Former U.S. Air Force members sentenced over multi-year business email compromise and phishing fraud scheme

Two former U.S. Air Force members were sentenced to prison for running business email compromise attacks that stole email and financial credentials and redirected company payments. The Justice Department said the pair used phishing and spam to obtain employee logins, then sent spoofed emails posing as trusted business partners to reroute wires, including transfers of more than $1.68 million and $720,000, to conspiracy-controlled bank accounts.
Why it matters: This matters because business email compromise remains one of the costliest forms of cyber-enabled fraud for companies and public institutions. Organizations should treat payment-change requests as high risk, verify them out of band, and harden email accounts against phishing and account takeover.

Sources

US Air Force members given over 6 years in prison for cyber theft of more than $2 million
2026.09.29 99% relevant
This article is the same underlying event and adds the sentencing details: Chijioke Timothy Odimegwu received more than 9 years, Harafat Mogaji received 6.5 years, along with restitution amounts, victim count, and examples of diverted payments totaling more than $2 million.
Former US Air Force members sent to prison over BEC attacks
Sergiu Gatlan 2026.09.29 100% relevant
This article establishes a distinct law-enforcement story centered on the sentencing of two former Air Force members for a specific BEC and phishing conspiracy, not an update to an existing tracked event.
← Back to all stories