Search Warrant Filed A6422fc0 4feb 48e1 Bb9e 8fe5754255fa

Gregory Green Warrant ID: 42754
Tampa Police Department 2023-182242
IN THE CIRCUIT COURT OF THE THIRTEENTH JUDICIAL CIRCUIT

IN AND FOR HILLSBOROUGH COUNTY, FLORIDA
STATE OF FLORIDA:
COUNTY OF HILLSBOROUGH:
AFFIDAVIT IN SUPPORT OF SEARCH WARRANT
BEFORE ME, Judge Gregory Green, in and for Hillsborough County,
Florida, personally appeared, Joshua Kennedy, who is employed as a sworn law
enforcement officer with the Tampa Police Department, is a resident of the State of Florida,
who being first duly sworn, deposes and says: Affiant has reason to believe and does
believe that certain account information utilized in Hillsborough County, Florida as well as
other jurisdictions, and stored by a provider of electronic or online social media
communication service described as follows:
Being the account information stored by and under the care, custody or control of
Apple Inc, 1 Infinite Loop, Cupertino, CA 95014, and there is now being kept on said
premises or stored by a third party, certain data/information with evidentiary value to-
wit:
Specific technical data/information pertaining to the use of Apple account(s) with the below
associated user/identifying information:
Either independently or any combination thereof:
iCloud account: [email protected]

IMEI: 356834113614970
Phone: 813-570-5681
Name: Richard Lam DOB 1/30/1995
For the date range of:
04/10/2023 00:00 to 05/15/2023 23:59
Specific technical data/information requested:
•Device registration information, including name, address, email address, and telephone
numbers associated with the account.
•Customer service records, including support interactions with customer.
•Apple Media Services data, including all iTunes information, including subscriber
information, purchase/download transactions, connection information, update information,
06/29/2023 10:50:29 AM Electronically Filed: Hillsborough County/13th Judicial Circuit. Page 1
Page 1 of 20
iTunes Match connections, connection logs with IP addresses.
•Apple retail store transaction information, including purchase information, names

associated with purchases, email addresses, date/times of purchases, transaction amounts,
and store locations.
•Apple online store purchase information, including all purchase information, names,
shipping addresses, telephone numbers, email addresses, product purchases, IP address
associated with purchases, credit/debit card number associated with purchases, and serial
number of item purchased.
•Apple Pay information, including types of credit/debit cards a customer has added to Apple
Pay, and customer information.
•FaceTime call invitation logs.
•iMessage logs.
•Sign-on logs.
•My Apple ID and iForgot logs.
•iCloud information, including:
Customer Information
Mail Logs
Email Content
My Photo Stream
iCloud Photo Library
iCloud Drive
Contacts
Calendars
Bookmarks
Safari Browsing History
Maps Search History
Messages
iOS Device Backups

