Leader of 'Your Mule Cashout' Pleads Guilty: How Fake Job Offers Turned 15,000 Americans Into Money Mules

Published Oct. 9, 2026. Case statuses are current as of that date.

The job ad looks ordinary: a company needs someone in the U.S. to receive business payments into a personal bank account, withdraw the money, and wire it to overseas "partners." According to federal prosecutors, thousands of Americans who answered offers like that were not working for a real company at all. They were moving money that hackers had stolen from U.S. bank accounts.

On Oct. 8, 2026, Oleg Korniev, 42, pleaded guilty to running that operation, known as Your Mule Cashout (YMCO), the U.S. Department of Justice announced [1]. Prosecutors say the organization recruited more than 15,000 U.S.-based money mules and laundered at least $10 million stolen from more than 750 U.S. bank accounts [1].

Note on status: Korniev has pleaded guilty but has not been sentenced. The mules described in this article were, according to prosecutors, deceived; no mule is named here.

How the scheme worked

According to court documents described by the Justice Department and reporting by BleepingComputer [1][2]:

1. Hackers steal from businesses. Cybercriminals broke into the bank accounts of U.S. companies. They needed a way to get the money out of the country without it being traced or frozen.
2. YMCO sells a "cash-out" service. YMCO ran online infrastructure that let hackers move stolen funds to countries primarily in Eastern Europe, in exchange for a percentage of the money.
3. Fake companies recruit "employees." BleepingComputer reported that YMCO recruited U.S. residents through spam emails from fake companies, and that each recruit went through what appeared to be a legitimate hiring process.
4. The "job." Recruits were told their work was to receive payments from businesses into their personal bank accounts, withdraw the money, and wire it to the fake company's partners overseas. Prosecutors say the mules were "deceived by YMCO into believing that they were working for legitimate companies and making genuine money transfers" [1].
5. The wire-out. According to BleepingComputer, the mules wired the funds through Western Union and MoneyGram to "cash-out contractors" in Moldova, Ukraine, Russia or Latvia [2].
6. No paycheck. The Justice Department says the mules "never received payment for their services" [1].

BleepingComputer reported that YMCO had operated since September 2007, also ran similar schemes in Germany, Italy, the United Kingdom and Australia, and handled money taken from accounts at more than 35 banks [2].

The person who pleaded guilty

Oleg Korniev, 42, was one of YMCO's leaders, according to the Justice Department. Prosecutors say he helped develop the group's policies and procedures; managed, hired and fired employees; rewarded and punished employees based on performance; and secured illegal services that supported the operation [1]. His city of residence was not given in the release. He was arrested in the Republic of Georgia, where authorities seized cash from him [1].

He pleaded guilty to:

• conspiracy to commit money laundering
• money laundering
• conspiracy to commit computer fraud
• conspiracy to commit access device theft
• aggravated identity theft

As part of his plea, Korniev admitted that YMCO was responsible for more than $14.7 million in actual and intended losses to confirmed victims, that he intended to launder more than $9.7 million for cybercriminals, and that he did launder at least $7 million. He agreed to pay full restitution to known victims for their actual losses and to forfeit the cash seized when he was arrested [1].

Sentencing will be set at a later date. He faces a minimum of two years and a maximum of 50 years in prison; a federal judge will decide the sentence after considering the U.S. Sentencing Guidelines and other factors. The case is being prosecuted in the Western District of North Carolina, with help from the FBI and authorities in the Republic of Georgia [1].

"Money mules play crucial roles in cybercrime, so the Justice Department pursues mules and their recruiters wherever they operate and however long it takes," said Assistant Attorney General A. Tysen Duva of the Criminal Division [1].

Four other people involved with YMCO were previously arrested overseas, extradited to North Carolina, and pleaded guilty to conspiracy to commit money laundering. They received sentences of about 37 to 63 months, and each was ordered to pay more than $9.1 million in restitution [1]. The release did not name them, and we have not named them here.

Red flags of a money mule job

• A "job" that runs money through your personal bank account. Titles vary (payment processor, financial agent, transfer coordinator), but the core task is the same: receive funds, withdraw them, and send them on.
• Wiring or transferring money to people you have never met, especially overseas.
• Hired without a real interview, often after an unsolicited email or message.
• Pay that never arrives, or arrives only as a cut of the money you move.
• Reshipping or check-forwarding variations. The FTC warns that if an employer sends you a check, tells you to deposit it, keep part, and send the rest to someone else, "That's a scam. A legitimate employer will never ask you to do that" [3].

What to do if you're targeted, or think you've already been used

1. Stop moving money immediately. Do not send any more transfers, even if the "employer" pressures you.
2. Call your bank using the number on your card or statement and explain what happened. Ask whether incoming payments to your account can be frozen or returned.
3. Keep everything: the job ad, emails, chat messages, transfer receipts, and account details you were given.
4. Report it to the FBI at ic3.gov and to the FTC at ReportFraud.ftc.gov. The FTC's job-scam guidance also explains what to do if you paid a scammer [3].
5. If your business account was drained, contact your bank's fraud department right away and file a police report; quick reports give banks the best chance of recalling wires.

Case status (as of Oct. 9, 2026)

Defendant	Court	Status as of Oct. 9, 2026	Source
Oleg Korniev, 42	U.S. District Court, Western District of North Carolina	Pleaded guilty Oct. 8, 2026, to conspiracy to commit money laundering, money laundering, conspiracy to commit computer fraud, conspiracy to commit access device theft, and aggravated identity theft; agreed to restitution and forfeiture; sentencing date not yet set	[1], [2]

Statuses can change. A guilty plea is not a sentence, and a sentence can be appealed.

Sources

1. U.S. Department of Justice, Office of Public Affairs, "Ukrainian-Russian Dual Citizen Pleads Guilty to Running International Money Laundering Organization for Cybercriminals," Oct. 8, 2026. https://www.justice.gov/opa/pr/ukrainian-russian-dual-citizen-pleads-guilty-running-international-money-laundering
2. Sergiu Gatlan, "Man admits to running network of 15,000 money mules for cybercriminals," BleepingComputer, Oct. 9, 2026. https://www.bleepingcomputer.com/news/security/ukrainian-russian-dual-citizen-admits-to-laundering-millions-for-cybercriminals/
3. Federal Trade Commission, "Job Scams," consumer advice, accessed Oct. 9, 2026. https://consumer.ftc.gov/articles/job-scams

---

Corrections and updates: If you are named in this article, or represent someone who is, and believe anything here is inaccurate or out of date (including a dismissal, acquittal, or change in case status), please contact us at editorandchief@scammers.com. We will review it and update the article promptly.