YMCO leader Oleg Korniev pleads guilty to laundering cybercrime money through 15,000 US mules
Oleg Korniev, a leader of Your Mule Cashout, pleaded guilty to money laundering for a ring that has used more than 15,000 US money mules since 2007. Stolen funds landed first in the mules' own US bank accounts, so banks saw the money long before prosecutors reached Korniev.
The Watch · Security desk
Korniev admitted over $14.7 million in actual and intended losses and laundering at least $7 million of $9.7 million received. YMCO allegedly processed money stolen from over 750 US bank accounts at more than 35 banks. He faces two to 50 years in prison.
- over $14.7 million Actual and intended losses to confirmed victims, claim 9
- at least $7 million Korniev confirmed he laundered, claim 7 of $9.7 million received
- over 750 accounts US bank accounts stolen from, claim 10 at more than 35 banks
- 50 years Maximum prison term Korniev faces, claim 6 minimum two years
| Figure | Value | Note | Claim |
|---|---|---|---|
| Actual and intended losses to confirmed victims, over | $14.7 million | 9 | |
| Korniev confirmed he laundered, at least | $7 million | of $9.7 million received | 7 |
| US bank accounts stolen from, over | 750 accounts | at more than 35 banks | 10 |
| Maximum prison term Korniev faces | 50 years | minimum two years | 6 |
What happened
- Court documents say YMCO found mules through spam from fake companies, ran them through a hiring process that looked real, and told them they would process payments for legitimate businesses.
- Mules then passed the money by Western Union and MoneyGram transfer to contractors based in Moldova, Ukraine, Russia or Latvia, who cashed it out, court documents allege.
- Korniev admitted the operation he ran with accomplices was behind more than $14.7 million in actual and intended losses to confirmed victims.
- Korniev faces a minimum of two years and a maximum of 50 years in prison after pleading guilty to five counts.
Why it matters
- Who's exposed exposure US residents who took YMCO's fake jobs in good faith remain targets: the Justice Department says it pursues mules as well as recruiters, and Europol holds that not knowing is no defence.
- What it limits constraint The case reached YMCO's leader more than a decade after his accomplices' arrests, so the bank holding a mule's account is the only party placed to act while a transfer is still live.
- What it limits constraint The thefts hit more than 750 accounts at more than 35 banks, so any single bank's fraud team saw only part of one ring's activity.
Next story · Security · yesterday
Police in 17 countries arrest 95 suspects in INTERPOL sweep of CSAM messaging groupsConfirmed2 publishers
Korniev's part, by his own admission, was management [8]. He hired and fired YMCO employees, rewarded or punished them on performance, and helped write the operation's policies and procedures [8]. He is 42 and holds Ukrainian and Russian citizenship [1].
Korniev admitted receiving $9.7 million from cybercriminals and laundering at least $7 million of it [7]. That is about 72 percent [15]. Court documents also count more than $10 million stolen from over 750 US bank accounts at more than 35 banks [10]. YMCO allegedly ran similar schemes in Germany, Italy, the United Kingdom and Australia [10]. If the $9.7 million were split evenly across 15,000 mules [17], each would have handled about $650 [18].
On the US side of the scheme, the money stopped twice before it left the country. Both stops were companies that processed it while it was still moving: the bank holding the mule's account and the money-transfer service [4]. For a fraud team, the pattern is an account that takes in a transfer and then sends the funds abroad through Western Union or MoneyGram [4]. The reporting on the court documents does not say whether any bank or wire service flagged a transfer.
The prosecution has taken years. Four other YMCO members, arrested abroad more than a decade ago and extradited to the Western District of North Carolina, each pleaded guilty to conspiring to launder money [2]. Their sentences ran from 37 to 63 months, and each was ordered to pay more than $9.1 million in restitution to US victims [2]. Korniev pleaded guilty on Thursday [5]. "Money mules play crucial roles in cybercrime, so the Justice Department pursues mules and their recruiters wherever they operate and however long it takes," said Assistant Attorney General A. Tysen Duva [11].