Page 2 of 20
Health Data, to include all Activity, Sleep, Heart, and Vitals data
Screen Time data, to include all Social Networking, Downtime, and Pickups data
Find My connection logs
Find My transactional activity for requests to remotely lock or erase a device associated with
named account
AirTag paired accounts and pairing history
MAC addresses
Game Center information and connection logs
iOS Device Activation information, including IP addresses, ICCID numbers, and other
device identifiers
Connection Logs, including IP addresses and transactional records for customer activity
with Apple services such as Apple Music, Apple TV app, Apple Podcasts, Apple Books,
iCloud, My Apple ID, and Apple Discussions
Sign in with Apple customer information
IDFA data
All Locations Services data, to include data from features Popular Near Me, Significant
Locations, Locate-Based Apple Ads, Location-Based Suggestions, Location-Based Alerts,
Share My Locations, and HomeKit.
All accounts linked via cookie.
Which can provide evidentiary value in proving a violation of the laws of the State of
Florida, to-wit: the laws prohibiting Murder; Florida State Statute(s) 782.04, and subject
to seizure pursuant to Florida State Statute 933.02.
The Affiant has personal knowledge of the matters set forth in this Affidavit and any
attached Exhibits, and/or the information was imparted to me in the performance of
my official duties as a law enforcement officer. Affiant has the required training and
experience in these matters as follows:
Your affiant, Detective Joshua Kennedy, is employed by the City of Tampa Police
Department, and such as a law enforcement officer with the State of Florida. Your Affiant has
been employed with the Tampa Police Department since 2015 and previously served as a
Police Officer with the Tarpon Springs Police Department from 2011-2015. Your Affiant
graduated from the Pasco-Hernando Community College Basic Recruit Police Academy in
Dade city, Florida in 2011. Your Affiant is currently assigned to the Homicide Squad. Prior to
this assignment, your Affiant was assigned to the District One Latent Investigation Squad
where he had the responsibility of investigating robberies, burglaries, thefts, and crimes
Page 3 of 20
against persons. Your affiant has applied for and received court-authorized search warrants,
which have ultimately led to the seizure and arrests of persons violating Florida State
Statutes.
That the facts tending to establish the grounds for this application and the probable
cause of Affiant believing that such facts exist are as follows:
On 4/15/23 Tampa Police dispatch received a telephone call from an unidentified caller at
approximately 1455 hours. The caller related they were told that the people at apartment
2308, 8801 Hidden River Parkway, Tampa, FL had been fighting on 4/14/23, and no one
had heard from them since then. Tampa Police dispatch then created an attempt to contact
call for that apartment residence (TPD # 23-158160).
Tampa Police Officers J. Becker and D. Peck arrived on scene at approximately 1516 hours.
They attempted to make contact with residents of apartment 2308, but there was no answer.
They were, however, able to make contact with a resident neighbor. According to Officers,
this neighbor stated that they knew that two males resided at the residence. However, the
neighbor stated that they rarely see them and that everything had been quiet.
On 5/1/23, at approximately 1435 hours, Tampa Police dispatch received a 911 call
concerning the aforementioned residence, apartment 2308. Apartment maintenance had
entered the apartment and had seen a dead body in a state of decomposition. The
maintenance personnel then backed out and contacted law enforcement.
Tampa Police Officers J. Becker and D. Peck arrived on scene at approximately 1452 hours.
Upon their arrival, they entered the apartment and observed an individual in a state of
decomposition. Officers Becker and Peck observed a partially decomposed decedent in the
apartment’s living room, on the floor. They observed what they believed to be blood pooling
between the decedent and a nearby chair. They also later described to Detectives as having
observed possible blood spatter on this same nearby chair. They further described droplets
of suspected blood in the kitchen and inside of the bedroom. The Officers learned from the
apartment leasing administration that the sole listed apartment resident on record was
William Edward Futral (white male, 12/29/70). William Futral’s vehicle on file was a 2020
Black Mercedes GLE 450 bearing Florida license plate GKPL46.Additionally, his phone
number on record with the apartment complex was 813- 995-3404. Tampa Police learned
from apartment complex maintenance personnel that the last recorded electronic key entry
to apartment 2308 was made by Williams Futral’s electronic key at approximately 1337
hours on 4/14/23.
Tampa Police Detectives contacted the Tampa Police Real Time Crime Center and
requested any tag reader hits on any vehicles bearing Florida license plate GKPL46. Tampa
Police Detectives were subsequently informed that a vehicle matching that description had
hit a tag reader in the area of Riviera Beach, Florida, at approximately 1529 hours on 5/1/23.
Riviera Beach, Florida is located in Palm Beach County, approximately 196 miles from
apartment 2308.
Your affiant believed that this death investigation was potentially a homicide death
investigation. Therefore, your affiant authored a search warrant on 5/1/23 to enter apartment
2308. The honorable Judge Samantha Ward approved the search warrant for apartment
2308 at approximately 1857 hours, 5/1/23. Tampa Police Homicide Detectives and Tampa
Police Forensic Technicians subsequently entered the apartment under the authority of this
Page 4 of 20
search warrant. The decedent was located in the apartment living room in a supine position.
An investigator for the Hillsborough County Medical Examiner’s Office also entered the
apartment with Tampa Police. During an examination of the body, a defect was identified
along the area of the decedent’s right neck and jaw. This was initially identified as a
possible wound, but due to the state of decomposition, it was not able to be positively
identified as a wound without further
examination.
Your affiant observed a broken object adjacent to the decedent. This object was
approximately two feet from the decedent’s left hip. The broken object was gray in color and
had the appearance of a plastic exterior with what appeared to be a small piece of metal
protruding from an end. The general appearance of the object appeared to possibly be part
of the handle for a pair of cutting shears. Your affiant observed what appeared to be a
footprint in blood leading from the living room to the adjoining kitchenette area. Inside of the
kitchenette, apparent blood was located at the base of the sink faucet, on the faucet nozzle,
on the faucet handle, and on the kitchen sink counter. On the ground next to the kitchen
trash can was what appeared to be a rubber kitchen cleaning glove with apparent blood on
it. Adjacent to the living room where the decedent was located was a bedroom. Inside of this
bedroom was a camera mounted on what appeared to be a Ronin brand gimbal stabilizer.
Also, in the bedroom were what appeared to be set lights mounted on tripods. Apparent
blood was also observed in this bedroom on the closet door handle. Apparent blood was
also observed inside of this closet. Tampa Police Detectives located what appeared to be
multiple electronic hard drives in a black case on a white wire shelf inside of this closet. A
bathroom adjoined this bedroom. On the toilet seat Tampa Police Detectives observed
suspected blood that appeared to possibly be mixed with other fluid(s). Tampa Police
Detectives observed apparent blood elsewhere in the apartment as well. In the hallway
closet closest to the front door your affiant observed white wire shelving with a bottle of
“equate” brand ibuprofen on it. On this bottle was apparent blood. Above this bottle were
what appeared to be approximately one dozen electronic hard drives. Further down this
hallway was another bedroom. On the side of the bed’s fitted sheet, Detectives observed
what appeared to be blood.
On 5/2/23 Hillsborough County Medical Examiner’s Office Deputy Chief Medical Examiner
Doctor Carolina McEnnan conducted an autopsy on the decedent. Doctor McEnnan advised
your affiant that the manner of death was homicide. Doctor McEnnan further related that the
victim appeared to have suffered two wounds to the right side of their neck.
The victim’s carotid artery was severed by one of these incisions, which appeared to be
approximately 8 to 9 centimeters deep. The decedent was later positively identified, via
medica records, as William Edward Futral.
On 5/2/23 Tampa Police detectives, and pursuant to a second court-authorized search

warrant, executed a second search of the apartment residence, which was located at 8801
Hidden River Parkway, Apartment 2308. While detectives were executing the 5/2/23 search
at apartment 2308, a neighboring resident identified himself to detectives. The
neighborvolunteered information regarding an unknown white male, who he had seen
accompanying the resident of 2308 on multiple occasions. The neighbor provided a
description of the male to detectives, which included that the male spoke with an
unidentified accent. Detectives then had the occasion to review available video surveillance
footage from 4/10/23 which captured a person, who was similar in appearance to the
neighbor’s description of the unknown white male. The footage came from the apartment

