Original subtitles

My name is Avery Ryan.

I was a victim of cyber crime.

Like you, I posted on social media,

checked my bank account balance online,

even kept the confidential files

of my psychological practice on my computer.

Then I was hacked, and as a result,

one of my patients was murdered.

My investigation into her death led me to the FBI,

where I joined a team of cyber experts

to wage a war against a new breed of criminal

hiding on the Deep Web...

infiltrating our daily lives in ways we never imagined...

...faceless...

nameless...

lurking inside our devices,

just a keystroke away.

(panting)

Danny...

RYAN: It's all right. It's...

Come... come join me and your brother.

REPORTER: Good evening, Detroit.

This is your eye in the sky.

It appears a portion of the downtown area

is experiencing a power outage.

REPORTER 2: Traffic in the area is at an absolute standstill.

REPORTER 3: Police are on the scene to manage any outbreaks

of violence or looting.

However, thus far only a handful

of minor incidents have been reported.

I've got 25 blocks

of downtown Detroit in the dark.

Backup systems are completely unresponsive.

You guys sure this is a case for the FBI?

We're FBI Cyber, this is exactly our kind of case.

From what we can tell, you're experiencing a cyber intrusion.

Your power grid's been hacked.

REPORTER: We just got an update from Detroit River Electric,

and they're still working on the power outage

in the downtown area.

Uh...

The smart grid allows for complete control

of the city's entire power supply from this room.

Right now, someone else is in control.

RAMIREZ: SCADA systems like this should be impenetrable.

But someone remotely hacked in,

then locked out every computer here

by erasing the startup disk.

Even if you two successfully

recover the disk and reboot the system

you'll still have to counter-hack the target

to get the power back on.

Yeah, we're halfway there already.

RAMIREZ: The odd thing about all this

is the blackout affects only 25 blocks.

When I hacked the New Hampshire grid,

I took out the whole state.

Oh, so we bragging now?

RYAN: No, no.

Raven's asking the right question.

Why limit this power outage to such a focused area?

A hacker's objective is usually

to affect as many people as possible.

This was a precision attack.

There will be another phase to this outage.

He's using the SCADA attack as camouflage.

The faster we get those lights on,

the sooner we will uncover

what our target's true intensions are.

NELSON: Really?

The whole state of New Hampshire, huh?

(laughs)

I wanted a three-day weekend.

(chuckles)

Hey, by the way... Yo.

...happy two-month anniversary.

We dating?

No, stupid.

Two months

at the Cyber Crime Division.

You're officially

in the family.

Don't mess up.

I want you to stick around.

Got a live feed to the Emergency Operation Bureau's incident map.

The blackout is affecting the central hub of the city,

both the government and the financial districts.

Our target could be looking to hit the federal building,

district court, city jail,

baseball stadium, three banks

or countless privately owned businesses.

Power outage is a great way to disable security alarms.

There are several incidents of traffic gridlock.

Whatever our hacker's doing,

he's gonna want to make a getaway.

So let's focus on the buildings

on the fringe of the blacked out area of the city.

Locations still in the dark

but where the target won't get caught in the traffic jam

caused by the blackout while trying to flee.

And let's rule out any area that borders the rail line.

It's a bad idea to cross the tracks

and risk getting trapped behind a closed train crossing.

Hey, guys, we're back online!

We're back in control,

but the lights still aren't on.

Yeah, that's gonna take a minute.

Our hacker's still active in the system.

Raven's writing a patch to seal the intrusion.

Wait a minute.

If he's still active in the system,

that means he needs to maintain a live connection

to the power station for some reason.

Nelson, can you inject malicious code into Raven's patch?

Infiltrate his laptop before you boot him off.

Tag him so we can track him.

RYAN: If he uses that computer again,

we'll know where he is.

We may get a location and possibly his identity.

I want that power on

and that hacker in handcuffs.

You got it boss, I'm on it.

(lock clunks)

MAN: Yeah, Pa, power's still out.

I'm just gonna check out the store.

(door clunks)

MAN: Hey!

Who the hell are you?!

