Nigerian Man Jailed for Eight Years in US Over $17m Hacking, Identity Theft and Fraud Schemes

A 40-year-old Nigerian, Chukwuemeka Amachukwu, has been sentenced to eight years in prison in the United States for his involvement in computer hacking, identity theft and fraud schemes involving millions of dollars.

Amachukwu, also known as Chukwuemeka Victor Eletuo and So Kwan Leung, was sentenced by US District Judge Paul G. Gardephe, according to a statement released by the US Attorney’s Office for the Southern District of New York on Monday.

He had pleaded guilty to conspiracy to commit computer intrusions and conspiracy to commit wire fraud.

According to the statement, Amachukwu and his co-conspirators, including Kingsley Uchelue Utulu, began targeting US tax preparation businesses in 2019 through spear-phishing emails designed to gain unauthorised access to their computer systems.

The group allegedly stole tax records and other personal information belonging to approximately 800 customers of several businesses in New York, Texas and other states.

Prosecutors said the stolen identities were subsequently used to file fraudulent tax returns with the Internal Revenue Service and state tax authorities. The conspirators sought refunds totalling at least $8.4 million and successfully obtained at least $2.5 million.

The group also exploited stolen identities to submit fraudulent applications to the Small Business Administration’s Economic Injury Disaster Loan programme, obtaining at least $819,000 in illicit payments, according to the statement.

In a separate fraud scheme, Amachukwu allegedly offered victims in the United States investment opportunities involving purportedly valuable standby letters of credit. He reportedly impersonated a wealthy foreign financier to persuade victims to invest in what prosecutors said were non-existent investment opportunities.

The scheme generated more than $7 million for Amachukwu and his co-conspirators, the US Attorney’s Office said.

United States Attorney Jamie McDonald said Amachukwu participated in sophisticated schemes involving cyberattacks against American businesses, the theft and misuse of personal information, and financial fraud.

McDonald added that the crimes caused significant harm to victims and the public, making a substantial prison sentence appropriate.

In addition to the eight-year prison term, Amachukwu was sentenced to one year of supervised release and ordered to pay $3,647,629.39 in restitution to compensate victims.

The case highlights the financial and legal consequences of cybercrime and identity theft, as US authorities continue to pursue individuals involved in schemes targeting businesses, taxpayers and investors.