Page 5 of 20
complex’s cameras which were fixed to a common area, near the complex’s pool.
Detectives presented the footage to the neighbor, who identified the person in the footage as
the same male who the neighbor had seen with the resident of 2308.
On 5/2/2023, your affiant was notified that a patent print found on the kitchen sink faucet
nozzle in apparent blood was identified as belonging to Richard Lam WM 1/30/1995. These
prints were identified to Richard via and IAFIS hit by Tampa Police Latent Print Examiner M.
Palisi. This was via his left thumb print. Additionally, Lam’s right fingerprint was identified on
the microwave and other dishes in the sink within the kitchen area. A review of Richard’s
driver’s license photo appeared consistent with the male seen on the 4/10/23 video
surveillance in the pool area of the complex. Additional research revealed Richard Lam to
be on probation in Orange County for Domestic Battery by Strangulation.
On 5/2/2023 at approximately 1730 hours the victims Mercedes was located in Palm Beach
County at the intersection of 39th St and Australian Ave within the City of West Palm Beach.
Deputies eventually stopped the car at 2420 Avenue R, Riviera Beach. The driver was
identified as Zahayrah Hutchinson (B/F, DOB: 01/03/1989) and the front passenger was
identified as Zwaquan Harris (B/M, DOB: 11/17/1977). Homicide Detectives from Palm
Beach County Sheriff's Office spoke with your affiant who requested the car be sealed and
towed to the Palm Beach Sheriff's Office Impound Lot, pending a search warrant. During a
sworn recorded interview, Hutchinson said she obtained the car from a black male known to
her as “Michael Thomas” in the City of West Palm Beach. She said Michael gave her the car
a day prior (May 1st), to use for a couple of weeks while he traveled out of the Country to St.
Kitts. She said there was no money or paperwork exchanged and had no further identifying
information for Michael. She explained Harris is her child’s father, and she was using the car
to drive him around to medical appointments. Hutchinson said she had no idea who the car
belonged to and had never been to Tampa before. She said did not see anything unusual in
the car, but said there was a purse in the glove box. Hutchinson said she put her phone in
the purse and was going to claim it as hers, but has no idea who it actually belongs to or
what items are in the purse. During a sworn recorded interview with Harris, he explained a
black male named “Michael Louis” gave him the car on April 28th, in exchange for $75.00.
Harris said he does not know anything about Michael, but said he has his phone number in
his phone, which remained in the Mercedes. Harris said he has never traveled to Tampa
and has no knowledge of the car being associated with a murder. Harris said there was no
specific agreement made with Michael for how long he was going to keep the car, but
assumed Michael was going to reach back out to him for additional money eventually
On 5/2/23, your affiant was provided video surveillance which was obtained from a private
residence at 725 40th St / Broadway West Palm Beach. This video depicted a white male,
with a large build, exiting the victim’s Mercedes on 4/22/23 at 1837 hours. This male is seen
wearing no shirt and black colored shorts. The male abandons the vehicle and walks away
from the scene. On 4/25/23, the Palm Beach Police Department responded to this location in
reference to the Mercedes being reported as a suspicious vehicle. Officers ran the license
plate to the vehicle, which is on body worn video, and confirmed the vehicle was the
victim’s. Since this homicide was not yet discovered at the time of their response, the vehicle
was left at the scene and nothing further was done.
On 5/3/23, Det. Alverson and Det. Nightlinger responded to the victim’s apartment complex
to review and collect video at the apartment complex. Through reviewing the video,
detectives were able to determine the victim last used his key card at the apartment gate at

Page 6 of 20
4/14/23 at 1331 hours and then used his key to access his apartment at 1337 hours On
4/14/23, at 1420 hours an unidentified male subject with a large, muscular build wearing a
cowboy hat, a ripped up dark colored shirt and blue shorts is seen departing the side gate of
this apartment couple exiting with two suitcases.
On 5/3/23, Det. T. Kline and Det. Kirkpatrick responded to Palm Beach, Florida to assist with
the investigation. They responded to 4105 Pinewood Ave, West Palm Beach, Florida which
is just to the west of where the Mercedes was abandoned. They reviewed video at this
location and found video surveillance from 4/22/23 at 1736 hours that showed a silver
colored Honda sedan arriving at the location. This time stamp was determined to be one
hour behind; thus, the true time was 1836 hours and was consistent with the residential
video. A black male with long dread locks is seen exiting the vehicle and walking north
along Pinewood Ave. The white, shirtless male was then seen walking from the direction
where the Mercedes was parked and towards the parked Honda sedan. The black male
then walks back to the Honda sedan and the two eventually leave the area in the Honda
together.
On 5/3/23 your affiant met with Richard Lam's Probation Officer, P.O. Boisrond and showed
her video from the pool area on 4/10/23. Upon P.O. Boisrond viewing the video, and without
her having any knowledge of the investigation or suspects, she stated the male in the video
was Richard Lam. She advised she has supervised him since December of 2022 and has
seen him in person about three times. She advised that she knows it is him based on how
he dresses. He frequently wears the vest as he is seen in the video, and she knows that he
is rather muscular. Additionally, she advised she has knowledge that Richard Lam has a
boyfriend who resides in the Tampa Bay area. She produced a photograph that Richard
Lam sent her that depicted Richard Lam with an unidentified black male with a dread lock
hairstyle. The boyfriend’s identity was unknown to P.O. Boisrond.
Your affiant completed computer research via open source databases and discovered
Richard Lam’s Instagram account. Upon viewing this account, your affiant observed photos
of Richard with a black male with dreadlocks. Through investigative means, this male was
tentatively identified as Jayden McPherson BM DOB 4/15/03. Additionally, a DHSMV check
revealed Jayden has a 2020 Honda sedan registered to him bearing FL tag 01ASMK.
Furthermore, a check through “Flock” license plate readers revealed this vehicle was in
Vero Beach, Fl on 4/22/23 at I-95 SB and 20TH ST. From viewing this license plate reader
hit, coupled with additional LPR photos, your affiant witnessed Jayden’s vehicle to match
the vehicle seen picking up the male who abandoned the victim’s vehicle.
On 5/8/23 your affiant and Det. Gady met with Jayden McPherson and completed an audio
recorded interview with him. During this interview, Jayden McPherson advised that he
knows Richard Lam and has known him for about a year. He advised on 4/14/23, he was
called by Richard and received several phone calls and texts from him from phone number
813-570-5681. Jayden advised that Richard makes male pornography and Richard recently
told him that his boss had “Roofied” him which rendered him unconscious. His boss then
sexually assaulted Richard. Richard told Jayden this has happened in the past and that
ultimately, this led to a large fight between Richard and his boss on 4/14/23. After this fight,
Richard told Jayden that his boss would never be able to hurt him again. Jayden advised
based on how Richard was acting and what he had said, he believed that Richard meant he
had killed his boss.

