Two former U.S. Air Force members were sentenced to a combined 189 months in federal prison on September 25, 2026, for orchestrating an international cyber intrusion scheme that defrauded businesses of more than $2.4 million through email phishing and sophisticated payment redirection.
Federal prosecutors in Iowa secured significant prison terms for Chijioke Timothy Odimegwu and Harafat Mogaji, two Delaware residents whose active-duty military service stationed them at Dover Air Force Base until their arrests. Working alongside domestic and international co-conspirators, the pair ran a multi-year campaign targeting municipal governments, non-profits, and private companies across the United States.
Phishing Campaigns and Spoofed Communications Target Businesses Nationwide
The conspiracy relied on digital infiltration tactics designed to mimic trusted business partners. Investigators from the FBI and Air Force Special Investigations revealed that the defendants harvested employee login credentials by deploying extensive email spamming and phishing campaigns.
Armed with stolen usernames and passwords, Odimegwu and Mogaji assumed control of employee email accounts. From there, they dispatched deceptive messages using spoofed
email addresses that closely mirrored those of legitimate suppliers and corporate clients.
They and their co-conspirators then used these stolen credentials, along with ‘spoofed’ email addresses mimicking emails associated with the victim or its business partners, to communicate with their victims and redirect payments to and from the victims’ trusted business partners to accounts controlled by the defendants’ co-conspirators.
MacKenzie Tubbs, Public Information Officer via Punchng
Beyond intercepting communications, the network harvested sensitive financial details—including account numbers, personal identification numbers, and credit and debit card data. According to statements from the U.S. Attorney’s office, the group targeted organizations such as a non-profit in Pella, Iowa, whose credit card information was stolen to fund unauthorized purchases. Stolen data was routinely exchanged among the conspirators to launch secondary financial transactions without victims’ knowledge or authorization.
Diverted Wire Transfers Strike Iowa City and Athens
The scheme’s financial toll spanned multiple states, with investigators tracking several large-scale wire diversions. U.S. Attorney David Waterman of the Southern District of Iowa announced the sentences following proceedings on September 25, 2026. Among the most notable thefts was a wire transfer exceeding $1.68 million initiated by a company in Iowa City, which the fraudsters routed into a Chicago bank account controlled by the conspiracy.
Municipal entities also fell victim to the operation. The city of Athens, Ohio, lost more than $720,000 in a diverted transfer routed directly to the criminals. These major transactions represented only a fraction of the illicit attempts made against businesses throughout Iowa and across the country.
Federal Prison Sentences and Restitution Orders Imposed on the Conspirators
Both defendants were taken into custody immediately following their sentencing hearings in federal court.
- Chijioke Timothy Odimegwu (25) received a term of 111 months—equivalent to nine years and three months—in federal prison, alongside an order to pay $366,617.59 in restitution.
- Harafat Mogaji (26) was sentenced to 78 months, or six years and six months, behind bars, with restitution ordered at $995,680.45.
Upon completing their respective prison terms, both men will be subjected to a three-year term of supervised release.