Russian national could face up to 175 years in bank fraud case, DOJ says

A Russian national accused of participating in a large-scale bank credential-harvesting scheme was arraigned Friday in federal court in the Northern District of Georgia following his extradition from the Republic of Georgia, the Justice Department announced.

Sergei Anatolyevich Filimonov, 36, a web developer, was indicted by a federal grand jury on Nov. 4, 2025, on charges connected to what prosecutors described as a transnational cyber-fraud conspiracy responsible for widespread bank account takeovers targeting victims across the United States.

According to court documents, Filimonov and his co-conspirators built spoofed websites designed to mimic federally insured financial institutions, then purchased sponsored search-engine links to steer banking customers to fraudulent login pages. Victims who entered their credentials on those pages had their information stolen, prosecutors said, and the conspirators allegedly used the stolen credentials to access bank accounts, check balances and initiate unauthorized wire transfers.

The indictment further alleges that Filimonov built and maintained the operation’s online infrastructure, including databases holding more than 5,000 stolen login credentials and software designed to capture and transmit victims’ authentication data. Prosecutors said the conspirators attempted to obtain millions of dollars from victim accounts, including those belonging to companies based in the Northern District of Georgia.

The Justice Department said it had previously seized the domain web3adspanels.org, which operated as a backend server storing credentials harvested from fraudulent banking websites. The seized database contained thousands of compromised credentials, including those belonging to victims in the Northern District of Georgia, according to the department.

Filimonov is charged with conspiracy to commit bank and wire fraud, access device fraud conspiracy, multiple counts of bank and wire fraud, possession of unauthorized access devices, possession of device-making equipment, effecting transactions with unauthorized access devices and aggravated identity theft. If convicted, he faces a minimum penalty of two years and a maximum penalty of 175 years in prison, according to the Justice Department.

Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division, U.S. Attorney Theodore S. Hertzberg for the Northern District of Georgia and FBI Special Agent in Charge Marlo Graham of the FBI Atlanta Field Office announced the case. The FBI Atlanta Field Office is investigating.

The Justice Department said the FBI’s Internet Crime Complaint Center has received more than 5,100 complaints reporting bank account takeover fraud since January 2025, with reported losses exceeding $262 million. Officials urged the public to monitor financial accounts regularly, use bookmarked or favorite links instead of search results to reach login websites and remain alert to phishing attempts.

An indictment is merely an allegation. Filimonov is presumed innocent unless and until proven guilty beyond a reasonable doubt in a court of law.