Russian National Extradited, Charged in $14.6 Million Bank Account Takeover Scheme
A Russian national extradited from Georgia faces 11 federal charges in Atlanta for his alleged role in a large-scale bank account takeover conspiracy that defrauded U.S. banks of millions.
Sergei Anatolyevich Filimonov, a 36-year-old Russian citizen, has pleaded not guilty to 11 criminal counts in Atlanta federal court, following his extradition from the Republic of Georgia. The charges stem from his alleged involvement in a sophisticated conspiracy responsible for widespread bank account takeover fraud, which prosecutors claim resulted in losses exceeding $14.6 million for U.S. financial institutions.
Filimonov and an unindicted co-conspirator are accused of operating a scheme for approximately two years, until October 2025. Their alleged method involved registering spoofed domain names and using sponsored search engine links to lure victims. This platform was reportedly used to store stolen login credentials and track compromised financial accounts, enabling the fraudulent transfers.
Federal prosecutors identified the duo after seizing the domain web3adspanels.org in December. The investigation revealed over 5,000 login credentials stored on the platform, highlighting the scale of the credential harvesting operation. The indictment details specific instances of significant financial theft, including an unauthorized transfer of $5 million in June 2024 and another of $735,000 in November of the same year.
In one particularly egregious incident, Filimonov is accused of stealing credentials from an employee of an Atlanta-area corporation. He then allegedly manipulated this employee into divulging further information to bypass security measures, leading to the theft of over $5.5 million from the company's accounts.
Filimonov was determined by a judge to be a serious flight risk and is being held in federal custody pending his trial. The indictment paints a picture of a coordinated effort to exploit stolen credentials for substantial financial gain, targeting major U.S. banks.
The FBI has previously reported a significant surge in bank account takeover fraud, with victims collectively reporting losses exceeding $262 million since January 2025, underscoring the pervasive threat posed by such schemes.
This case highlights the ongoing challenges law enforcement faces in combating international cybercrime, particularly when it involves sophisticated account takeover tactics and the exploitation of stolen personal and financial information. The extradition and subsequent charges against Filimonov represent a significant step in prosecuting those involved in these high-value financial fraud operations.
The new article provides further details on the extradition of Sergei Anatolyevich Filimonov, 36, from the Republic of Georgia to the U.S. to face charges. Filimonov appeared in an Atlanta federal court on September 4, pleading not guilty to fraud and identity theft charges, and remains in custody. The FBI highlighted his alleged use of spoofed domains and fraudulent login pages to steal millions from victims, linking the case to the December 2025 seizure of the web domain web3adspanels.org.
The new article provides further details on the bank-account takeover scheme orchestrated by Sergei Filimonov, specifying that the operation, which began in November 2023, involved spoofing bank domains and purchasing sponsored links to direct victims to fraudulent sites. It also clarifies that authorities seized the credential-storing domain in December 2025, and that the FBI identified at least 19 U.S. victims with attempted losses around $28 million.