Nigerian hacker sentenced to eight years for $3.3 million tax fraud scheme
Chukwuemeka Victor Amachukwu pleaded guilty to spearphishing US tax firms, stealing data from 800 customers and filing fraudulent refund claims.
Key points
- Amachukwu received an eight-year prison sentence and one year of supervised release.
- The court ordered $3.6 million in restitution and forfeiture of nearly $11 million.
- The scheme targeted tax preparation businesses in New York, Texas, and other states.
Chukwuemeka Victor Amachukwu was sentenced to eight years in federal prison on Monday for his role in a multi-year spearphishing campaign that targeted United States tax preparation businesses. The 40-year-old Nigerian national pleaded guilty to conspiracy to commit computer intrusions and wire fraud after being extradited from France to the United States in August 2025, according to court documents and a press release from US Attorney Jamie McDonald.
Amachukwu and his accomplices launched sophisticated attacks between 2019 and 2021, gaining unauthorized access to the computer systems of tax firms in New York, Texas, and other states. According to BleepingComputer, the group stole the personally identifiable information and tax records of at least 800 customers. They used this stolen data to file fraudulent tax returns and loan applications, resulting in significant financial harm to victims and the public.
Financial scope and sentencing details
The court ordered Amachukwu to pay $3.6 million in restitution and forfeit nearly $11 million in addition to his prison term. Court documents indicate the group stole more than $3 million in total through fraudulent filings with the Internal Revenue Service and state tax authorities. Amachukwu allegedly obtained approximately $2.5 million in fraudulent tax refunds after filing for $8.4 million in total refunds.
The group also secured another $819,000 through fraudulent loan applications with the Small Business Administration's Economic Injury Disaster Loan program. US Attorney Jamie McDonald stated that Amachukwu believed he was operating safely offshore, but he has now been held accountable for crimes that imposed significant harm on victims. The sentence reflects the severity of the sophisticated schemes used to hack into US businesses.
Additional fraud schemes and accomplices
Beyond the tax fraud, Amachukwu was involved in a separate fake investment scheme that targeted potential US victims. The scammers offered investments in what they described as valuable standby letters of credit, which did not actually exist. According to the source material, the fraudsters stole more than $7 million from multiple victims through this non-existent investment vehicle.
Amachukwu acted alongside co-defendant Kingsley Uchelue Utulu and other Nigerian co-conspirators in these operations. The group used spearphishing techniques to bypass security measures and access sensitive customer data. The extradition from France in August 2025 marked the final step before his sentencing, ensuring he faced justice in the United States for crimes committed against US taxpayers and businesses.
What should you do?
Security professionals should review access logs for tax preparation software and financial systems to detect unauthorized entry. Organizations must verify the legitimacy of any investment opportunities, particularly those involving complex financial instruments like standby letters of credit. Regular audits of customer data access can help identify potential breaches before fraudsters can file fraudulent claims.
What to do and how to stay safe: Chukwuemeka Victor Amachukwu
- Monitor user activity logs for unusual access patterns or data exfiltration attempts on financial systems.
- Implement strict verification procedures for any third-party investment opportunities or financial instruments.
- Conduct regular audits of customer data access to ensure only authorized personnel can view sensitive information.
- Review email security protocols to detect and block spearphishing attempts targeting employees with access to client data.
Step-by-step guide: Social Engineering Warning Signs and How to Respond
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Who was sentenced for the tax fraud scheme?
Chukwuemeka Victor Amachukwu, a 40-year-old Nigerian national, was sentenced to eight years in prison.
How much money was stolen in the tax fraud scheme?
The group stole more than $3 million, including $2.5 million in fraudulent tax refunds and $819,000 in loans.
What crimes did Amachukwu plead guilty to?
He pleaded guilty to conspiracy to commit computer intrusions and wire fraud.