Page 7 of 20
Jayden began reviewing Richard’s text messages in front of your affiant which were sent on
4/14/23. In these text messages, Richard is seen saying that he was going to wipe his
fingerprints. He also sent a video that appeared to be of him standing in the bathroom at the
victim’s residence; however, this video was not viewed at this time. A picture of a glove on a
hand was seen along with a reference to Richard saying that he was going to destroy his
phone. When questioned about this, Jayden stated that he did not believe Richard
destroyed his phone, but your affiant noticed the messages cease on this date. In continuing
the interview with Jayden, he admitted that he confided in his parents about this incident and
the fact that he felt someone had died. He advised his father placed the anonymous phone
call requesting an officer check on the welfare at the victim’s residence. Additionally, Jayden
admitted to picking up Richard from the location where the victim’s vehicle was abandoned
and then drove him to a friend’s house in Palm Beach. He was shown the video of the
subject at the apartment complex pool area on 4/10/23 and positively identified him as
Richard Lam. He was shown video on him picking up the male subject in West Palm Beach
and he also identified himself and Richard in the video. He was also shown still shots of the
male leaving the apartment complex wearing the cowboy hat on 4/14/23. He stated this
male looked like Richard, but he could not be 100% certain, given the quality of the video
and the positioning of the male. He did state one of the suitcases looked like Richard’s
suitcase. Jayden was asked if he would consent to a cell phone extraction of his device to
preserve the digital evidence. He declined, but stated we could take photographs of the data
if we wanted. He cited personal photos being on the device as a reason he did not want the
phone examined. Based on the facts at hand, Jayden’s phone was seized as evidence.
On 5/8/23 a search warrant to search Jayden McPherson’s cell phone was approved by the
Honorable Judge James Moody. This warrant was executed, and a partial extraction was
able to be downloaded by TPD Det. S. Tidwell of the Tampa Police Department’s Computer
Forensics Unit. A computer check of Jayden's phone number, 813-363-4936, revealed it to
be associated with the T-Mobile Cellular Network.
On 5/9/23 your affiant was able to review the results from Jayden McPherson’s cell phone
extraction. Upon reading these text messages, your affiant noted the text messages have
numerous grammatical errors. For documentation purposes, direct quotes will be placed in
quotes and all other content is summarized. Your affiant observed that Richard sent Jayden
a text message, from 813-570-5681, saying there was an emergency and he was letting
Jayden know that something was about the happen. Richard stated that Jayden would be
happy to hear that “To the victor goes the spoils, my prince hero”. Richard then stated to
Jayden that he has to call him immediately and to hurry, there isn’t much time” Jayden
explains to Richard that he can’t hear him and to text. Richard then advises “ Bill owes me
money a lot of money he's only give me 500 he told me to go live with a Nager cock sucking
Faggot after he called me he's so then I physically physically yet but verbally abused him
back and he's gotten. My feet is already going to do so he departed to go get me a $500." He
then added, “i'm leaving with at least 5000”. Richard then texts “he'll be unconscious I'm
going to your house you have to get there from your house. I will be leaving about 300 miles
every month it out.” “I didn't wanna fucking text now I got to destroy this phone afterwards.
Additionally, Richard sent Jayden a video of him standing within the bathroom wearing this
glove and flexing while taking a “selfie” video. This video also appears to be from the
victim’s apartment bathroom. Richard additionally sent text messages to Jayden saying “Ily
lets take u ahopping w the spoils of war!” (This is believed to mean, I love you, lets take you
shopping with the spoils of war).