(grunts)

(body thuds to floor)

(alarm ringing)

Police responded to the security alarm,

found the store owner's son,

Benjamin Christos, shot dead.

Single father, two children.

Was he here when the power went out,

Detective Dorn?

DORN: Store wasn't open today.

We figured he came to protect the property

against possible looters--

interrupted the robbery.

It's an auto safe dialer.

It cycles through every possible combination

till it lands on the right one.

All the thief needed was time.

Explains why the computer maintained

a live connection to the power grid.

Had to ensure that the lights

and the alarm systems

stayed off.

Looks like the power outage

was masking a jewelry store robbery.

Well, what did they take?

DORN: From what we can tell,

the thief left empty-handed.

We do know

most of the jewelry's on consignment.

The Christos don't own it.

That computer... It was in the vault when first responders arrived.

Why lock a computer in a vault?

Well, there's one way to find out.

RYAN: Somebody went to all this trouble--

they even killed a man--

to leave with absolutely nothing?

I'm not buying it.

All right.

No modem installed, no way to connect

to the Internet.

There's only one thing on it.

A bitcoin account with a zero balance.

This wasn't a jewel heist.

This was a bitcoin heist.

WOMAN: Ben came down

to check on the store.

The blackout...

I should've come with him.

But he talked me out of it.

There was a computer in the vault.

It's the bitcoin computer.

Benjamin's idea.

I really don't understand it.

But he was so passionate.

He said bitcoin was the currency of the future.

Ben was taking over the family business

and I promised I would trust his judgment.

But now...

my son was killed over... over this...

this imaginary currency?

(Tabitha sobs)

Do you know how many bitcoins you had?

Almost half a million dollars' worth.

Most of our retirement.

MUNDO: In order to access

and steal your bitcoin,

the thief would have needed the passkey to your account.

And it was stored on the computer in the vault.

Who else knew it was there?

Ellis, no.

He wouldn't.

Stephen.

Our oldest son.

He was supposed to take over the business, but...

Ben had so much more ambition.

Drive.

I-I begged them both to run it together,

but the boys didn't see eye to eye.

RYAN: Thank you both.

We'll be in touch.

Bad blood between brothers.

Half a million dollars at stake.

And Stephen would have known that taking the bitcoin

over of the jewelry was hassle-free.

Transfer it from one account to another,

it's... well, almost untraceable.

No serial numbers.

Nothing to fence.

Sounds like we have to have

a little chat with Stephen Christos.

When the power came back on,

so did the jewelry store's security camera.

Is this Stephen?

No.

I have never seen that man before in my life.

Is this the man who murdered our son?

Took our grandchildren's father from them?

Now we have a face.

We just need a name.

So, no luck identifying our bitcoin thief, huh?

No, sir.

Ran the facial recognition.

Big dead end.

Guy's not in the FBI database.

But the bitcoins have provided an interesting lead.

The biggest misconception about bitcoins

is that it's anonymous.

I mean, that's why it's

the preferred currency of the Deep Web.

It's used to fund drug deals, hit men,

human trafficking, but it's not actually that anonymous.

Is this a bitcoin lecture

or did you make an actually discovery here?

Oh, right. Sorry.

I accessed the block chain,

which is a public ledger that records every bitcoin spent.

Every cent's accounted for-- where it came from

and where it went.

And each transaction is listed

as a long sequence of randomized numbers.

Ah.

So you can't tie it to a person,

but you can tie it to an account, right?

So, it's like a stock market transaction.

I mean, you can see somebody bought

200 shares of a commodity.

You just don't know who.

Exactly!

But if you know the amount that you're looking for,

you can find any bitcoin transaction

that's ever been made.

Even when it's stolen,

there is a record of the bitcoin movement.

All you need is the amount,

date and time.

So, this is last night's robbery.

What we're looking at

is our thief's bitcoin account.

1,208 bitcoins.

As of today, worth just shy

of 500,000 U.S. dollars.

Now, of course, the bitcoin market

fluctuates so dramatically

that this many bitcoins could very be easily be worth

over a million dollars in the very near future.

