Russian suspect in bank account takeovers is extradited to US
A Russian web developer who played a role in a multimillion-dollar bank account takeover scheme has been extradited to the U.S. to face an indictment in the case, federal authorities said Tuesday.
Sergei Anatolyevich Filimonov, 36, appeared in an Atlanta federal court on September 4, pleading not guilty to charges of fraud and identity theft, prosecutors said. Filimonov had been extradited from the Republic of Georgia and remains in custody, the announcement said.
“Filimonov allegedly used spoofed domains and fraudulent login pages to target unsuspecting online banking customers, stealing millions from victims,” said Marlo Graham, FBI Atlanta’s special agent in charge.
The case is linked to the December 2025 federal seizure of the web domain web3adspanels.org, authorities said. As of that announcement, the FBI had identified at least 19 victims with attempted losses totaling about $28 million and confirmed losses of roughly $14.6 million. Investigators said the seized domain held login credentials for thousands of victims.
From November 2023 through October 2025, Filimonov and others stole bank customers’ login credentials by purchasing sponsored search-engine links to divert them to the fraudulent login pages, prosecutors said. A redacted version of the indictment appears to identify at least one other specific defendant.
“The conspirators used the stolen credentials to access bank accounts, review account balances, and initiate unauthorized wire transfers to steal bank account funds,” Tuesday’s announcement said.
A federal grand jury indicted Filimonov on November 4, 2025, charging him with conspiracy to commit bank and wire fraud; access device fraud conspiracy; bank, wire, and access device fraud; and aggravated identity theft.
He faces a minimum of two years and a maximum of 175 years in prison.
Georgian and Estonian law enforcement helped in the investigation and apprehension of Filimonov, U.S. authorities said.
References in this story
- www.justice.gov
- US disrupts multimillion-dollar bank account takeover operation targeting Americans therecord.media Crooks used fraudulent ads on major search engines to mimic banks and harvest people's login credentials, netting at least $14.6 million, the U.S. authorities said in announcing a takedown of the operation.
- Advanced Cyber Threat Intelligence | Recorded Future www.recordedfuture.com Get real-time, actionable cyber threat intelligence with Recorded Future. Mitigate cyber risks, prioritize threats, and proactively secure your organization.
- Advanced Cyber Threat Intelligence | Recorded Future www.recordedfuture.com Get real-time, actionable cyber threat intelligence with Recorded Future. Mitigate cyber risks, prioritize threats, and proactively secure your organization.
- Joe Warminsky (@jwarminsky.bsky.social) bsky.app News Editor at The Record: @therecordmedia.bsky.social [ Tired of bios ] [ Often thinking about music ] [ Etc. ]