Enforcement against the mules themselves reaches a minority of them [16]. When Europol announced the EMMA crackdown five years ago, authorities in 27 countries had identified 18,351 mules and arrested 1,803 [12]. That is about one in ten [16]. Europol described recruiting close to YMCO's method, saying organized crime groups prey on "students, immigrants, and those in economic distress, offering easy money through legitimate-looking job adverts and social media posts" [13]. "Ignorance is not an excuse when it comes to the law and money muling," Europol said [14].
What to watch
- Korniev's sentence within the two-to-50-year range, and whether restitution matches the more than $9.1 million each accomplice was ordered to pay.
- Any charges against the cash-out contractors in Moldova, Ukraine, Russia or Latvia who received the mules' wires.
- Whether the Justice Department brings cases against individual US mules from YMCO, given Duva's statement that it pursues mules as well as recruiters.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence66
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence72
Perspective Coverage
3 publishers- Builder
- Builder 5%
- Operator
- Operator 75%
- Investor
- Investor 20%
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
Oleg Korniev, 42, a Ukrainian-Russian dual citizen, was one of the leaders of Your Mule Cashout (YMCO) and has pleaded guilty to running a money laundering operation for cybercriminals.
- [2]
Four other individuals involved with YMCO were arrested overseas more than a decade ago, extradited to the Western District of North Carolina, pleaded guilty to conspiracy to commit money laundering, received prison sentences of 37 to 63 months, and were each ordered to pay more than $9.1 million in restitution to US victims.
- [3]
According to court documents, YMCO recruited US residents as money mules through spam emails from fake companies; each mule went through what appeared to be a legitimate hiring process and was told they would process payments for legitimate businesses.
- [4]
Cybercriminals sent stolen money to the mules' bank accounts, and the mules allegedly wired the funds through Western Union and MoneyGram to cash-out contractors in Moldova, Ukraine, Russia, or Latvia.
- [5]
On Thursday, Korniev pleaded guilty to money laundering, aggravated identity theft, conspiracy to commit money laundering, conspiracy to commit computer fraud, and conspiracy to commit access device theft.
- [6]
Korniev faces a minimum penalty of two years in prison and a maximum of 50 years after pleading guilty to five counts.
- [7]
Korniev confirmed he laundered at least $7 million of the $9.7 million received from cybercriminals.
- [8]
Korniev managed, hired, and fired YMCO employees; rewarded or punished them based on performance; and helped develop policies and procedures for the money laundering operation.
- [9]
Korniev admitted that the money laundering operation he ran with multiple accomplices was behind over $14.7 million in actual and intended losses to confirmed victims.
- [10]
YMCO also allegedly ran similar schemes in Germany, Italy, the United Kingdom, and Australia, processing more than $10 million stolen by cybercrime gangs from over 750 US bank accounts at more than 35 banks.
- [11]
"Money mules play crucial roles in cybercrime, so the Justice Department pursues mules and their recruiters wherever they operate and however long it takes," said Assistant Attorney General A. Tysen Duva.
- [12]
Five years ago, Europol announced that law enforcement authorities from 27 countries arrested 1,803 money mules out of 18,351 identified in an international crackdown codenamed EMMA (European Money Mule Action).
- [13]
"The organized crime groups do this (recruit mules) by preying on groups such as students, immigrants, and those in economic distress, offering easy money through legitimate-looking job adverts and social media posts," Europol warned.
- [14]
"Ignorance is not an excuse when it comes to the law and money muling; they are breaking the law by laundering the illicit proceeds of crime," Europol said.
- [15]
Korniev laundered about 72 percent of the money YMCO received from cybercriminals.
- [16]
EMMA arrested about one in ten of the mules it identified.
- [17]
YMCO has operated since September 2007 and used more than 15,000 money mules from the United States.
- [18]
If the $9.7 million received were split evenly across 15,000 mules, each would have handled about $650.
Sources
3 independent publishers whose own reporting we read for this story.
- bleepingcomputer.comMan admits to running network of 15,000 money mules for cybercriminals
1 article · October 9, 2026
- securityweek.comMastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US
1 article · October 12, 2026
- therecord.mediaLeader of vast money mule operation that laundered cybercriminal proceeds pleads guilty
1 article · October 9, 2026
Topics and entities
Topics
- Cybercrime prosecutions
- Money laundering
- Money mule networks
Entities
- Europol
- Your Mule Cashout
- EMMA (European Money Mule Action)
- Western Union