How the Internet Caught a Cannibal

Overview

The video claims to explain how Vietnamese “internet sleuths” attempted to identify and expose the perpetrator of a beheading/cannibalism case.

Key claims and narrative of events

Graphic case + timing discrepancy

• A man was reportedly beheaded in January 2025, but the footage is said to have gone viral around August 2025.
• The video alleges Vietnamese authorities did not acknowledge the case publicly and may have suppressed it.

Content leaked from the dark web / shock sites

The video describes three main leaked videos:

• “Rehearsal”
• “The Execution”
• “Butchering”

It claims these depict:

• Decapitation
• Dismemberment
• An implication of cannibalism via food/organ preparation

Monetization angle

The video alleges access to the material was sold via a private Telegram chat, including pricing for partial/premium access.

Internet investigation: victim identification

Investigators reportedly tried to identify the victim (referred to as “Dot” / “Wen Schwen dot”) by:

• Tracing pseudonyms/aliases tied to gore/sexual fixation communities
• Linking suspected identities to inactive Facebook profiles, matching old posts and fixation statements
• Using phone numbers and messaging apps—especially Zalo—along with cross-community corroboration
• Finding alleged missing-person-family records, plus a village report stating the person had left home years earlier and wasn’t reported missing in a typical way

Internet investigation: perpetrator and location theories

Physical identifiers from the footage

The video highlights alleged executioner identifiers, including:

• A balding middle-aged appearance
• A distinctive scar/birthmark placement
• A tattoo read as “13-9”, treated as significant evidence

Location inference

The video argues geography was narrowed by:

• Comparing household items/brands in the footage to items common in Northern Vietnam / border provinces
• Building theories around a likely kitchen/boiling setup intended to erase evidence

Timeline puzzle

The video claims an inconsistency:

• The victim’s social media appeared to have activity after the supposed murder date
• A community theory proposes the killer retained access to accounts and continued using them afterward

Expanded evidence and escalation (November 2025)

Clouding phase then new leaks

After a quieter period, an anonymous account allegedly posted previously unseen chat logs showing contact with:

• The victim
• A person repeatedly named “Chung” / “Tang Chung”, described as involved in planning/coordination

Single-person suspect hypothesis

The video asserts investigators narrowed the perpetrator to Dan Van Sang / “Doan Sang” (and variants), claiming support through:

• Digital account chains across multiple platforms
• Recovery/verification prompts supposedly originating from the same device
• Alleged matches in birthmarks and tattoos between execution footage and Sang’s photos
• Alleged matching background/location clues (e.g., doors, kitchen layout, office environment, tile patterns)

Claims about workplace access

The video also claims Sang’s former senior role in a market management department (MMD) would have provided access to facilities, helping explain a government-adjacent location.

Claimed government response: suppression + police action

Warning about Google Drive files

On Nov 28, 2025, Vietnamese local police issued an urgent notice warning citizens not to share or open community investigation documents, alleging risks such as malware, harassment, and fraud.

Public backlash effect

The video argues suppression backfired by drawing attention to the lack of open handling by authorities.

Police presence at locations

The video describes escalating police/security activity around a market management team compound, including:

• Sealing off buildings
• Barricades and a crowd
• Later statements tying the activity to the murder case

Police “internal leak” claim

The video references an allegedly leaked police summary screenshot claiming:

• Videos/photos were detected weeks after community release
• Forensic steps were performed, including hair sample DNA comparison
• Evidence was found or linked to certain workplace locations (including claims involving teeth/bone fragments)
• A confession narrative: the suspect allegedly met the victim online, killed him at an MMD office, and attempted to dispose of evidence in stages (including dog feeding and trash disposal)

Final official acknowledgement (as described in the video)

Ministry of Public Security statement (Dec 3, 2025)

The video says the Ministry of Public Security confirmed:

• Dan Van Sang murdered Wen Swen Dot
• The suspect attempted to destroy evidence
• An arrest/prosecution timeline (including a reference to an arrest warrant decision in late November)

Despite confirmation, the video claims authorities again warned against sharing the community’s case files.

Overall thesis / commentary

The video’s core argument is that:

• Vietnamese online communities solved or accelerated parts of the investigation faster than authorities
• The state’s initial silence and later suppression attempts were ineffective or suggestive of concealment

It also presents the case as part of broader issues, including:

• Information control
• Narrative shaping
• The importance—and danger—of public truth-seeking

Presenters / contributors

• Maria (writer; team member mentioned in the production)
• Carter (producer)
• Jonathan (producer/research/navigation specialist)
• Ketto, the Curious One (Vietnamese YouTube channel creator mentioned)
• A Vietnamese Facebook group “onset” (community investigators mentioned)
• NordVPN (video sponsor/partner mentioned)
• Tien Hong Commune police (named officials giving warnings)
• Ministry of Public Security (named official government body releasing a statement)
• Reddit users (e.g., “Least Carpenter 8750,” “user/hoisey convine,” “user/hoyconine”)