YMCO Leader Pleads Guilty to Running International Money Mule Network

Oleg Korniev, a 42-year-old dual citizen of Ukraine and Russia, has pleaded guilty in the United States to leading an international money laundering organisation that helped cybercriminals move funds stolen from American businesses and bank accounts overseas.

The organisation, known as Your Mule Cashout (YMCO), recruited more than 15,000 US-based money mules and laundered at least $7 million in criminal proceeds, according to court documents. The network was linked to losses affecting more than 750 US bank accounts and was responsible for more than $14.7 million in actual and intended losses to confirmed victims.

Korniev pleaded guilty on October 8, 2026, to conspiracy to commit money laundering, money laundering, conspiracy to commit computer fraud, conspiracy to commit access device theft and aggravated identity theft. Sentencing will take place at a later date.

YMCO operated an international money laundering service designed to help computer hackers conceal the theft of funds from US companies and transfer the proceeds to recipients abroad. The organisation maintained online infrastructure and a network of participants who handled funds through personal bank accounts before transferring them to overseas recipients, primarily in Eastern Europe.

Cybercriminals paid YMCO a percentage of the money stolen in exchange for its laundering services. The organisation's role was to provide the financial infrastructure needed to move the proceeds out of the accounts targeted by hackers and make the transactions more difficult to trace.

A central component of the operation was the recruitment of individuals who believed they had legitimate employment. YMCO advertised or presented work opportunities that involved receiving payments from businesses into personal bank accounts, withdrawing the funds and transferring them to purported business partners overseas.

The recruited individuals were told that they were processing ordinary commercial payments. In reality, the incoming funds represented money stolen by cybercriminals from US business bank accounts. The recruited individuals then transferred the money to other YMCO participants, enabling the proceeds to leave the United States.

The money mules were not paid for their work. Instead, they were deceived into providing the accounts and carrying out the transactions that allowed the organisation to move stolen funds across borders.

According to court documents, Korniev helped develop YMCO's operating policies and procedures and managed its workforce, including hiring and dismissing employees. He also oversaw performance-related decisions and secured illegal services required to support the organisation's activities.

As part of his guilty plea, Korniev admitted that he intended to launder more than $9.7 million originating from cybercriminal activity and actually laundered at least $7 million. He also acknowledged YMCO's responsibility for more than $14.7 million in actual and intended losses involving confirmed victims.

The case demonstrates how money mule networks can serve as a critical intermediary between cybercrime and the movement of illicit funds. Rather than transferring stolen money directly through accounts controlled by hackers, the network used apparently ordinary bank customers to receive, withdraw and forward funds, creating additional layers between the original theft and the final recipients.

The use of deceived account holders also enabled the organisation to operate at scale. With thousands of recruited individuals and supporting online infrastructure, YMCO could process transactions across multiple accounts and jurisdictions without requiring the principal organisers to handle every transfer directly.

The investigation was conducted by the Federal Bureau of Investigation, with assistance from US and international law enforcement agencies. The US Department of Justice's Office of International Affairs and the FBI's law enforcement attaché in Tbilisi supported the case, alongside authorities in Georgia, including the country's Prosecutor's Office.

Korniev was arrested in Georgia before being brought into the US judicial process. His prosecution forms part of a broader international investigation into YMCO and its participants.

Four other individuals associated with the organisation were previously arrested overseas, extradited to the Western District of North Carolina and convicted after pleading guilty to conspiracy to commit money laundering. Their prison sentences ranged from approximately 37 months to 63 months. Courts also ordered each of them to pay more than $9.1 million in restitution to numerous US victims.

Korniev faces a minimum prison sentence of two years and a maximum of 50 years across the offences to which he pleaded guilty. The final sentence will be determined by a federal judge after considering the US Sentencing Guidelines and other relevant factors.

Korniev has also agreed to provide full restitution to known victims for their actual losses and to forfeit cash seized when he was arrested in Georgia. The amount ultimately recovered and distributed to victims will depend on the applicable proceedings and recovery process.

The case illustrates the role of organised money mule recruitment in international cybercrime operations, where stolen funds are routed through individuals who may not understand the criminal purpose of the transactions. YMCO's organisers provided the infrastructure and coordination that enabled hackers to move stolen money overseas, while deceived account holders carried out the transfers on which the laundering operation depended.

By fLEXI tEAM