A Montana man was sentenced to nearly four years in federal prison this month for a severe cyberstalking campaign that utilized sophisticated identity obfuscation techniques.
Steven Kenneth Kaptchy, 33, of Bigfork, received a 46-month prison sentence followed by three years of supervised release. The case highlights the ability of federal law enforcement to pierce complex digital anonymization strategies, including the use of over 1,000 distinct IP addresses.
Relentless Digital Harassment
According to court documents, Kaptchy engaged in a harassing campaign against a former intimate partner between July and December 2022. The harassment began shortly after the victim ended their relationship.
Kaptchy utilized 35 different phone numbers and email addresses to send hundreds of threatening messages. To evade detection and blocking, he routed this traffic through approximately 1,100 unique IP addresses.
The harassment escalated beyond direct messaging. Kaptchy created fake profiles on dating and casual encounter websites using the victim’s name and photos, soliciting sexual encounters from strangers. He also threatened to distribute intimate images of the victim to her friends and family.
Escalation to Physical Surveillance
The cyberstalking crossed into physical surveillance when Kaptchy flew a drone over the victim’s residence to monitor her activity.
In one instance, he spoofed his phone number to impersonate a detective from the Flathead County Sheriff’s Office. He called the victim and demanded she turn over her electronic devices, attempting to seize the very evidence documenting his harassment.
Federal Investigation and Sentencing
The FBI led the investigation, successfully correlating the massive volume of spoofed network traffic back to Kaptchy. Despite the high volume of IP addresses used to mask his location, agents traced the activity to Kaptchy’s personal devices.
U.S. District Judge Donald W. Molloy handed down the sentence at the Missoula federal courthouse. The prosecution was handled by the U.S. Attorney’s Office for the District of Montana, emphasizing the Department of Justice’s commitment to prosecuting technology-facilitated abuse.
Implications for Infosec Professionals
This case serves as a significant precedent regarding the limits of network obfuscation in criminal investigations.
Key takeaways for the security community include:
Attribution Resilience: The use of over 1,000 IPs (likely via proxies or VPN services) failed to prevent positive identification by the FBI.
Multi-Vector Threats: The convergence of cyberstalking (spoofing, doxxing) with physical surveillance (drones) represents an evolving threat landscape for personal security.
Law Enforcement Capabilities: Federal agencies retain the capability to correlate high-volume anonymized traffic with specific end-user devices when criminal intent is present.
Kaptchy pleaded guilty to the cyberstalking charges in August 2025 prior to his sentencing this January.
