U.S. extradites alleged Market0Day and Spoxy operator over phishing-kit and smishing marketplace scheme

A 26-year-old Algerian man was extradited to the United States after prosecutors accused him of running two cybercrime marketplaces that sold phishing tools and mass-texting services. The Justice Department says Abdellah Belmili, also known as Spox, administered Market0Day in 2020 and later launched Spoxy, where criminals could buy phishing kits, access to compromised email servers, and bulk SMS services for large-scale smishing campaigns. Prosecutors say the scheme targeted major banks including JPMorgan Chase, Bank of America, Wells Fargo, and American Express, involved about 5,600 victims, and brought roughly $900,000 into an account he controlled between 2020 and 2023.
Why it matters: This matters because it shows the infrastructure behind phishing and bank-fraud campaigns, not just individual scams, and names the services used to enable them. Financial institutions and consumers should stay alert for bank-themed phishing emails and text messages, while defenders can use the marketplace names and actor alias to support threat tracking and fraud investigations.

Sources

Algerian Man Extradited to US for Running Cybercrime Marketplaces
Eduard Kovacs 2026.06.23 100% relevant
This article establishes a distinct story: the extradition and U.S. prosecution of the alleged administrator of the Market0Day and Spoxy cybercrime marketplaces.
← Back to all stories