Former US Air Force airmen sentenced to combined 189 months for BEC fraud diverting millions

Two former U.S. Air Force members received a combined 189 months in prison for a business email compromise and phishing scheme that diverted over $2 million, including a $1.68 million Iowa wire and a $720,000 Ohio wire.

Chijioke Timothy Odimegwu was sentenced to 111 months (over 9 years) in prison with $366,617.59 in restitution, and Harafat Mogaji was sentenced to 78 months (6.5 years) with $995,680.45 in restitution, for running a business email compromise scheme while stationed at Dover Air Force Base. The pair phished employees to steal credentials, spoofed business partner emails, and hijacked payment email chains to divert funds, including a $1.68 million wire from an Iowa victim and a $720,000 wire from an Ohio victim. BleepingComputer reports the scheme diverted over $2.4 million, while The Record reports more than $2 million stolen from at least 15 organizations. The men also stole and traded victims' financial account and card data, pleaded guilty to wire fraud, identity theft, and access device fraud, and were caught by the FBI and local police after more than two years. Both must serve three years of supervised release. The FBI logged 24,768 BEC complaints and over $3 billion in losses in 2025.

• Chijioke Timothy Odimegwu: 111 months (over 9 years) in prison, $366,617.59 restitution
• Harafat Mogaji: 78 months (6.5 years) in prison, $995,680.45 restitution
• Combined sentence of 189 months; combined restitution roughly $1.36 million
• Scheme operated while both were stationed at Dover Air Force Base
• Phishing stolen employee credentials used to spoof business partner emails and hijack payment email chains
• Diverted a $1.68 million wire from an Iowa victim and a $720,000 wire from an Ohio victim to conspiracy-controlled accounts
• Sources disagree on total stolen: BleepingComputer reports over $2.4 million diverted; The Record reports more than $2 million from at least 15 organizations
• Both pleaded guilty to wire fraud, identity theft, and access device fraud