In US Prison, a Russian Tech Entrepreneur Involved in $93 Million Fraud Was Exchanged After Putin’s Call

Vladislav Klyushin, a 42-year-old Moscow-based tech entrepreneur, faced a harsh verdict in US federal court, receiving an additional nine-year sentence and a $34 million forfeiture

This Russian Tech Bro Helped Steal  Million and Landed in US Prison. Then Putin Called

Vladislav Klyushin, a 42-year-old Moscow-based tech entrepreneur, faced a harsh verdict in US federal court, receiving an additional nine-year sentence and a $34 million forfeiture. He maintained an optimistic demeanor throughout his legal proceedings, confident that he would be repatriated by the Russian authorities.

Klyushin’s unwavering belief in his eventual return to Russia was justified when, on August 1, 2024, he was released and flown back to Moscow in a significant US-Russian prisoner exchange involving 24 individuals, marking one of the largest such swaps in history.

The exchange, which garnered considerable media attention, resulted in the repatriation of renowned individuals like Wall Street Journal reporter Evan Gershkovich and former US Marine Paul Whelan to the United States, while Russia received individuals associated with the Kremlin and undercover spies. Klyushin’s pivotal role in the complex prisoner swap was often overlooked, despite his involvement in a significant financial crime.

The ongoing tensions between the US and Russia have led to various diplomatic maneuvers, including recent swaps and the capture of American citizens in Russia. Amidst this geopolitical landscape, individuals like Klyushin exploited loopholes in international sanctions to funnel financial assets into Russia, circumventing the economic restrictions imposed by Western nations.

Klyushin, a prominent entrepreneur with ties to the Kremlin, had a swift and contentious rise, accumulating substantial government contracts and growing his influence in Moscow’s political and business circles. Despite facing legal challenges, Klyushin was perceived as a charismatic and benevolent figure within his community, known for his philanthropic endeavors and cultural patronage.

Moscow’s entrepreneurial elite, including Klyushin, capitalized on their proximity to the government for financial gain, with Klyushin achieving unparalleled success within these circles.

influential figures recommended by an autonomous media source that he was linked to an undisclosed, Kremlin-related Telegram channel with close to 200,000 followers. Klyushin refuted the accusation and triumphantly took legal action against the source for the suggestion.

One of Klyushin’s most significant professional connections was with Ivan Ermakov, a globally notorious hacker. The exact timeline of their acquaintance remains uncertain, but by April 2018, they were friendly enough to even go heli-skiing together. Ermakov, then a 32-year-old with strikingly young-looking brown eyes, had recently served in Unit 26165 of Russia’s primary intelligence department, the GRU. Within cybersecurity and political spheres, this unit was famously referred to as “Fancy Bear.” It became infamous for penetrating the networks of Hillary Clinton’s presidential campaign and the Democratic National Committee, actions that contributed to Trump winning the 2016 US election. Allegations from American prosecutors in 2018 suggested that Ermakov personally carried out some of Fancy Bear’s cyber intrusions. It was during this period that Ermakov and Klyushin were present together at the World Cup event in Sochi. Furthermore, in October of the same year, Ermakov was indicted for multiple Fancy Bear cyber attacks during the 2016 summer Olympics. Subsequently, Ermakov was included in the FBI’s list of most-wanted individuals. Klyushin stored a copy of the FBI poster in his iCloud account.

During this time, Ermakov was acquiring intelligence that would play a pivotal role in Klyushin’s upcoming major business endeavor: capitalizing on opportunities in the American stock market. As per encrypted conversations later accessible to prosecutors, Klyushin was preparing to open a trading account through a Danish entity, which Ermakov and an M13 staff member seemed to utilize for transactions across various sectors—ranging from real estate to natural gas to food services. Initially, the venture encountered challenges. The dialogues exhibited instances of poorly timed transactions, miscommunication of company details, and misunderstandings of market dynamics. “The market is behaving erratically,” remarked Ermakov. “We are not performing well,” lamented an M13 team member. However, the successful trades shared a common theme—they consistently preceded the public release of companies’ quarterly earnings reports, hinting at potential access to privileged information by Klyushin’s contacts.

