Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×
Crime Microsoft Software The Almighty Buck Windows

Microsoft Engineer Gets Nine Years For Stealing $10 Million From Microsoft (arstechnica.com) 41

A former Microsoft software engineer from Ukraine has been sentenced to nine years in prison for stealing more than $10 million in store credit from Microsoft's online store. Ars Technica reports: From 2016 to 2018, Volodymyr Kvashuk worked for Microsoft as a tester, placing mock online orders to make sure everything was working smoothly. The software automatically prevented shipment of physical products to testers like Kvashuk. But in a crucial oversight, it didn't block the purchase of virtual gift cards. So the 26-year-old Kvashuk discovered that he could use his test account to buy real store credit and then use the credit to buy real products.

At first, Kvashuk bought an Office subscription and a couple of graphics cards. But when no one objected to those small purchases, he grew much bolder. In late 2017 and early 2018, he stole millions of dollars worth of Microsoft store credit and resold it online for bitcoin, which he then cashed out using Coinbase. US prosecutors say he netted at least $2.8 million, which he used to buy a $160,000 Tesla and a $1.6 million waterfront home (his proceeds were less than the value of the stolen credit because he had to sell at a steep discount).

Kvashuk made little effort to cover his tracks for his earliest purchases. But as his thefts got bigger, he took more precautions. He used test accounts that had been created by colleagues for later thefts. This was easy to do because the testers kept track of test account credentials in a shared online document. He used throwaway email addresses and began using a virtual private networking service. Before cashing out the bitcoins, he sent them to a mixing service in an attempt to hide their origins. Kvashuk reported the bitcoin windfall to the IRS but claimed the bitcoins had been a gift from his father.

This discussion has been archived. No new comments can be posted.

Microsoft Engineer Gets Nine Years For Stealing $10 Million From Microsoft

Comments Filter:
  • Kvashuk reported the bitcoin windfall to the IRS

    Dumbass! - Red Forman

    • he wasn't caught because he reported the income which made jump in personal worth that would be obvious to IRS. He was caught for other mistakes.

      • Even if he hadn't been caught for his other mistakes, reporting his mysterious Bitcoin income sure would have done it.

        • Wrong. IRS didn't care. Failing to report is the stupid mistake many make. You report your windfall on tax form and the IRS 8300 at bank if you deposit. No problem.

          • by Anonymous Coward

            Wrong. IRS didn't care. Failing to report is the stupid mistake many make. You report your windfall on tax form and the IRS 8300 at bank if you deposit. No problem.

            Wrong. *Filing* is the mistake many make. See explanation above about what the tax law actually says.

            If you sign the forms (W-4/W-9), and file information returns (W-2/1099), then you *must file* and *pay*. If the law does not apply to you, don't file--and they cannot touch you.

            If you sign and then don't file, then you are truly screwed. This is how they get everyone. W-4 and W-9 are signed under penalty of perjury. Once you sign, you are now liable for the taxes because you said you were. If you fight that

            • by Anonymous Coward

              Addendum:

              How they get you is "substitute W-9"s. When you open a bank account, the bank (erroneously and illegally) will "require" your SSN (the law does not require they collect it, it only requires they *request* it--you can legally not provide it). If you carefully read the form they use, (which will have wrong language), it will say on there somewhere something to the effect of "this serves as a substitute W-9".

              Brokerage (coinbase) accounts do the same thing. Good luck trading stocks without them filing

            • by Anonymous Coward
              that is completely FALSE. Not reporting means he would almost certainly have been red flagged and investigated. Sudden windfalls that allow you to spend way beyond your means gets noticed and reported. Filing with a "believable" story is far more intelligent as you have effectively laundered the money making your spending no longer raise alarms. however he left a trail in many other ways that resulted in him being caught.
              • by Anonymous Coward

                As explained, both coinbase and the bank will have already collected "substitute" W-9 forms and then filed 1099/Bs against him.
                So they filed *for him*. Which means he must subsequently also file his 1040 and follow all of the computation regulations--it's gotta match what the broker and the bank reported for him.

                So, currently, there's really no way to not file. If, however, you found a broker and a bank that actually followed the law and did not file 1099 information returns about your own legal property an

                • Right, he files and PAYS the proper amount. Then there is no problem. Criminals unwillingness to take the tax hit which can go third to close to half get them caught.

