Free tools Windows power users keep installed
One-click scans. No signup required.
Obinwanne Okeke, whom the FBI described as a Nigerian entrepreneur, was sentenced to 10 years in prison in February 2021 after pleading guilty to wire fraud. The FBI said his phishing-enabled business email compromise scheme caused a London construction equipment distributor to lose $11 million.
What happened in the case
The FBI says the scheme began in 2018, when Okeke sent a phishing email to the chief financial officer of a construction equipment distributor in London. The email led to a deceptive login page that appeared legitimate but was controlled by Okeke. It captured the CFO’s username and password.
Using those credentials, Okeke accessed the CFO’s email account and sent requests for million-dollar wire transfers to company employees. The instructions directed payments to bank accounts in other countries and often included fake invoices.
How the messages were concealed
Okeke also set up email-filtering rules in the CFO’s account. Those rules intercepted the fraudulent messages and prevented the actual CFO from seeing them. They could also keep employees’ follow-up questions or warnings from reaching him.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →#1 Best Overall
FBI Special Agent Marshall Ward explained that changing the password alone would not remove the filters: “If the CFO had changed his password, those filtering rules would still apply to the email. So his email traffic would still be intercepted.”
Timeline and sentence
| Date | Event |
|---|---|
| 2018 | The FBI says Okeke sent the phishing email targeting the distributor’s CFO. |
| June 2020 | Okeke pleaded guilty to wire fraud. |
| February 2021 | He was sentenced to 10 years in prison. |
| April 26, 2021 | The FBI published its account of the case. |
The FBI attributed the $11 million loss to the London company and reported the 10-year prison sentence. The company is not named in the FBI account described here.
Rank #2
Why this was a business email compromise attack
Business email compromise, or BEC, uses trusted business communications to induce payments. In this case, phishing captured a senior employee’s credentials, account access made the fraudulent requests appear authentic, and mailbox filters concealed the deception. The payment instructions therefore looked like routine million-dollar transactions to employees who were not seeing the attacker’s interference.
Ward said, “This was a large company working in million-dollar transactions regularly. The bank didn’t catch it because it seemed normal.”
What organizations can learn
Verify high-value payment requests independently
Do not rely only on email, even when a request appears to come from an executive or contains familiar invoices. Ward’s principal advice was: “My biggest piece of advice is to pick up the phone and verify any large transfer like that.” Use a known phone number or another trusted channel, not contact details supplied in the suspicious message.
Check for hidden mailbox rules after compromise
A password reset is important, but it does not necessarily remove forwarding or filtering rules created by an attacker. After suspected compromise, administrators should inspect the mailbox for rules that delete, forward, move or hide messages, then secure the account and review related access.
Act immediately when fraud is suspected
The FBI advises victims to contact their bank immediately and report the incident to the Internet Crime Complaint Center (IC3). Rapid contact with the bank can sometimes help stop a fraudulent transfer, but it is not a guarantee that funds will be recovered.
Quick Recap
Best Value
What the FBI account establishes—and what it does not
- The FBI identifies Okeke as a Nigerian entrepreneur and describes the conduct as a phishing-enabled BEC scheme.
- The reported victim was a construction equipment distributor in London, with an $11 million loss.
- Okeke pleaded guilty to wire fraud in June 2020 and received a 10-year sentence in February 2021.
- The account does not establish his current custody or release status.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