Page 8 of 20
The above text messages that Richard sent to Jayden are all dated between 4/14/23 at 1320
hours and 4/14/23 at 1330 hours. It is noted the victim was seen entering the gate to his
apartment at 1331 hours and the key activation for his apartment is at 1337 hour; thus, the
above listed text messages in which the victim indicates that something is about to happen
take place prior to the victim arriving at this apartment. Video surveillance showed a male
with a similar build as Richard’s departing the apartment complex via the side gate at 1420
hours.
Further text messages from Richard were discovered in which he advised Jayden that he
was at Jayden’s house. This takes place at 1516 hours. Additionally, Richard sent text
messages that Jayden failed him again and that he has gifts for him. He then texts Jayden
and says that he is on his way and then later that he parked in his driveway of his house.
These are sent at 1517 hours. Richard later continues to advise Jayden “ that he is very sad
and has to leave now”. He then adds that he no longer works for the guy site and that he
thought Jayden would’ve stopped what he's doing to be with his man. The last text in this
text thread indicates “I no longer have a choice Jayden I love you so much baby I got you a
$1400 drone. We'll get together again I promise the guy site is no more.”
As the investigation progressed, probable cause was established to charge Richard Lam
with First Degree Murder and Grand Theft Auto. On 5/10/23 an arrest warrant was issued for
Richard's arrest. This warrant was granted by the Honorable Judge Moody for the charges of
1st Degree Murder and Grand Theft Auto.
On 5/10/23 a search warrant for Richard Lam’s stored communications was authored for
phone number 813-570-5681. This warrant was served to T-Mobile, Inc which is the
wireless provider for this cell phone number.
Your Affiant was later provided with the results from T-Mobile which revealed the phone
number 813-570-5681 was associated with an IMEI of 356834113614970. A further check of
this IMEI revealed this IMEI was for an iPhone XR which is an Apple smart phone device.
On 5/15/23, Richard was placed under arrest by members of the United States Marshal's
Task Force at 37 NW 52nd St in Miami, FL. During the arrest, an Apple iPhone was not
seized during that time.
Based on the facts, a subpoena for records was served to Apple Inc. regarding the iCloud
account name associated with the above IMEI and Phone number. Your affiant was later
provided an iCloud screen name of [email protected]. It was also confirmed that
the device was an iPhone XR.
Based on training and experience, your affiant is aware that certain data can be stored or
“backed up” via propriety “cloud based” software such as Apple Inc’s “iCloud”. This data can
include GPS locations, messaging content, as well as photographs and videos among
several other pieces of data. In addition, your affiant is aware that these records are stored
by Apple Inc and are available through the legal demand of a search warrant. In addition,
your affiant is also aware that Apple’s iCloud software includes a unique identification to the
subscriber known as an “Apple ID”. This “Apple ID” is required by Apple Inc in order to look
up the said data and provide it to law enforcement or government entities upon receipt of a
court authorized search warrant. Apple maintains the subscriber information for their users
as part of their business records and this data can be searched by Apple Inc through certain

Page 9 of 20
unique identifiers to include subscriber name, telephone number, device IMEI or any
combination thereof.
Based on your Affiant’s experience, training, review of Apple’s Legal Process Guidelines,
and information obtained from other law enforcement officers versed in related
investigations, your Affiant can state that:
•Apple records/retains registration information regarding users of their services and devices,
to include name, address, email address, and telephone number.
•Apple records/retains customer service records, including records of support interactions

regarding particular Apple devices or service.
•Apple maintains and operates iOS. iOS is an operating system for iPhones, iPads, and
other Apple mobile devices.
•Apple maintains and operates software applications such as the App Store, Apple Music,
Apple TV app, Apple Podcasts, and Apple Books. Apple refers to these software
applications collectively as Apple Media Services. The software applications allow
customers to organize and play apps, digital music and video, and stream content. Apple
Media Services also provide content for customers to download for their computers and iOS
devices. When a customer opens an Apple account, basic customer information such as
name, physical address, email address, and telephone number can be provided by the
customer. Apple retains purchase/download transactions, connections, and
update/redownload connections, for Apple Media Services activity. These logs include
timestamped IP address information for each activity. Your Affiant knows that IP addresses
can possibly be resolved back to a physical address such as a residence or a business with
Wi-Fi access or residential cable internet.
Your Affiant knows that IP addresses can also possibly be resolved to specific devices such
as smartphones which can provide Internet access, also known as “hotspots”. Your Affiant
knows that in attaining downloaded application information, further investigative avenues
can be discovered. An example is learning that an Apple customer downloaded a
navigation service such as Waze, which with supporting court process, could provide
investigators with timestamped geographic locations of the device used by the Apple
customer. An additional benefit of recovering Apple Media Services data is being able to
validate a forensic device exam. An example of this validation would be by showing an
application downloaded via Apple Media Services also is discovered on the related Apple
device via forensic exam.
•Apple records/retains Apple retail and online store transactions, which your Affiant knows
can aid in proving ownership/possession of specific Apple devices or services.
•Apple maintains a product called Apple Pay. This service enables customers to make
secure, contactless purchases using Apple Cash, Apple Card, or any other credit/debit card
that is linked to the customer’s digital Apple Wallet. Apple maintains Apple Pay information
for customers, specifically the type(s) of credit/debit card a customer has added to their
account, along with customer information.
•Apple maintains and operates a cloud service called iCloud. This service allows users to

