FDLE Cybercrime Agents Make Arrests in Pensacola and Mount Dora Cases

Florida Department of Law Enforcement cybercrime units made arrests in two separate July investigations that began with tips from the National Center for Missing and Exploited Children and ended with residential search warrants. One case originated in Escambia County and one in Lake County. Both illustrate the pipeline that now generates the majority of internet crimes against children cases in Florida: an electronic service provider flags content, the tip routes through a national clearinghouse, and state agents trace it to a physical address.

Both individuals described below are charged and are presumed innocent unless and until convicted. The accounts here reflect allegations set out in FDLE announcements, not findings by any court.

The Pensacola case

FDLE arrested Robert Demarcus King II, 35, of Pensacola, on 20 counts of possession of child sexual abuse materials, each a second-degree felony under Florida law, and one count of unlawful use of a two-way communication device, a third-degree felony.

According to FDLE, agents received a cybertip in June 2026 from the National Center for Missing and Exploited Children reporting that an unknown user had uploaded more than 1,500 files containing images depicting the sexual abuse of children. Agents traced the associated internet protocol address to a residence and identified King as the user of the account. On July 21, agents conducted a residential search warrant at the address and seized multiple electronic devices, which were previewed on scene.

The charging structure is worth understanding. Florida charges possession of child sexual abuse materials on a per-file basis in many cases, which is why a case involving a reported 1,500 files produced 20 counts rather than one. Prosecutors exercise discretion in how many counts to file. Each second-degree felony count carries a statutory maximum of 15 years.

The Mount Dora case

In a separate matter, FDLE arrested Michael Kinne, 40, of Mount Dora, on an outstanding no-bond warrant for violation of probation on unrelated charges, taken into custody while agents were conducting an investigation related to internet crimes against children.

FDLE said that investigation began in May 2026, when agents received a cybertip from the National Center for Missing and Exploited Children reporting that a user of a messaging application account was sharing and storing digital files depicting the sexual abuse of children. On July 16, FDLE Cybercrime Task Force agents and the agency's Special Operations Team conducted a search warrant at the Mount Dora residence.

The distinction between the two cases matters for accuracy. Kinne was arrested on an outstanding probation violation warrant, not on charges arising from the internet crimes investigation, which FDLE described as ongoing at the time of the announcement. Those are separate legal matters.

How the cybertip system works

The pipeline that produced both cases is a legal structure rather than an investigative technique. Federal law requires electronic service providers to report apparent child sexual abuse material to the CyberTipline operated by the National Center for Missing and Exploited Children when they become aware of it. The center receives tens of millions of reports annually and routes them to appropriate law enforcement agencies based on geography.

In Florida, those tips flow to FDLE's Cybercrime Task Force and to the state's Internet Crimes Against Children task forces, which operate as regional partnerships between FDLE, sheriffs' offices, municipal police departments and federal agencies. Florida runs task forces covering the north, central and south regions of the state.

The investigative sequence from tip to arrest typically involves subpoenaing subscriber information from the internet service provider associated with the flagged IP address, corroborating that the identified individual was the account user, and obtaining a search warrant for the residence and its devices. The IP-to-person link is a common point of defense challenge, since an IP address identifies a connection rather than a person, and shared or unsecured networks complicate attribution.

The scale of the caseload

FDLE has announced a steady stream of similar arrests through 2026, including cases in Escambia County in January, May and June. That cadence reflects volume rather than any localized concentration. The CyberTipline referral count has grown substantially over the past decade, driven by expanded detection technology deployed by major platforms rather than solely by growth in the underlying conduct.

Earlier in July, FDLE's Tallahassee Regional Operations Center Violent Crime 2 Squad led a three-night operation with the North Florida Internet Crimes Against Children Task Force running July 10 through July 12. Operations of that type typically involve undercover communications with individuals seeking to arrange meetings with minors, and they are structured differently from the file-possession cases described above.

FDLE also announced in July that it had re-arrested Paul Wolaver, 62, of Brooksville, on a charge related to exploitation of the elderly, after a July 22 search warrant produced documents and electronic communications that the agency said corroborated witness testimony. That case is unrelated to the internet crimes matters and is likewise an allegation, not a conviction.

