Nigerian Hacker Gets Eight Years for Tax Fraud
A Phishing Scheme Worth Over $10 Million
Ordinary phishing emails grew into a multimillion-dollar scheme built on tax refunds and government loans. A US federal court has sentenced Chukwuemeka Victor Amachukwu, 40, to eight years in prison. He took part in hacks of tax companies, identity theft, and financial fraud. Together, his schemes earned the group more than $10 million.
The US Attorney’s Office for the Southern District of New York announced the sentence on October 19.
How the Hacking Ring Worked
Amachukwu pleaded guilty to conspiracy to commit computer intrusion and to wire fraud. With his accomplice Kingsley Uchelue Utulu and other members, he attacked US tax firms from at least 2019.
Spear Phishing as the Main Tool
The gang relied on targeted phishing. They sent crafted emails to tax firm employees and gained access to internal systems. Then they stole client records.
Victims included firms in New York, Texas, and other states. In total, the hackers obtained tax documents and personal data of at least 800 clients.
Fake Returns and Disaster Loans
The stolen data let the group file claims in real taxpayers’ names. They sent forged returns to the IRS and to state tax agencies. The requested refunds reached $8.4 million, yet the group collected about $2.5 million.
The fraud did not stop there. The criminals used stolen identities to apply for Economic Injury Disaster Loans. That program helps small businesses in emergencies. Through the US Small Business Administration, the group illegally obtained about $819,000 more. Combined, the tax and loan schemes brought in over $3.3 million.
The Bigger Money Came From Investment Fraud
A separate scheme paid far more. Amachukwu posed as a wealthy foreign financier and urged Americans to invest in so-called standby letters of credit. Those instruments did not exist.
With invented opportunities and false promises, the group took more than $7 million from victims.
Extradition and Sentence
Amachukwu tried to operate from outside the United States. That did not shield him. France extradited him to US authorities in August 2025, and Judge Paul Gardephe heard the case. During the proceedings, he admitted taking part in the hacking and fraud conspiracies.
Financial Penalties
Besides eight years in prison, the court ordered one year of supervised release. Amachukwu must also pay victims $3,647,629.39 in restitution. In addition, he must forfeit $10,846,634.39 to the government. His financial obligations therefore exceed $14.4 million.
The FBI led the investigation. The prosecutors’ complex frauds and cybercrime unit handled the case.
Support Our Threat Intelligence
If you find our technology report and cybersecurity news helpful, consider supporting our work.
Buy Me a Coffee
PayPal
