Russian web developer Sergei Filimonov extradited to US over multimillion-dollar bank account takeover scheme

Sergei Anatolyevich Filimonov, 36, was extradited from Georgia to the US and pleaded not guilty in Atlanta federal court on September 4 to fraud charges in a bank account takeover scheme the FBI links to at least 19 victims, about $14.6 million in confirmed…

Sergei Anatolyevich Filimonov, a 36-year-old Russian web developer, has been extradited from Georgia to the United States to face an indictment in a multimillion-dollar bank account takeover scheme. He appeared in an Atlanta federal court on September 4 and pleaded not guilty to bank fraud, wire fraud, access device fraud, and aggravated identity theft charges. Prosecutors allege that from November 2023 to October 2025 his group bought sponsored search-engine links that diverted online banking customers to spoofed login pages, harvested their credentials, and initiated unauthorized wire transfers. The FBI linked the scheme to the December 2025 seizure of the domain web3adspanels.org, which held credentials for thousands of victims, and identified at least 19 victims with about $14.6 million in confirmed losses and about $28 million in attempted losses. Filimonov was indicted on November 4, 2025 and faces a minimum of two and a maximum of 175 years in prison. Georgian and Estonian law enforcement assisted the extradition. Federal authorities announced the extradition on Tuesday, according to DataBreaches.net (published September 9, 2026). The two reports are consistent; DataBreaches.net adds no conflicting figures and provides no additional case details beyond The Record's account.

• Suspect: Sergei Anatolyevich Filimonov, 36, a Russian web developer, extradited from Georgia to the United States.
• He appeared in Atlanta federal court on September 4 and pleaded not guilty to bank fraud, wire fraud, access device fraud, and aggravated identity theft charges.
• He was indicted on November 4, 2025; he faces a minimum of two and a maximum of 175 years in prison.
• Alleged scheme ran from November 2023 to October 2025: sponsored search-engine ads diverted online banking customers to spoofed login pages, where credentials were stolen and unauthorized wire transfers initiated.
• The FBI linked the scheme to the December 2025 seizure of the domain web3adspanels.org, which held credentials for thousands of victims.
• The FBI cited at least 19 victims, about $14.6 million in confirmed losses, and about $28 million in attempted losses.
• Georgian and Estonian law enforcement assisted the extradition.
• Federal authorities announced the extradition on Tuesday, according to DataBreaches.net (published September 9, 2026).