From dark web dealings to cryptocurrency mining, officers follow the trail of a daring cyber heist.
By: Ryan Yeo
In 2017, Ho Jun Jia offered Photoshop services on a dark web forum, producing counterfeit US driving licenses. In exchange, he gained access to the forum’s “Staff/VIP” section, which allowed him to acquire the personal data of 70 individuals. Among them was Marc Merrill, the co-founder of Riot Games.
Cloudy with a Chance of Crypto
Ho decided to access Merrill’s credit card details for his own use. Through online research to gather information about Merrill, he managed to use Merrill’s personal data to gain control of his online credit card accounts. Ho also created a Gmail account to impersonate Merrill and get Amazon Web Services (AWS) and Google to provide him with US$5.4 million worth of cloud computing services.
Between November 2017 and March 2018, Ho used these services to conduct cryptocurrency mining, earning almost $350,000 after selling 203 units of the 1,468 units of Ether he’d illegally acquired. He then used these funds for online gambling and his personal expenses.
Between November 2017 and January 2018, Ho posed as Merrill on at least 40 occasions. He also employed delaying tactics to avoid making payments. AWS suspended his account in January 2018 after repeated attempts to reach “Merrill” via email for payment had failed.
Paying the Price
Officers from the Technology Crime Investigation Branch of the Criminal Investigation Department diligently pursued Ho, combing through financial records and bank accounts for signs of suspicious activity. During their investigations from March 2019 onwards, officers also maintained close communication with AWS and Google.
The Police followed digital breadcrumbs that could lead to the imposter. Through meticulous investigations, they were able to trace a User ID that Ho had used back to his social media accounts. On 24 September 2019, the Police conducted a raid on Ho’s residence and arrested him for offences under the Computer Misuse Act.
The efforts of the Technology Crime Investigation Branch led to the disruption of Ho’s malicious cyber activities. In March 2022, Ho pleaded guilty to six charges of unauthorised access to computer materials along with six other charges for other offences. He was sentenced to 10 years’ jail.
To deter cases of identity theft, it’s important for members of the public to exercise vigilance in safeguarding personal information and accounts. Sensible measures include enabling two-factor authentication for all online accounts, using strong passphrases, regularly updating them and refraining from sharing login details with others.
Crime Files
Police Life brings you actual investigations that Police officers have pursued to keep Singapore safe and secure. Watch a reenactment of this case on Crimewatch, Episode 5, 2023!
Explore Our Content
Editor's Pick
