“Cyber extortion is unfortunately a rapidly growing threat and highlights the ever-growing need for corporations to remain vigilant in cybersecurity efforts,” said Sean Burke, Acting Special Agent in Charge of FBI Atlanta. “This sentencing is just one example of the FBI working together to hold criminals that hide behind their computers accountable, regardless of their location.”

According to information presented in court, in June 2017, Purbeck purchased access to the computer server of a Griffin medical clinic on a darknet marketplace. He then used the stolen credentials to illegally access the computers of the medical clinic and removed records that contained the sensitive personal information of more than 43,000 individuals, including names, addresses, birth dates, and social security numbers.

In February 2018, Purbeck purchased access to a City of Newnan Police Department server on a darknet marketplace. Purbeck used the stolen credentials to hack into the City of Newnan’s computer systems and stole police reports and other documents, including personal information of more than 14,000 individuals.

Purbeck also attempted to extort a Florida orthodontist in July 2018, demanding a ransom payment in Bitcoin in return for his stolen patient files, threatening to sell the patient and personal information unless the orthodontist paid the ransom. Additionally, Purbeck threatened to sell the personal information of the orthodontist’s minor child. Purbeck harassed the orthodontist and his patients for 10 days with numerous threatening emails and text messages.

Song Wu, Chinese national, was indicted in September 2024, on charges for wire fraud and aggravated identity theft arising from his efforts to fraudulently obtain computer software and source code created by the National Aeronautics and Space Administration (“NASA”), research universities, and private companies.

“Efforts to obtain our nation’s valuable research software pose a grave threat to our national security,” said U.S. Attorney Ryan K. Buchanan. “However, this indictment demonstrates that borders are not barriers to prosecuting bad actors who threaten our national security.” According to information presented in court, Song allegedly engaged in a multi-year “spear phishing” email campaign in which he created email accounts to impersonate U.S.-based researchers and engineers and then used those imposter accounts to obtain specialized restricted or proprietary software used for aerospace engineering and computational fluid dynamics. This specialized software could be used for industrial and military applications, such as development of advanced tactical missiles and aerodynamic design and assessment of weapons. In executing the scheme, Song allegedly sent spear phishing emails to individuals employed in positions with the United States government, including NASA, the U.S. Air Force, Navy, and Army, and the Federal Aviation Administration.  Song also sent spear phishing emails to individuals employed in positions with major research universities in Georgia, Michigan, Massachusetts, Pennsylvania, Indiana, and Ohio, and with private sector companies that work in the aerospace field. Song’s spear phishing emails appeared to the targeted victims as having been sent by a colleague, associate, friend, or other person in the research or engineering community. His emails requested that the targeted victim send or make available source code or software to which Song believed the targeted victim had access. According to the indictment, while conducting this spear phishing campaign, Song was employed as an engineer at Aviation Industry Corporation of China (“AVIC”), a Chinese state-owned aerospace and defense conglomerate headquartered in Beijing, China.  AVIC manufactures civilian and military aircrafts and is one of the largest defense contractors in the world.

Ilya Lichtenstein, 35, of New York City, was sentenced recently to 60 months in federal prison for his involvement in a money laundering conspiracy arising from the hack and theft of approximately 120,000 bitcoin from Bitfinex, a global cryptocurrency exchange. According to information presented in court, Lichtenstein hacked into Bitfinex’s network in 2016, using advanced hacking tools and techniques. Once inside the network, Lichtenstein fraudulently authorized more than 2,000 transactions transferring 119,754 bitcoin from Bitfinex to a cryptocurrency wallet in Lichtenstein’s control. Lichtenstein then took steps to cover his tracks by deleting from Bitfinex’s network access credentials and other log files that could have revealed his conduct to law enforcement. Following the hack, Lichtenstein enlisted the help of his wife, Heather Morgan, in laundering the stolen funds. Lichtenstein, at times with Morgan’s assistance, employed numerous sophisticated laundering techniques, including using fictitious identities to set up online accounts; utilizing computer programs to automate transactions; depositing the stolen funds into accounts at a variety of darknet markets and cryptocurrency exchanges and then withdrawing the funds; converting bitcoin to other forms of cryptocurrency in a practice known as “chain hopping;” depositing a portion of the criminal proceeds into cryptocurrency mixing services; using U.S.-based business accounts to legitimize Lichtenstein’s and Morgan’s banking activity; and exchanging a portion of the stolen funds into gold coins. Additional information on this case is available on the United States Department of Justice’s website for large cases here.  

What Is the New FINCEN Rule?

