A Nigerian national, Kingsley Uchelue Utulu, has been sentenced to five years and three months in prison by a U.S. federal court in New York for his role in a large-scale cyber fraud scheme targeting American tax firms and government relief programs.

Utulu, 38, was extradited from the United Kingdom after being arrested and later pleaded guilty to conspiracy to commit wire fraud.

The sentencing, delivered by U.S. District Judge Paul G. Gardephe, also includes a restitution order of \$3.68 million and the forfeiture of \$290,250.

According to court documents, Utulu and his co-conspirators, operating primarily from Nigeria, launched spearphishing attacks on U.S.-based tax preparation services beginning in 2019. The group hacked into company systems, stealing sensitive customer information such as tax records and personal identification data.

Using the stolen information, the conspirators filed fraudulent federal and state tax returns, seeking more than \$8.4 million in refunds. Authorities said they successfully obtained at least \$2.5 million. The group also exploited the U.S. Small Business Administration’s Economic Injury Disaster Loan (EIDL) program, which was introduced during the COVID-19 pandemic. Prosecutors said the scheme resulted in at least \$819,000 in fraudulent loans.

U.S. Attorney for the Southern District of New York, Jay Clayton, said the case reflects ongoing efforts to prosecute cybercriminals who target American systems from abroad.

“Kingsley Uchelue Utulu took part in a scheme to hack into U.S. tax preparation businesses, trade in stolen personal information, and defraud the IRS and other government bodies,” Clayton said. “The message is clear: international cybercriminals will be brought to justice.”

FBI Assistant Director Christopher G. Raia described the case as part of a global effort to combat cyber fraud.