Nigerian Duo Handed Prison Sentences in US for $2.4 Million Cyber Fraud

Two Nigerian nationals, Chijioke Timothy Odimegwu and Harafat Mogaji, have received federal prison sentences for their involvement in an international cyber fraud conspiracy that targeted businesses and non-profit organizations, including victims located in Iowa, United States. The Department of Justice announced the sentencing on Tuesday, September 29, 2026, through a statement issued by United States Attorney David C. Waterman of the Southern District of Iowa.

Odimegwu, aged 25, and Mogaji, aged 26, were sentenced on Friday, September 25, 2026. Court documents and evidence presented during their sentencing revealed that for a period spanning nearly two years, both men, who were serving members of the United States Air Force at the time, launched extensive email spamming and phishing campaigns against businesses across the U.S. Their objective was to illicitly obtain usernames and passwords belonging to employee email accounts.

Utilizing these stolen credentials, along with sophisticated 'spoofed' email addresses designed to mimic those of the victim companies or their legitimate business partners, the fraudsters and their co-conspirators communicated with targets. They successfully redirected payments intended for trusted business partners into bank accounts controlled by the conspirators.

Working alongside accomplices both within the U.S. and internationally, Odimegwu and Mogaji fraudulently diverted a wire transfer exceeding $1.68 million from a victim in Iowa City, Iowa, into a Chicago-based bank account linked to the scheme. Additionally, they rerouted another wire transfer of over $720,000 from an Ohio victim to an account under their control. These successful diversions were among numerous other attempts made by Odimegwu and Mogaji to defraud businesses in Iowa and across the nation.

Beyond wire transfer manipulation, the duo's spamming and phishing operations also enabled them to harvest sensitive financial data from victims. This included bank account numbers, personal identification numbers (PINs), and credit and debit card details, notably obtaining credit card information from a non-profit organization situated in Pella, Iowa. They also procured similar stolen data from their co-conspirators. This pilfered information was then used to conduct or attempt unauthorized financial transactions, which they shared amongst themselves.

Odimegwu received a prison sentence of 111 months and was ordered to pay restitution totaling $366,617.59. Mogaji was sentenced to 78 months in prison and must pay restitution amounting to $995,680.45. Both individuals were taken into custody immediately following their sentencing. Upon completion of their respective prison terms, Odimegwu and Mogaji will each undergo a three-year period of supervised release.

Eugene Kowel, Special Agent in Charge of the FBI Omaha Field Office, commented on the case: “When cyber intrusion schemes target businesses and nonprofits in our communities, we will aggressively surge resources to protect the American people and their life savings.” He emphasized that cybercriminals from diverse backgrounds attack digital systems, from corporate networks to personal smartphones, underscoring that no individual or device is immune. Kowel affirmed the FBI’s commitment to holding such criminals accountable and urged organizations and individuals to enhance their digital security and recognize scams.

The Federal Bureau of Investigation led the investigation, supported by the Air Force Office of Special Investigations. Assistant United States Attorney Joseph Lubben was responsible for prosecuting the case.