FINCEN’s new rule extends Anti-Money Laundering (AML) and Countering the Financing of Terrorism (CFT) obligations to investment advisers involved in residential real estate transactions. The aim is to prevent illicit financial activities in an industry known for large cash transactions that can serve as vehicles for money laundering, fraud, and other financial crimes.

Previously, residential real estate investments, particularly those conducted through shell companies or trusts, offered a level of anonymity that bad actors could exploit. This new rule eliminates some of that opacity by requiring reporting and disclosure obligations for entities and individuals involved in these transactions.

The final rule imposes several key requirements:

1. Increased Reporting and Disclosure: Individuals and firms engaged in residential real estate investments must now report detailed information regarding the identity of buyers and sellers, the source of funds, and other financial details. This includes both U.S. and foreign investors, adding an extra layer of scrutiny for cross-border transactions.
2. Enhanced Due Diligence: Investment advisers and firms must now conduct thorough due diligence on clients and the source of their funds, ensuring that they comply with AML/CFT standards. This may involve verifying identities, examining financial records, and reporting suspicious activities to FINCEN.
3. Penalties for Non-Compliance: The rule includes penalties for individuals and firms that fail to meet the new AML/CFT obligations. Non-compliance could lead to fines, sanctions, or even criminal charges depending on the severity of the infraction.

For real estate investors, the new FINCEN rule adds a new layer of legal and financial oversight. While the intention is to weed out bad actors, the burden of proof is now on investors and their advisers to ensure compliance. This means that investors will need to be more transparent in their transactions, particularly regarding the source of their funds. Without proof of the funds coming from a legitimate source, criminal charges of money laundering and fraud can result.

As the FINCEN rule takes effect, compliance will be a critical concern for many in the real estate industry. Our firm is experienced in navigating the complex landscape of financial regulations, including defending clients against charges of money laundering and related financial crimes. We can help you understand your obligations under the new FINCEN rule and defend against any accusations of non-compliance or criminal misconduct.

This new regulation represents a major shift for the residential real estate industry. Whether you’re an investor or an adviser, staying compliant is no longer optional—it’s the law. The new FINCEN rule is set to take effect on December 1, 2025. If you have questions about the new rule and how it affects your business, contact ustoday for a consultation.

What is a Suspicious Activity Report (SAR)?

A Suspicious Activity Report (SAR) is a document that financial institutions are legally required to file with the Financial Crimes Enforcement Network (FinCEN) when they detect potentially suspicious behavior involving financial transactions. Once filed, these reports are sent to FinCEN, a division of the U.S. Department of the Treasury, which shares the information with law enforcement agencies for further investigation if necessary.

Why Do Banks File SARs?

Banks must comply with a variety of regulations designed to prevent financial crimes. One of the core elements of these regulations is monitoring customer transactions for anything that might indicate illegal or suspicious activity. A SAR is typically filed when a bank suspects that a transaction, or series of transactions, might involve:

• Money laundering: Attempting to disguise the origins of illegally obtained money by passing it through a legitimate banking system.
• Fraud: Including wire fraud, identity theft, and other deceptive financial activities.
• Structuring: Breaking down large sums of money into smaller deposits to avoid triggering reporting requirements (also known as “smurfing”).
• Unexplained large transactions: Transactions that don’t align with an individual’s or business’s typical activity or appear inconsistent with known financial patterns.

Common Triggers for SARs

Financial institutions are trained to spot red flags, and there are a number of scenarios that could trigger a SAR filing. Here are some of the most common:

1. Unusually Large Transactions: If an individual or business is suddenly moving unusually large amounts of money, especially in cash, this can raise red flags. Large deposits, withdrawals, or transfers that don’t align with normal activity patterns may prompt the bank to investigate further.
2. Frequent Cash Deposits Below $10,000: To avoid the $10,000 threshold that triggers an automatic Currency Transaction Report (CTR), some individuals break down larger sums into smaller deposits (a practice called structuring). If a bank detects this behavior, it will likely file a SAR.
3. Wire Transfers to High-Risk Countries: International wire transfers to or from countries that are known for terrorist activity, money laundering, or lacking robust financial regulations may result in a SAR filing.
4. Multiple Accounts Under One Name: Using multiple accounts to shuffle money back and forth—especially if the accounts seem unrelated to legitimate business or personal activities—can appear suspicious.
5. Account Activity Inconsistent with Known Business Practices: If a company typically processes small, regular transactions and suddenly starts handling large, irregular amounts, it might trigger suspicion. Likewise, if a personal account shows business-level activity, this could raise alarms.
6. Use of Shell Companies: Banks scrutinize accounts associated with shell companies that lack a clear purpose or business activity, as they are often used in money laundering schemes.
7. Unexplained Source of Funds: If the origin of deposited funds is unclear, or if large amounts of money are transferred without any legitimate explanation, the bank may file a SAR.

