Nigerian Hacker Gets 8 Years for $7 Million Tax Fraud Scheme

“Chukwuemeka Amachukwu believed he was operating safely offshore when he targeted his victims, but he has now been held to account and now faces a serious sentence for his crimes,” Jamie McDonald, U.S. attorney for the Southern District of New York, said.

The sentence, plea and penalties

Federal authorities announced that a 40‑year‑old Nigerian national, identified in court filings as Chukwuemeka Victor Amachukwu, was sentenced to eight years in prison after pleading guilty to conspiracy to commit computer intrusions and wire fraud. A federal judge also ordered Amachukwu to pay nearly $3.65 million in restitution to victims and to forfeit almost $10.85 million. The Justice Department characterized the sentence as a response to a “sophisticated” and prolonged criminal operation.

How the scheme operated

Prosecutors say the activity spanned multiple years, with Amachukwu enriching himself from 2019 to 2023 by targeting U.S.-based tax preparation businesses. The conspiracy combined cyber intrusions and traditional fraud: members of the group hacked into tax firms’ systems, stole tax and personal data from business customers, filed false federal and state tax returns using those stolen identities, and ran fraudulent investment solicitations that convinced victims to send money for nonexistent opportunities.

One documented intrusion began in May 2021, when members of the conspiracy sent a spearfishing email to an employee at a New York tax preparation business; that message infected the firm’s computer systems with malware, according to court records. The malware-enabled intrusions are tied in the filings to the broader pattern of identity theft and deceptive investment solicitations.

Scale of the theft and financial impact

Prosecutors attributed substantial sums to the conspirators’ activities: more than $7 million obtained through fraudulent investment schemes, about $2.5 million recovered via fraudulent tax returns, and $819,000 in fraudulent payouts from the Small Business Administration’s Economic Injury Disaster Loan (EIDL) program. The files state that Amachukwu and alleged co-conspirators stole the tax and personal data of at least 800 business customers after hacking into tax preparation firms based in New York, Texas and elsewhere.

The court’s combined financial remedies — restitution of nearly $3.65 million and forfeiture of nearly $10.85 million — underscore the authorities’ effort to both compensate victims and seize criminal proceeds at scale.

Law enforcement, arrest and co‑conspirators

The investigation involved the FBI, the Justice Department’s Office of International Affairs and the U.S. Marshals Service, which assisted in locating and taking Amachukwu into custody. According to the Justice Department account, Amachukwu was arrested in France in July 2023 and later extradited to the United States in August 2025. Court records also name an alleged co-conspirator, Kingsley Uchelue Utulu, along with other alleged Nigeria‑based co-conspirators.

What this means for tax preparation businesses, the Small Business Administration, and victim business customers

• Tax preparation businesses: Firms that handle client tax records are shown here to be high‑value targets; the case illustrates how a single successful intrusion can expose hundreds of clients’ tax and personal data and enable downstream fraudulently filed returns.
• Small Business Administration (EIDL program): The fraudulent $819,000 in EIDL payouts tied to the scheme highlights exposure in pandemic-era loan programs and the challenge of distinguishing legitimate applicants from identity‑based fraud at scale.
• Victim business customers: At least 800 businesses had tax and personal data stolen, and victims faced both financial loss through fraudulent returns and investment scams as well as the administrative burden of remediating identity theft and false filings.

The case brings several concrete takeaways into focus: prosecutors pursued both prison time and substantial financial remedies; international cooperation produced an arrest and extradition; and the mix of cyber intrusion, identity theft and investment fraud produced measurable losses across multiple federal programs and private businesses. The record names one arrested defendant, an identified alleged co‑conspirator, and quantifies the monetary and data impacts — leaving the federal forfeiture and restitution orders as the immediate legal closing actions in a years‑long scheme.

Source: CyberScoop, “Nigerian sentenced to 8 years for long-running tax business hacking and fraud scheme”