DOJ Extradites Russian Web Developer in $15 Million Bank Account Takeover Scheme

On September 4, the U.S. Justice Department announced that Sergei Anatolyevich Filimonov, a 36-year-old Russian web developer, had been extradited from Georgia and arraigned in the Northern District of Georgia. Filimonov was indicted by a federal grand jury in November 2025 for his alleged involvement in a large-scale bank account takeover scheme.

The scheme involved creating counterfeit domains that resembled the websites of insured financial institutions, purchasing sponsored search-engine links to direct unwitting bank customers to these fraudulent sites, stealing victims' credentials when they entered them on the fake login pages, and using these credentials to access bank accounts and make unauthorized wire transfers.

Filimonov and his co-conspirators allegedly attempted to steal millions of dollars from victim accounts. If convicted, Filimonov faces a penalty of up to 175 years in prison. In December 2025, the Justice Department seized a domain used as a back-end server storing thousands of stolen credentials harvested from fraudulent banking sites.

The fraud ring had compromised at least 19 bank accounts, including those of two companies, stealing approximately $14.6 million. The FBI's Internet Crime Complaint Center reported over 5,100 account takeover fraud reports since January 2025, with losses exceeding $262 million. Account takeover fraud involves cybercriminals impersonating financial institution support staff or websites to deceive victims into providing information that allows them to access and take control of online financial accounts.