Prosecutors claimed that indeed there was insider information involved.

Broadly speaking, there are various forms of insider trading. Some legal authorities have labeled the more common form as “golfer cases,” where an executive within a public company shares confidential information with an acquaintance while on a golf course, who then leverages this data in the market. Although illegal, it typically involves a limited scope: a single insider, a single company. (Renowned professional golfer Phil Mickelson repaid over $1 million in relation to one such case in 2016.)

A less prevalent yet potentially more harmful type of insider trading entails pinpointing a bottleneck in the financial information flow and obtaining confidential data on numerous companies simultaneously. This occurred in the early 2010s when a Ukrainian hacker infiltrated press release distribution services like PR Newswire, extracting pre-public data on multiple companies. Reportedly, this breach led to illegal profits of around $30 million. For reasons not entirely clear, Klyushin had a printout about the PR Newswire hacker stored in a pink, translucent folder. An image was captured alongside a bottle of rosé.

The suspected insider trading collaboration between Klyushin and Ermakov is believed to have commenced in early to mid-2018. (The following details were extracted from court documents, trial records, and evidence presented during a subsequent trial.) It was during this period that unusual activities began occurring within the networks of Donnelley Financial Solutions—a firm specializing in document management for prominent publicly traded organizations. On May 9, a veteran Donnelley employee, Julie Soma, noticed an unusual surge in the downloading of confidential financial reports intended for client companies. As per Soma’s later testimony, this was behavior she had “never” exhibited before. Furthermore, the browser and operating system information linked to her account’s sudden surge in activity contradicted her regular behaviors. Additionally, all of this occurred late at night, significantly beyond the hours Soma typically worked from her residence in Richland, Washington.

Several other accounts also displayed anomalous activity. Further scrutiny revealed a suspicious tool on a laptop associated with Donnelley in London. This tool, designed for remote control, attempted to gather usernames and passwords within Donnelley’s networks and then concealed its activities by erasing system logs. Additionally, it endeavored to connect the laptop to a deceptive site, “investmentcomp.com”—a common tactic among hackers to discreetly obtain data from the victim’s system.

In November, a similar incident occurred at a rival of Donnelley. At Toppan Merrill, investigators later confirmed the use of a program called DirBuster, rapidly attempting to identify file names and network paths. The presence of other malicious software mirrored the events observed on the Donnelley systems.

Concurrently, Klyushin’s investments were diversifying. He invested in semiconductor manufacturers, roofing companies, and a boat manufacturer specializing in wakeboarding. Interestingly, Mikhail Irzak and Igor Sladkov, two acquaintances of Ermakov from St. Petersburg, frequently mirrored Klyushin’s stock purchases. (Irzak, Sladkov, and Ermakov faced indictments as well.) Their trading volumes often exceeded Klyushin’s. For instance, when Klyushin bought 1,350 Tesla shares just before its earnings report that autumn, the St. Petersburg duo purchased 16,300. While Klyushin profited an estimated $9,000 from the transaction, they earned over $145,000. Although prosecutors never definitively established a direct connection between Klyushin and Ermakov’s associates from St. Petersburg, one of them had an internal M13 messaging application in his iCloud account, despite not being employed by or affiliated with the organization. An economist with the US Securities and Exchange Commission later calculated the likelihood of these unusual trading patterns being a coincidence at less than one in a trillion.

The illicit scheme attracted additional investors. Ermakov and Klyushin shared their insights with these new clients and received a 60 percent share of any profits these external investors garnered. One of the new investors operated an audiovisual and IT company, to which M13 had recently proposed a whitehat hacker service. Two other investors were described by Klyushin’s legal representatives as his old acquaintances: former mining executive Aleksandr Borodaev and Boris Varshavskiy, who was awarded the “Gold Badge of Distinction of Russian Coal” and briefly served as a regional minister of ecology and natural resources in southern Siberia. “I calculated the returns for Boris,” Klyushin messaged Ermakov in May 2019. “The profit stands at 198% … Boris made $989k from $500k … They don’t even inquire about it.” (Neither Borodaev nor Varshavskiy faced charges in the US. The trial did not establish whether they were aware of the situation.)

