Hushpuppi

The persona

Ramon Abbas built one of the most-followed Instagram accounts in Africa by photographing himself with Bentleys, Rolls-Royces, and rented penthouses in Dubai's Palazzo Versace. The lifestyle was real. So was the source of the money.

The scheme

Abbas was the laundering arm of a global Business Email Compromise (BEC) ring. Co-conspirators would compromise corporate email accounts, redirect wire instructions, and route the diverted funds through accounts Abbas controlled in dozens of jurisdictions.

Confirmed targets include: - A New York law firm — $922,857 diverted - An English Premier League club — attempted £100M - A US-based law firm representing a foreign bank — $14.7M - Maltese Bank of Valletta — €13M

The arrest

Dubai Police raided his Palazzo Versace apartment on June 9, 2020. Agents seized 13 luxury cars, $40M in cash, and 47 smartphones containing victim correspondence. He was extradited to the United States in July 2020.

Court outcome

• Pleaded guilty to one count of conspiracy to engage in money laundering, April 2021
• Sentenced to 135 months (11 years 3 months), November 7, 2022
• Ordered to pay $1,732,841 in restitution

What to take from this case

BEC is the single most lucrative cybercrime category — the FBI's IC3 unit puts losses above $50 billion globally between 2013 and 2022. Two controls would have stopped the Abbas-laundered wires cold: out-of-band verification of any change to wire instructions, and a 48-hour hold on first-time payees above a fixed threshold.