Explains why someone went to such lengths to steal it.

Mm-hmm.

So, what digital dust can we follow here to catch our thief?

Well, every bitcoin account is protected

by a 64-character passkey.

And if you have the passkey, you can unlock the account.

And whoever has the passkey to this account

is probably our killer.

Well, that's odd.

Our thief's bitcoin account is protected by two passkeys.

Typically, it's just the one.

Yeah, it's like a safe deposit box.

It requires two keys to open it.

Which might just imply

our bitcoin thief has an accomplice.

Hey, guys!

The malicious track worked.

I pinpointed the exact location of the bitcoin thief's computer.

This is Agent Elijah Mundo.

I need a SWAT team at 5280 Clinton Place.

(tires screech)

MAN: Clear! MUNDO: Well, there's our thief.

(alarm ringing) RYAN: Looks like we're not

the only ones interested in stolen bitcoins.

* I know you've deceived me, now here's a surprise *

* I know that you have, 'cause there's magic in my eyes *

* I can see for miles and miles *

* I can see for miles and miles *

* I can see for miles and miles *

* And miles...

* Oh, yeah.

All right. Thanks, bud.

All right.

Krumitz ran the name we got off the victim's I.D.

We are looking at the infamous Brian Kramer.

Apparently he made a living robbing

large bitcoin accounts he found on the block chain.

This was his fifth.

Tracked charitable contributions

from bitcoin accounts to find his targets.

Laceration

of the throat looks like COD.

He bled out, but over here,

it looks like our victim was sliced open.

And patched up multiple times.

He was tortured.

Closed the wounds with Super Glue.

Battlefield first aid.

It's commonly used by people with military training.

Torture the victim and patch him up.

Keep him live long enough to talk.

Detroit PD is still trying to locate Stephen Christos.

Hasn't answered calls from his family.

We can't wait this out. Track his cell phone.

Get a GPS location on him.

Okay, got it.

Hard drive's been removed.

Whoever did that to him was

definitely after the stolen bitcoins.

If they had the hard drive, why torture him?

'Cause the passkey wasn't on the hard drive.

Door was barricaded by the dresser.

Bought our victim a little time.

Long enough for our thief

to take the passkey out of the computer.

Bad guy breaks through the door.

Tries to access the bitcoin account, he can't.

Tortures the thief

for the passkey. Sounds good.

Unfortunately, it's all speculation.

The answers died with his laptop.

Not necessarily.

Took the hard drive, but not the RAM chip.

Still might be a way to get some answers.

RAM keeps track of the programs

your computer's running while it's on.

The moment the computer loses power...

the RAM starts to forget.

Information decays.

Freezing it...

...stops the process.

(laughs)

MUNDO: Most people don't go to a bar

after they find out

their brother's been murdered and their family robbed.

I needed a drink, okay?

I would imagine so.

What are you implying?

Why don't you tell us about these e-mails, Stephen?

We accessed your phone.

You got a call at 6:17 from your mother.

She told you about the break-in

and that your brother had been murdered.

Even though

your brother was dead, all you cared about

was the money.

MUNDO: 'Cause the next thing you did

was check the balance

of the store's bitcoin account.

You found it at zero.

I knew those damn bitcoins were a bad idea.

Unregulated,

uninsurable, I...

tried to warn my parents

and my brother-- I said bitcoins

are too risky.

If they get stolen, they're gone.

You can't get them back.

But you tried to get them back.

Four hours ago... you contacted

bounty hunters by e-mail

and negotiated a price to recover the stolen bitcoins.

Did you really think bitcoin bounty hunters were the answer

to all your problems?

You'll get the money back,

then... you can take over.

My parents had just lost a son!

And now they were staring at poverty.

Did they tell you they used their retirement

to keep the business afloat?

That my brother's bright idea was to convert

to bitcoin?! No.

I'd imagine they didn't.

After all the years of hard work,

all they gave up,

the only thing I could think to do

was get the money back.

For them.

Not me.

Look at that.

You see that?

That's the work of the men you hired.

