sent to Juvenile 1. The
red floral comforter, wood dresser, and wood floor were found to match those found in various

images sent to Juvenile 1, which also contained the exposed erect penis of SCHOCK.
25. Immediately after the search of the residence, law enforcement officers examined

the classroom and men's restroom located in the school where SCHOCK is a school teacher.
The wall tile and floor tile in the men's restroom closest to SCHOCK's classroom matched the

tiles visible in the image of SCHOCK's erect exposed penis, which had been sent to Juvenile 1.

The desk and surrounding area inside SCHOCK's classroom were compared to the background of the image of SCHOCK's groin, which had been sent to Juvenile 1. The desk area appeared to
match the desk area in the image sent to Juvenile I.

26.

SCHOCK was shown images from chat communications which he had

participated in with Juvenile 1. SCHOCK was asked whether he had taken the images of his
erect exposed penis in the men's restroom of the school, and sent them during a chat
communication which he participated in during the school day. SCHOCK stated that he had

taken the images of his exposed penis in the men's restroom of the school, and sent them to

Juvenile 1. SCHOCK was also asked whether he had taken the photograph of his groin area
under his desk in his classroom during the school day. SCHOCK stated that he did not have a

Case 1:14-mj-00121-TCB Document 2 Filed 03/07/14 Page 9 of 11 PageID# 10

desk in his classroom, that he only had a podium. Furthermore, SCHOCK stated that the picture

of his groin was how his groin always looked, and denied that he had taken the picture while
students were present in the classroom.

27.

During the search, the Apple iPhone cellular telephone was located in the home of

SCHOCK. SCHOCK voluntarily provided the access code to his Apple iPhone, and it was

forensically previewed. The forensic preview of the iPhone showed a number of sexually
explicit chat communications with other females who appeared to be minors. Additionally, a
number of Skype user names were found on the iPhone during the forensic preview. 28. SCHOCK was asked about the Skype Usernames which had been obtained during

the forensic preview of SCHOCK's iPhone. SCHOCK acknowledged that he had used the
Usernames "robs. 123", "tribexxl", and "nick.spyderx". SCHOCK stated that he did not recall

having used the Usemame "mojoxx99xx", but that it was possible he had used it. SCHOCK
was asked about the KIK Usemame "spyderx99" and stated that he had used that Usemame for

KIK communications. SCHOCK was asked if the name "Spyder" held any significant meaning,
and he stated that it did not - he just liked Spiderman.

29.

A forensic examination was conducted on the iPhone cellular telephone owned

and operated by SCHOCK. Data from the iPhone had been deleted by SCHOCK, but was
recovered through a forensic analysis. Several of the pornographic images of Juvenile 1, which

had been previously obtained from the cellular telephone and "KIK" account of the juvenile,
were contained in the deleted files of the cellular telephone of SCHOCK. The chat
communications were not recovered.

Case 1:14-mj-00121-TCB Document 2 Filed 03/07/14 Page 10 of 11 PageID# 11

IV.

Chats With Additional Juveniles

30.

A number of sexually explicit chat communications were recovered from

SCHOCK's iPhone. These communications indicate a pattern ofbehavior engaged in by

SCHOCK, showing that his contact with Juvenile 1 was intentional and knowing and not a result of an accident or mistake. For at least two years, dating back to September 27,
2011, SCHOCK routinely engaged underage females insexually explicit online chats and

would complement them on their physical appearance. The underage females in these
chats represented that they were between 14 and 16 years of age. In many instances,

SCHOCK would feign surprise at their age and would apologize for engaging them in
communication. Despite his apology, SCHOCK often continued the communication and

would inquire as to their interest in older men. SCHOCK often asked the underage
females to send him images or engage in webcam communications. In particular,
SCHOCK routinely engaged the underage females in live video chats during which he

would masturbate on video. Many communications only ended after the females stopped
responding to SCHOCK's messages. In each of the communications, SCHOCK

misrepresented his age and provided an age younger than his actual age.

Case 1:14-mj-00121-TCB Document 2 Filed 03/07/14 Page 11 of 11 PageID# 12

CONCLUSION

31.

Based on the above information, there is probable cause to believe that on or

about and between November 10, 2013 and December 10, 2013, in the Eastern District of

Virginia and elsewhere, COREY ROBERT SCHOCK did use facilities of interstate commerce,
that is a cellular telephone and the Internet, to knowingly attempt to persuade, induce, entice, and

coerce an individual, under the age of eighteen to engage in sexual activity for which a person
can be charged with a criminal offense, in violation of Title 18, United States Code, Section
2422(b).

Respectfully submitted,

^isa Kite

Special Agent Federal Bureau of Investigation

Subscribed and sworn to before me this _l_ day of March 2014.

/s/

fit

Theresa Carroll Buchanan

The Honorable Theresa Carroll Buchanan

&dL

nited States Magistrate Judge

United StatesMagistrate Judge