The images in this article were generated with artificial intelligence. How we publish
A Ghanaian citizen pleaded guilty this week for his involvement in a vast network of scam that, according to the authorities, stripped victims in the United States of over $100 million through a combination of romantic fraud and attacks on companies. The defendant, Derrick Van Yeboah, admitted his responsibility for a conspiracy to commit electronic fraud and also agreed to pay more than $10 million in restitution, according to federal judicial documents.
The charges detail a structured and professional operation that worked from at least 2016 to May 2023. Van Yeboah was identified as a high-ranking member within this Ghana-based scheme, an organization that used both personal deception on dating platforms, as well as fraudulent suplication and mail techniques to induce bank transfers from companies and individuals. You can consult the official statement of the federal prosecutor in the South District of New York for more details in this link and review the indictment in published judicial documents.

The investigation describes two main forms of scam. On the one hand, so-called "romance scams" or romantic fraud, in which scammers cultivate an online emotional relationship with victims, almost always older who live alone, to gain their trust and then induce them to send them money or transfer funds to intermediate accounts in the United States. On the other hand, the operation carried out corporate mail engagement attacks (business email compromise), where criminals falsify mail addresses and supplanted customers or executives to instruct urgent and legitimate payments to network-controlled accounts.
What makes this case relevant from a technological and criminal perspective is the sophistication in the monetization chain. According to the prosecution, the organization in Ghana worked with accomplices in the United States who acted as "mules" or "middlemen": they received the funds, washed the money, kept one part and sent the rest to coordinators in West Africa - identified in the documents as "chairmen" - who led the fraud. This combination of social engineering, technical supplanting and laundering networks complicates the traceability of funds and increases damage to victims.
The authorities claim that Van Yeboah personally participated in many of the romantic fraud in the prosecution and that his conduct is linked to losses over $10 million for specific victims. He was extradited to the United States in August 2025 to face the process. The federal judge Arun Subramanian is scheduled to deliver a sentence on 3 June, and the law provides for sentences of up to 20 years & apos; imprisonment on these charges.
Beyond the particular impact of this case, the schemes described are part of a greater trend: online scams that mix personal deception techniques with methods that exploit administrative and technological vulnerabilities of companies. Organizations like the FBI have repeatedly warned about the risks of romantic fraud and corporate email engagement, and offer practical guides to recognize alarm signals and protect accounts and communications. To better understand these threats and how to prevent them, it is useful to review the FBI's resources on romantic scams and on the engagement of mail in corporate environments in the the FBI page on romance scams and your section on business email compromise.
If viewed from a technological perspective, these frauds are a reminder that safety is not just a matter of technical barriers: social engineering remains the most effective tool for violating systems. A well-built mail or a convincing profile in a dating application can cancel strong passwords or authentication systems if the victim trusts and acts under pressure. Therefore, effective protection combines technical controls - multifactor authentication, advanced mail filters, verification of payment instructions - with clear training and protocols in companies and education for end-users, especially older adults who are frequent targets.

At the judicial and operational level, this case also highlights the complexities of combating transnational networks. Inter-agency collaboration, international cooperation for extradition and criminal proceedings, and the identification of the first accounts that receive funds in various jurisdictions are essential elements for dismantling these chains. The existence of "mules" within the victim country itself complicates the response, because it extends the range of action of criminals and disperses the evidence by multiple financial institutions.
For the common person, the lesson is two-fold: to maintain a critical attitude in newly formed online relationships and to verify any request for money through independent and reliable channels. If an unexpected mail is received by requesting urgent transfers, it is prudent to confirm by phone with the person or company that allegedly sends it and to consult with the bank before authorizing movements. If anyone believes they have been victims, it is important to report them to the local authorities and, if they are in the United States, to go to the Internet Crime Complaints Centre (IC3) so that the corresponding response is recorded and activated.
Cases like Van Yeboah's are painful because they combine economic gain with emotional exploitation: victims not only lose money, but trust. Technology facilitates shields and detection, but prevention also depends on human consciousness. The ongoing criminal process provides an opportunity for the full structure of the operation to be reviewed and for assets to be recovered, to the extent possible, while society and companies must redouble efforts in education and controls to make these networks less effective.
Related
More news on the same subject.

Four Plex2Shell CVE allows remote execution and mining and proxy backdoor deployment
In recent days, an increase in attacks has been confirmed that take advantage of a chain of failures in Plex Media Server - nicknamed "Plex2Shell" by researchers - to run code r...

GhostAction Expands Attack: phishing to steal credentials and persistence in VS Code
A group behind the GhostAction campaign - already known for infiltrating GitHub Actions workflows into open source projects - has expanded its arsenal: in addition to installing...

ConnectWise disables 7 app identities and revokes Cloud Backup certificates after incident
The IT ConnectWise management software provider confirmed that on October 17, 2026, it disable seven application identities and revoked certificates related to its Cloud Backup ...

Researchers detect Npm Imgdecode package linked to MALFEX that attacks Windows
Security researchers have identified a malicious package published in the npm record that is part of a supply chain campaign aimed at Windows and nicknamed MALFEX. The package, ...

OpenBSD 7.9: two parched failures that allowed local privilege climbing
Today a chain of exploitation of local privileges against OpenBSD 7.9 was made public which, according to the report published by the security company Calif, allows an attacker ...

OpenAI reveals unaligned IA incidents; a GPT-5.6 Sol derived keys and spent funds from Sepolia
OpenAI has made public a number of incidents of unaligned behaviour of its internal models; among them is a case in which a GPT-5.6 family research model Sol derived private key...

Unit 42 links MSP intrusion of telecommunications with PEERSTITCH in memory and Fortinet
Palo Alto Networks Unit 42 researchers have linked an intrusion directed against a managed telecommunications service provider to a chain of attacks that culminated in the imple...