Evaldas Rimasauskas of Lithuania pleads guilty to US wire fraud, aggravated identity theft, and money laundering charges, admitting that he had stolen $23m from Google and $99m from Facebook and between 2013 and 2015.

Rimasauskas’s grift was pretty bold. He merely sent Google and Facebook invoices for items they hadn’t purchased and that he hadn’t provided, which the companies paid anyway. 
The invoices were accompanied by “forged invoices, contracts, and letters that falsely appeared to have been executed and signed by executives and agents of the Victim Companies, and which bore false corporate stamps embossed with the Victim Companies’ names, to be submitted to banks in support of the large volume of funds that were fraudulently transmitted via wire transfer.” He also spoofed emails that appeared to come from corporate execs.

Apparently, no one checked first to see if these corresponded to invoices/POs that had been issued within the companies.

Rimasauskas was pretending to be the giant Taiwanese hardware manufacturer Quanta Computer Inc, and had registered a company in Latvia with the same name.

He’s agreed to forfeit about $50m. It’s not clear what’s happened to the other $73m, but Rimasauskas was a prolific and baroque money-launderer who squirreled cash away in Cyprus, Lithuania, Hungary, Slovakia, and Latvia. Google has said that “We detected this fraud and promptly alerted the authorities. We recouped the funds and we’re pleased this matter is resolved.”