A Nigerian man based in the United Kingdom, Farouk Adekunle Adepoju, has been arrested by British authorities following a request from the United States government after he was indicted on charges of wire fraud and computer fraud.
According to prosecutors, Adepoju allegedly hacked into the email system of a Pennsylvania construction company contracted by a university and diverted payments meant for the firm.
The US Department of Justice (DOJ), in a statement released on Thursday, September 18, disclosed that Adepoju was arrested on September 15, 2025, and is currently awaiting extradition to face a seven-count indictment in the Western District of Pennsylvania.
Details of the indictment
The indictment, unsealed the same day, accused him of remotely accessing a protected computer between March and April 2023.
He is alleged to have altered email rules, created a spoofed domain, and issued fraudulent instructions that tricked the university into transferring approximately $235,266 (₦365 million) into an account he controlled. Authorities confirmed that the stolen funds have not been recovered.
US prosecutors speak out
Acting US Attorney Troy Rivetti described the case as proof of strong cross-border cooperation in fighting cybercrime.
“Adepoju is charged with using sophisticated cyber means to illegally access accounts belonging to a business in order to victimise one of our region’s universities. His arrest in the United Kingdom underscores our unwavering commitment to prosecute cybercriminals worldwide,” Rivetti said.
FBI warns cybercriminals
The FBI’s Pittsburgh Field Office led the investigation. Its special agent in charge, Kevin Rojek, cautioned cybercriminals against assuming they are out of reach.
“Criminals who think they can reach across the globe into the United States to line their pockets at the expense of the American public need know one thing: the FBI and our partners are not going to let you get away with it,” Rojek warned.
Possible penalties
Adepoju faces six counts of wire fraud, each carrying a potential sentence of up to 20 years in prison, and one count of computer fraud, which carries a maximum of five years.
Authorities, however, emphasized that an indictment is only an accusation and Adepoju remains presumed innocent until proven guilty.