Page 10 of 20
access their music, photos, documents, and more from all their devices. The service also
enables subscribers to back up their iOS devices to iCloud. iCloud services are linked to
customers via a registered email address or Apple ID. Your Affiant knows that users of
iCloud services commonly backup the digital activity that occurs on their Apple devices,
which can consist of photos, videos, email, messages, Safari browsing history (Internet
activity), text messages, voicemail, and other data. The significance of these backups
relates to the forensic challenges in recovering deleted data directly from an Apple device.
An example of iCloud significance is recovering evidentiary photos taken on an Apple
device and backed up to iCloud but deleted from the device itself. An additional benefit of
recovering iCloud data is being able to validate a forensic device exam. An example of this
validation would be by showing a photo recovered from iCloud exhibits the same metadata
as a photo recovered forensically from an Apple device.
•Apple has a feature available to users named Find My iPhone. This feature enables an
iCloud subscriber to locate his/her lost or misplaced Apple device. The feature also allows
the user to lock or wipe data from the device. Apple records/retains Find My connection logs
for users.
•Apple produces devices called AirTags. These devices are small in size and intended to
aid customers in finding missing personal items such as keys, backpacks, luggage, etc. The
devices work with the Find My app on Apple devices and must be within Bluetooth range of
paired Apple devices such as iPhones, iPads, or iPods. Airtags utilize the Find My network,
which is made up of hundreds of millions of Apple devices around the world, in order to
provide location information to a customer. In order to utilize AirTags, customers must have
an Apple ID and be signed into their iCloud account with Find My enabled. Apple retains
paired account details and pairing history for AirTag data/usage.
•Apple operates and maintains a social gaming network called Game Center. Apple retains
connection logs of customer activity relating to their Game Center usage.
•Apple records/retains device activation data. Furthermore, when users activate a device or
upgrade software, Apple may record/retain data related to the event, including timestamped
IP addresses, ICCID numbers, and other device identifiers. Your Affiant knows that IP
addresses can possibly be resolved back to a physical address such as a residence or a
business with Wi-Fi access or residential cable internet. Your Affiant knows that IP
addresses can also possibly be resolved to specific devices such as smartphones which
can provide Internet access, also known as “hotspots”.
•Apple records/retains sign-on activity/logs for a user related to the Apple devices and Apple
services such as Apple Media Services, iCloud, My Apple ID, and Apple Discussions. The
logs may include timestamped IP addresses. Your Affiant knows that IP addresses can
possibly be resolved back to a physical address such as a residence or a business with
WiFi access or residential cable internet. Your Affiant knows that IP addresses can also
possibly be resolved to specific devices such as smartphones which can provide Internet
access, also known as “hotspots”.
•Apple records/retains My Apple ID and iForgot Logs. This information relates to users
needing to reset their passwords related to Apple services. The logs may include
timestamped IP addresses. Your Affiant knows that IP addresses can possibly be resolved
back to a physical address such as a residence or a business with Wi-Fi access or

Page 11 of 20
residential cable internet. Your Affiant knows that IP addresses can also possibly be
resolved to specific devices such as smartphones which can provide Internet access, also
known as “hotspots”.
•Apple has a feature available called iMessage. This feature is a messaging service
available between Apple devices such as iPhones, iPads, or Macbooks computers. Apple
maintains data related to this feature which is referred to as capability query logs. These
logs indicate that a query has been initiated by a device application and routed to Apple’s
servers for a lookup handle to determine whether that lookup handle is “iMessage capable.”
The iMessage query does not indicate that a communication between customers actually
took place. The lookup handles can be a phone number, email address, or Apple ID. Your
Affiant knows that iMessage communications are not recorded on cell phone call detail
records, i.e., AT&T or Verizon, which increases the need of obtaining iMessage data via
other investigative sources.
•Apple has a feature available called Facetime. This feature allows Apple customers to
communicate with each other via video calls. Apple retains Facetime call invitation logs
when a FaceTime call invitation is initiated. These logs do not indicate that a
communication between customers actually took place. The Facetime call invitation log can
include a phone number, email address, or Apple ID. Your Affiant knows that FaceTime
communications are not recorded on cell phone call detail records, i.e., AT&T or Verizon
which increases the need of obtaining Facetime data via other investigative sources.
•Apple operates and maintains a service called Sign in. This service creates a private way
for customers to sign into third-party apps and websites with the customer’s existing Apple
ID. A Sign in with Apple button on a participating app or website allows a customer to set up
an account and sign in with their Apple ID. Instead of using a social media account, or
completing forms and selecting another new password, a customer can merely tap the Sign
in with Apple button, review their information, and sign in quickly and securely with Face ID,
Touch ID, or their device passcode. Hide My Email is a feature of Sign in with Apple. This
feature uses Apple’s private email relay service to create and share a unique, random email
address that forwards emails to a customer’s personal email address. Apple retains basic
customer information relating to the Sign in and Hide My Email features.
•Apple utilizes a system related to advertisers being able to track iPhone activity. The
system is called IDFA – or “identifier for advertisers”.
•Apple iPhone devices have a feature known as “Significant Locations.” This feature keeps
track of places an iPhone user has recently been, as well as how often and when the
location was visited. Apple transmits this data between a user’s Apple devices that utilized
iCloud.
•Apple utilizes an application called “Health” – which logs a device’s movements, including
steps, flights of stairs ascended/descended, and other related data.
•Recovery of any and all timestamped IP address information and Metadata that shows
timestamped locations provides value in corroborating call detail records obtained from a
carrier such as AT&T or Verizon. The corroboration can occur by validating that a cell site
used at a specific time provides cell coverage to the location obtained via IP address or
Metadata.
Based on the above information, your affiant believes that the Apple iCloud data associated
with Richard Lam’s cellular device will be of evidentiary value to the investigation of William

Page 12 of 20
Futral’s murder.
Based on the foregoing totality of circumstances, the Affiant has reason to believe and does
believe that there are currently items of evidence related to an active criminal investigation,
to wit: specific technical data/information pertaining to the use of Apple account(s) with the
below associated user/identifying information:

IMEI: 356834113614970
Phone: 813-570-5681
For the date range of:
04/10/2023 00:00 to 05/15/2023 23:59

WHEREFORE, your Affiant hereby makes application for a Search Warrant authorizing the
Affiant, police officers of the Tampa Police Department Hillsborough County, State of
Florida, with proper and necessary assistance, including the assistance of digital forensic
examiners from other agencies, to seize the described evidence in the daytime/nighttime, or
on Sunday. The actual subscriber information seized will be listed on a return and inventory
to be filed within this Judicial Circuit within ten days of execution of this warrant. However,
the receipt of the physical data may take a significant time exceeding the ten days of
execution of the warrant. For this reason, the “return” inventory will be satisfied by a list of
the subscriber information being sought.
Joshua Kennedy
Tampa Police Department
Affiant
STATE OF FLORIDA
COUNTY OF HILLSBOROUGH
I am a law enforcement officer as defined in § 943.10, Florida Statutes, and, pursuant to §
117.10, Florida Statutes, I am authorized to administer oaths when engaged in the
performance of official duties. The foregoing instrument was acknowledged before me on
this 28th day of June,2023 , by the individual whose name and signature appear above, and
who is personally known to me and who did take an oath.
Michael Kelley
Page 13 of 20
Tampa Police Department

