Oleg Korniev, a 42-year-old dual citizen of Ukraine and Russia, pleaded guilty in a federal court in the Western District of North Carolina on October 8, 2026, for his role in managing one of the most prolific money laundering networks in recent history. Korniev admitted to leading “Your Mule Cashout” (YMCO), a criminal enterprise that effectively industrialized the process of moving stolen funds from U.S. bank accounts to overseas cybercriminals.
Operating from 2007 until at least 2014, YMCO served as a specialized service provider for hackers. While the hackers focused on compromising bank accounts, Korniev’s organization provided the infrastructure needed to bypass fraud detection and extract the cash. According to the United States Department of Justice, the network recruited more than 15,000 U.S.-based “money mules” who served as the final link in the laundering chain.
The “Professional” Facade of YMCO
The scale of the YMCO operation was made possible by a deceptive recruitment strategy that mirrored legitimate corporate hiring. Unlike many laundering schemes that rely on transparently illicit “work from home” ads, Korniev’s organization utilized a sophisticated “employment” facade to trick unsuspecting individuals into becoming criminal accomplices.
The network used spam emails and professional-looking fake company websites to offer positions that sounded like standard administrative or logistics roles. To enhance the illusion of legitimacy, prospective mules were subjected to a multi-stage onboarding process. This included taking employment tests, signing formal contracts, and reviewing company policies. By the time a recruit was asked to receive and transfer funds, many believed they were performing a lawful function for a global enterprise.
Once “hired,” these mules were instructed to receive electronic transfers into their personal bank accounts—funds that had been stolen by YMCO’s cybercriminal clients from over 750 different U.S. bank accounts. The mules would then withdraw the cash and wire it via Western Union or MoneyGram to “cash-out contractors” located in Moldova, Ukraine, Russia, or Latvia.
Scope and Financial Impact
Investigation records reveal that YMCO targeted customers at more than 35 different financial institutions. While the organization successfully laundered more than $10 million, the intended loss figure associated with the operation reached approximately $14.7 million. The gap between these figures often represents transactions flagged or blocked by banking security systems before the mules could withdraw the funds.
The infrastructure also involved significant administrative overhead. Korniev and his co-conspirators managed the logistics of thousands of simultaneous transactions while maintaining the websites and communication channels used to deceive the mules. This “money-laundering-as-a-service” model allowed various independent hacking groups to outsource the highest-risk part of their operations—the point where digital theft meets physical cash.
Arrest and Legal Consequences
Korniev’s guilty plea follows a long-term international investigation. He was eventually located and arrested in the Republic of Georgia, after which he was extradited to the United States to face charges. As part of his plea agreement, Korniev has agreed to the forfeiture of cash that was seized by authorities during his initial arrest in Georgia.
The legal resolution for Korniev comes years after the 2018 convictions of four other Ukrainian nationals who were also linked to the same laundering ring. Korniev now faces a statutory maximum of 50 years in prison for charges including conspiracy to commit money laundering and aggravated identity theft. His sentencing date has not yet been finalized, and he remains in federal custody.
