DOJ Secures Extradition of Nigerian National for Hacking, Fraud, and Identity Theft

BleepingComputer’s Bill Toulas reports that the Department of Justice (DOJ) has secured the extradition of Nigerian national Chukwuemeka Victor Amachukwu from France to face federal charges of hacking, fraud, and identity theft.

The DOJ alleges that Amachukwu engaged in spearphishing campaigns against US tax preparation businesses, stealing sensitive data and using it to file fraudulent claims.

The indictment includes six counts: conspiracy to commit computer intrusions, conspiracy to commit wire fraud, two substantive wire fraud counts, and aggravated identity theft. Sentences range from two to twenty years, with mandatory consecutive terms for identity theft.

The alleged conduct occurred between 2019 and 2021. Prosecutors claim that Amachukwu, working with co-defendant Kingsley Uchelue Utulu and others in Nigeria, sent targeted phishing emails to gain unauthorized access to US networks.

Thousands of US taxpayers were reportedly affected. In addition to cyber fraud, the indictment describes a separate investment scheme involving nonexistent standby letters of credit.

According to the DOJ, stolen data-enabled IRS refund claims of $8.4 million were made, about $2.5 million of which succeeded, along with $819,000 in fraudulent Small Business Administration loan applications.

Victims were allegedly induced to invest millions of dollars in fictitious instruments, with all proceeds diverted for personal use. The government is seeking forfeiture of all assets traceable to the schemes, including substitute property of equivalent value.

The charges illustrate how spearphishing attacks can evolve into complex schemes that combine identity theft, fraudulent government claims, and investment fraud.  They demonstrate the DOJ’s reliance on international partnerships to bring cyber-enabled fraud defendants into US courts.