Ermakov replied with a thumbs-up and three laugh-cry emoticons. The duo grew closer—frequenting the sauna, dining out with the M13 crew. They exchanged messages about their preferred TV series. Klyushin was particularly fond of Billions, centered around a hedge fund manager who achieved success through illicit trading.

On the morning of July 18, 2019, Ermakov suggested purchasing shares of Skechers after downloading a forthcoming press release from the account controlled by Julie Soma at Donnelley Financial, pointing to a robust second-quarter performance exceeding market expectations. The St. Petersburg pair swiftly acquired 130,000 shares, with Klyushin grabbing almost 50,000 and his associates reaping 77,500. When the earnings were officially released at 4:05 pm ET that day, SKX surged from $34 to $39. Klyushin’s team promptly offloaded most of their holdings.

Excited by the success, Klyushin inquired about their earnings for the day in an encrypted group chat, sharing photos of Borodaev and Varshavskiy. Ermakov, once open to discussing external investors, now expressed caution. He warned Klyushin about the risks of exposure and legal repercussions, urging him to cease such activities that could lead to a courtroom trial.

A month later, former US Marine Trevor Reed found himself imprisoned in Moscow and confined to a state psychiatric facility. Recalling the horrendous conditions, Reed described a grim scene where violence and squalor were rampant, depicting a facility akin to a nightmarish setting.

Similarly distressing circumstances befell another former US Marine, Paul Whelan, during a visit to Russia for a friend’s wedding. Accused of espionage by FSB agents, he was incarcerated in a gulag alongside World War II detainees, subjected to menial tasks and sparse, unpalatable meals.

Reed and Whelan were among four US citizens detained by Russian authorities during the first term of President Trump, under dubious pretenses. The Kremlin hinted at potential releases in exchange for notorious Russian criminals, prompting speculation of a ransom negotiation.

Meanwhile, the SEC began picking up on suspicious stock transactions involving a group of Russians, suggestive of insider trading activities. This raised concerns, leading to the involvement of the FBI. Special agent B. J. Kang, known for his work on high-profile cases, initiated a joint investigation with prosecutors experienced in financial crimes and fraud. Recognizing the telltale signs of large-scale fraudulent activity, they suspected it to be a sophisticated hacking operation based on trading patterns and targeted companies.

Further analysis revealed a commonality among the companies involved: their financial reports were published by Donnelley or Toppan Merrill. Upon approaching these firms, initial disbelief was met with internal probes that scrutinized their own staff.

Simultaneously, federal agents carried out a series of “pen registers” to map connections between accounts, leading them to identify the duo from St. Petersburg. Mikhail Irzak claimed to be a marketer, while Igor Sladkov had diverse business interests. A search of Sladkov’s iCloud yielded incriminating evidence—a pre-released announcement from Snap Inc., indicative of insider information. This discovery was a significant breakthrough.

Further examination of Sladkov’s WhatsApp revealed extensive communication with a familiar figure in US law enforcement circles: the twice-indicted former intelligence officer Ivan Ermakov. This connection provided crucial insights into the orchestration of the illicit trades.

At 7:54 am Eastern time on November 6, 2019, the Julie Soma account at Donnelley accessed Roku’s third-quarter financial results, indicating a substantial miss. Promptly, individuals associated with M13 began shorting Roku shares or engaging in related financial transactions. Following the earnings release, Roku’s stock price plummeted from around $140 per share to under $120, resulting in profits nearing $9 million for Klyushin and his associates.

Despite their financial success, Klyushin expressed fatigue and the need for a break. He found solace in Ermakov’s companionship and indulged in retail therapy, purchasing a luxurious yacht and exploring apartment options. Their exchanges hinted at a deepening bond amid their trading activities.

Unbeknownst to them, their time for trading together was limited, with only a few months remaining.