Do they look like the kind of men who give back money?

We need information.

All I have is a Web site.

And I had an e-mail address.

That's it.

They said they would contact me.

These are incredibly dangerous men, Stephen.

They lurk in the Deep Web.

In a world you can't even begin to imagine.

They've already killed one man.

You have started something you can't undo.

KRUMITZ: Bounty hunters' Web site and e-mail address

are a wild goose chase.

Well, that's no surprise.

These bounty hunters specialize

in bitcoin retrieval.

They think of themselves as elites.

They're skilled, educated, tech-savvy.

So we can't bet on them making any mistakes.

It gets worse. Our bitcoin thief

was no bozo, either.

We got the results from the degraded images

we recovered from the thief's computer RAM.

This is

a botnet-- a massive group

of maliciously infected personal computers--

or bots-- from all around the country harnessed together.

Basically, it's a network of computers used for evil.

But the people who own the computers have no idea

that they're part of an evil empire.

After the computers are infected, the hacker

has full control over every single computer on the network.

That's roughly...

20,000?

Unsavory characters, like our dead thief,

rent out their botnets to send spam e-mails,

perform DDoS attacks, mass identity theft.

You know, all that good illegal stuff.

RYAN: Can you tell if our thief

connected to the botnet before the bounty hunters

broke down that motel room door?

What?

What?

What is it, Krumitz?

He sent two separate messages to two separate computers

somewhere in the botnet.

RYAN: It must've been the passkeys.

Like a bank robber hiding his stash until the heat

dies down and he can recover it and get away.

Are you saying two random computers-- two in 20,000--

are secretly storing the passkeys.

And the owners don't know it.

That's not the bad part.

The RAM got us to the botnet.

But it was far too degraded to tell me

which of these two people have them.

But the bounty hunters have the thief's hard drive.

And that means

they know which two people have the passkeys.

They have the digital treasure map.

So, two innocent people have no idea what's coming to them.

And we have no way of warning them.

Hey, what are you doing in my house?!

(grunting)

Hey!

(groans)

You get what we came for?

Yeah, I got the passkey.

One more passkey and we're a half mil richer.

(phone rings)

You got Krumitz.

Hold on, Krummy, let me transfer you to CTOC.

MAN: This came for you, Nelson.

What's this?

Don't know. A judge won't typically hand out

a warrant on the evidence we have.

The RAM was too degraded.

But I pleaded my case and got us into the server farm

housing the botnet's command and control server.

I got Krumitz on the big screen.

So, tell me we have names.

Performing a live acquisition now.

We are seconds away from having the same information

the bounty hunters do.

The server has a record of every interaction

the thieves made with the botnet.

If we don't catch

our targets before they get those passkeys,

the Christos' savings will be gone forever.

Every cent they have.

Every minute counts, and we're behind already.

Something's wrong here.

Uh, hold on.

What is it, Daniel?

(groans)

NELSON: He's been disconnected.

I need a win off that server, Krumitz.

The drive's completely corrupted.

From the look of it, someone did this deliberately.

The bounty hunters are covering their tracks. Damn it.

Deleted is recoverable, but the drive

is being overwritten; everything is gone.

RAMIREZ: I've been monitoring

Stephen Christos' e-mail activity.

Bounty hunters

just sent a new message.

Due to unforeseen complications,

they're upping their price.

Unforeseen complications.

That what they're calling murder these days?

RAMIREZ: They made a mistake.

The computer they sent this e-mail from

had a parental control program designed to go unnoticed.

Bounty hunters would have no way of knowing it was there.

Parental controls are installed

so parents can monitor their children on the Internet.

It tags everything coming in and going out.

Simon, if there's parental controls,

it means there's children there.

Yeah, I hear you.

Yes! Parental controls came through.

Just got a physical address on the bounty hunters.

Okay, I'll notify the local authorities

to move on the location cautiously.

Meanwhile, let's get you on a plane.

(indistinct radio transmission)

MAN: Normally I don't get home from work this early.

I'm just glad my son wasn't home.

