Nigerian Man Jailed for Eight Years in $10.8m Hacking, Identity Theft and Fraud Case in US

• Chukwuemeka Victor Amachukwu targeted US tax preparation firms, stole customers’ identities and defrauded victims through bogus investment offers, prosecutors say

A Nigerian man, Chukwuemeka Victor Amachukwu, has been sentenced to eight years in prison in the United States for his involvement in multiple hacking, identity theft and fraud schemes that targeted American businesses and individuals, resulting in millions of dollars in fraudulent proceeds.

Amachukwu, 40, also known by the aliases Chukwuemeka Victor Eletuo and So Kwan Leung, was sentenced by US District Judge Paul G. Gardephe after pleading guilty to conspiracy to commit computer intrusions and conspiracy to commit wire fraud.

The sentence was announced on Monday by the US Attorney’s Office for the Southern District of New York.

In addition to the prison term, Amachukwu was sentenced to one year of supervised release and ordered to pay restitution of $3,647,629.39 and forfeit $10,846,634.39.

According to court filings and statements made during the proceedings, Amachukwu participated in schemes involving the hacking of US tax preparation businesses, the theft and misuse of personal information, fraudulent government benefit applications and fictitious investment opportunities.

US Attorney Jamie McDonald said Amachukwu had targeted victims while operating from abroad but had ultimately been held accountable for the offences.

The prosecutor said the schemes caused significant harm to individuals, businesses and the public, warranting a substantial prison sentence.

Tax firms hacked, hundreds of customers exposed

Court documents show that, beginning in or around 2019, Amachukwu worked with co-conspirator Kingsley Uchelue Utulu and other Nigeria-based individuals in a scheme targeting US tax preparation businesses.

The group allegedly used spear-phishing emails to gain unauthorised access to the companies’ electronic systems.

Once inside, the conspirators stole tax records and other identifying information belonging to approximately 800 customers of the affected businesses. The targeted firms were located in New York, Texas and other parts of the United States.

The stolen information was subsequently used to file fraudulent tax returns with the Internal Revenue Service (IRS) and state tax authorities.

Prosecutors said the conspirators sought fraudulent tax refunds totalling approximately $8.4 million, of which they successfully obtained at least $2.5 million.

The case highlights the financial and privacy risks posed by targeted cyberattacks against businesses that hold sensitive customer information.

Tax preparation firms can possess extensive personal and financial records, making unauthorised access particularly damaging when stolen information is used to impersonate customers or submit fraudulent claims.

Fraudulent pandemic-era business loan claims

The conspirators also exploited stolen identities to submit fraudulent applications under the US Small Business Administration’s Economic Injury Disaster Loan programme.

The programme was designed to provide financial assistance to eligible businesses affected by economic disruption. According to prosecutors, the group obtained approximately $819,000 in additional fraudulent payouts through the scheme.

The fraudulent applications added another layer to the alleged operation, which combined cyber intrusion with identity theft and the exploitation of government payment systems.

The case demonstrates how stolen personal information can be repurposed across multiple fraud schemes, increasing the financial damage to victims and public institutions.

Bogus investment scheme generated more than $7m

Beyond the hacking and tax-related fraud, Amachukwu participated in a separate investment scheme involving purportedly valuable standby letters of credit.

Prosecutors said he presented the investments to US victims while impersonating a wealthy overseas financier to create the impression of credibility and financial standing.

The investment opportunities did not exist, according to the prosecution. Amachukwu and his co-conspirators nevertheless obtained more than $7 million in fraudulent proceeds from victims who were persuaded to invest.

Standby letters of credit are legitimate financial instruments used in commercial transactions, but the case illustrates how the terminology and perceived complexity of financial products can be exploited to lend credibility to fictitious investment offers.

The prosecution treated the investment fraud as part of a broader pattern of offences involving deception, unauthorised access to information and the misuse of victims’ identities.

FBI investigation leads to prosecution

The Federal Bureau of Investigation (FBI) investigated the case, while the Complex Frauds and Cybercrime Unit of the US Attorney’s Office for the Southern District of New York handled the prosecution.

Assistant US Attorney Daniel G. Nessim led the prosecution.

The court’s orders require Amachukwu to serve eight years in prison, followed by one year of supervised release, while also addressing financial accountability through restitution and forfeiture.

The restitution order is intended to compensate victims for eligible losses, while forfeiture targets proceeds or assets subject to recovery under the court’s order. The amounts ordered for restitution and forfeiture are separate legal obligations and should not automatically be interpreted as equivalent to the total losses suffered by victims.

The case underscores the ability of US law enforcement agencies to pursue cybercrime and financial fraud schemes even when alleged participants operate across national borders.

It also reinforces the need for businesses handling sensitive information to strengthen email security, access controls and incident-response systems, while encouraging consumers to independently verify investment offers before transferring funds.