Oleg Korniev, a 42-year-old Ukrainian-Russian dual citizen, has pleaded guilty in the United States to charges linked to Your Mule Cashout (YMCO), a network that moved stolen money through recruited bank account holders. BleepingComputer reported the plea, citing court documents and the U.S. Department of Justice, in an article dated 9 October 2026. It says the plea came "on Thursday" and gives no calendar date. Every detail below comes from that one report and has not been independently verified.
What Korniev admitted and what he faces
Korniev pleaded guilty to five counts:
- money laundering
- aggravated identity theft
- conspiracy to commit money laundering
- conspiracy to commit computer fraud
- conspiracy to commit access device theft
Court documents, as relayed in the report, describe him as one of YMCO's leaders. He ran day-to-day staffing, hiring and firing employees and rewarding or punishing them according to performance. He also helped shape the policies and procedures of the laundering operation.
The potential prison term runs from two years to 50 years. That is the range he faces, not a sentence. The report gives no sentencing date and does not say which court is hearing his case.
YMCO is said to have operated since September 2007 and to have used more than 15,000 money mules based in the United States. A mule, in this context, is someone whose bank account receives money stolen by others and who forwards it onward.
On the technical side, the report describes the case as one of laundering and account abuse. It does not mention any CVE, malware family or vendor product, and this article does not address them either.
How recruits were brought in
According to court documents, YMCO recruited U.S. residents through spam emails sent in the name of fake companies. Each recruit went through what looked like an ordinary hiring process. They were told the work involved processing payments for legitimate businesses.
The report adds general context: mules often sign up out of desperation, or fraudsters force them into the role with threats. It does not say how many mules have been prosecuted beyond this case.
The alleged route from victim to cash-out
The laundering mechanics are described as allegations. Cybercriminals reportedly sent stolen money into the mules' bank accounts. The mules then allegedly wired it through Western Union and MoneyGram to "cash-out contractors" in Moldova, Ukraine, Russia or Latvia.
The report does not accuse either transfer service of wrongdoing. It does not name the contractors or the banks.
YMCO also allegedly ran similar schemes in Germany, Italy, the United Kingdom and Australia. The report gives no more detail on those operations, so the claim stays unproven here.
In its account of that activity, the report says YMCO processed more than $10 million stolen by cybercrime gangs from over 750 U.S. bank accounts at more than 35 banks.
Dollar figures that the report does not reconcile
The article contains several amounts tied to different contexts. It does not explain how they relate, so they are listed separately:
- More than $10 million: stolen by cybercrime gangs and processed by YMCO, from over 750 U.S. bank accounts at more than 35 banks.
- $14.7 million: actual and intended losses to confirmed victims, attributed to the operation Korniev ran with accomplices.
- $9.7 million: the amount the operation received from cybercriminals.
- At least $7 million: the share of that $9.7 million that Korniev confirmed he laundered.
The report does not say why these numbers differ, and a court filing would be needed to answer that.
Counts need the same care. Besides the 750 accounts and 35 banks, the report cites the 15,000 mules and the four earlier defendants. It refers to "confirmed victims" and "U.S. victims" without giving a number. Bank accounts should not be read as individual victims, and mules should not be read as victims or as defendants.
Four earlier defendants from the same network
Korniev is not the first person tied to YMCO to face a U.S. court. Four other individuals linked to the group were arrested overseas more than a decade before the article was published; the report gives no year. They were extradited to the Western District of North Carolina and pleaded guilty to conspiracy to commit money laundering.
Their prison sentences ranged from 37 to 63 months. The report says each was ordered to pay more than $9.1 million in restitution to U.S. victims. The report does not say how that restitution relates to the other dollar figures above.
The Justice Department's position was summed up by Assistant Attorney General A. Tysen Duva. "Money mules play crucial roles in cybercrime," he said, adding that the department pursues them and their recruiters "wherever they operate and however long it takes."
European enforcement context
The report also points to earlier European action against mule networks. Europol announced an operation codenamed EMMA (European Money Mule Action), in which authorities from 27 countries arrested 1,803 money mules out of 18,351 identified. The article dates this to "five years ago" and gives no year, so none is supplied here.
Europol warned at the time that organized crime groups prey on students, immigrants and people in economic distress. The lures it described were legitimate-looking job adverts and social media posts offering easy money. It also said ignorance is no excuse under the law on money muling.
What readers can take from it
The report offers no technical mitigations, indicators of compromise, domains, email addresses or account identifiers. It also does not describe any steps taken by banks or money transfer companies. That silence applies to this one article only.
The only guidance comes from the recruitment pattern the report describes and Europol's warning. Read as general advice rather than a prescription from the source:
- Unsolicited job offers from companies you cannot verify deserve suspicion.
- A "payment processing" role that sends money through your personal bank account and then onward by wire transfer matches the pattern described in the court documents.
- Europol states that not knowing the funds were criminal does not shield a mule from the law.
For now, the case rests on the plea, the five counts and the allegations in court documents as reported. The sentence, the gap between the financial figures and any detail on the alleged operations abroad all await primary records.
