British authorities arrest UK resident following US indictment for elaborate email compromise scheme targeting Pennsylvania construction firm.
PITTSBURGH, PA – British authorities arrested Nigerian national Farouk Adekunle Adepoju on September 15, 2025, after the US requested his extradition for allegedly stealing $235,266 from a Pennsylvania university. The 34-year-old UK resident now faces seven federal charges, including wire fraud and computer intrusion, in what appears to be a carefully orchestrated email compromise scheme.
How the Scam Unfolded
Based on the federal indictment unsealed Thursday, Adepoju may have spent weeks planning his attack on a Pennsylvania construction company that was working with a local university. Between March and April 2023, prosecutors say he managed to remotely access the company’s protected computer systems, though the exact method isn’t entirely clear from court documents.
What happened next seems almost too simple to work, yet it did. Adepoju allegedly tweaked the company’s email security settings, set up a fake domain that looked legitimate, and created fraudulent accounts designed to fool university staff. Then came the crucial part: sending fake payment instructions that looked like they came from the construction company itself.
“Adepoju then sent fake payment instructions to the university, directing them to update the construction firm’s banking details to accounts he controlled,” Acting US Attorney Troy Rivetti explained during Thursday’s announcement.
The University Takes the Bait
Here’s where things get frustrating for anyone who’s ever worried about cybersecurity. The targeted university, whose name hasn’t been released, apparently believed the fraudulent emails were legitimate updates and transferred roughly $235,266 to Adepoju’s accounts. That money? Still gone, according to federal authorities.
It’s the kind of scam that probably makes university administrators break out in a cold sweat. These business email compromise attacks have become increasingly common, with the FBI estimating they cost American organizations over $2.7 billion annually. Universities and construction companies seem to be particularly vulnerable, likely because they handle large financial transactions and work with multiple vendors and contractors.
The Long Arm of International Law
FBI Pittsburgh Special Agent in Charge Kevin Rojek didn’t mince words about the global nature of these investigations. “Criminals who think they can reach across the globe into the United States to line their pockets at the expense of the American public need know one thing: the FBI and our partners will find you and bring you to justice, no matter where you might be.”
The investigation involved the FBI’s Pittsburgh Field Office working alongside British law enforcement and the Department of Justice’s Office of International Affairs. Assistant US Attorney Mark V. Gurzo is handling the prosecution, though extradition proceedings could take months.
What Comes Next
Adepoju is looking at serious time if convicted, six counts of wire fraud and one count of computer fraud and abuse. Each wire fraud charge could mean up to 20 years in federal prison, while the computer fraud charge carries a maximum of five years. He’s currently waiting in the UK while extradition proceedings move forward.
Legal experts suggest that international cybercrime cases can get complicated with jurisdictional issues, but recent cooperation agreements between US and UK authorities appear to have made the extradition process smoother for fraud cases like this one.
Of course, it’s worth remembering that an indictment is just an accusation. Adepoju is presumed innocent until proven guilty in court.
