Oleg Korniev pleaded guilty to leading YMCO, a network that used unwitting recruits to move money stolen by cybercriminals.
What You Need to Know
- 15,000 people duped: The YMCO network used fake job offers to recruit more than 15,000 people in the United States as money “mules,” moving funds stolen by hackers without realizing they were involved in a criminal scheme.
- Million-dollar ring busted: The scheme hit more than 750 bank accounts and caused $14.7 million in losses; its Russian-Ukrainian leader, Oleg Korniev, admitted to personally laundering $7 million.
- International arrest and severe sentence: Arrested in the Republic of Georgia and extradited to the U.S., the organization’s head pleaded guilty to five federal charges and faces 2 to 50 years in prison.
The U.S. Department of Justice said on Oct. 8 that Oleg Korniev, 42, a dual Ukrainian and Russian citizen, pleaded guilty to leading an international money laundering organization that served cybercriminals.
Picture getting what looks like a legitimate job offer: receive payments from businesses, withdraw the cash and forward it to partners overseas. Without knowing it, you would be moving money stolen by hackers. According to the DOJ, that is how the organization recruited more than 15,000 people in the United States.
The Man Behind the Machine
Court documents show Korniev was a leader of Your Mule Cashout (YMCO). He helped develop the organization’s policies and procedures, hired and fired staff, rewarded or punished members based on performance, and secured illicit support services.
The Operation by the Numbers
- More than 15,000 people recruited in the U.S.
- More than 750 U.S. bank accounts affected.
- At least $10 million laundered by the organization, according to the DOJ.
- $14.7 million in actual and intended losses to confirmed victims attributed to YMCO and acknowledged in the plea agreement.
- More than $9.7 million that Korniev intended to launder.
- At least $7 million actually laundered by Korniev, according to his admission.
These figures refer to different amounts: at least $10 million was laundered by the organization as a whole; $14.7 million in actual and intended losses was attributed to YMCO; Korniev admitted intending to launder more than $9.7 million and actually laundering at least $7 million.
How the Scheme Worked
- Hackers stole money from the bank accounts of U.S. companies.
- YMCO recruited U.S. residents with fake job offers, convincing them they would be working for legitimate companies.
- Recruits received payments from businesses in their personal accounts, withdrew the cash and wired it to partners abroad, primarily in Eastern Europe.
- The hackers paid YMCO a percentage of the stolen money.
The recruits served as “money mules,” people who move illicit funds on behalf of others. According to the DOJ, they believed they were carrying out legitimate business transactions and were never paid for their work.
From the Country of Georgia to a U.S. Courtroom
Korniev was arrested in the country of Georgia, in the Caucasus region, not the U.S. state. Georgian authorities worked with U.S. agencies on the case, including the DOJ’s Office of International Affairs and the FBI’s legal attaché in Tbilisi.
Four other YMCO members were previously arrested abroad, extradited to the Western District of North Carolina and pleaded guilty to conspiracy to commit money laundering. They received sentences of roughly 37 to 63 months in prison, and the court ordered each to pay more than $9.1 million in restitution to victims.
The Five Counts Korniev Admitted To
Korniev pleaded guilty to five charges:
- Conspiracy to commit money laundering
- Money laundering
- Conspiracy to commit computer fraud
- Conspiracy to commit access device theft
- Aggravated identity theft
He faces two to 50 years in prison, with the sentence to be set by a federal judge. He also agreed to make full restitution to known victims for the losses acknowledged in the plea agreement and to forfeit the cash seized when he was arrested in Georgia.
A Warning From Prosecutors
“Just because you are outside the borders of the United States does not mean you will get away with defrauding U.S. citizens and businesses,” said Russ Ferguson, U.S. Attorney for the Western District of North Carolina.
Job offers that require you to receive and transfer money through your personal bank account are a red flag.
What the Case Reveals
YMCO used the guise of a legitimate job to hide an international criminal operation. People who thought they were handling routine financial tasks were used to move money stolen by hackers.
Korniev’s guilty plea shows how authorities can pursue transnational cybercrime networks across borders. Sentencing is still pending. The case also highlights how criminal networks exploit unwitting recruits to launder stolen money.