Edward Gaines, found in a bathtub bound and gagged.

He suffered a laceration

and a concussion.

If the blow to the head hadn't knocked him out,

a bullet would've been next.

Raven's pulling traffic cam footage

looking for faces based on Edward's description.

Did our targets get what they came for?

Yep.

The e-mail that Stephen Christos got

was sent from this computer.

The bounty hunters now have the first passkey.

Well, they're halfway to their goal,

and we're stuck at the starting line.

(sighs) So what's our play?

Do you remember how I fought so hard to bring in Tobin?

Yeah, the cyber division needed someone who could work the cases

like a hacker, work the cases from the inside.

We're gonna use that same tactic.

We're gonna work this case from the inside.

(chuckles)

Mom and Pop.

The mystery box?

Yeah, uh, (chuckles)

they gave me all my devices back.

From your arrest? Yep.

Look at you, probie no more.

(chuckles)

God, it took me six months to get off my probation.

Hmm.

Who do you know? Yeah, you know...

We need to get inside that botnet.

Avery, the system is fried.

Yes, but the botnet still exists.

So you're thinking

we should join the botnet?

RAMIREZ: Well, we can take the botnet's malicious code

off Mr. Gaines' laptop

and infect one of ours and we're in.

Then we'll know

what the bounty hunters know,

and we'll have a chance to get one step ahead.

First time I ever wanted a computer virus.

RAMIREZ: I know what you mean.

KRUMITZ: Let's see what we got.

All right, we're in.

Okay, now that you're connected to the botnet,

you should be able to break in and send it commands.

(chuckles) What?

You don't think I pay attention

when you guys geek out with code speak?

KRUMITZ: I never thought that.

All right, Avery. Ping this entire network.

We are looking for the two computers

that have those passkeys.

KRUMITZ: Okay, the D.C. I.P. address

is Mr. Gaines' laptop right here on this desk.

The bounty hunters already took the passkey off that one,

but the other one... RAMIREZ: Albuquerque, New Mexico.

Mm-hmm. Hey.

All right. Whoa, too slow.

KRUMITZ: Yeah.

(laughter)

Hang on.

Nelson, this is a win; this is when we celebrate

and high-five our bosses.

No, no, check out that I.P. address.

It's not static; it's dynamic.

Every time a computer with a dynamic I.P. turns on,

it gets assigned

a new I.P. address randomly

from its Internet service provider,

but when it turns off, the I.P. address

will be randomly reassigned to a different device.

The bounty hunters are still using

the I.P. address they recovered from that hard drive.

There you go.

The second passkey's in Albuquerque,

but the bounty hunters don't know that.

They're going to the wrong location.

Okay, I'll contact the service provider,

figure out the I.P. address our bounty hunters are chasing,

find out where they're headed.

Work quickly.

They retrieved that first passkey.

They still brutally beat Edward Gaines.

If they come up empty at this next location,

who knows what they'll do.

Krumitz has plotted the bounty hunters'

final destination.

Denver, Colorado.

So there's gonna be a plane waiting for you

and your team on the tarmac.

Hey, just got back the results on the footage

from the traffic cameras near Edward Gaines' house,

and I have security footage from around the motel

in Detroit where we found our bitcoin thief.

Cross-referenced every face we found,

looking for anyone in both cities in the past 24 hours.

I.D.'d two men traveling together.

Jeremy and Henry Spitz, brothers, ex-military,

both dishonorably discharged, a long history

of violent behavior resulting in arrests.

They fit the profile of our bounty hunters.

We need to expect unpredictable explosive behavior.

All right. Put out a BOLO on the pair

and inform the TSA. If they're grounded,

they're gonna be forced to drive to Denver.

That's gonna buy us some time.

I'll take Raven to Albuquerque,

and you're gonna need to find that final bitcoin passkey.

Let's set this trap.

Hello, I'm Special Agent Avery Ryan.

I'm running this operation.

Is everybody out of the house?

Yes, our son's staying

the night at a friend's.

Hopefully this will all be over by morning.

NELSON: This comes to an end here!

