British Hacker Tyler Buchanan Pleads Guilty to $8 Million Virtual Currency Theft Scheme

Tyler Buchanan, a 24-year-old from Dundee, Scotland, has pleaded guilty to conspiracy charges involving the theft of over $8 million in virtual currency from various individuals and entities in the United States. According to reports from the U.S. Department of Justice (DOJ), Buchanan was part of a sophisticated hacking campaign that compromised at least a dozen companies across the entertainment and technology sectors. Currently held in federal custody since April 2025, Buchanan faces a potential maximum sentence of 22 years in prison for his role in the high-stakes digital heist.

The fraudulent scheme primarily utilized SMS phishing—often referred to as "smishing"—to deceive employees and gain unauthorized access to corporate systems. By harvesting stolen credentials, Buchanan and his co-conspirators managed to infiltrate sensitive databases and extract digital assets from unsuspecting victims. Investigations led by the FBI revealed that Buchanan possessed a vast amount of sensitive information, including cryptocurrency login details and personal data, which directly facilitated the illicit transfer of funds to the criminal network.

Buchanan’s actions are closely linked to "Scattered Spider," a notorious cyber-criminal group known for its aggressive social engineering tactics and targeting of major corporations. The case also implicates several other individuals, including American co-conspirators, as authorities continue to dismantle the network's operations. This guilty plea marks a significant development in international efforts to combat organized cybercrime, highlighting the collaborative work between global law enforcement agencies in tracking down actors who operate across borders to exploit digital vulnerabilities.

As the August 21 sentencing date approaches, the case serves as a stark warning to both individuals and corporations about the evolving threats in the digital landscape. Security experts emphasize that the success of Buchanan's attacks underscores the critical need for robust multi-factor authentication and rigorous employee training to mitigate the risks of sophisticated phishing attempts. With the FBI's investigation into the remaining members of the group ongoing, the legal proceedings against Buchanan represent a critical step toward accountability in the rapidly expanding realm of virtual currency fraud.