A Nigerian citizen has appeared before a U.S. court, facing charges related to a cybercriminal scheme involving the hacking of tax firms’ computer networks in Massachusetts and the filing of fraudulent tax returns.
Matthew A. Akande, 36, was apprehended in October 2024 at London’s Heathrow Airport at the request of the United States. On March 5, 2025, he was extradited and brought before a federal court in Boston. A federal grand jury had indicted him in July 2022. His accomplice, 33-year-old Nigerian national Kehinde H. Oyetunji, who resided in the U.S., pleaded guilty in December 2022. The court has yet to set a sentencing date.
Between 2016 and 2021, Akande, Oyetunji, and other conspirators orchestrated an elaborate fraud scheme, leveraging stolen personal data from taxpayers to submit falsified tax returns on their behalf. In 2020, the criminals targeted tax firms in Massachusetts, stealing clients’ sensitive information through phishing attacks and system intrusions.
Akande employed deceptive emails, masquerading as a prospective client seeking tax services. However, these messages served as a vehicle for deploying the Warzone RAT trojan, granting the fraudsters remote access to victims’ computers. With this access, the cybercriminals extracted personal and tax-related information, subsequently using it to file fraudulent returns.
The illicit tax refunds were funneled into bank accounts controlled by Oyetunji and other accomplices. Once the funds were credited, the conspirators withdrew cash within the U.S. and transferred a portion to Mexico under Akande’s instructions, retaining a share of the proceeds for themselves. Over a span of five years, the fraudsters submitted more than 1,000 falsified tax returns, attempting to steal over $8.1 million. Investigators determined that they successfully obtained at least $1.3 million.
Akande faces severe legal repercussions, including up to 20 years in prison for wire fraud, 10 years for theft of government funds, and 5 years for unauthorized access to protected computers. Additionally, he faces a mandatory 2-year sentence for identity theft. His final punishment will be determined by the court. Meanwhile, Oyetunji has pleaded guilty to conspiracy, computer crimes, and theft of government funds.
