WOMAN INDICTED FOR ROLE IN FEDERAL TAX FRAUD AND IDENTITY THEFT SCHEME

FROM:  U.S. JUSTICE DEPARTMENT

Tuesday, February 16, 2016

Illinois Woman Charged in Stolen Identity Tax Fraud Scheme

A Poplar Grove, Illinois resident was indicted by a federal grand jury today on six counts of mail fraud, six counts of aggravated identity theft and one count of access device fraud, announced Acting Assistant Attorney General Caroline D. Ciraolo of the Justice Department’s Tax Division and U.S. Attorney Zachary T. Fardon of the Northern District of Illinois.

According to the indictment, Shameka Carr filed fraudulent tax returns with the Internal Revenue Service (IRS) in the names of individuals whose identities she had stolen.  Carr is alleged to have directed the IRS to issue the tax refunds requested on these fraudulent returns in the form of prepaid debit cards and U.S. Treasury checks, both of which were mailed to addresses she had access to in Rockford, Illinois, and surrounding areas.  It is further alleged that Carr used the debit cards and U.S. Treasury checks for her personal benefit.

If convicted, Carr faces a statutory maximum sentence of 20 years in prison for each mail fraud count, 15 years in prison for the charge of access device fraud and a mandatory sentence of two years in prison for each count of aggravated identity theft, which would be in addition to any other term of imprisonment she receives.  Carr also faces potential fines and restitution.

An indictment merely alleges that crimes have been committed.  Defendants are presumed innocent until proven guilty beyond a reasonable doubt.

Acting Assistant Attorney General Ciraolo commended the U.S. Postal Inspection Service, IRS Criminal Investigation and the Boone County Sheriff’s Department, who investigated the case and Trial Attorneys Michael C. Boteler and John T. Mulcahy of the Tax Division, who are prosecuting the case.

VIETNAMESE NATIONAL CHARGED IN INTERNATIONAL PERSONALLY IDENTIFIABLE INFORMATION THEFT SCHEME

FROM:  U.S. JUSTICE DEPARTMENT
Friday, October 18, 2013

Vietnamese National Charged in Widespread International Scheme to Steal and Sell Hundreds of Thousands of U.s. Persons’ Personally Identifiable Information
A Vietnamese national has been indicted in the District of New Hampshire for allegedly participating in an international scheme to steal and sell hundreds of thousands of Americans’ personally identifiable information (PII) through various underground websites that he operated.

Acting Assistant Attorney General Mythili Raman of the Justice Department’s Criminal Division, U.S. Attorney John P. Kacavas of the District of New Hampshire, and Resident Agent in Charge Holly Fraumeni of the U.S. Secret Service’s Manchester Field Office made the announcement after the indictment was unsealed.

Hieu Minh Ngo, 24, a Vietnamese national, was charged in a 15-count indictment filed under seal in November 2012, charging him with conspiracy to commit wire fraud, substantive wire fraud, conspiracy to commit identity fraud, substantive identity fraud, aggravated identity theft, conspiracy to commit access device fraud, and substantive access device fraud.  Ngo was arrested upon his entry into the United States in February 2013.  The statutory maximum penalties are five years on the identity fraud and identity fraud conspiracy counts, two years each on the aggravated identity theft counts, 20 years on the wire fraud count and wire fraud conspiracy counts, 10 years on the substantive access device fraud count and five years on the conspiracy to commit access device fraud count.

According to the indictment, from 2007 through 2012, Ngo and other members of the conspiracy acquired, offered for sale, sold, and/or transferred to others packages of PII for more than 500,000 individuals.  These packages, known as “fullz,” typically included a person’s name, date of birth, social security number, bank account number and bank routing number.  During this same time, Ngo and other members of the conspiracy acquired, offered for sale, sold, and/or transferred to others stolen payment card data, which typically included the victim account holder’s payment card number, expiration date, card verification value number, account holder name, account holder address and phone number.