The Impact of a SAR Filing

When a bank files a SAR, it is confidential. The individual or business subject to the report is not directly informed; However, the bank may decide to take action based on its findings, which can include:

• Account closures: If the bank believes the activity is risky or potentially illegal, it may close your account or freeze any available funds.
• Increased monitoring: Your account may come under closer scrutiny, with more restrictions placed on transactions.
• Law enforcement involvement: If the behavior in question warrants it, the SAR could lead to a broader investigation by federal or state law enforcement agencies.

What to Do if You Believe a SAR Has Been Filed Against You

While you won’t be directly informed if a SAR has been filed, you may suspect something is amiss if your bank account is frozen, closed, or you’re contacted by law enforcement regarding your financial activity. If you find yourself in this situation, here are some steps to take:

1. Seek Legal Counsel: The most important thing you can do is consult with an experienced criminal defense attorney. A SAR filing could be the beginning of a serious investigation, and you’ll want legal guidance to protect your rights and interests.
2. Gather Financial Records: Be prepared to provide your attorney with all relevant financial records. This can help explain the nature of your transactions and demonstrate that they are legitimate.
3. Do Not Attempt to Explain Yourself to the Bank: Anything you say to the bank could be misinterpreted or used against you in a later investigation. Your attorney will be able to navigate these communications appropriately.

A Suspicious Activity Report can be a precursor to serious legal trouble, but it’s important to remember that it is not an accusation of a crime. Banks are required to report anything that appears suspicious, even if the behavior is ultimately lawful. If you find yourself facing consequences related to an SAR filing, don’t wait—contact us today for a consultation and take control of your situation before it escalates. If you are facing financial crime allegations, our skilled team of criminal defense attorneys is here to help.

What is the “Free Money Hack”?

The trend usually involves TikTok users claiming they have found ways to manipulate the financial system, offering viewers methods to “hack” or exploit bank accounts, cash apps, or credit systems to obtain free money. Some of these schemes involve:

• Overdraft exploits: Encouraging users to overdraw bank accounts and then supposedly avoid the consequences.
• Fake check schemes: Depositing fraudulent checks into accounts and withdrawing the funds before the bank detects the fraud.
• Refund fraud: Filing fake claims with companies to get refunds for purchases that were never made.

These tactics promise fast cash with minimal effort, but what they really deliver is financial and legal disaster.

Why Following the Trend is Illegal

What these TikTok videos don’t explain is the serious legal consequences of participating in such schemes. Fraud, theft, and exploiting banking systems for personal gain are criminal acts, regardless of how trendy or harmless they may seem in a 60-second clip.

Here are some common legal charges that can result from participating in these activities:

1. Bank Fraud: This is a federal crime that can result in hefty fines and imprisonment. Intentionally defrauding a financial institution is illegal under U.S. law, and following these TikTok hacks can quickly escalate into a federal investigation.
2. Wire Fraud: Many of these hacks involve electronic transfers or communications, which falls under wire fraud. This also carries severe penalties, including long prison sentences.
3. Check Fraud: Depositing fake or altered checks with the intent to withdraw funds is considered check fraud. Even if you think you’re being clever by pulling out the money before the bank catches on, it’s still a criminal act.
4. Identity Theft: Some of these schemes suggest using fake names or other people’s banking details, which could lead to identity theft charges. This is a serious offense with strict penalties.
5. Theft by Deception: If you knowingly mislead a financial institution or another individual to gain money or assets, this is classified as theft by deception. Penalties can include jail time and significant fines.

Participating in these “hacks” isn’t just risky from a financial perspective—it’s a direct pathway to legal repercussions that can follow you for the rest of your life. Depending on the scale of the fraud or theft, you could face:

• Criminal Charges: These could range from misdemeanors to felonies, depending on the amount of money involved and the nature of the crime.
• Restitution: If convicted, you could be required to pay back any money that was wrongfully obtained, along with additional penalties.
• Permanent Criminal Record: A fraud conviction can make it difficult to secure future employment, housing, or loans, and can damage your reputation permanently.

The allure of easy money is tempting, but it’s important to remember that many social media trends, like the “free money hack,” come with significant risks. Engaging in these activities can lead to criminal charges that affect your financial future and personal freedom. Before following any advice from TikTok or other social media platforms, it’s vital to understand the full legal ramifications.

