A Scottish man has confessed to orchestrating a sophisticated phishing scheme that targeted numerous companies, resulting in the theft of more than $8 million in virtual currency. Tyler Buchanan, a 24-year-old from Dundee, entered a guilty plea to charges of conspiracy to commit wire fraud and aggravated identity theft in a United States federal court.
Details of the Widespread Phishing Operation
According to the Department of Justice, Buchanan was a key participant in a criminal ring that employed text message phishing attacks to deceive employees into surrendering their login credentials. These tactics enabled unauthorized access to the computer systems of at least a dozen companies, including telecommunications firms, IT suppliers, cloud communications providers, and virtual currency enterprises.
How the Scheme Unfolded
The conspirators sent hundreds of fraudulent messages, impersonating the companies or their contracted suppliers, between September 2021 and April 2023. They developed a phishing kit designed to capture login details entered by victims on counterfeit websites. The stolen credentials were then transmitted to a Telegram channel managed by Buchanan and another co-conspirator.
Evidence seized from Buchanan's home in Scotland included a device containing the names and addresses of multiple victims, along with a text file that held cryptocurrency seed phrases and login credentials for one victim's account. This evidence played a crucial role in the investigation, which involved collaboration between the FBI and Police Scotland, among other agencies.
Legal Consequences and Sentencing
Buchanan has been held in federal custody in the United States for the past year. He is scheduled for sentencing on August 21, where he could receive a maximum prison term of 22 years. In a related case, another co-conspirator, Noah Michael Urban, pleaded guilty to three fraud-related charges in April 2025 and is currently serving a 10-year prison sentence. Urban was also ordered to pay $13 million in restitution.
Ongoing Prosecutions
Three additional defendants, all from the United States, are still facing criminal charges as part of this extensive investigation. The Department of Justice emphasized the severity of the crimes, highlighting the significant financial losses and the breach of trust involved in the phishing attacks.
This case underscores the growing threat of cybercrime in the digital age, particularly targeting the virtual currency sector. It serves as a stark reminder for companies to enhance their cybersecurity measures and for individuals to remain vigilant against phishing attempts.
