Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US

What it is

Oleg Korniev, 42, a Ukraine–Russia dual citizen, pleaded guilty in a US court as a leader of Your Mule Cashout (YMCO). YMCO was a laundering service for cybercriminals who had stolen money from the bank accounts of US companies. It combined money mules with internet infrastructure to move funds abroad, primarily to Eastern European countries. Cybercriminals paid YMCO a percentage of the proceeds.

How it works

The mule workflow, as described in the court documents:

1. YMCO told recruited US residents that businesses would send transfers to their personal accounts.
2. The mules were told their job was to withdraw the money and wire it to overseas accounts.
3. The mules did so, sending stolen proceeds to YMCO conspirators outside the US.
4. The mules were never paid.

Korniev helped create YMCO's policies and procedures, hired and managed employees, rewarded or punished them based on performance, and secured illegal services that supported operations.

Preconditions / Affected

The victims were US companies whose bank accounts were drained. The page does not say how the accounts were compromised. The mules were deceived rather than complicit, which is why the scheme scaled to an estimated 15,000 people.

What to do

The page gives no technical mitigations. The one defensive takeaway is the mule pattern itself, which a fraud team could use as a detection hypothesis: a personal account receives an inbound business transfer, then the funds are withdrawn and wired overseas shortly after. The page does not state timing or thresholds, so those would need to be tuned locally.

Caveats

• Figures in the plea differ from the headline estimates. Korniev admitted causing over $14.7 million in actual and intended losses and laundering at least $7 million. The $10 million, 750-account and 15,000-mule figures are YMCO-wide estimates.
• He faces 2 to 50 years. He agreed to full restitution to known victims and to forfeit cash seized at his arrest in the Republic of Georgia. No sentence has been given yet.
• Four other members were arrested abroad, extradited, and pleaded guilty. They received 37 to 63 months and were each ordered to pay over $9.1 million in restitution.