YMCO money mule boss pleads guilty in US laundering case
A man holding both Ukrainian and Russian citizenship has admitted in a US court to helping lead a money laundering operation that moved millions of dollars for cybercriminals using thousands of recruited money mules.
Oleg Korniev, 42, was one of the leaders of Your Mule Cashout (YMCO), a criminal organization active since September 2007. Over the years, the group relied on more than 15,000 money mules based in the United States.
A long-running operation
YMCO's job was to turn stolen money into cash the criminals could actually use. Cybercrime gangs moved stolen funds into bank accounts controlled by the mules. The mules then allegedly wired that money through Western Union and MoneyGram to "cash-out contractors" in Moldova, Ukraine, Russia or Latvia.
The group did not limit itself to the US. It also allegedly ran similar schemes in Germany, Italy, the United Kingdom and Australia. In the US alone, it processed more than $10 million that cybercrime gangs had stolen from over 750 bank accounts held at more than 35 banks.
Korniev's role was managerial. He hired and fired YMCO staff, rewarded or punished them depending on how they performed, and helped write the policies and procedures that kept the laundering operation running.
Fake jobs as the recruitment tool
Court documents describe how YMCO found its mules. The group sent spam emails on behalf of fake companies. People who responded went through what looked like a normal hiring process and were told they would be handling payments for legitimate businesses.
In practice, they were moving the proceeds of cybercrime. This approach of disguising laundering work as an ordinary job is a common thread in mule recruitment, and it keeps the people at the top several steps away from the stolen money.
The plea and possible sentence
On Thursday, Korniev pleaded guilty to five charges:
- money laundering
- aggravated identity theft
- conspiracy to commit money laundering
- conspiracy to commit computer fraud
- conspiracy to commit access device theft
As part of the plea, he admitted that the operation he ran with several accomplices was responsible for more than $14.7 million in actual and intended losses to confirmed victims. He also confirmed that he laundered at least $7 million of the $9.7 million the group received from cybercriminals.
Korniev faces at least two years in prison and up to 50 years.
"Money mules play crucial roles in cybercrime, so the Justice Department pursues mules and their recruiters wherever they operate and however long it takes," said Assistant Attorney General A. Tysen Duva.
Earlier convictions in the same case
Korniev is not the first YMCO member to face a US court. Four other people linked to the group were arrested abroad more than ten years ago and extradited to the Western District of North Carolina, one of the federal court districts in the US state.
All four pleaded guilty to conspiracy to commit money laundering. They received prison terms of between 37 and 63 months, and each was ordered to pay more than $9.1 million in restitution to US victims.
Mules remain a target for police
The case also fits a wider push by law enforcement against money mule networks. Five years ago, Europol, the European Union's law enforcement agency, announced that authorities in 27 countries had arrested 1,803 money mules out of 18,351 identified during an international crackdown codenamed EMMA (European Money Mule Action).
Mules often sign up because they are desperate for money, while others are threatened by fraudsters into taking part. At the time, Europol said organized crime groups target "students, immigrants, and those in economic distress, offering easy money through legitimate-looking job adverts and social media posts."
The agency was also clear that this does not protect those who take part. "Ignorance is not an excuse when it comes to the law and money muling; they are breaking the law by laundering the illicit proceeds of crime," Europol warned.
Our Take
The YMCO case shows how long the US Justice Department is willing to keep a file open. The group started in 2007, four members were sentenced more than a decade ago, and one of its leaders is only now pleading guilty. This suggests that leaving the scene, or living abroad, is not a reliable way out for people who run the financial side of cybercrime.
It also lines up with other recent US cases that go after the infrastructure behind online crime rather than just the attackers, from the Empire Market co-creator's 40-year sentence to the Uranium Finance hacker's conviction. Cash-out services are a choke point: without them, stolen money is much harder to use.
For readers, the practical lesson is simple. Job offers that involve receiving and forwarding payments for a company you have never met deserve serious suspicion. As with schemes like SIM-swap crypto theft, ordinary people often end up as the visible link in the chain. It is worth watching what sentence Korniev receives, and whether it is closer to the earlier YMCO terms or the 50-year maximum.