By using OnionWiki.com, you agree to our privacy policy and terms of use.
Accept
Donate
OnionWiki Logo Main OnionWiki Logo Main
The Hidden Wiki You Need
Search
  • Content Sections
    • Guides
    • Dark Web News
  • About
    • The Only Hidden Wiki You Need for Dark Web Sites and Onion Links
    • Privacy Policy
    • Terms of Service
    • Contact Us
OnionWikiOnionWiki
  • Content Sections
  • About
Search
  • Content Sections
    • Guides
    • Dark Web News
  • About
    • The Only Hidden Wiki You Need for Dark Web Sites and Onion Links
    • Privacy Policy
    • Terms of Service
    • Contact Us
Copyright © 2026 ⋅ All Rights Reserved ⋅ OnionWiki
OnionWiki » U.S. Charges Three in Alleged $3 Million Business Email Compromise Scheme
News

U.S. Charges Three in Alleged $3 Million Business Email Compromise Scheme

By The OnionWiki Team
Last updated: July 18, 2026
6 Min Read
Share
  • A federal grand jury indicted Bill Ying Li, Bing Xun Gong, and Sabir Magdeev for laundering over $3 million using a New Hampshire shell company.
  • The defendants allegedly used business email compromise schemes to hijack corporate invoices, diverting legitimate payments into their own bank accounts and crypto wallets.
  • Two suspects have already appeared in local U.S. courts, while the third awaits extradition from Cyprus under the FBI’s ongoing cybercrime campaign.
Fake Signal Messages Used to Target German Political Figures

A federal grand jury recently unsealed a major criminal indictment charging three men with running a massive financial scheme. Federal prosecutors accuse the individuals of moving millions of dollars in stolen cash through a fake local business registry. The criminal group targeted numerous unsuspecting companies across the United States using highly deceptive internet operations.

Federal law enforcement agents identified the suspects as Bill Ying Li, Bing Xun Gong, and Sabir Magdeev. Consequently, police officers arrested the men in different locations to disrupt the growing cyber fraud syndicate. Li recently faced a federal judge in California to answer for his alleged role in the illegal network.

Meanwhile, Gong made his initial court appearance inside an Illinois federal courthouse to face similar criminal charges. The third suspect, Magdeev, currently remains in foreign custody while waiting for official extradition from Cyprus. Therefore, government attorneys are moving quickly to bring all three defendants to New Hampshire for trial.

How Deceptive Internet Scams Diverted Millions of Dollars from Corporate Accounts

The criminal group relied heavily on a deceptive practice known as business email compromise to hijack company payments. First, the hackers gained unauthorized access into corporate email accounts by using stolen login passwords or phishing traps – next, the intruders watched the daily electronic mail conversations to identify upcoming invoice payments between business partners.

They then used the hacked accounts to send fake messages requesting urgent changes to bank payment details. Consequently, the victim companies unknowingly sent massive financial transfers directly to bank accounts controlled by the criminal ring. The scam artists immediately routed the stolen cash through shell entities, which are fake companies that exist only on paper.

To hide the trail further, the suspects converted a lot of the stolen cash into digital cryptocurrency wallets. They also registered a local business named Market Shark LLC with the New Hampshire Secretary of State.

The defendants used this specific entity to receive and transfer the laundered funds starting in late 2022. Overall, investigators state that the conspirators attempted to launder more than $3 million in fraud proceeds.

The Rising Cost of Internet Cybercrime and the Official Government Response

If the court substantiates the allegations, the defendants may receive harsh prison terms under federal legislation. The crime of conspiracy to commit money laundering has a maximum potential punishment of 20 years in a federal penitentiary. As a result, a judge in a federal district court will determine the final sentence according to established law.

For now, the public should keep in mind that the specific charges remain unproven within the court system. A defendant has the right to be presumed innocent unless found guilty of the crime by prosecutors.

The United States Department of Justice continuously increases its legal resources to prosecute complex international computer crimes. Their recent financial records show that internet fraud losses have skyrocketed to historic highs across the country.