What it means for Florida families

The practical guidance from investigators has been consistent. Parents should know which applications their children use and understand that most reports originate from mainstream messaging and file-sharing services rather than from obscure corners of the internet. Privacy settings, location sharing and direct-message permissions are the specific controls worth reviewing.

Suspected exploitation can be reported directly to the CyberTipline through the National Center for Missing and Exploited Children, to FDLE, or to local law enforcement. Reports may be made anonymously.

Florida's mandatory reporting statute requires any person who knows or has reasonable cause to suspect child abuse to report it to the Florida Abuse Hotline. That obligation is not limited to professionals in designated roles, which distinguishes Florida from many states.

How detection technology drives the caseload

The growth in cybertip volume over the past decade is driven substantially by changes in detection capability rather than solely by changes in the underlying conduct, and understanding the distinction matters for interpreting the numbers.

Major technology platforms deploy automated systems that compare uploaded files against databases of known child sexual abuse material using perceptual hashing. A hash is a mathematical fingerprint of a file, and perceptual hashing produces matches even when a file has been resized, recompressed or slightly altered. When a match occurs, the platform is required under federal law to report it.

The consequence is that detection scales with platform adoption. As more services deployed hashing, reports rose sharply, and the CyberTipline now receives tens of millions annually. A substantial share of those reports involve redistribution of previously identified material rather than newly produced content.

That volume creates a triage problem for law enforcement. State and local agencies cannot investigate every referral, and Internet Crimes Against Children task forces prioritize based on indicators including evidence of hands-on offending, proximity to children, production of new material and the volume of material involved.

Newer detection approaches use classifiers to identify previously unknown material, which surfaces cases that hash matching would miss but which also generates false positives requiring human review.

From tip to search warrant

The investigative sequence in both Florida cases followed a standard path, and each step involves a legal threshold worth understanding.

The tip identifies an account and an internet protocol address associated with the upload. Investigators subpoena the internet service provider for subscriber information tied to that address at that time. The subscriber record identifies an account holder and a service address.

That is where the analytical work begins rather than ends. An IP address identifies a network connection, not a person. Households contain multiple residents. Networks are sometimes unsecured. Shared and public connections complicate attribution further. Investigators corroborate through additional evidence before seeking a warrant, and in the Pensacola case FDLE stated that agents identified Robert Demarcus King II as the user of the account before executing the July 21 search.

A search warrant requires a judicial finding of probable cause based on a sworn affidavit. Execution typically involves seizure of computers, phones, external drives and other storage media, with on-scene preview to identify devices warranting full forensic examination.

Attribution is the most common ground of defense challenge in these cases, along with the sufficiency of the warrant affidavit and the scope of the search conducted. Those challenges are litigated through suppression motions before trial.

The undercover operations

The file-possession cases described above are structurally different from the proactive operations FDLE also conducts, and conflating the two produces confusion about what enforcement in this area involves.

Possession and distribution cases begin with existing material and work backward to an identified account. Proactive operations work forward: undercover officers assume online personas and engage with individuals who initiate contact seeking to arrange meetings with minors, with charges typically involving solicitation and travel offenses.

The three-night operation FDLE ran July 10 through July 12, led by the Tallahassee Regional Operations Center Violent Crime 2 Squad with the North Florida Internet Crimes Against Children Task Force, falls in the second category.

Proactive operations raise entrapment questions that possession cases do not. Entrapment as a defense requires showing that the government induced the offense and that the defendant was not predisposed to commit it. Courts have generally held that providing an opportunity is not inducement, and these prosecutions have a high conviction rate, but the defense is raised regularly.

FDLE also announced in July the re-arrest of Paul Wolaver, 62, of Brooksville, on a charge related to solicitation to commit exploitation of the elderly, following a July 22 search warrant that the agency said produced documents and electronic communications corroborating witness testimony. That case involves a different victim population and a different statutory framework, and it is likewise an allegation rather than a conviction.

What's next

The Pensacola case proceeds through the First Judicial Circuit, and the Lake County matter through the Fifth Judicial Circuit. Both defendants are entitled to counsel, to the presumption of innocence and to the full protections of the criminal process.

FDLE said the Mount Dora internet crimes investigation remained active. The agency publishes case announcements through its news office as investigations reach the arrest stage.

The Florida Press will report on the outcomes of these cases as they move through the courts.