The familiar sender and the fraudulent payment
A genuine mailbox can carry a fraudulent instruction. Examine the difference between recognising a sender and verifying payment authority.
Unatrac BEC / Obinwanne Okeke · Foundation · About 5 minutes
What the official sources say
DOJ announced on 16 February 2021 that Obinwanne Okeke was sentenced to ten years’ imprisonment for involvement in a computer-based fraud scheme causing approximately $11 million in known losses. [1]
DOJ described an April 2018 phishing attack on a Unatrac executive, followed by fraudulent transfer requests and fake invoices. It reported nearly $11 million in fraudulent transfers targeting Unatrac. [1]
The FBI’s later account describes use of the compromised CFO mailbox, overseas payment instructions and email rules that concealed exchanges from the genuine CFO. It records a June 2020 guilty plea and the February 2021 sentence. [2]
The company was a victim, not the offender. The ten-year figure is the sentence announced in 2021, not a statement about present custody. Do not infer that every recipient account in a BEC scheme belongs to a knowing money launderer.
What to learn from it
Original LearnAML teaching analysis. The following controls and exercises are not additional findings against the named parties.
- Explain why a familiar email address does not establish valid payment authority.
- Select independent verification and evidence-preservation steps.
- 01Compromised mailbox
- 02False payment instruction
- 03Victim authorises transfer
- 04Overseas recipient
Simplified sequence based on the official accounts. The exercise below introduces fictional facts, not additional allegations.
Verify the instruction independently
A familiar thread or correct writing style can create confidence without establishing authority. For a payment change, use a previously verified contact route and the organisation’s approval procedure. A phone number supplied in the questionable message is not an independent check.
Treat recovery as time-sensitive
If funds have already moved, promptly involve the bank’s fraud response and the organisation’s incident team. Explore recovery through authorised channels and preserve the instruction, approval trail and relevant logs. Recovery is uncertain; avoid promising that a recall will succeed.
Link fraud and AML carefully
Receiving-side analysts should examine activity, account context and relationships. Rapid onward movement can support an enquiry, but it does not itself establish who controlled the account or what they knew. Keep factual observations distinct from conclusions in an escalation.
What would you do next?
Fictional exercise: you are a finance approver. An email in an established supplier thread requests a change of beneficiary account and payment today. It says the CFO has approved it and provides a new phone number for questions. The invoice looks consistent with a genuine purchase. No payment has been released.
Put the decision into words
Use fictional details only. Do not enter customer information. Optional saves remain on this device, not your LearnAML account.
Use this checklist to improve your answer. It is not an automatically marked essay.Compare your reasoning
Take one lesson back to work
Check whether your payment-change procedure identifies a genuinely independent verification channel and records who approved the change.
Educational analysis, not instructions for a live customer or transaction. Consider your role, authorised procedures and current local requirements.
Sources and editorial record
- DOJ: Okeke sentencing announcement ↗U.S. Department of Justice, Eastern District of Virginia · 16 February 2021Evidence location: Opening paragraph; Paragraphs concerning Unatrac Holding Limited
- FBI: International Scammer Sentenced ↗Federal Bureau of Investigation · 26 April 2021Evidence location: Narrative paragraphs beginning ‘In 2018’ through the plea and sentence paragraph
Sources accessed and educational analysis prepared: 27 October 2026. Historical snapshot; subsequent proceedings, present custody, current controls and present law are not asserted. Original LearnAML educational analysis. Version 1.0.