Media Release
Victorian cybercriminal sentenced to jail for fraud and drug trafficking
A Victorian man who purchased stolen personal data from an illegal online marketplace and used it to facilitate criminal activity, including money laundering and drug trafficking, has been sentenced to 22 months’ imprisonment.
The Box Hill man, 34, was sentenced by the Melbourne Magistrates’ Court yesterday (11 November, 2025) after previously pleading guilty to six offences. After serving 12 months’ imprisonment, the man will be released on a two-year recognisance release order.
In 2020 and 2021, the man used an account on Genesis Market - which was once one of the largest cybercriminal marketplaces on the internet - to purchase malware bots containing compromised credentials of Australian victims.
The credentials included log-in passwords and screenshots of identification documents and financial transactions. The man used the credentials to access the victims’ bank accounts and transfer their money into accounts in his name. He also used the stolen identities to apply for a VIP account at a casino, purchase cryptocurrency and launder money.
The AFP identified the man as part of Operation Zinger, which was an FBI-led, multi-agency international investigation into Genesis Market, assisted by the AFP, NSW Police Force, Victoria Police, Queensland Police Service and Western Australia Police Force.
In March 2023, the AFP executed a search warrant at the man’s Box Hill home. Police seized six phones, each containing the personal details of fraud victims, gold bars, images of the man posing with fraudulent IDs, more than 15 cryptocurrency seed phrases, about $10,000 cash, small quantities of illicit drugs hidden inside an energy drink can and three luxury watches.
The man was charged in October 2023. He later pleaded guilty to:
- One count of producing false or misleading documents, contrary to section 137(1) of the Anti-Money Laundering and Counter-Terrorism Financing Act (Cth);
- One count of possessing identification information, contrary to section 372.1(1) of the Criminal Code (Cth);
- One count of dishonestly obtaining or dealing in personal financial information, contrary to section 480.4 of the Criminal Code (Cth);
- One count of trafficking in a controlled drug, namely methamphetamine and gamma-butyrolactone, contrary to subsection 302.4(1) of the Criminal Code (Cth);
- One count of dealing with property reasonably suspected of being proceeds of crime, contrary to section 400.9(1) of the Criminal Code (Cth); and
- One count of possessing identification information, with the intent to use that identification information to engage in conduct which constitutes an offence against subsection 372.1A(1) of the Criminal Code (Cth), contrary to subsection 372.2(1) of the Criminal Code (Cth)
AFP Detective Superintendent Marie Andersson said cybercriminals were always searching for opportunities to exploit the community for financial gain.
“The rise of the internet has provided a rise in opportunity for cowardly cybercriminals to target and exploit Australians for their own selfish motivations,” Det-Supt Andersson said.
“Cybercriminals who gain access to personal information online – either through criminal marketplaces or other nefarious means – have the ability to steal the identities of innocent Australians to enable further criminal activity.
“The AFP will not stand by and watch Australians lose their life savings, identities and wellbeing to these criminals.
“We urge the public to protect themselves against this sort of crime by regularly changing passwords, enabling two-factor authentication and adopting other online security measures.”
The AFP is committed to equipping all Australians with the knowledge and resources to protect themselves against cybercrime.
Watch our cybercrime prevention videos and protect yourself from being a victim of cybercrime.
For more information on building safe online habits such as Multi-Factor Authentication into your everyday digital routine, visit the JPC3’s ClickFit resource hub.
If there is an immediate threat to life or risk of harm, call triple-0.
If you, or someone you know needs help, we encourage you to contact Lifeline on 13 11 14 or Beyondblue on 1300 224 636, who provide 24/7 support services.
If you are a victim of cybercrime, report it to police using Report Cyber.
