A Texas man was sentenced Wednesday to five years in prison followed by three years of supervised release for his conduct in connection with a scheme to buy 38,000 compromised PayPal account credentials from an illegal online marketplace, and then use those credentials to steal money from the rightful PayPal account owners.
Marcos Ponce, 37, of Austin, pleaded guilty to conspiracy to commit wire fraud in October 2021. According to court documents, from at least as early as November 2015 and continuing through in or about November 2018, Ponce and his co-conspirators worked together to establish buyer accounts on a particular illegal online marketplace. The marketplace functioned as an illegal market for stolen payment account credentials and associated personally-identifying information. The co-conspirators purchased over 38,000 stolen PayPal account login credentials.
In addition, Ponce and his co-conspirators developed social engineering techniques in order to trick unwitting third parties into accepting money transfers from the compromised PayPal accounts and then transferring the money into accounts controlled by members of the conspiracy.
“The Justice Department remains firmly committed to protecting the American people from fraudsters like this defendant,” said Assistant Attorney General Kenneth Polite, Jr. of the Justice Department’s Criminal Division. “May today’s sentencing send a clear message to would-be thieves: there are real-world consequences for online crimes.”
“This prosecution and sentence send a powerful message that the cyberworld is not a haven for criminals, and law enforcement will work tirelessly to bring cybercriminals to justice,” said U.S. Attorney Ashley C. Hoff for the Western District of Texas.
In addition to the term of imprisonment, Ponce was ordered to pay $1.4 million in restitution.
The case was investigated by the FBI’s Washington Field Office, with significant assistance from the FBI San Antonio – Austin Cyber Task Force.