            • Re:He what?! (Score:4, Informative)

              by gravewax ( 4772409 ) on Tuesday November 10, 2020 @10:07PM (#60710116)
              you seem to have misunderstood the reasons here for filing and the powers of the IRS. Firstly and most importantly he did not get in trouble for dodging taxes or not filing or lieing to the IRS. The IRS filings were to launder the money into legitimacy, if he didn't do that he almost certainly would have been caught even earlier. He got caught because his early thefts had not taken precautions to cover his tracks and once the large thefts occurred this left a trail straight to him. The IRS could not give a shit about his dodginess as long as he was paying his tax debts.
            • No, you are blathering in historical ignorance, case history proves you wrong.

              Yes, you file and you pay. Then there is no problem.

        • Re:He what?! (Score:5, Informative)

          by gravewax ( 4772409 ) on Tuesday November 10, 2020 @09:35PM (#60710058)
          no, it is usually the opposite, reporting a gambling or crypto coin large windfall can be difficult to trace and verify depending on how and where he did it and it then justifies the massive increase in wealth. if you are on a standard wage and the next year you suddenly spend a few million dollars that is going to raise far more red flags than self reporting a large windfall.
    • by rowls ( 225157 )

      Reporting a gift does not mean paying a tax. In the US gifts are not taxable for the beneficiary. Gifts over a certain amount (fairly high at the moment) are taxable under the gift an inheritance tax. I assume he reported the bitcoin as a gift to avoid suspicion knowing that Coinbase as going to report the transaction to the IRS.

  • ...spend his endless days working on his prison cred.

  • by Bourdain ( 683477 ) on Tuesday November 10, 2020 @07:05PM (#60709690)

    ...I'm a little embarrassed this wasn't caught quickly but not surprised

    • Microsoft should have patched it quicker ;-)
    • I wouldn't be, as far as this sort of fraud goes he seems to have been caught pretty damn quickly. crime done early 2018, charged 2019, convicted and jailed 2020. Given the investigation that would have had to have been completed first this seems to indicate it was detected not long after it occurred.
  • by VAXcat ( 674775 ) on Tuesday November 10, 2020 @07:10PM (#60709702)
    Of when I worked at MegaBig Engineering company. At the dawn of the internet, we fielded a B2B application that let employees order office supplies from our main supplies vendor online. The officially documented way of testing it when there were reported problems included ordering a cheap paperback dictionary, and waiting two days to see if it got delivered. The guy in the next office over supported the system, and his office had a helluva lot of dictionaries in it after a couple of years...
    • You'd think they'd have had a legit office supplies wishlist to not waste money. But you know, bureaucracy. BS jobs and inefficiencies reign supreme to worship at the altar of budgets, which equals status.
      • by tlhIngan ( 30335 )

        You'd think they'd have had a legit office supplies wishlist to not waste money. But you know, bureaucracy. BS jobs and inefficiencies reign supreme to worship at the altar of budgets, which equals status.

        Cheap paperback dictionaries are probably cheap enough that it doesn't need approval. They are under a dollar at most stores anyways. There aren't many office supplies cheaper, other than maybe an individual pen or pencil, but they likely didn't came in bunches that cost more.

        And the problem with other off

    • by DarkOx ( 621550 )

      We did something similar but had a bottle of purple paint we marked up to like $600 so real customers would never order. We'd order it using the company CC, (so we were paying ourselves) and the end to end test ended up being out cost on the bottle after it all washed out across the GL.

      We had a good number of bottles of pain laying around our cube at various times.

      • by Megane ( 129182 )

        We had a good number of bottles of pain laying around our cube at various times.

        That must have been an interesting place to work. In the immortal words of Dr. Smith, "Oh the pain!" [youtube.com]

  • But we do it from a much bigger tray and we do it a couple a million times.
  • Seem to be a bit much for stealing so little from them.
  • by RogueWarrior65 ( 678876 ) on Wednesday November 11, 2020 @09:47AM (#60711384)

    Now that Microsoft is closing all their stores.

The use of anthropomorphic terminology when dealing with computing systems is a symptom of professional immaturity. -- Edsger Dijkstra

Working...