Man convicted for role in €55k cyber‑scam
- Ourense’s provincial court sentenced a man to 18 months in prison for helping a €55,158.46 business-email scam by providing his bank account. - Judges said his role was “decisive” because the hacked payment landed in his account after a fake invoice rerouted money between two timber firms. - The ruling matters because it treats the account holder as essential to the fraud, not a passive bystander or mere money-laundering afterthought.
A business-email scam sounds abstract until you see what it actually looks like. One company thinks it is paying a real invoice. The money goes out. But the bank account on the invoice has been swapped, and suddenly €55,158.46 lands with the wrong person. That is the case an appeals court in Ourense has now turned into a clear warning — if you lend your account to move the money, the court may treat you as part of the scam itself, not just cleanup after the fact. ### What happened here? The court said a man gave fraudsters access to his bank account so they could receive a transfer that a timber company believed it was sending to another business. The payment was not authorized in the real sense — it happened because someone manipulated the transaction details and redirected the funds. The Audiencia Provincial de Ourense convicted him as a necessary cooperator in aggravated computer fraud and imposed an 18-month prison sentence. (poderjudicial.es) ### Why was his account so important? Because these scams only work if the money has somewhere to land. The judges put it bluntly — the person who “interestingly” agrees to become the temporary holder of stolen funds plays a decisive role in finishing the crime. Basically, the hacked email or fake invoice starts the fraud, but the mule account is what turns deception into cash. (poderjudicial.es) ### Was this just money laundering? The court drew a harder line than that. Prosecutors had also floated an alternative money-laundering route earlier in the case, and reporting on the pretrial hearing showed the charges had shifted as the evidence developed. But the final ruling treated the account holder’s conduct as direct cooperation in the scam itself, not just handling proceeds after the fact. That matters because it raises the legal stakes for anyone who says they were only “letting money pass through.” (poderjudicial.es) ### How did the scam actually work? This was classic business-email compromise territory. One company was supposed to pay another. Somewhere in that chain, the payment information was altered so the transfer went to the defendant’s account instead of the legitimate recipient. You can think of it like changing the return address on a package label at the last second — the sender still mails the box, but it arrives at the thief’s door. (galiciapress.es) ### What did the defendant say? At the April 27 hearing, he tried to push blame onto unnamed third parties. He said others tricked him into opening the account and threatened him. That argument did not carry the day. The court found the evidence strong enough to conclude he knowingly enabled the transfer route the fraud needed. (poderjudicial.es) ### Why does the €55,000 figure matter? Because in Spanish criminal law, crossing €50,000 can aggravate the fraud. The judgment specifically notes the amount — €55,158.46 — as the reason the offense was treated as aggravated. That is not a rounding error or a symbolic sum. It is large enough to change the legal framing and the punishment. (galiciapress.es) ### Is this an isolated case in Ourense? Not really. Recent local reporting shows several similar cases in the province involving “mule” accounts, manipulated emails, and diverted business payments, including another Ourense case centered on nearly €90,000. So this ruling lands in a place where courts and investigators are already seeing a pattern, not a one-off fluke. (poderjudicial.es) ### What is the real takeaway for businesses? The weak point is often not the bank transfer itself but the trust around it. If a supplier suddenly changes account details by email, that should trigger a phone call and a second check — every time. The court’s message is the legal version of that same idea: these scams depend on ordinary people agreeing to play one crucial part. Cut off the fake account, and the whole chain gets much harder to complete. (farodevigo.es) The bottom line is simple. This was not a court treating an account holder as a passive extra. It treated him as essential infrastructure for the fraud — and that is the part other would-be “mules” should notice. (poderjudicial.es)
