Scottish man admits role in plotting to steal £5.9 million in US cyber fraud scheme
Tyler Buchanan pleaded guilty to one count of conspiracy to commit wire fraud and one count of aggravated identity theft
A Scottish man has pleaded guilty to plotting to hack into the computer systems of at least a dozen companies to steal at least 8 million dollars (£5.9 million) in virtual currency from victims in the United States.
Listen to this article
The US Department of Justice (DOJ) said Tyler Buchanan, 24, of Dundee was involved in a group that used text message phishing attacks to trick employees into disclosing their login credentials, enabling access to computer systems.
Buchanan pleaded guilty to one count of conspiracy to commit wire fraud and one count of aggravated identity theft.
US officials said he and his co-conspirators sent hundreds of messages to company employees, posing as the companies or their contracted suppliers.
In his plea agreement, the 24-year-old admitted that between September 2021 and April 2023, the group planned to scam telecommunications companies, IT suppliers, cloud communications providers, virtual currency firms and individuals.
A device seized at Buchanan’s home in Scotland showed he possessed the names and addresses of multiple victims, as well as a text file containing cryptocurrency seed phrases and login credentials for one victim’s account.
“The conspirators created a phishing kit that captured login credentials entered into the fraudulent phishing websites by a victim company’s employees,” the DOJ said in a statement.
“The stolen credentials were then transmitted to an online Telegram channel administered by Buchanan and another co-conspirator.”
Buchanan has been in US federal custody since April 2025.
He is scheduled to be sentenced on August 21 and faces a maximum sentence of 22 years in prison.
Three other defendants, all from the United States, are still facing criminal charges, according to the DOJ.
Another co-conspirator, Noah Michael Urban, pleaded guilty in April 2025 to three fraud-related charges and is serving a 10-year prison sentence.
Urban was also ordered to pay 13 million dollars (£9.6 million) in restitution.
The DOJ said Police Scotland was one of several agencies providing the FBI with assistance as they carried out the investigation.