Russian National Extradited to US to Face Bank Account Takeover Charges

A Russian national accused of being an operator of a massive bank account takeover scheme involving over 5,000 stolen login credentials has been extradited to the U.S.  

The web developer, Sergei Anatolyevich Filimonov, 36, was arraigned on September 4 in the Northern District of Georgia (in the U.S.) after being extradited from the Republic of Georgia. He was initially indicted in November 2025 for charges linked to a credential harvesting and bank fraud operation. 

Filimonov allegedly registered domains that were designed to look like legitimate financial institutions; then they purchased sponsored links so that someone searching for the spoofed (legitimate) bank would see the fraudulent website at the top of search engines. These fake login pages would collect usernames, passwords, and other authentication information when victims tried to log in. 

Filimonov and his (unnamed) co-conspirators would then use these stolen credentials to access bank accounts, review account balances, and then make unauthorized wire transfers to siphon account funds. 

“The indictment also alleges that Filimonov developed and maintained online infrastructure supporting the operation, including interactive databases storing more than 5,000 stolen login credentials and software designed to capture and transmit sensitive authentication data,” according to the Department of Justice Tuesday press release. “Filimonov and his conspirators allegedly attempted to obtain millions of dollars from victim accounts, including accounts held by companies located in the Northern District of Georgia.”

The DoJ linked this scheme to web3adspanels.org, a malicious website that was used as a backend server storing stolen credentials harvested from these fake banking websites. U.S. law enforcement announced they seized this website in December 2025; according to the DoJ, the database contained thousands of compromised credentials.

In December, when it seized this domain the DoJ had identified at least 19 U.S. victims with accounts that were hit via account takeover scheme, resulting in staggering losses (attempted losses of approximately $28 million and actual losses of approximately $14.6 million).

“Filimonov is charged with conspiracy to commit bank and wire fraud; access device fraud conspiracy; multiple counts of bank and wire fraud; possession of unauthorized access devices; possession of device‑making equipment; effecting transactions with unauthorized access devices; and aggravated identity theft,” according to the DoJ this week. “If convicted, he faces a minimum penalty of two years in prison and a maximum penalty of 175 years in prison.”