For instance, American citizens reported losing over $20 billion to cybercrime during the previous calendar year. The enforcement push includes extraditions; a German national was recently brought to the U.S. over a dark web marketplace case. This massive sum represents an alarming 26 percent single-year increase in total recorded financial damages.

Therefore, federal agencies created Operation Riptide as a sustained enforcement response to protect the American public. This ongoing campaign targets the actual criminal actors, tech infrastructure, and hidden financial networks behind global fraud.

Easy Ways for Businesses to Block Email Manipulation and Secure Corporate Money

Corporate managers must establish strict rules to safeguard their financial accounts from these ongoing internet hazards. You can protect your business by always verifying any sudden request to alter payment instructions. Never accept an email notification about a new bank account number without performing a secondary check.

Instead, pick up the telephone and call your business partner using a known, trusted phone number. This simple step ensures that you are speaking with a real partner rather than an active digital thief. In addition, company owners should train their employees to recognize common signs of email phishing tricks.

Also, workers should double-check the exact spelling of sender addresses before replying to financial messages. Criminals always try to alter a single letter in a web address to make their emails look completely authentic.

Furthermore, deploying multi-factor authentication across all staff profiles blocks the vast majority of unauthorized account logins. This security tool requires a temporary digital code from a mobile device before granting server access.

Conducting regular audits on all outgoing wire transfers helps accounting teams catch unauthorized changes early. By maintaining a highly watchful attitude, your workplace can successfully avoid falling victim to international money laundering syndicates.

Share This Article
Facebook Email Copy Link
ByThe OnionWiki Team
Follow:
The OnionWiki Team is a collective of cybersecurity and privacy advocates behind the OnionWiki.com. We operate this resource to provide accurate, safety-focused information about the dark web, maintaining a strictly independent and ad-free platform for the community.
Leave a Comment Leave a Comment

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

LATEST ARTICLES

U.S. Charges Three in Alleged $3 Million Business Email Compromise Scheme
July 18, 2026
Romania Investigates Cyberattack After Land Registry Portal Goes Offline
July 18, 2026
Hacker Lists Sale of 95 Million Uber Eats User Records on Dark Web Forum
July 18, 2026
UK Drops Plan to Restrict VPN Use After Privacy and Security Concerns
July 16, 2026
New STORM Malware Stealer Targets Windows Users With Password and Crypto Theft Capabilities
July 16, 2026

YOU MAY ALSO LIKE

New RedHook Malware Uses Android Wireless Debugging to Hijack Devices

The RedHook threat has evolved again. The new variant can exploit a native Android feature to get full control over…

News
July 13, 2026

Threat Actor Claims to Sell Alleged PagBank Merchant and Payment Data

A threat actor has claimed responsibility for an alleged cyberattack against PagBank, one of Brazil's largest digital payment providers. The…

News
July 13, 2026

Threat Actor Claims to Sell Alleged Government and Military Databases Across Multiple Countries

A threat actor is claiming to have databases belonging to several government, military, academic, and educational organizations across multiple countries.…

News
July 11, 2026

Threat Actor Claims to Sell Alleged French Health Insurance Database With 66 Million Records

An alleged database containing information tied to insured individuals across France appeared for sale in an underground cybercrime forum listing.…

News
July 11, 2026
OnionWiki Logo Main

For information and research purposes only. Read disclaimer.

  • What is Dark Web
  • Dark Web Dangers and Risks
  • Dark Web Marketplaces
  • Best Dark Web Sites
  • Browse Dark Web Safely
  • Best VPN for Dark Web
  • Best Private Browser
  • What is Tor Browser
  • Privacy Policy
  • Terms of Service
  • Donate
  • Contact Us

Explore. Learn. Stay Safe.

Be Cautious.

OnionWiki is a trusted dark web link directory, often referred to as the Hidden Wiki. It provides .onion addresses for search engines, news outlets, marketplaces, and other sites on the deep and dark web. Because we prioritize security and privacy above all, we advise users to exercise caution at all times, regardless of the site or part of the internet they are visiting.

Copyright © 2026 ⋅ All Rights Reserved ⋅ OnionWiki
Welcome Back!

Sign in to your account

Username or Email Address
Password

Lost your password?