A 23-year-old American exchange student, Kevin Gao, was sentenced to 20 weeks in jail on Friday, June 19, after hiring a dark web hacker to compromise the Telegram accounts of two former friends. Gao, who had been studying at Nanyang Technological University, also engaged in a persistent stalking campaign against a third victim. According to court documents, the defendant’s actions were driven by a desire for closure after the victims ended their friendships with him.
Did You Know? Kevin Gao attempted to contact one of his victims more than 1,000 times using 23 different phone numbers after she blocked him on social media platforms.
How the Hacking Scheme Was Executed
Gao sought out “hacking services” on a Russian forum located on the dark web after feeling rejected by two acquaintances he had met on Discord. According to court records, he paid a hacker known as “Wracker” approximately US$3,000 in Bitcoin to gain access to the girls’ private conversations. The hacker employed a phishing strategy, sending the victims messages from a fake “Security” account that directed them to a fraudulent website. Once the victims entered their credentials, the hacker bypassed their privacy and provided Gao with live access to their data. Gao eventually saved chat logs and media files to his personal computer and later instructed the hacker to publish the private messages on a public Telegram channel.
The Impact of Stalking and Harassment
Beyond the digital intrusion, Gao engaged in physical stalking against a third victim he had met on the gaming platform Roblox. Court documents state that between April 2025 and September 2025, Gao followed this victim on at least eight occasions, including tracking her from a transit station to a classroom. The victim reported feeling “scared for her life,” leading her to change her phone number, email address, and residence. Deputy public prosecutor Ashley Chin characterized the behavior as “egregious and escalating,” noting that all three victims were minors, aged 17, at the time of the offenses.
Expert Insight: This case highlights the dangerous intersection of digital anonymity and real-world harm. While defense counsel argued that Gao’s mental health—specifically major depressive disorder—diminished his judgment, the court’s decision to impose a custodial sentence underscores a judicial priority: protecting victims from the severe psychological distress caused by targeted, persistent digital and physical stalking.
What Happens Next
Following the completion of his 20-week jail sentence, Gao is expected to be deported from Singapore. His legal team, led by Mr. Victor Lau and Ms. Ong Hui Wen, argued that the risk of reoffending is low once Gao returns to his home country, where he will have access to familial and social support systems. While the Institute of Mental Health noted that Gao’s mental state may have influenced his decision-making, the court maintained that he possessed the capacity to understand the wrongfulness of his actions. He remains legally responsible for the harm inflicted upon the three victims.
Frequently Asked Questions
Why did Gao target his victims?
According to court records, Gao sought to understand why the girls had ended their friendships with him and was searching for explanations after being cut off.
What evidence did the defense provide regarding Gao’s mental health?
His lawyers presented findings from a private psychiatrist and an Institute of Mental Health doctor, both of whom agreed he suffered from major depressive disorder with anxious distress, which they argued compromised his judgment.
How did the victims discover the breach?
The victims received suspicious notifications about login attempts from unknown devices and were warned by one another to log out of their accounts after realizing the security messages they received were fraudulent.
How should social platforms balance user privacy with the need to protect young users from sophisticated phishing and stalking threats?
