Oleh Kornyeyev, 42, a dual Ukrainian and Russian national, pleaded guilty to running a money-laundering network linked to the “Your Mule Cashout” organization, or YMCO, a criminal organization operating since September 2007 that recruited more than 15,000 “money mules” in the United States.
Court documents indicate that Kornyeyev was one of the operation’s leaders. He managed, hired, and dismissed employees, established operating policies and procedures, and linked bonuses and penalties to performance. He admitted to laundering at least $7 million of the $9.7 million the organization received from cybercriminals.
How did the network operate?
YMCO recruited U.S. residents through spam emails and advertisements for fictitious companies. Applicants went through recruitment procedures that appeared legitimate before being led to believe that their task was to process payments for legitimate businesses.
Stolen cybercrime proceeds were then transferred to these individuals’ accounts, and they were instructed to send the money through Western Union and MoneyGram to contractors who withdrew the funds in Moldova, Ukraine, Russia, or Latvia. The documents state that similar models were operated in Germany, Italy, the United Kingdom, and Australia.
According to the case, the network processed more than $10 million stolen from more than 750 bank accounts at over 35 U.S. banks. Four other people linked to YMCO were also previously arrested outside the United States and then extradited to the Western District of North Carolina; they were sentenced to between 37 and 63 months in prison, with each required to pay more than $9.1 million in restitution to U.S. victims.
What matters in the case?
The case illustrates that the financial infrastructure of cybercrime relies not only on attackers or malware, but also on a network for transferring and withdrawing funds that conceals the source of the proceeds. The use of seemingly legitimate job advertisements makes job seekers, students, immigrants, and people facing financial hardship easy targets for recruitment or exploitation.
However, claiming ignorance does not eliminate legal responsibility, according to warnings cited by Europol regarding money laundering through “money mules.” The case remains a practical reminder of the need to verify job offers that ask people to use personal accounts or retransmit funds, especially when the task is unclear or involves sending money to other countries.
Expected sentence
Kornyeyev pleaded guilty to money laundering, aggravated identity theft, conspiracy to launder money, conspiracy to commit computer fraud, and conspiracy to steal data or access devices. He faces a sentence of no less than two years and up to 50 years in prison after admitting that the operation was linked to actual and intended losses exceeding $14.7 million for confirmed victims.
The case is part of broader international efforts; five years ago, Europol announced the arrest of 1,803 “money mules” out of 18,351 people identified during an operation involving authorities from 27 countries.