Russian Web Developer Arraigned In Georgia Over Multi-Million-Dollar Bank Phishing Scheme
A 36-year-old Russian national appeared in a federal courtroom in Atlanta on Friday to face criminal charges tied to a large-scale online banking fraud operation, federal authorities announced.
Sergei Anatolyevich Filimonov, a web developer, was extradited from the Republic of Georgia following an indictment returned by a federal grand jury in the Northern District of Georgia on Nov. 4, 2025.
Court documents state that Filimonov and his co-conspirators ran an operation that relied on spoofed websites designed to look like legitimate, federally insured financial institutions. The group bought sponsored links on major search engines to lure online banking customers to these fake login portals.
When victims typed in their usernames and passwords, the conspirators collected the credentials, logged into the genuine accounts, checked account balances, and sent unauthorized wire transfers to drain the funds.
Prosecutors allege that Filimonov built and managed the digital infrastructure that powered the scheme. His setup included software built to capture authentication data as well as interactive databases that held more than 5,000 stolen account credentials. The group attempted to steal millions of dollars from victims nationwide, including corporate accounts based in the Northern District of Georgia.
As part of the investigation, the U.S. Department of Justice seized a backend domain, web3adspanels.org, which served as the storage hub for the harvested credentials. A search of the database revealed thousands of compromised logins from victims across the country and the Atlanta area.
Filimonov faces multiple charges, including conspiracy to commit bank and wire fraud, access device fraud conspiracy, multiple individual counts of bank and wire fraud, possession of unauthorized access devices, possession of device-making equipment, effecting transactions with unauthorized access devices, and aggravated identity theft. If convicted on all counts, he faces a mandatory minimum sentence of two years in prison and a statutory maximum of up to 175 years.
The charges were announced by Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division, U.S. Attorney Theodore S. Hertzberg for the Northern District of Georgia, and FBI Special Agent in Charge Marlo Graham of the FBI Atlanta Field Office.
The case remains under investigation by the FBI Atlanta Field Office, with prosecution handled by Senior Counsel Brian Mund of the Justice Department’s Computer Crime and Intellectual Property Section (CCIPS) and Assistant U.S. Attorney Jessica Morris. Several foreign and domestic agencies assisted in the operation, including the Justice Department’s Office of International Affairs, former CCIPS Trial Attorney Jolee Porter, the FBI Legal Attaché in Tbilisi, and police and prosecutors in both Estonia and the Republic of Georgia.
Federal officials noted that bank account takeover schemes have surged recently. Since January 2025, the FBI’s Internet Crime Complaint Center (IC3) has logged over 5,100 complaints regarding account takeovers, accounting for more than $262 million in reported losses.
Investigators advise banking customers to regularly monitor their accounts, verify search results, and use browser bookmarks rather than search engines to navigate to online banking portals.