US federal court convicts Russian hacker Seleznev in theft and sale of credit cards resulting in $169M in losses; he could face up to 40 years in prison
Roman Seleznev could face between four to 40 years in prison — The son of a Russian lawmaker was convicted Thursday in federal court …
Context & Ripple Effects
Roman Seleznev's conviction lands amid a string of US prosecutions of Russian nationals for financial cybercrime: Vladimir Drinkman had already pleaded guilty in the scheme that stole more than 160 million card numbers a year earlier. What set this case apart was its target's profile — Seleznev is the son of a Russian lawmaker — and the scale prosecutors attached to it: $169M in losses from stolen and sold cards.
The conviction was also a sentencing question left open: with a guideline range of four to 40 years, the court's eventual choice would become a benchmark. It did — Seleznev ultimately received the longest hacking-related sentence in US history at 27 years, confirming that prosecutors and judges were willing to price large-scale card theft as a decades-level offense.
First-order effects
- Seleznev now faces between four and 40 years in federal prison, with the sentencing hearing set to determine whether his case becomes the new ceiling for hacking-related punishment in the US.
Second-order effects
- The prosecution signals to other Russian carding-market operators that US jurisdiction reaches them through arrest abroad or extradition, raising the personal cost of selling stolen payment data aimed at American victims.
Third-order effects
- If the pattern holds — five years for the Citadel malware builder, five years for the tax-preparer hacker extradited in 2019, then 27 years for Seleznev — US courts establish an escalating sentencing ladder for Russian cybercriminals, turning individual cases into cumulative deterrence policy.
The trend: US federal courts are treating large-scale Russian financial cybercrime as a decades-long prison offense, using sentence length itself as a deterrent instrument.