Security

Cyber-crime

A Kansas pig butchering: CEO who defrauded bank, church, friends gets 24 years

FBI recovers just $8M after scam crashes Heartland Tri-State Bank


The FBI has recovered $8 million in funds from a cryptocurrency scam that netted $47 million and devastated the Kansas city of Elkhart.

In August, Shan Hanes, 53, was sentenced to 24 years and five months in prison after he admitted to one count of embezzlement by a bank officer, an action that crashed the Heartland Tri-State Bank, which he headed. Hanes was lured into a so-called pig butchering scam, whereby a cryptocurrency scammer convinces the hog to put more and more money into a fake currency in an effort to reap a profit.

According to court documents [PDF], in December 2022 Hanes was involved in a WhatsApp conversation with an as-yet unidentified person who convinced him to buy into a cryptocurrency scheme. At first, he only used his own funds, but early in 2023, he embezzled funds from the Elkhart Church of Christ and the Santa Fe Investment Club.

"Ultimately, the lure of easy money quickly results in the complete loss of all funds," the filing said.

"It was particularly 'easy money' in this case as the defendant used his position and authority as CEO of Heartland Tri-State Bank to make and authorize the wire transfers or direct other HTSB employees to make the wire transfers on his behalf. It was certainly devastating in this case when the defendant had access to such a large amount of money. It was terribly quick in this case, as the defendant embezzled those funds in a short 8-week period."

Hanes had a position of trust in the small city, with a population of around 2000, and used that position to clear transfers to the scammer without serious impediment. When the size of the transfers was questioned by staff, he denied cryptocurrency was involved and persuaded one investor to cover a large transfer from their own personal funds.

In July 2023, the Kansas Office of the State Bank Commissioner moved in and uncovered the fraud after a tip-off from the bank's chief financial officer. The subsequent investigation found [PDF] that the initial fraud went unreported because Hanes was such a trusted member of the small city.

"Interviewees said that bank employees may have been hesitant to question or report the CEO’s activities because he had a dominant role in the bank and was a prominent figure in the community," it states.

"As previously noted, the CEO had worked at Heartland and its predecessor bank for about 30 years. He was one of the larger shareholders in Heartland’s holding company. Interviewees noted that the CEO also held important leadership roles in the local community."

The audit discovered $47,105,000 was missing, more than the capitalization of the bank. However, the FBI did manage to crack one of the cryptocurrency wallets involved and recovered around $8 million, which is being returned to local investors ahead of any government claims to the money.

“The US Attorney’s Office – District of Kansas thanks the FBI for its diligent investigations that led to the discovery and recovery of over $8 million in stolen funds. Through Hanes’ conviction and prison sentence, the Department of Justice obtained justice for the victims, and now with this court order, those victims will receive some financial relief,” said US Attorney Kate Brubacher. ®

Send us news
17 Comments

Interpol wants everyone to stop saying 'pig butchering'

Victims' feelings might get hurt, global cops contend, and that could hinder reporting

Ransomware scum blow holes in Cleo software patches, Cl0p (sort of) claims responsibility

But can you really take crims at their word?

BlackBerry offloads Cylance's endpoint security products to Arctic Wolf

Fresh attempt to mix the perfect cocktail of IoT and Infosec

US reportedly mulls TP-Link router ban over national security risk

It could end up like Huawei -Trump's gonna get ya, get ya, get ya

Scumbag gets 30 years in the clink for running CSAM dark-web chatrooms, abusing kids

'Today’s sentencing is more than just a punishment. It’s a message'

Blocking Chinese spies from intercepting calls? There ought to be a law

Sen. Wyden blasts FCC's 'failure' amid Salt Typhoon hacks

How Androxgh0st rose from Mozi's ashes to become 'most prevalent malware'

Botnet's operators 'driven by similar interests as that of the Chinese state'

Microsoft won't let customers opt out of passkey push

Enrollment invitations will continue until security improves

Australia moves to drop some cryptography by 2030 – before quantum carves it up

The likes of SHA-256, RSA, ECDSA and ECDH won't be welcome in just five years

Suspected LockBit dev, facing US extradition, 'did it for the money'

Dual Russian-Israeli national arrested in August

Phishers cast wide net with spoofed Google Calendar invites

Not that you needed another reason to enable the 'known senders' setting

Critical security hole in Apache Struts under exploit

You applied the patch that could stop possible RCE attacks last week, right?