Nigerian Hackers Sentenced for Business Email Compromise Targeting Businesses in U.S

They say crime doesn’t pay, but apparently, someone forgot to tell Oludayo Kolawole John Adeagbo. Known as "John Edwards" or "John Dayo" (because one alias just wasn’t enough), this dual citizen of Nigeria and the UK found himself in hot water after a sophisticated business email compromise (BEC) scam—spoiler alert: It didn’t end well for him. Let’s dive right in.

Oludayo Kolawole John Adeagbo, involved in a business email compromise scam, attempted to steal over $3 million by targeting organizations in the U.S. His schemes involved hacking email accounts to manipulate financial transactions, leading to his recent sentencing of seven years in prison and a hefty restitution bill.


How It Works:

Adeagbo and his co-conspirators engaged in multiple cyber-enabled BEC schemes by gaining access to legitimate email accounts of companies or creating fake ones resembling employees involved in financial transactions. Using these compromised accounts, they sent fraudulent wiring instructions to victims, tricking them into transferring funds to the scammers’ accounts.

In one incident, they registered a domain name similar to a legitimate construction company, then used it to deceive a North Carolina university into wiring over $1.9 million, which they later laundered through various financial transactions. Quite the high-stakes phishing game, right?


Who’s Targeted:

Entities like local governments, construction companies, educational institutions in Texas and North Carolina were prime targets. Organizations with large financial transactions in progress were especially vulnerable—victims who were busy with legitimate business and trusted the emails they received.


Real-Life Example:

Adeagbo's schemes included tricking a university into wiring nearly $2 million. But thanks to international cooperation between the U.S. and the UK, he was extradited and is now facing justice. His partner-in-crime, Donald Ikenna Echeazu, wasn’t so lucky either, serving an 18-month sentence for his role in the conspiracy.


Why You Should Care:

BEC scams are no small fry. They cause significant financial losses to businesses, educational institutions, and even local governments, undermining trust in digital communications. A scam like this can lead to more than just financial headaches—it can disrupt projects, cost people their jobs, and damage reputations.


How to Protect Yourself:

  1. Verify Before You Wire:
    Always double-check any requests for wire transfers, especially if the request comes via email. Call the sender on a trusted number to confirm.
  2. Look for Red Flags:
    Watch out for emails with slight variations in domain names or email addresses. A missing letter or added symbol could be a scammer in disguise.
  3. Train Employees:
    Educate your staff to recognize phishing attempts and suspicious emails. Adeagbo’s schemes worked because people trusted what appeared to be a legitimate source.
  4. Enable Multi-Factor Authentication (MFA):
    Make it harder for hackers to access sensitive accounts by requiring multiple verification steps.
  5. Monitor for Anomalies:
    Implement software that detects unusual login locations or sudden changes in financial behavior.


Quick Tips & Updates:

  • Did You Know? Over $3 billion is lost annually due to BEC scams worldwide.
  • Pro Tip: Always verify payment requests through a secondary communication channel, like a phone call.


Have you encountered a suspicious email or felt targeted by a scam? Hit reply and share your story with us—your insights might save someone from falling into the same trap!

Stay safe, stay informed, and double-check those wire transfer requests. Scammers may be smart, but with the right precautions, we can outsmart them.


Key Terms Explained:

  • Business Email Compromise (BEC): A type of phishing attack where hackers spoof or compromise email accounts to manipulate financial transactions.
  • Wire Fraud: A crime involving the use of telecommunications or the internet to deceive individuals into sending money or financial data.

To read more, kindly find source article here


The US and Microsoft Disrupt a Russian Hacking Group Targeting American Officials and Nonprofits