If you’ve been accused of fraud or any criminal activity related to online schemes, our experienced legal team is here to help. Don’t hesitate to contact us today for a free consultation. The legal system can be complex and unforgiving, but with the right defense, you can navigate the process and work toward the best possible outcome

On March 10, 2022, Garland announced Associate Deputy Attorney General Kevin Chambers as the Director For Covid-19 Fraud Enforcement.

In August, 2022, President Biden signed laws that give the Department of Justice and other federal agencies more time to investigate and prosecute Covid-19 fraud. It extended the statute of limitations for fraud charges involving PPP and EIDL fraud to ten years.

And on September 14, 2022, the DOJ announced the establishment of three Strike Force teams created to enhance the Department’s existing efforts to combat and prevent COVID-19 related fraud. The Strike Force teams will operate out of U.S. Attorney’s Offices in the Southern District of Florida, the District of Maryland, and a joint effort between the Central and Eastern Districts of California.

Concerned about PPP loan or EIDL loan fraud investigations? Our firm has represented both companies and individuals facing questions from the bank or investigators. Please contact us before interacting with any investigators or agents.

It’s a Federal crime to commit aggravated identity theft.

The Defendant can be found guilty of aggravated identity theft only if all the following facts are proved beyond a reasonable doubt:

(1) the Defendant knowingly transferred, possessed, or used another person’s [means of identification] [identification documents];

(2) without lawful authority; and

(3) during and in relation to [the eligible felony alleged in the indictment].

[A “means of identification” is any name or number used, alone or together with any other information, to identify a specific person, including a name, social security number, date of birth, officially issued driver’s license or identification number, alien registration number, passport number, employer or taxpayer identification number, or electronic identification number or routing code. It can also include a fingerprint, voice print or other biometric data.]

[An “identification document” is a document made or issued by or for the United States Government, a state or foreign government or political subdivision.]

The Government must prove that the Defendant knew that the [means of identification] [identification documents], in fact, belonged to another actual person, [living or dead,] and not a fictitious person.

The Government must prove that the Defendant knowingly transferred, possessed, or used another person’s identity “without lawful authority.” The Government does not have to prove that the Defendant stole the [means of identification] [identification documents]. The Government is required to prove the Defendant transferred, possessed, or used the other person’s [means of identification] [identification documents] for an unlawful or illegitimate purpose.

The Government also must prove that the [means of identification] [identification document] was possessed “during and in relation to” the crime alleged in the indictment. The phrase “during and in relation to” means that there must be a firm connection between the Defendant, the [means of identification] [identification documents], and the crime alleged in the indictment. The [means of identification] [identification documents] must have helped with some important function or purpose of the crime, and not simply have been there accidentally or coincidentally. The [means of identification] [identification documents] at least must facilitate, or have the potential of facilitating, the crime alleged in the indictment.

We at Conaway & Strickler, PC know how to combat these type of charges. Please feel free to access our blog for other entries here

Please contact us to learn more should you be facing criminal charges.

The woman was working as an insurance claims adjuster and is being accused of abusing her position at the insurance company for which she was working. The Georgia Insurance Commissioner announced that the woman was arrested for allegedly stealing thousands of dollars from her former employer. The woman’s brother was also arrested for his role as a suspected accomplice.

Both of the suspects are charged with seven counts of theft, seven counts of insurance fraud and three criminal counts of identity theft. Apparently, the woman was producing fraudulent accident claims using her brother’s name and then issuing him settlement payments, according to the latest reports. Investigators claim that the woman’s brother received almost $80,000 between 2011 and 2012.

On the other hand, just because a person has been arrested does not mean he or she is guilty. The law in Georgia considers everyone innocent until proved guilty of a crime. In this case, the woman and her brother have the right to defend themselves in a court of law against the insurance fraud charges. However, in order to be successful, they will have to familiarize themselves with the rules of the court and relevant laws.

Source: claimsjournal.com, “Former Allstate Adjuster Arrested for Insurance Fraud in Georgia“, April 28, 2015

Please see here for additional blog entries on this topic.

Another issue one could face is the concept of “relevant conduct”. If you are involved only peripherally, you could face an indictment with all co-conspirators, and thus face the sentencing guidelines related to the TOTAL loss amount by each individual involved. Once again, it is imperative that you contact a lawyer as soon as you can, to avoid the many pitfalls in navigating the criminal justice system.

As you can see in the example case cited above, that individual chose to use his constitutional right to a jury trial, and lost.