SecurityNot yet confirmed elsewhere1 publisher2 min readPublished
YMCO leader Oleg Korniev pleads guilty to laundering cybercrime money through 15,000 US mules
Oleg Korniev, a leader of Your Mule Cashout, pleaded guilty to money laundering for a ring that has used more than 15,000 US money mules since 2007. Stolen funds landed first in the mules' own US bank accounts, so banks saw the money long before prosecutors reached Korniev.
The Watch · Security desk
What happened
- Court documents say YMCO found mules through spam from fake companies, ran them through a hiring process that looked real, and told them they would process payments for legitimate businesses.
- Mules then passed the money by Western Union and MoneyGram transfer to contractors based in Moldova, Ukraine, Russia or Latvia, who cashed it out, court documents allege.
- Korniev admitted the operation he ran with accomplices was behind more than $14.7 million in actual and intended losses to confirmed victims.
- Korniev faces a minimum of two years and a maximum of 50 years in prison after pleading guilty to five counts.
Compiled by The WatchSomething wrong?How this is made
Why it matters
- exposure US residents who took YMCO's fake jobs in good faith remain targets: the Justice Department says it pursues mules as well as recruiters, and Europol holds that not knowing is no defence.
- constraint The case reached YMCO's leader more than a decade after his accomplices' arrests, so the bank holding a mule's account is the only party placed to act while a transfer is still live.
- constraint The thefts hit more than 750 accounts at more than 35 banks, so any single bank's fraud team saw only part of one ring's activity.
Korniev's part, by his own admission, was management [4]. He hired and fired YMCO employees, rewarded or punished them on performance, and helped write the operation's policies and procedures [4]. He is 42 and holds Ukrainian and Russian citizenship [1].
Korniev admitted receiving $9.7 million from cybercriminals and laundering at least $7 million of it [11]. That is about 72 percent [16]. Court documents also count more than $10 million stolen from over 750 US bank accounts at more than 35 banks [7]. YMCO allegedly ran similar schemes in Germany, Italy, the United Kingdom and Australia [7]. If the $9.7 million were split evenly across 15,000 mules [2], each would have handled about $650 [17].
On the US side of the scheme, the money stopped twice before it left the country. Both stops were companies that processed it while it was still moving: the bank holding the mule's account and the money-transfer service [6]. For a fraud team, the pattern is an account that takes in a transfer and then sends the funds abroad through Western Union or MoneyGram [6]. The reporting on the court documents does not say whether any bank or wire service flagged a transfer.
The prosecution has taken years. Four other YMCO members, arrested abroad more than a decade ago and extradited to the Western District of North Carolina, each pleaded guilty to conspiring to launder money [3]. Their sentences ran from 37 to 63 months, and each was ordered to pay more than $9.1 million in restitution to US victims [3]. Korniev pleaded guilty on Thursday [9]. "Money mules play crucial roles in cybercrime, so the Justice Department pursues mules and their recruiters wherever they operate and however long it takes," said Assistant Attorney General A. Tysen Duva [8].
Enforcement against the mules themselves reaches a minority of them [18]. When Europol announced the EMMA crackdown five years ago, authorities in 27 countries had identified 18,351 mules and arrested 1,803 [12]. That is about one in ten [18]. Europol described recruiting close to YMCO's method, saying organized crime groups prey on "students, immigrants, and those in economic distress, offering easy money through legitimate-looking job adverts and social media posts" [13]. "Ignorance is not an excuse when it comes to the law and money muling," Europol said [14].
What to watch
- Korniev's sentence within the two-to-50-year range, and whether restitution matches the more than $9.1 million each accomplice was ordered to pay.
- Any charges against the cash-out contractors in Moldova, Ukraine, Russia or Latvia who received the mules' wires.
- Whether the Justice Department brings cases against individual US mules from YMCO, given Duva's statement that it pursues mules as well as recruiters.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap+10
- Incentives
- Insufficient
- Confidence60
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
Oleg Korniev, 42, a Ukrainian-Russian dual citizen, was one of the leaders of Your Mule Cashout (YMCO) and has pleaded guilty to running a money laundering operation for cybercriminals.
- [2]
YMCO has operated since September 2007 and used more than 15,000 money mules from the United States.
- [3]
Four other individuals involved with YMCO were arrested overseas more than a decade ago, extradited to the Western District of North Carolina, pleaded guilty to conspiracy to commit money laundering, received prison sentences of 37 to 63 months, and were each ordered to pay more than $9.1 million in restitution to US victims.
- [4]
Korniev managed, hired, and fired YMCO employees; rewarded or punished them based on performance; and helped develop policies and procedures for the money laundering operation.
- [5]
According to court documents, YMCO recruited US residents as money mules through spam emails from fake companies; each mule went through what appeared to be a legitimate hiring process and was told they would process payments for legitimate businesses.
- [6]
Cybercriminals sent stolen money to the mules' bank accounts, and the mules allegedly wired the funds through Western Union and MoneyGram to cash-out contractors in Moldova, Ukraine, Russia, or Latvia.
- [7]
YMCO also allegedly ran similar schemes in Germany, Italy, the United Kingdom, and Australia, processing more than $10 million stolen by cybercrime gangs from over 750 US bank accounts at more than 35 banks.
- [8]
"Money mules play crucial roles in cybercrime, so the Justice Department pursues mules and their recruiters wherever they operate and however long it takes," said Assistant Attorney General A. Tysen Duva.
- [9]
On Thursday, Korniev pleaded guilty to money laundering, aggravated identity theft, conspiracy to commit money laundering, conspiracy to commit computer fraud, and conspiracy to commit access device theft.
- [10]
Korniev faces a minimum penalty of two years in prison and a maximum of 50 years after pleading guilty to five counts.
- [11]
Korniev confirmed he laundered at least $7 million of the $9.7 million received from cybercriminals.
- [12]
Five years ago, Europol announced that law enforcement authorities from 27 countries arrested 1,803 money mules out of 18,351 identified in an international crackdown codenamed EMMA (European Money Mule Action).
- [13]
"The organized crime groups do this (recruit mules) by preying on groups such as students, immigrants, and those in economic distress, offering easy money through legitimate-looking job adverts and social media posts," Europol warned.
- [14]
"Ignorance is not an excuse when it comes to the law and money muling; they are breaking the law by laundering the illicit proceeds of crime," Europol said.
- [15]
Korniev admitted that the money laundering operation he ran with multiple accomplices was behind over $14.7 million in actual and intended losses to confirmed victims.
- [16]
Korniev laundered about 72 percent of the money YMCO received from cybercriminals.
- [17]
If the $9.7 million received were split evenly across 15,000 mules, each would have handled about $650.
- [18]
EMMA arrested about one in ten of the mules it identified.
Sources
1 independent publisher whose own reporting we read for this story.
- bleepingcomputer.comMan admits to running network of 15,000 money mules for cybercriminals
1 article · October 9, 2026
Topics and entities
Follow any of these and your For You feed starts watching them — no settings page required.