Three Las Vegans Among 100 Linked to International Computer Hacking Ring Charged by U.S. and Egypt in Large ‘Phishing’ Operation

LAS VEGAS—The largest number of defendants ever charged in a cyber crime case, including three Las Vegas residents, have been indicted in a multinational investigation conducted in the United States and Egypt that uncovered a sophisticated “phishing” operation that fraudulently collected personal information that was used to defraud American banks.

This morning, authorities in several United States cities are attempting to arrest the 53 defendants named in an indictment returned last week by a federal grand jury in Los Angeles. Three Las Vegas residents are among those 53 defendants, and all have been taken into custody. 

The FBI in Las Vegas has arrested Shontovia Debose, 21; Tramond Davis, 20; and Raymond Valentino Mancillas III, 21, in connection with their roles in this scheme. All three defendants were arrested without incident. Davis and Mancillas were arrested at their residences; the Las Vegas Metropolitan Police Department assisted in both arrests. Debose was arrested in downtown Las Vegas as she arrived for an appointment. 

Additionally, authorities in Egypt have charged 47 defendants linked to the phishing scheme. The United States is extremely grateful for the extraordinary assistance provided by the Egyptian government in this matter.

Operation “Phish Phry” marks the first joint cyber investigation between Egyptian law enforcement authorities and United States officials, which include the FBI, the United States Attorney’s Office and the Electronic Crimes Task Force in Los Angeles. Phish Phry, with 53 defendants charged in United States District Court, also marks the largest cybercrime investigation to date in the United States, in terms of number of defendants.

Operation Phish Phry was announced at a Los Angeles press conference following this morning’s arrests by Keith B. Bolcar, Acting Assistant Director in Charge of the FBI in Los Angeles; George S. Cardona, Acting United States Attorney in Los Angeles; Kieran Ramsey, the FBI’s Legal Attache in Cairo, Egypt; and Egyptian Law Enforcement Authorities.   

Operation Phish Phry commenced in 2007 when FBI agents, working with United States financial institutions, took proactive steps to identify and disrupt sophisticated criminal enterprises targeting the financial infrastructure in the United States. Intelligence developed during the initiative prompted the FBI and Egyptian authorities to agree to pursue a joint investigation into multiple subjects based in Egypt after investigators in both countries earlier this year uncovered an international conspiracy allegedly operating an elaborate scheme to steal identities through a method commonly called  “phishing.” The group is accused of conspiring to target American-based financial institutions and victimize an unknown number of account holders by fraudulently using their personal financial information. The multinational investigative effort resulted in 53 defendants being named in the federal indictment, and 47 suspects being charged in an Egyptian court. The domestic defendants were arrested in California, Nevada and North Carolina.

The 51-count indictment accuses all of the defendants with conspiracy to commit wire fraud and bank fraud. Various defendants are charged with bank fraud; aggravated identity theft; conspiracy to commit computer fraud, specifically unauthorized access to protected computers in connection with fraudulent bank transfers; and international money laundering.

According to the indictment that was unsealed this morning, Egyptian-based hackers obtained bank account numbers and related personal identification information from an unknown number of bank customers through phishing—a technique that involves sending e-mail messages that appear to be official correspondence from banks or credit card vendors. In illegal phishing schemes, bank customers are directed to fake websites purporting to be linked to financial institutions, where the customers are directed to enter their account numbers, passwords and other personal identification information. Because the websites appear to be legitimate—complete with bank logos and legal disclaimers—the customers do not realize that the websites do not belong to legitimate financial institutions.

The indictment alleges that co-conspirators in Egypt collected victims' bank account information by using information obtained from their phishing activities. Armed with the bank account information, members of the conspiracy hacked into accounts at two banks. Once they accessed the accounts, the individuals operating in Egypt communicated via text messages, telephone calls and Internet chat groups with co-conspirators in the United States. The United States part of the ring was allegedly directed by defendants Kenneth Joseph Lucas, Nichole Michelle Merzi and Jonathan Preston Clark, all California residents, who directed trusted associates, including the Las Vegas residents arrested this morning, to set up bank accounts where the funds stolen from the compromised accounts could be deposited. A portion of the illegally obtained funds withdrawn were then transferred via wire services to the individuals operating in Egypt who had originally provided the bank account information obtained via phishing.

Acting United States Attorney George S. Cardona stated: “While the amount of money stolen from individual accounts is relatively small, this international phishing ring had a significant impact on two banks and caused huge headaches for hundreds, perhaps thousands, of bank customers. Organized, international criminal rings can only be confronted by an organized response by law enforcement across international borders, which we have seen in this case.”

Those taken into custody in the United States will be afforded an initial appearance before United States Magistrate Judges in the district where they were arrested. Those arrested in Las Vegas will have their initial appearance in United States District Court in Las Vegas this afternoon.

Each of the 53 defendants named in the indictment is charged with conspiracy to commit bank fraud and wire fraud, a charge that carries a statutory maximum penalty of 20 years in federal prison. Some of the defendants are named in additional counts that would increase their maximum possible sentences.

An indictment contains allegations that a defendant has committed a crime. Every defendant is presumed to be innocent until and unless proven guilty in court. 

The investigation in the United States was conducted by the FBI’s Los Angeles Field Office, supported by the Electronic Crimes Task Force in Los Angeles. Several agencies provided considerable assistance to this investigation, including the Los Angeles Police Department, the Los Angeles District Attorney, the United States Secret Service, the Culver City Police Department, the El Segundo Police Department, and the United States Social Security Administration. U.S. Customs and Border Protection.

The defendants charged in the United States will be prosecuted by the United States Attorney’s Office in Los Angeles.