CrimeOwl AI logoCrimeOwl AI
CasesBlogPricingAbout
  1. Home
  2. /
  3. Cases
  4. /
  5. ALEXSEY BELAN
Back to CasesMore Cases
Millions of users of major U.S. webmail and e-commerce companies; corporate victims in Nevada and California

The person at the center of this case

Millions of users of major U.S. webmail and e-commerce companies; corporate victims in Nevada and California

Case
#647
SourceFBI WantedUpdated Mar 15, 2026
Federal Bureau of Investigation (FBI); U.S. District Court Northern District of California; U.S. District Court District of Nevada
Cold Case ยท Open - Active FBI Wanted Notice
9 years waiting ยท since 2017

ALEXSEY BELAN

Justice for Millions of users of major U.S. webmail and e-commerce companies; corporate victims in Nevada and California โ€” the trail went cold in 2017, but the truth hasn't.

Start here

Key leads to think about

๐ŸŽฏ
suspect
Lead #1

Why has Belan evaded capture for over a decade despite three federal indictments and international law enforcement efforts?

๐Ÿ”
evidence
Lead #2

What is the full scope of the stolen user databases and encrypted passwords from millions of accounts?

๐Ÿ‘ค
person
Lead #3

What is the nature of Belan's alleged coordination with Russian intelligence officers Dokuchaev, Sushchin, and others?

Alexsey Belan, a Russian cybercriminal, is wanted by the FBI for a sophisticated series of computer intrusions targeting major U.S. webmail and e-commerce companies between 2012 and 2016, during which he allegedly stole millions of user accounts and passwords in coordination with Russian intelligence officers. Despite three separate federal indictments and arrest warrants issued since 2012, Belan remains at large and is believed to be hiding in Russia or traveling through Eastern Europe and Southeast Asia. The case represents a significant example of state-sponsored cybercrime and international computer fraud, with a $100,000 reward offered for information leading to his capture.

Case
#647
SourceFBI WantedUpdated Mar 15, 2026
Federal Bureau of Investigation (FBI); U.S. District Court Northern District of California; U.S. District Court District of Nevada

Try asking

Claim this imported case

A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.

10 uploads25 AI questions/day

This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.

More leads to consider

Beyond the top three above โ€” each detail below could be the thread that pulls this case open.

๐Ÿ“
location
Lead #4

Is Belan still operating from Krasnodar or has he relocated to Greece, Latvia, the Maldives, or Thailand?

๐Ÿ’ก
clue
Lead #5

What identifying features (eyeglasses, hair color changes) might help distinguish Belan in public sightings?

Have information about any of these leads?

Even the smallest detail could be the key to solving this case.

Official wording

Source Narrative

Conspiring to Commit Computer Fraud and Abuse; Accessing a Computer Without Authorization for the Purpose of Commercial Advantage and Private Financial Gain; Damaging a Computer Through the Transmission of Code and Commands; Economic Espionage; Theft of Trade Secrets; Access Device Fraud; Aggravated Identity Theft; Wire Fraud Caution: Alexsey Belan has been indicted three times for crimes relating to computer intrusions. From January of 2014, and continuing through December of 2016, Belan is alleged to have conspired with Russian intelligence officers, including Dmitry Aleksandrovich Dokuchaev , Igor Anatolyevich Sushchin , and others, to gain unauthorized access to the computer networks of and user accounts hosted at major companies providing worldwide webmail and internet-related services in the Northern District of California and elsewhere.

A federal arrest warrant for Belan was issued on February 28, 2017, by the United States District Court, Northern District of California, San Francisco, California, based on an indictment charging him with conspiring to commit computer fraud and abuse; accessing a computer without authorization for the purpose of commercial advantage and private financial gain; damaging a computer through the transmission of code and commands; economic espionage; theft of trade secrets; access device fraud; and wire fraud. Between January of 2012, and April of 2013, Belan is alleged to have intruded the computer networks of three major United States based e-commerce companies in Nevada and California.

He is alleged to have stolen their user databases which he then exported and made readily accessible on his server. Belan allegedly stole the user data and the encrypted passwords of millions of accounts and then negotiated the sales of the databases.

Two separate federal arrest warrants and indictments for Belan have been issued in relation to these activities. One was issued on September 12, 2012, in the United States District Court, District of Nevada, Las Vegas, Nevada, after Belan was charged with obtaining information by computer from a protected computer; possession of fifteen or more unauthorized access devices; and aggravated identity theft.

The second warrant was issued on June 6, 2013, in the United States District Court, Northern District of California, San Francisco, California, after Belan was charged with two counts of fraud in connection with a computer and two counts of aggravated identity theft. He was also designated as subject to sanctions per a Presidential Executive Order dated December 29, 2016.

Remarks: Belan has Russian citizenship and is known to hold a Russian passport. He speaks Russian and may travel within Russia, Greece, Latvia, the Maldives, and Thailand.

He may wear eyeglasses and dye his brown hair red or blond. He was last known to be in Krasnodar, Russia.

Timeline of Events

๐Ÿ“‹
2012-01-01

E-commerce intrusions begin

Belan begins intrusions of three major U.S. e-commerce companies in Nevada and California

๐Ÿ•ต๏ธ
2012-09-12

First arrest warrant issued

U.S. District Court, District of Nevada issues first federal arrest warrant and indictment

๐Ÿ“‹
2013-04-30

E-commerce intrusions end

First phase of intrusions concludes; user databases stolen and exported

๐Ÿ•ต๏ธ
2013-06-06

Second arrest warrant issued

U.S. District Court, Northern District of California issues second federal arrest warrant and indictment

๐Ÿ•ต๏ธ
2017-02-28

Third arrest warrant issued

U.S. District Court, Northern District of California issues third federal arrest warrant for conspiracy with Russian intelligence officers

Key Locations
Interactive map showing important locations related to this case

Case Information

Incident:January 1, 2012
Last Updated:April 29, 2026

Up to $100,000 Reward

For information leading to the resolution of this case

Leave a comment

Comments

Case Information

Incident:January 1, 2012
Last Updated:April 29, 2026

Up to $100,000 Reward

For information leading to the resolution of this case