WITNESS my hand and seal this 28th day of June 2023
Wednesday, 28 June 2023

18:45:28
18:45:28
Gregory Green
Judge in and for Hillsborough County, Florida

Page 14 of 20
IN THE CIRCUIT COURT OF THE THIRTEENTH JUDICIAL CIRCUIT

IN AND FOR HILLSBOROUGH COUNTY, FLORIDA
STATE OF FLORIDA:
TO: THE CHIEF OF POLICE OF THE TAMPA POLICE DEPARTMENT, OR ANY
DESIGNATED POLICE OFFICER THEREOF:
TO: THE SHERIFF OF HILLSBOROUGH COUNTY, FLORIDA, AND/OR HIS LAWFUL
DEPUTIES:
WARRANT
ORDERING SEARCH & PRODUCTION
OF ELECTRONIC MATERIALS
This SEARCH WARRANT is issued pursuant to Florida Statute s. 92.605. A response

is due within 20 business days of receipt of this search warrant unless a longer time
period is stated herein.
WHEREAS, complaint on oath and in writing, supported by affidavit has been made before
me,
Judge Gregory Green, in and for Hillsborough County, Florida, personally came Joshua
Kennedy who states: That Affiant, is a law enforcement officer within Hillsborough County,
State of Florida, a citizen of the State of Florida, and that the Affiant has reason to believe
and does believe that certain account information, utilized in Hillsborough County, Florida,
as well as other jurisdictions, and stored by a provider of electronic or online social media
communication service described as follows:
Being the account information stored by and under the care, custody or control of Apple Inc,
1 Infinite Loop, Cupertino, CA 95014, and there is now being kept on the premises or stored
by a third party, certain data/information with evidentiary value, which is described as Apple
Inc, 1 Infinite Loop, Cupertino, CA 95014 user data/information, and items described in the
Affidavit and any attached Exhibits, which are incorporated by reference and made a part
hereof as if repeated in full, which will provide evidence of a violation of the Laws of the
State of Florida to-wit: the Laws prohibiting Murder Florida State Statute(s) 782.04, and
subject to seizure, Florida State Statute 933.02.
Specific technical data/information pertaining to the use of Apple account(s) with the
below associated user/identifying information:

IMEI: 356834113614970
Phone: 813-570-5681

Page 15 of 20
Specific technical data/information requested:

•Device registration information, including name, address, email address, and telephone
numbers associated with the account.
•Customer service records, including support interactions with customer.
•Apple Media Services data, including all iTunes information, including subscriber
information, purchase/download transactions, connection information, update information,
iTunes Match connections, connection logs with IP addresses.
•Apple retail store transaction information, including purchase information, names

associated with purchases, email addresses, date/times of purchases, transaction amounts,
and store locations.
•Apple online store purchase information, including all purchase information, names,
shipping addresses, telephone numbers, email addresses, product purchases, IP address
associated with purchases, credit/debit card number associated with purchases, and serial
number of item purchased.
•Apple Pay information, including types of credit/debit cards a customer has added to Apple
Pay, and customer information.
•FaceTime call invitation logs.
•iMessage logs.
•Sign-on logs.
•My Apple ID and iForgot logs.
•iCloud information, including:
Customer Information
Mail Logs
Email Content
My Photo Stream
iCloud Photo Library
iCloud Drive
Contacts
Calendars
Bookmarks

Page 16 of 20
Safari Browsing History
Maps Search History
Messages
iOS Device Backups
Health Data, to include all Activity, Sleep, Heart, and Vitals data
Screen Time data, to include all Social Networking, Downtime, and Pickups data
Find My connection logs
Find My transactional activity for requests to remotely lock or erase a device associated with
named account
AirTag paired accounts and pairing history
MAC addresses
Game Center information and connection logs
iOS Device Activation information, including IP addresses, ICCID numbers, and other
device identifiers
Connection Logs, including IP addresses and transactional records for customer activity
with Apple services such as Apple Music, Apple TV app, Apple Podcasts, Apple Books,
iCloud, My Apple ID, and Apple Discussions
Sign in with Apple customer information
IDFA data
All Locations Services data, to include data from features Popular Near Me, Significant
Locations, Locate-Based Apple Ads, Location-Based Suggestions, Location-Based Alerts,
Share My Locations, and HomeKit.
All accounts linked via cookie.
For the date range of 04/10/2023 00:00 to 05/15/2023 23:59

IT IS HEREBY FOUND AND DETERMINED , that the facts tending to establish the
grounds for this application, and the probable cause of the Affiant believing that such facts
exist are set forth in a written affidavit which has been sworn to in my presence, and it
appears to the Court that the Affiant is a reputable citizen of the State of Florida, and that the
facts set forth in said affidavit show and constitute probable cause for the issuance of this
warrant and the Court being satisfied of the existence of said grounds set forth in said

Page 17 of 20
application, or that there is probable cause to believe in their existence.

