Jump to content

Microsoft lost $10 million in gift cards because of scammer


Recommended Posts

Quote

In an age of cryptocurrencies and digital banking, gift cards may seem like a relic of the past due to their inflexible nature and many of them having expiration dates. But that didn't matter for one very cunning thief, who funded a lavish lifestyle with Xbox gift cards using a loophole in Microsoft’s online store. A Bloomberg report detailed how engineer Volodymyr Kvashuk managed to steal over $10 million from Microsoft before he was eventually busted.

 

It was the perfect crime: As an employee of Microsoft who was tasked with simulating purchases on the company's digital store, Kvashuk discovered that whenever he tested purchases of gift cards he would receive real codes. Kvashuk started small, generating Xbox cards in increments from $10 to $100 while working his day job of preventing the online store from shipping fake purchases of physical goods. Recruiting a few co-workers to help him in his scheme and using multiple profiles while routing his internet traffic through servers in Japan and Russia, Kvashuk would generate thousands of dollars' worth of gift cards and then sell them online for up to 55% off their regular price.

 

Kvashuk even went so far as to build a computer program to increase the speed at which he bought gift cards, selling them in bulk on the marketplace Paxful, which allowed gift cards to be traded for cryptocurrency. One trader is reported to have paid Kvashuk 1.98 Bitcoins, then worth $17,240, for 300 Xbox cards. With all that Bitcoin and some crypto-investing, Kvashuk was able to purchase his dream lakefront home, but Microsoft's Fraud Investigation Strike Team--FIST--was onto him.

In 2018, FIST noticed a spike in online purchases using gift card codes and corporate investigators traced the irregular activity to two internal test accounts belonging to employees of the Microsoft store team, and these accounts were soon blacklisted after it was discovered that $8 million had been stolen. When a third account was activated and stole another $1.6 million in Xbox gift cards, the jig was essentially up.

 

Microsoft called in a veteran detective of Scotland Yard's computer crime unit, Andrew Cookson, to help assist FIST, and after reading through CSV data, Kvashuk's name turned up as one of the official test accounts that had bought some Xbox gift cards illegitimately in 2017. Kvashuk had already been connected to stolen codes that had been used at Microsoft's web store to buy three Nvidia GeForce graphics cards, which had been shipped to "Grigor Shikor" at unit 309 of the Norman Arms in Seattle. There was no Shikor living at the Norman Arms in that unit, but Kvashuk was living in unit 101. Busted.


A month later Kvashuk would be fired and in February 2020 he was charged with a number of crimes such as money laundering, identity theft, and wire fraud by federal prosecutors. In November of 2020, a judge sentenced him to nine years in prison. It's a wild story, with the Bloomberg report containing even more fascinating details, such as Kvashuk being the sole person responsible for global fluctuations in the price of Xbox gift cards on reseller markets at one point.

 

https://www.gamespot.com/articles/microsoft-lost-10-million-worth-of-xbox-gift-cards-in-an-online-scheme/1100-6493483/

 

This is a hell of a story.

Link to post
Share on other sites
Quote

In 2018, FIST noticed a spike in online purchases using gift card codes and corporate investigators traced the irregular activity to two internal test accounts belonging to employees of the Microsoft store team, and these accounts were soon blacklisted after it was discovered that $8 million had been stolen. When a third account was activated and stole another $1.6 million in Xbox gift cards, the jig was essentially up.

 

I swear ill never understand how scammers manage to come up with such elaborate schemes just to let their greed sink them in the end. Dude stole $8 million and after noticing that he couldn't use the 2 accounts anymore he could have just called it quits and likely gotten away with everything. Instead he decided he needed to make more and basically fell for their trap by setting up a 3rd account.

  • Like 1
Link to post
Share on other sites
On 2021-07-01 at 9:13 PM, Twinblade said:

 

I swear ill never understand how scammers manage to come up with such elaborate schemes just to let their greed sink them in the end. Dude stole $8 million and after noticing that he couldn't use the 2 accounts anymore he could have just called it quits and likely gotten away with everything. Instead he decided he needed to make more and basically fell for their trap by setting up a 3rd account.

What a moron. I would have quit at $4 million maybe and left the country. 

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...