This is every person's worst nightmare: being fooled by a spoof site into giving away personal financial information. Despite financial tech's best efforts to protect its customers, it happens more often than one might think. 

The majority of this kind of fraud is perpetrated overseas, and the U.S. Department of Justice successfully nabbed one nefarious Russian and successfully had him extradited to the U.S. for prosecution.

ATLANTA – Sergei Anatolyevich Filimonov, a Russian national and web developer who was extradited from the Republic of Georgia, appeared in federal court last week on fraud and aggravated identity theft charges stemming from his alleged role in a transnational conspiracy responsible for large‑scale bank account takeovers.

Sergei Anatolyevich Filimonov, 36, a Russian national and web developer who was allegedly involved in a transnational cyber‑fraud conspiracy responsible for large‑scale bank account takeover activity, was arraigned Friday in the Northern District of Georgia after being extradited from the Republic of Georgia. Filimonov was indicted by a federal grand jury on Nov. 4, 2025, for charges relating to a credential‑harvesting and bank‑fraud operation that targeted victims across the United States.

According to court documents, Filimonov and his co‑conspirators executed a sophisticated scheme involving spoofed domains that mimicked the websites of federally insured financial institutions. The conspirators purchased sponsored search‑engine links to divert unsuspecting banking customers to fraudulent login pages, where victims entered their credentials. The conspirators used the stolen credentials to access bank accounts, review account balances, and initiate unauthorized wire transfers to steal bank account funds.

According to the indictment, Filimonov developed this complex scheme using elaborate online technology: software designed to capture and transmit sensitive authentication data, and infrastructure that included interactive databases that stored more than 5,000 stolen login credentials. 

Filimonov and his conspirators allegedly attempted to obtain millions of dollars from victim accounts, including accounts held by companies located in the Northern District of Georgia. 

In connection with the charged scheme, the Department of Justice previously seized the domain, web3adspanels.org, which operated as a backend server storing stolen credentials harvested from fraudulent banking websites. The seized backend database contained thousands of compromised credentials, including those belonging to victims located in the Northern District of Georgia. 

According to the DOJ press release, the FBI Atlanta office is doing further investigation. 

Filimonov faces a raft of charges, including:

Recommended
Karmelo Anthony's History of Alleged Violence Laid Bare in Stunning Court Docs Kept From the Jury Kyle Becker But Wait, There's More: Federal Judge in MO Restores New Congressional Map Susie Moore

The conviction range is interesting. At a minimum, Filimonov faces two years in prison if convicted. At maximum, he could face 175 years in prison.