A Nigerian national has been sentenced to eight years in federal prison for orchestrating a sustained spearphishing campaign against US tax preparation firms. The attack, active since 2019, resulted in the theft of $3.3 million in taxpayer funds. The conviction marks a significant win for federal prosecutors targeting digital financial crimes.
Chukwuemeka Victor Amachukwu, 40, pleaded guilty to conspiracy to commit computer intrusions and wire fraud. He operated under multiple aliases, including Chukwuemeka Victor Eletuo and So Kwan Leung. The scheme exploited email vulnerabilities to trick tax professionals into transferring client funds to attacker-controlled accounts.
The operation relied on highly targeted email attacks. Attackers impersonated trusted business contacts to gain access to tax software. Once inside, they redirected payments intended for the IRS or state agencies. This allowed the fraudster to siphon millions while maintaining operational secrecy.
Tax preparation businesses handle sensitive client data and large payment volumes. This made them prime targets for sophisticated phishing. The attacker leveraged the trust inherent in professional relationships. Many firms lacked advanced email filtering or multi-factor authentication at the time.
The eight-year sentence reflects the scale of the financial damage. Victims include individual taxpayers who lost their refunds or owed money. Federal authorities emphasized that the conviction sends a clear message to cybercriminals. The case highlights the ongoing need for robust cybersecurity in the tax industry.
How much money was stolen? The total amount stolen from taxpayers was $3.3 million. The funds were diverted through fraudulent wire transfers initiated by the hacker.
What charges did the hacker face? He was convicted of conspiracy to commit computer intrusions and wire fraud. The guilty plea avoided a lengthy trial. The sentence of eight years aligns with federal sentencing guidelines for major financial crimes.
Did the hacker use multiple identities? Yes. He operated under at least three names: Chukwuemeka Victor Amachukwu, Chukwuemeka Victor Eletuo, and So Kwan Leung. This alias strategy helped him evade detection for several years.