A young man, just 21 years old and studying at the University of Canterbury, has been handed a seven-year prison sentence after being found guilty of creating and distributing over 1,000 phishing kits. These kits were used to build fake websites that imitated banks and major organizations, tricking people into giving away their personal and financial details.
The phishing kits were sold through Telegram, an encrypted messaging app, to criminals worldwide. The kits helped scammers target 69 major organizations, including financial institutions and charities, across 24 different countries. Authorities estimate that the attacks caused at least £100 million in global losses.
Continued Offenses After First Arrest
The student was first arrested in October 2023 at his university dorm, where officers seized his electronic devices. But despite being under investigation, he kept operating under the radar. He continued to provide technical help and updates to customers using his Telegram account—even after being warned by authorities. He was finally re-arrested on May 20, 2024, at his home.
The devices collected by law enforcement contained large amounts of evidence, including software, communication logs, and financial records, helping the Crown Prosecution Service (CPS) build a solid case.
A Plea of Guilt and a Harsh Sentence
On July 23, 2025, the student pleaded guilty to a long list of charges: creating tools to commit fraud, helping others commit fraud, and acquiring and moving criminal property. Along with his seven-year prison term, he was issued a Serious Crime Prevention Order—a civil order designed to stop him from reoffending after release.
The CPS stated that the suspect had profited greatly from the operation, using his earnings to support a luxurious lifestyle, while victims and businesses suffered significant emotional and financial harm.
A Message to Cybercriminals
Sarah Jennings, a lead prosecutor at the CPS, said in a statement that the case sends a strong warning. “He acted with greed and profited handsomely… at the expense of countless individuals and businesses who suffered devastating financial losses and emotional harm,” she said. She added that the case should remind others that digital criminals will not go unnoticed.
“No matter how sophisticated your methods, you cannot hide behind online anonymity or encrypted platforms. Fraudsters will be robustly pursued, prosecuted, and brought to justice.”