Case overview

Philip Markoff, a Boston University medical student, was arrested in April 2009 and charged with the murder of Julissa Brisman, a masseuse he met through a Craigslist ad, and the armed robbery of another woman who advertised erotic services on the platform. Investigators linked Markoff to at least three attacks on women offering services through Craigslist, a pattern that emerged through IP addresses, security footage, and ballistic evidence recovered from his apartment.

The victim pattern that defined the investigation

Between March and April 2009, multiple women who advertised massage or companionship services through Craigslist in the Boston area reported violent encounters with a man who contacted them through the site. The attacks followed a consistent pattern: the suspect used disposable email accounts to arrange meetings at hotels, arrived in professional attire, and attacked the women once inside their rooms.

On April 10, 2009, Trisha Leffler was robbed at gunpoint at a Westin hotel in Boston. The assailant restrained her with plastic zip ties and stole cash and credit cards. Four days later, on April 14, 29-year-old Julissa Brisman was shot and killed at the Boston Marriott Copley Place during what appeared to be a robbery attempt. She had been advertising massage services on Craigslist and had arranged to meet a client at the hotel.

On April 16, Cynthia Melton was bound and robbed at a Holiday Inn Express in Warwick, Rhode Island. She survived and provided investigators with a description that matched reports from the Boston incidents. The attacks shared specific tactical elements: the use of restraints, targeting of women in the erotic services section of Craigslist, and the suspect’s ability to move through hotel environments without drawing attention.

How investigators connected the crimes

Boston police and Rhode Island State Police began coordinating after recognizing similarities in the attacks. Investigators traced the email accounts used to contact the victims. IP address records led them to a computer at an apartment shared by Philip Markoff and his fiancée, Megan McAllister, in the Quincy area.

Security footage from the hotels provided critical corroboration. Surveillance video from the Marriott showed a tall man in a dark jacket entering and leaving the building around the time of Brisman’s murder. Additional footage from the Westin and the Holiday Inn Express showed a man matching the same description. Investigators tracked Markoff’s movements through multiple hotel lobbies and corridors, building a visual timeline that aligned with victim statements.

On April 20, 2009, Markoff was arrested on Interstate 95 south of Boston while traveling with McAllister. A search of his apartment yielded a semi-automatic handgun, plastic restraints, duct tape, and several pairs of women’s underwear that did not belong to his fiancée. Ballistic testing confirmed that the firearm recovered from Markoff’s home matched the weapon used in Brisman’s murder.

The evidence that tied Markoff to the attacks

Prosecutors presented a combination of digital forensics, physical evidence, and eyewitness accounts. The IP address linked to the email account used to contact Brisman was traced to Markoff’s residence. Cell tower records placed his phone near each crime scene at the time of the attacks. The weapon found in his apartment was matched through ballistic analysis to the bullet recovered from Brisman’s body.

Police found cash and credit cards taken during the robberies, as well as items that suggested Markoff had been monitoring or collecting information about potential victims. Investigators also recovered a hollow book used to conceal the handgun.

Surviving victims identified Markoff from photo lineups, and hotel records confirmed that he had used his own credit card to book rooms at some of the same hotels where the attacks occurred, though not during the time of the crimes. This suggested he had conducted surveillance or rehearsals before carrying out the assaults.

Geographic and victim targeting analysis

The attacks occurred within a concentrated geographic area spanning Boston and Rhode Island, all involving upscale hotel chains near major highways. Markoff selected victims who advertised through Craigslist, a platform that allowed for anonymous contact and minimal verification. The victims were women working independently, often meeting clients in transient environments with limited security oversight.

Investigators noted that Markoff’s professional appearance and demeanor allowed him to move through hotel lobbies without arousing suspicion. He used prepaid phones and disposable email accounts to obscure his identity, tactics that delayed early detection.

What the case revealed about platform-based targeting

The Craigslist Killer case became one of the first high-profile criminal investigations to center on the exploitation of classified advertising platforms for violent crime. Markoff’s use of Craigslist to identify and contact victims highlighted vulnerabilities in user anonymity and the lack of verification mechanisms on the platform at the time.

Following the arrests, Craigslist implemented changes to its adult services and personals sections, including manual review of postings and the eventual removal of certain categories. Law enforcement agencies began developing protocols for investigating crimes linked to online classified ads, focusing on IP tracing, metadata analysis, and coordination across jurisdictions.

The case also underscored the investigative value of cross-jurisdictional collaboration. Boston police and Rhode Island authorities shared evidence and suspect descriptions early in the investigation, allowing them to identify the pattern before additional victims were targeted.

The outcome and unresolved questions

Philip Markoff was indicted on charges of first-degree murder, armed robbery, and kidnapping. He pleaded not guilty and was held without bail at the Nashua Street Jail in Boston. On August 15, 2010, one year after his arrest and days before what would have been his wedding date, Markoff was found dead in his cell. He had used a plastic bag and makeshift ligature to take his own life. He left behind writings that included the name of his former fiancée written in blood on the cell wall.

Markoff’s death prevented a trial and left unanswered questions about motive, the full scope of his offending, and whether additional victims existed. Investigators reviewed unsolved cases involving similar victim profiles and methods but did not publicly confirm additional charges. The case was effectively closed with Markoff’s death, though some law enforcement officials have indicated that forensic reviews of related incidents continued.

Where to look next

  • Documentary: “The Craigslist Killer” (Lifetime)
  • Documentary: “48 Hours: The Craigslist Killer” (CBS)
  • Book: “Seven Days of Rage: The Deadly Crime Spree of the Craigslist Killer” by Kevin Flynn and Rebecca Lavoie

Sign Up for Our Newsletters

Get curious. Get excited. Get true news about crimes and punishments around the world. Get Gotham Daily free. Sign up now.