Guilty Pleas in Major Cyber-Enabled Fraud and Ransomware Operations

U.S. authorities secured guilty pleas in two separate cyber-enabled criminal cases: a Ghana-based fraud ring that stole more than $100 million via business email compromise (BEC) and romance scams, and a Phobos ransomware administrator tied to a global extortion operation. The cases highlight parallel monetization paths—social engineering and payment redirection in BEC/romance schemes versus data encryption and extortion in ransomware-as-a-service (RaaS)—and both involve international arrests/extraditions to the United States.

In the fraud case, Derrick Van Yeboah (40) pleaded guilty to conspiracy to commit wire fraud and agreed to pay over $10 million in restitution for his role in a Ghana-based operation that targeted U.S. victims from 2016 to May 2023, using spoofed emails to impersonate customers/employees and laundering proceeds through U.S. intermediaries before sending funds to coordinators in West Africa. Separately, Evgenii Ptitsyn (43) pleaded guilty to wire fraud conspiracy for helping develop, sell, distribute, and operate the Phobos ransomware platform, which the U.S. DoJ says hit 1,000+ entities and extorted $16+ million; he was arrested in South Korea in 2024, extradited to the U.S., and faces up to 20 years in prison, with sentencing scheduled for July 15.