CrimeOwl AI logoCrimeOwl AI
CasesBlogPricingAbout
  1. Home
  2. /
  3. Cases
  4. /
  5. EVGENIY MIKHAILOVICH BOGACHEV
Back to CasesMore Cases
Multiple victims of online banking fraud and identity theft

The person at the center of this case

Multiple victims of online banking fraud and identity theft

Case
#641
SourceFBI WantedUpdated Mar 15, 2026
Federal Bureau of Investigation (FBI); U.S. District Court for the District of Nebraska; U.S. District Court for the Western District of Pennsylvania
Cold Case · Open
13 years waiting · since 2012

EVGENIY MIKHAILOVICH BOGACHEV

Justice for Multiple victims of online banking fraud and identity theft — the trail went cold in 2012, but the truth hasn't.

Start here

Key leads to think about

🎯
suspect
Lead #1

What is Bogachev's current location and is he still operating malware schemes from Russia?

🔍
evidence
Lead #2

How many co-conspirators remain unidentified or at large in the Zeus and GameOver Zeus networks?

🚗
vehicle
Lead #3

Can authorities track Bogachev's movements through his known boating activities along the Black Sea?

Evgeniy Mikhailovich Bogachev, a Russian cybercriminal using aliases 'lucky12345' and 'slavik,' is wanted for operating the Zeus and GameOver Zeus malware schemes that infected over one million computers and stole more than $100 million from victims' bank accounts. The malware captured login credentials and personal information, which conspirators used to conduct large-scale online account takeover fraud investigated by the FBI since 2009. Bogachev remains at large, believed to be in Russia, and authorities continue seeking information on his whereabouts and activities.

Case
#641
SourceFBI WantedUpdated Mar 15, 2026
Federal Bureau of Investigation (FBI); U.S. District Court for the District of Nebraska; U.S. District Court for the Western District of Pennsylvania

Try asking

Claim this imported case

A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.

10 uploads25 AI questions/day

This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.

More leads to consider

Beyond the top three above — each detail below could be the thread that pulls this case open.

📞
contact
Lead #4

Who are the key administrators and distributors still operating within the Zeus malware infrastructure?

💡
clue
Lead #5

Are there financial records or cryptocurrency transactions that could reveal Bogachev's current whereabouts or associates?

Have information about any of these leads?

Even the smallest detail could be the key to solving this case.

Official wording

Source Narrative

Conspiracy to Participate in Racketeering Activity; Bank Fraud; Conspiracy to Violate the Computer Fraud and Abuse Act; Conspiracy to Violate the Identity Theft and Assumption Deterrence Act; Aggravated Identity Theft; Conspiracy; Computer Fraud; Wire Fraud; Money Laundering; Conspiracy to Commit Bank Fraud Caution: Evgeniy Mikhailovich Bogachev, using the online monikers “lucky12345” and “slavik”, is wanted for his alleged involvement in a wide-ranging racketeering enterprise and scheme that installed, without authorization, malicious software known as “Zeus” on victims’ computers. The software was used to capture bank account numbers, passwords, personal identification numbers, and other information necessary to log into online banking accounts.

While Bogachev knowingly acted in a role as an administrator, others involved in the scheme conspired to distribute spam and phishing emails, which contained links to compromised web sites. Victims who visited these web sites were infected with the malware, which Bogachev and others utilized to steal money from the victims’ bank accounts.

This online account takeover fraud has been investigated by the FBI since the summer of 2009. Starting in September of 2011, the FBI began investigating a modified version of the Zeus Trojan, known as GameOver Zeus (GOZ).

It is believed GOZ is responsible for more than one million computer infections, resulting in financial losses of more than $100 million. On August 22, 2012, Bogachev was indicted under the nickname “lucky12345” by a federal grand jury in the District of Nebraska on charges of Conspiracy to Participate in Racketeering Activity; Bank Fraud; Conspiracy to Violate the Computer Fraud and Abuse Act; Conspiracy to Violate the Identity Theft and Assumption Deterrence Act; and Aggravated Identity Theft.

On May 19, 2014, Bogachev was indicted in his true name by a federal grand jury in the Western District of Pennsylvania on charges of Conspiracy; Computer Fraud; Wire Fraud; Bank Fraud; and Money Laundering. On May 30, 2014, a criminal complaint was issued in the District of Nebraska that ties the previously indicted nickname of "lucky12345" to Bogachev and charges him with Conspiracy to Commit Bank Fraud.

Remarks: Bogachev was last known to reside in Anapa, Russia. He is known to enjoy boating and may travel to locations along the Black Sea in his boat.

He also owns property in Krasnodar, Russia.

Timeline of Events

🕵️
2009-06-01

FBI investigation begins

FBI began investigating online account takeover fraud related to Zeus malware

🕵️
2011-09-01

GameOver Zeus investigation starts

FBI begins investigating modified Zeus variant known as GameOver Zeus (GOZ)

📋
2012-08-22

Federal indictment issued

Bogachev indicted under nickname 'lucky12345' in District of Nebraska on racketeering and fraud charges

📋
2014-05-19

Second federal indictment

Bogachev indicted in Western District of Pennsylvania under true name on conspiracy and money laundering charges

📋
2014-05-30

Criminal complaint issued

District of Nebraska issues complaint linking 'lucky12345' alias to Bogachev and charging conspiracy to commit bank fraud

Key Locations
Interactive map showing important locations related to this case

Case Information

Incident:June 1, 2009
Last Updated:June 14, 2026

Up to $3 Reward

For information leading to the resolution of this case

Leave a comment

Comments

Case Information

Incident:June 1, 2009
Last Updated:June 14, 2026

Up to $3 Reward

For information leading to the resolution of this case