NOW, THEREFORE , pursuant to Florida Statutes § 92.605 and § 934.23, as well as United
States Code 18 U.S.C. 2703, you are commanded with such proper and necessary
assistance, in the daytime or in the nighttime, or on Sunday as the exigencies of the
occasion may demand or require, to order Apple Inc, 1 Infinite Loop, Cupertino, CA 95014 to
provide the data/information described in this warrant: and if the same or any part thereof be
found, you are hereby authorized to seize and secure same, giving proper receipt therefore
and delivering a duplicate copy of this warrant on said premises and making a return of your
doings under this warrant within ten (10) days of the date hereof, and you are further directed
to bring the said data/information so found before any County or Circuit Judge having
jurisdiction of this offense to be disposed of according to law.
Apple Inc, 1 Infinite Loop, Cupertino, CA 95014 is also hereby ORDERED pursuant to F.S.
92.605(5), to provide, along with said materials, a certification or declaration from the
custodian of records or another qualified person certifying or declaring that the records are
authentic; Such record was made at or near the time of the occurrence of the matters set
forth by, or from information transmitted by, a person with knowledge of those matters; Such
record was kept in the course of a regularly conducted business activity; The business
activity made such a record as a regular practice; And if such record is not the original, it is a
duplicate of the original, unless the source of information or the method or circumstances of
preparation indicate lack of trustworthiness.
This search warrant or court order is issued under the “no-notice” provisions of law, per 18
U.S.C. 2703, 2705, F.S. 934.25 and other applicable provisions. Apple Inc, 1 Infinite Loop,
Cupertino, CA 95014 is therefore hereby ORDERED that it shall NOT DISCLOSE to the
customer(s) or subscriber(s) the existence of this warrant or the fact of a response because
disclosing the existence of the warrant could potentially endanger the life or physical safety
of an individual; could cause his/her flight from prosecution; could cause destruction of or
tampering with evidence; could cause intimidation of potential witnesses; or could otherwise
seriously jeopardize an investigation or unduly delay a trial.
WITNESS my hand and seal this 28th day of June 2023

18:45:28
18:45:28
Gregory Green
Judge in and for Hillsborough County, Florida

Page 18 of 20
Page 19 of 20
Page 20 of 20

Search Warrant Filed A6422fc0 4feb 48e1 Bb9e 8fe5754255fa

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Search Warrant Filed A6422fc0 4feb 48e1 Bb9e 8fe5754255fa

Uploaded by

Copyright:

Available Formats

Gregory Green Warrant ID: 42754

Tampa Police Department 2023-182242

IN THE CIRCUIT COURT OF THE THIRTEENTH JUDICIAL CIRCUIT

iCloud account: [email protected]

•Customer service records, including support interactions with customer.

iTunes Match connections, connection logs with IP addresses.

•Apple retail store transaction information, including purchase information, names

•FaceTime call invitation logs.

•My Apple ID and iForgot logs.

•iCloud information, including:

iCloud Photo Library

Safari Browsing History

Maps Search History

iOS Device Backups

06/29/2023 10:50:29 AM Electronically Filed: Hillsborough County/13th Judicial Circuit. Page 2

Find My connection logs

AirTag paired accounts and pairing history

Game Center information and connection logs

Sign in with Apple customer information

All accounts linked via cookie.

On 5/2/23 Tampa Police detectives, and pursuant to a second court-authorized search

06/29/2023 10:50:29 AM Electronically Filed: Hillsborough County/13th Judicial Circuit. Page 5

06/29/2023 10:50:29 AM Electronically Filed: Hillsborough County/13th Judicial Circuit. Page 6

06/29/2023 10:50:29 AM Electronically Filed: Hillsborough County/13th Judicial Circuit. Page 7

06/29/2023 10:50:29 AM Electronically Filed: Hillsborough County/13th Judicial Circuit. Page 8

06/29/2023 10:50:29 AM Electronically Filed: Hillsborough County/13th Judicial Circuit. Page 9

•Apple records/retains customer service records, including records of support interactions

06/29/2023 10:50:29 AM Electronically Filed: Hillsborough County/13th Judicial Circuit. Page 10

06/29/2023 10:50:29 AM Electronically Filed: Hillsborough County/13th Judicial Circuit. Page 11

06/29/2023 10:50:29 AM Electronically Filed: Hillsborough County/13th Judicial Circuit. Page 12

iCloud account: [email protected]

04/10/2023 00:00 to 05/15/2023 23:59

Tampa Police Department

Wednesday, 28 June 2023

06/29/2023 10:50:29 AM Electronically Filed: Hillsborough County/13th Judicial Circuit. Page 14

IN THE CIRCUIT COURT OF THE THIRTEENTH JUDICIAL CIRCUIT

This SEARCH WARRANT is issued pursuant to Florida Statute s. 92.605. A response

iCloud account: [email protected]

06/29/2023 10:50:29 AM Electronically Filed: Hillsborough County/13th Judicial Circuit. Page 15

Specific technical data/information requested:

•Customer service records, including support interactions with customer.

•Apple retail store transaction information, including purchase information, names

•FaceTime call invitation logs.

•My Apple ID and iForgot logs.

•iCloud information, including:

iCloud Photo Library

06/29/2023 10:50:29 AM Electronically Filed: Hillsborough County/13th Judicial Circuit. Page 16

Safari Browsing History

Maps Search History

iOS Device Backups

Find My connection logs

AirTag paired accounts and pairing history

Game Center information and connection logs

Sign in with Apple customer information

All accounts linked via cookie.

For the date range of 04/10/2023 00:00 to 05/15/2023 23:59

06/29/2023 10:50:29 AM Electronically Filed: Hillsborough County/13th Judicial Circuit. Page 17

application, or that there is probable cause to believe in their existence.

Wednesday, 28 June 2023

06/29/2023 10:50:29 AM Electronically Filed: Hillsborough County/13th Judicial Circuit. Page 18

You might also like