Russian suspect in bank account takeovers is extradited to US
Russian web developer Sergei Filimonov was extradited from Georgia to the US to face charges in a multimillion-dollar bank account takeover fraud.
Sergei Anatolyevich Filimonov, 36, appeared in an Atlanta federal court on September 4 and pleaded not guilty to bank fraud, wire fraud, access device fraud, and aggravated identity theft charges. Prosecutors say that from November 2023 to October 2025 his group bought sponsored search-engine links that diverted online banking customers to spoofed login pages, stole their credentials, and initiated unauthorized wire transfers. The FBI linked the scheme to the December 2025 seizure of the domain web3adspanels.org, identifying at least 19 victims, roughly $14.6 million in confirmed losses, and about $28 million in attempted losses.
- Filimonov used spoofed domains and sponsored search ads to harvest bank customers' login credentials.
- FBI cited 19 victims: about $14.6 million confirmed losses and $28 million attempted.
- Seized domain web3adspanels.org held credentials for thousands of victims.
- Indicted November 4, 2025; faces a minimum of two and maximum of 175 years in prison.
- Georgian and Estonian law enforcement assisted the extradition.
Full article369 words · extracted from therecord.media · click to collapse
A Russian web developer who played a role in a multimillion-dollar bank account takeover scheme has been extradited to the U.S. to face an indictment in the case, federal authorities said Tuesday. Sergei Anatolyevich Filimonov, 36, appeared in an Atlanta federal court on September 4, pleading not guilty to charges of fraud and identity theft, prosecutors said. Filimonov had been extradited from the Republic of Georgia and remains in custody, the announcement said. “Filimonov allegedly used spoofed domains and fraudulent login pages to target unsuspecting online banking customers, stealing millions from victims,” said Marlo Graham, FBI Atlanta’s special agent in charge. The case is linked to the December 2025 federal seizure of the web domain web3adspanels.org, authorities said. As of that announcement, the FBI had identified at least 19 victims with attempted losses totaling about $28 million and confirmed losses of roughly $14.6 million. Investigators said the seized domain held login credentials for thousands of victims. From November 2023 through October 2025, Filimonov and others stole bank customers’ login credentials by purchasing sponsored search-engine links to divert them to the fraudulent login pages, prosecutors said. A redacted version of the indictment appears to identify at least one other specific defendant. “The conspirators used the stolen credentials to access bank accounts, review account balances, and initiate unauthorized wire transfers to steal bank account funds,” Tuesday’s announcement said. A federal grand jury indicted Filimonov on November 4, 2025, charging him with conspiracy to commit bank and wire fraud; access device fraud conspiracy; bank, wire, and access device fraud; and aggravated identity theft. He faces a minimum of two years and a maximum of 175 years in prison. Georgian and Estonian law enforcement helped in the investigation and apprehension of Filimonov, U.S. authorities said.
No previous article
No new articles
Joe Warminsky
has been the news editor for Recorded Future News since 2022. He has three decades of experience as an editor and writer in the Washington, D.C., area. He previously he helped lead CyberScoop for more than five years. Prior to that, he was a digital editor at WAMU 88.5, the NPR affiliate in Washington, and he spent more than a decade editing coverage of Congress for CQ Roll Call.
Text extracted automatically; images, tables and formatting may be missing. Original: https://therecord.media/russian-cybercrime-bank-extradition