Two former members of the United States Air Force have been sentenced to a combined 189 months in federal prison for their roles in a Dover Air Force Base BEC scam operation that redirected millions of dollars from businesses across the country. Chijioke Timothy Odimegwu, 25, and Harafat Mogaji, 26, carried out the attacks while stationed at Dover Air Force Base in Delaware, according to court documents.
The pair ran a multi-year scheme built around phishing and spoofed email addresses. They stole employee email credentials through spam and phishing campaigns, then used those credentials alongside spoofed addresses that mimicked legitimate business partners to trick billing departments into redirecting payments to accounts controlled by co-conspirators in the United States and abroad. On top of that, they made financial transactions using stolen account details, personal identification numbers, and credit and debit card numbers, supplemented by additional data purchased from criminal partners.
Millions Diverted, Dozens of Victims
The scale of what Odimegwu and Mogaji pulled off was not trivial. The Department of Justice stated that the pair ‘fraudulently diverted a more than $1.68 million wire sent by a victim in Iowa City, Iowa, to a bank account in Chicago controlled by the conspiracy.’ A separate wire of more than $720,000, sent by a victim in Ohio, was also diverted to a conspiracy-controlled account. Those were, as the DoJ noted, in addition to many other attempted diversions targeting businesses in Iowa and across the United States.
According to Air & Space Forces Magazine, the scheme targeted at least 15 businesses, towns and nonprofits, broadening the picture considerably beyond the headline wire-transfer figures. That range of victims (commercial, civic and charitable) illustrates how indiscriminate BEC operators tend to be when it comes to selecting targets.
Odimegwu received the heavier sentence: 111 months in prison and an order to pay $366,617.59 in restitution. Mogaji was sentenced to 78 months and ordered to pay $995,680.45 in restitution. Both will serve a three-year term of supervised release once their federal prison sentences are complete.
AFOSI and the FBI’s Role in the Dover Air Force Base BEC Case
The investigation was not a straightforward federal cybercrime prosecution. According to the Air Force Office of Special Investigations (AFOSI), which aided in the case, the lead investigative agency was the FBI’s Omaha Field Office and its Des Moines Resident Agency, working in coordination with the FBI Cyber Task Force. AFOSI’s involvement underlines an awkward reality: the defendants were active-duty service members at the time, which drew military investigative resources into what was otherwise a civilian cybercrime matter.
BEC fraud works by exploiting the trust built into normal corporate payment flows. Attackers use compromised or spoofed email addresses to convince accounts-payable staff that a known supplier or partner has changed their banking details. Once a payment lands in an attacker-controlled account, it moves quickly through money mules or across multiple accounts to stay ahead of any freeze orders. The speed of that laundering phase is a large part of why recovery rates are low and restitution orders rarely result in victims being made whole.
The wider context gives the sentencing some useful scale. The FBI‘s 2025 Internet Crime Report recorded 24,768 BEC complaints and over $3 billion in losses in the previous year alone, confirming that business email compromise remains one of the costliest categories of cybercrime. Individual prosecutions like this one represent a fraction of total activity, which is why enforcement agencies tend to emphasise the sentencing lengths as a deterrent signal as much as a punishment.
This case is not isolated. Ghanaian national Derrick Van Yeboah, extradited to the United States in August 2025 and convicted of playing a senior role in a fraud ring accused of stealing over $100 million through BEC attacks and romance scams, was sentenced to 85 months in prison after pleading guilty in March 2026. The Odimegwu and Mogaji sentences, at 111 and 78 months respectively, sit in a similar range, suggesting federal courts are settling into a consistent sentencing posture for large-scale BEC operators, whatever their background.