(grunting)

This is our Appomattox.

Appomattox, really?

You're really gonna compare this

to the battle that ended the Civil War?

(grunting) Yeah, why not?

You have any idea how many men died in that battle?

Appomattox. Step up your game, man.

A dynamic what? It's your I.P. address.

If this is just about my computer,

I don't see why I have to leave my home.

Again, ma'am, this is an ongoing investigation.

I have told you as much as I can.

Now I would like to move you into protective custody

till we resolve all this.

What's she doing on my computer anyway?

Removing something worth killing for.

Got the passkey.

Sending it to the boys now.

Well, that smile must mean we're on schedule.

Just got the final passkey from Raven.

Krumitz is finishing up inside.

We're good to go.

I know we're right in the middle of something, but, uh,

I just wanted to say thanks

for getting me off probation.

And giving me all my devices back.

They mean a lot to me.

Got my tablet back today.

You know, I had all my photos in there

and my family stuff.

It was good to see my parents again.

I haven't seen them since the trial.

It's complicated.

Well, Sifter and I spoke to the judge.

She agreed to lift your probation.

Wow, that's-that's crazy.

I didn't, I didn't even know he liked me.

(chuckling): No, he-he doesn't.

We all set?

Oh, yeah. We embedded a decoy passkey

on the computer in the home,

one infected with our own malicious code.

So when the bounty hunters try to use that passkey,

it'll infect their computer

and we'll have complete control over it.

Well, they're reckless and greedy.

They'll want immediate gratification.

We won't have to wait long.

All right, but when they plug in,

we'll be able to steal the first passkey back.

Not just steal it.

We have to prove it was on their computer.

That passkey is the only thing that links those men

to the murder and the home invasion.

It's what's gonna give us a conviction.

Don't worry. We'll be screen- capturing the entire session.

(Nelson groans)

We lost the connection to the Schaeffers' computer.

He'll get it back online.

(groans)

Krumitz, what the hell are you doing?

RYAN: Krumitz left his radio.

We're having technical issues. Avery, we just got word.

SWAT's reporting a suspicious looking SUV

that just entered the neighborhood.

How long?

Two minutes at most.

Bring up the home security cameras.

I need eyes on the perimeter.

We got it.

(groans)

NELSON: We got a problem, Elijah.

Danny, it's okay.

Just come stand by me and your brother.

We'll do anything you ask.

Please, just don't...

don't hurt my family.

Just take what you want.

No one's stopping you; we're the only ones here.

Check the back, make sure we're alone.

(whispering): How'd he get here?

(whispering): He came for a video game for his sleepover.

Where's my mom and dad?

It's okay, Jeffrey.

Just do what I tell you.

JEREMY: All clear.

You. Me?

You got a computer in here somewhere-- take me to it.

Danny, do what the man tells you to do.

Listen to your mother.

She'll get you out of this alive.

It's, uh, it's upstairs.

Move.

Have your men hold.

I got two FBI agents and an innocent in there.

We storm the house at the wrong time, somebody will get killed.

How the hell did that kid get in there?

Avery just spotted him coming in the back door

through the security camera.

I need more men in the back-- there's a hole in that fence.

Fill it now.

How we doing on your end?

Trap's set-- those guys take the bait,

we'll have them dead to rights.

Jail for life, and some.

Um, we've got a volatile situation in there, Nelson.

We can't wait long.

HENRY: Sit.

Okay, you got it, but do you mind lowering your gun?

Open the system's folder.

Just give me a minute-- I-I'm not good with computers.

Uh, here, here?

Open it.

Now utilities.

Here?

You see two, you moron?

NELSON: This is not good, man, we're in trouble.

Look, this guy's gonna go ahead and miss the decoy file.

He has Krumitz looking in the wrong place.

Nelson, these guys have short tempers.

Failure is not an option.

Okay, look, uh...

I have an idea.

Open that folder there, "Installers."

(groans)

(keyboard clacking)

Uh...

You clicked the wrong folder, you idiot.

(sighs) Yes.

No, I didn't. No, I didn't.

