Federal prosecutors have charged Abdellah Belmili, a 26-year-old Algerian man, with allegedly operating two cybercrime marketplaces that sold stolen financial credentials and custom-built phishing kits aimed at major American banks.
The indictment, unsealed following his extradition to the United States, accuses Belmili of running the black-market websites Market0Day and Spoxy. If convicted, he faces a maximum of 30 years in prison.
Prosecutors allege the marketplaces provided a full-service criminal infrastructure, offering both credentials harvested from financial institutions and the tools needed to conduct phishing attacks. The kits were reportedly tailored to bypass security measures at specific US banks.
Law enforcement agencies coordinated internationally to apprehend Belmili and bring him to the US for prosecution. The case highlights ongoing efforts to dismantle underground forums that serve as key enablers of financial cybercrime.
While the charges are serious, legal experts caution that proving direct operational control over the marketplaces will depend on the strength of digital forensic evidence and witness testimony in court. Defense attorneys may also challenge the legality of evidence obtained through international cooperation.