Skip to main content

Morning Overview

A leader of a money mule network that laundered hackers’ cash for seven years pleaded guilty

Oleg Korniev, a 42-year-old dual citizen of Ukraine and Russia, pleaded guilty in federal court in North Carolina on Oct. 8 to five charges tied to YMCO, a money mule network that used more than 15,000 unwitting recruits to move stolen money out of American bank accounts. He faces between two and 50 years in prison.

The Justice Department calls him one of the network’s leaders, and says he was arrested in the Republic of Georgia, where the cash seized from him is now subject to forfeiture under the plea terms.

Five counts and a restitution promise

The U.S. Attorney’s Office for the Western District of North Carolina says in its plea announcement that Korniev admitted conspiracy to commit money laundering, money laundering, conspiracy to commit computer fraud, conspiracy to commit access device theft and aggravated identity theft. His role, as the office describes it, was managerial: he helped write the network’s policies, hired and disciplined employees, and arranged illegal services the group needed. He agreed to pay full restitution to known victims and to forfeit cash seized when he was arrested.

No sentencing date is set. A federal district court judge will decide the term, within a statutory range that runs from two years to 50.

Fake employers and a seven-year run

The Record dates the operation to 2007 through 2014, seven years in which YMCO recruited through websites for fake companies that advertised ordinary jobs. Applicants went through a mock hiring process with an employment test, a contract and a policy review, then uploaded their bank details to a fictitious company site. The Record notes that the network gave its overseas collectors a label of their own, “Cash-out Contractors.” BleepingComputer adds that the invitations arrived as spam emails from fake companies, and that recruits believed they were processing payments for legitimate businesses. They were told to take incoming deposits and forward them to “legitimate” accounts overseas.

The Justice Department’s own wording is that YMCO laundered at least $10 million stolen by hackers from more than 750 U.S. bank accounts. BleepingComputer adds that the accounts sat at more than 35 banks and that the stolen funds went to mules’ accounts and then through Western Union and MoneyGram to cash-out contractors in Moldova, Ukraine, Russia or Latvia, who kept a cut and returned the rest. Similar schemes allegedly ran in Germany, Italy, the United Kingdom and Australia.

Seven million laundered, $14.7 million in losses

The plea attaches numbers to him personally. He admitted that YMCO was responsible for more than $14.7 million in actual and intended losses, that he intended to launder more than $9.7 million and that he did launder at least $7 million. Those figures separate what the network attempted from what its organizers can be tied to by name. The people at the other end of the chain were mostly applicants who believed they held real jobs, and who, as a group of more than 15,000 mules, carried the legal exposure while the organizers stayed out of reach overseas for years.

Assistant Attorney General A. Tysen Duva of the Criminal Division said that “Money mules play crucial roles in cybercrime.” U.S. Attorney Russ Ferguson, whose office prosecuted the case with the Criminal Division’s Computer Crime and Intellectual Property Section, said his office would keep pursuing such defendants and pointed to this plea as proof. FBI North Carolina Special Agent in Charge Reid Davis said, in remarks carried by Charlotte Stories, that “for years, the FBI has worked tirelessly to unravel the layers of this international money laundering operation.”

The arrest was an international operation. The plea announcement credits the FBI as lead investigator, with help from the Justice Department’s Office of International Affairs, the FBI’s legal attache office in Tbilisi and Georgian law enforcement, including the Prosecutor’s Office of Georgia. Senior Counsel Matthew A. Lamberti of the Computer Crime and Intellectual Property Section and Assistant U.S. Attorney Matthew Warren are prosecuting.

The four who were sentenced first

Korniev is the latest YMCO figure to be convicted, not the first. Four other members were arrested overseas, extradited to the district and pleaded guilty to conspiracy to commit money laundering; they received sentences of roughly 37 to 63 months. WSOC-TV reported their sentencing in 2018, and the station named Victor Chostak among the four.

A December 2015 Justice Department release on Viktor Chostak, 34 and extradited from Poland, described a 25-count indictment alleging that an organization had laundered at least $10 million in stolen money out of the United States since September 2007, the same start date and dollar figure reported for YMCO. A second defendant, Serghei Ivanovich Tomuz, was indicted with Korniev, according to The Record, but his U.S. case was terminated in May. The Record says Korniev was arrested nearly nine years after that indictment, a gap longer than the operation itself lasted.

This article was produced with the assistance of AI and reviewed by Morning Overview editors prior to publication.


More from Morning Overview


Morning Overview is reader-supported. Some links in our articles are affiliate links, and we may earn a commission at no extra cost to you. As an Amazon Associate I earn from qualifying purchases. Full disclosure.