Wait, wait, wait, wait, is that it?

Is that it? Is that it?

HENRY: That's it.

Good.

Load it on this.

These men'll be leaving soon, honey.

This will all be over, I promise.

I said no talking.

Of course.

I apologize.

My son needs to go to the restroom.

Yeah, well...

he can hold it.

And shut up.

Get over there.

It's about time, man-- did you get it?

I got it, calm down.

JEREMY: This is taking too long, bro.

We got to get out of here.

Wait a second.

It's payday.

I'm in.

I'm gonna go ahead and deactivate

these fools' Internet. It's gonna buy me

some time to find a passkey

before they discover we slipped them a decoy.

Things are getting tense in there, Nelson,

we can't wait long. I'm trying-- I know, I know.

What the hell is taking so long?

Damn signal.

What?

Wi-Fi isn't working-- give me a sec.

Running a diagnostic.

Now what?

We got an intrusion.

Son of a...

(Jeffrey whimpers)

Shut that kid up and start talking.

We're running out of time, Nelson.

I know, I know.

Look, just-just wait, okay?

Can't wait any longer.

JEREMY: I knew it.

There's no way these two are family.

Look at that picture.

That's the kid, all right.

But who the hell are these two?

HENRY: Something ain't right here.

Talk.

Or die.

FBI!

Get down.

Down on the ground! FBI! Drop it now!

Your hands where I can see them!

Don't move!

Everybody okay?

You okay?

Yeah.

Clear!

He'll live.

MAN: Entry clear!

Encrypted.

We'll never get in.

Did Nelson get the file?

I don't know-- couldn't wait.

Nelson.

Did you get the passkey?

Repeat-- did you get the passkey?

Oh, yeah, we got it.

Those fools are going down.

Okay.

Bitcoins are back in your account.

Though you should change your passkey.

I won't need to.

Getting out of the bitcoin business.

In fact, we're selling the store.

It's time.

Thank you.

(door closes)

Pop.

I'm sorry.

ELLIS: Promise me you'll stay close to home.

STEPHEN: Always.

You ever get sleep?

You have any idea how much paperwork is required

after you discharge a government-issued firearm?

You know, I heard you handled yourself pretty well.

Came face-to-face with an armed killer,

heard you took him down, no hesitation.

Come on, man, you got some skills.

Standard FBI training.

(mocking): "Standard FBI training."

No, n-n-no.

You?

You are the real deal, bro.

Well, I did what I had to do.

You know, a man with a gun in your face,

kid in the room,

bad guy's got to go down.

Even if it was only a flesh wound.

I mean, really, it's just instinct at that point.

You know, training takes over, muscle memory kicks in.

And when that guy made a move on me,

his gun taking aim,

bayonet inches from this face...

Whose bayonet?

...I could smell the gunpowder residue.

Appomattox, Nelson.

Appomattox.

Hey. Yo.

All I knew was-- it was on.

Him or me.

And it wasn't gonna be me.

That's right, baby.

That's why you here.

(grunts)

Daniel Krumitz coming through.

Hey.

* Sweetly touching my emotions

* I wanna stop

(Nelson grunts)

* And thank you, baby

* I just wanna stop

* And thank you, baby

(imitates music)

RYAN AND NELSON: * How sweet it is

* To be loved by you...

No, you didn't.

Yes, I did.

(chuckles)

You know, uh...

it's my mother's favorite song.

Me and my pops used to sing it to her

every year on her birthday.

Call your parents, Brody Nelson.

(sighs) Can't.

It's just not the same anymore.

I embarrassed them, went to jail.

Just not the son they thought they raised.

Call them anyway.

Why do I get the feeling that giving my stuff back

is a part of one of your master plans

that Elijah's always talking about?

I don't know.

(scoffs)

RYAN: * How sweet it is to be loved by you. *

(dialing)

(line ringing)

MAN: Hello.

Hey, Dad?

Hey, it's Brody.

Yeah, no, it-it's me, Pop, it's me.

Captioning sponsored by CBS

Captioned by Media Access Group at WGBH access.wgbh.org