On March 5, 2020 a federal jury found 25‑year‑old Volodymyr Kvashuk guilty of 18 federal felonies, opening the door to a potential 20‑year prison term. The charges span five counts of wire fraud, six counts of money‑laundering, two counts each of aggravated identity theft and filing false tax returns, plus single counts of mail fraud, access‑device fraud and unauthorized computer access. Kvashuk, a Ukrainian‑born software developer, was hired by Microsoft in 2016 to test the company’s online retail platform.
Leveraging that privileged access, he began siphoning digital currency—initially $12,000 in gift‑card value that could be redeemed for Microsoft products—and later escalated the theft to roughly $10 million. The scheme involved using co‑workers’ test email accounts to divert funds and exploiting in‑store credit to purchase Xbox subscriptions, a pattern that drew the attention of Microsoft’s Fraud Investigation Strike Team in 2018.
Special Agent in Charge Ryan Korner of the U.S. Internal Revenue Service Criminal Investigation highlighted the broader impact, stating that Kvashuk not only stole from Microsoft but also concealed the illicit proceeds from the government by filing false tax returns. According to the Department of Justice, the stolen money was largely funneled into personal assets, including a lake‑front home valued at $1.6 million and a Tesla vehicle priced at $160,000. When confronted, Kvashuk denied wrongdoing, claiming his activities were part of a “special project” intended to benefit Microsoft and insisting he never intended to defraud the corporation.
Nonetheless, investigators traced the flow of funds and linked the purchases to the fraudulent earnings. The case underscores the critical role of internal controls and vigilant monitoring in large enterprises.
Microsoft’s internal fraud team, working closely with federal law‑enforcement agencies, was instrumental in uncovering the scheme and providing evidence that led to the conviction. Legal experts note that the breadth of the indictment—covering wire fraud, money‑laundering, identity theft, and false tax filings—illustrates how a single scheme can violate multiple statutes. The Department of Justice has emphasized that such conduct will attract severe penalties, reinforcing the message that corporate fraud will be pursued aggressively. Beyond the individual ramifications for Kvashuk, the verdict serves as a cautionary tale for corporations and employees alike.
It highlights the necessity of robust audit processes, continuous oversight of privileged system access, and a corporate culture that prioritizes transparency and ethical behavior. As the legal proceedings move forward, Kvashuk faces the possibility of a lengthy incarceration period, reflecting the seriousness with which federal authorities treat large‑scale financial fraud.
The outcome also reaffirms the partnership between private sector security teams and government investigators in detecting and prosecuting complex cyber‑related crimes.