The indictment alleges that Ngo operated one or more online marketplaces for various carding activities, known as carder forums, where he stored and offered for sale “fullz” and other PII, including “fullz” of individuals located in the District of New Hampshire.  On two carder forums, Ngo and his co-conspirators offered buyers the option to obtain a specified quantity of “fullz” or to submit a query of a particular name to obtain that person’s associated PII.  Ngo and his co-conspirators allegedly offered several categories of PII, depending on how recently the data had been acquired, and charged higher prices for more recent data.  Ngo allegedly made arrangements with others who, after paying a fee, could access and then and re-sell the stolen payment card data, “fullz” and other PII.  Ngo and his co-conspirators created one or more accounts with a digital currency service and used those accounts to receive funds for the stolen payment card data, “fullz” and other PII that they sold.

The case was investigated by the U.S. Secret Service and is being prosecuted by Trial Attorney Mona Sedky of the Criminal Division’s Computer Crime and Intellectual Property Section and Assistant U.S. Attorney Arnold H. Huftalen of the District of New Hampshire.

The details contained in the indictment are allegations.  The defendant is presumed to be innocent unless and until proven guilty beyond a reasonable doubt in a court of law.

2 ROMANIAN NATIONALS RECEIVE PRISON TERMS IN PAYMENT CARD DATA THEFT SCHEME

FROM:  U.S. JUSTICE DEPARTMENT 

Wednesday, September 4, 2013
Two Romanian Nationals Sentenced to Prison for Scheme to Steal Payment Card Data

Adrian-Tiberiu Oprea, 29, of Constanta, Romania, and Iulian Dolan, 28, of Craiova, Romania, were sentenced today to serve 15 years and seven years in prison, respectively, for participating in an international, multimillion-dollar scheme to remotely hack into and steal payment card data from hundreds of U.S. merchants’ computers, announced Acting Assistant Attorney General Mythili Raman of the Justice Department’s Criminal Division; U.S. Attorney John P. Kacavas of the District of New Hampshire; and Holly Fraumeni, Resident Agent in Charge of the U.S. Secret Service, Manchester, N.H., Resident Office.

On May 7, 2013, Oprea, who was extradited to the United States from Romania, pleaded guilty to one count of conspiracy to commit computer fraud, one count of conspiracy to commit wire fraud and two counts of conspiracy to commit access device fraud.  On Sept. 17, 2012, Dolan pleaded guilty to one count of conspiracy to commit computer fraud and two counts of conspiracy to commit access device fraud.

 Court documents state that, from approximately 2009 to 2011, Oprea conspired with Dolan and Cezar Butu, 27, of Ploiesti, Romania, to hack into hundreds of computers located in the United States to steal credit, debit and payment account numbers and associated data (collectively “payment card data”) that belonged to U.S. cardholders.

According to court documents, Oprea and Dolan remotely hacked into hundreds of U.S. merchants’ point-of-sale (POS) or “check out” computer systems, where customers’ payment card data was electronically stored.  Specifically, Oprea, who was the leader of the scheme, and Dolan, who was his trusted aide, first used the Internet to identify U.S.-based vulnerable POS systems.  After identifying a vulnerable system, Oprea and Dolan would gain access and install software programs called “keystroke loggers” (or “sniffers”) onto the POS systems.  These programs would record, and then store, all of the data that was keyed into or swiped through the merchants’ POS systems, including customers’ payment card data.

Oprea and Dolan retrieved the card data and then electronically transferred it to various electronic storage locations (“dump sites”) that Oprea had set up.  Oprea later attempted to use the stolen payment card data to make unauthorized charges on, or transfers of funds from, the accounts.  He also attempted to transfer the stolen payment card data to other co-conspirators for them to use in a similar manner.  During the course of the conspiracies, the co-conspirators hacked into several hundred U.S. merchants’ POS systems, including 250 Subway restaurant franchises, and stole payment card data belonging to more than 100,000 U.S. cardholders.  Their criminal conduct caused losses of at least $17.5 million in unauthorized charges and remediation expenses.

 The case was investigated by the U.S. Secret Service, with assistance from the New Hampshire State Police and Romanian authorities.

The case is being prosecuted by Trial Attorney Mona Sedky of the Criminal Division’s Computer Crime and Intellectual Property Section and Assistant U.S. Attorney Arnold H. Huftalen of the District of New Hampshire.  Significant assistance was provided by the Criminal Division’s Office of International Affairs.