Toppan Merrill implemented a two-step authentication method in their system, effectively barring the intruders. Donnelley terminated access to the compromised account of Julie Soma. Employees at Klyushin and Ermakov’s brokerage firm also began to harbor suspicions. During an April Skype conversation with an executive from Saxo Bank based in Denmark, Klyushin and another M13 staff member requested additional banking privileges. The executive from Saxo politely pushed back and inquired about the timing of Klyushin’s most successful trades coinciding with the release of earnings reports.

Klyushin smoothly added, “We have developed an application that we plan to introduce to the global market in collaboration with Swiss investors, which will have no ties to the Russian Federation.” This way, M13 would be “accessible to investors from Europe and America.”

There is little evidence to support the notion that M13 was creating a customized program for traders. However, the concept of enticing Western investors to engage in trading based on illicit information was indeed accurate. Klyushin and Ermakov were once seen at an event with Anselm Schmucki, a Swiss national who managed the Russian office of DuLac Capital, a Zurich-based investment firm. One of Klyushin’s attorneys, Max Nemtsev, mentioned, “The intention was to extend this offering to international clients, whoever Anselm was collaborating with.”

Schmucki declined to provide a comment for this article. His former business associate, Domino Burki, affirmed that their firm, DuLac, was not involved in any wrongdoing. Regarding Schmucki, Burki expressed uncertainty about his activities in Moscow, stating, “I believe that Anselm is not involved in criminal activities.” On a separate note, in 2023, Schmucki was sanctioned by the UK foreign secretary and the US Treasury Department. The Treasury Department alleged that he collaborated with “a company suspected of having ties to Russian organized crime and money laundering.” It further mentioned, “Schmucki oversees a global network of shell corporations,” including one based in Edinburgh, Scotland, and had close financial associations with an individual accused of financial crimes.

Among the plethora of documents that US prosecutors reviewed as they obtained warrants for the iCloud accounts of Ermakov, Klyushin, and other members of the M13 group, a photo of Klyushin receiving a Russian Medal of Honor on June 14, 2020, signed by “V. Putin,” stood out prominently. The evidences gathered, including screenshots of Ermakov trading through Klyushin’s account, the pre-publication download of earnings reports, the collection of Porsche convertibles, encrypted discussions backed up on Klyushin’s iCloud, indicated a clear-cut case. From Ermakov’s indication of the risk of ending up in a courtroom—demonstrating criminal intent—to the precise details of the trades executed using stolen information, the evidence pointed to an undeniable truth. One additional photograph that caught attention was a Russian Medal of Honor bestowed upon Klyushin, which substantiated the case against him.

The day following the awarding of the medal to Klyushin, a former US Marine, Paul Whelan, found himself inside a glass cage at Moscow City Court, donning a blue-gray sweater. Holding up a sign that read, “Sham trial! Meatball surgery!”—alluding to the fabricated charges of espionage leveled against him and the urgent hernia surgery he underwent weeks prior. Seeking intervention from President Trump, he stood flanked by two masked men with holstered pistols as the judge pronounced a sentence of 16 years in a transformed gulag.

Several weeks later, Trevor Reed received a nine-year sentence and was dispatched to a dreadful facility. Refusing to cooperate, he was confined to solitary isolation and stripped of his reading materials. Commencing a hunger strike, Reed later recounted to CNN, “I began feeling unwell. I consistently coughed up blood for approximately three and a half months, multiple times each day.”

Towards the end of summer, the M13 team ceased relying on the data from Donnelley and Toppan Merrill for trading, and authorities had no means to reach them while they remained in Russia. The anticipation was that one of them would opt to travel to a country with a favorable stance towards the US government. The first person departing—be it Sladkov, Irzak, Ermakov, Klyushin, or others—would be apprehended; all others would be implicated as accomplices in an extensive insider trading case. “There was no alternative plan,” Frank shared.

With two US federal indictments already looming over him, Ermakov wisely chose to stay in Russia. On the contrary, Klyushin was eager to relive the excitement of heli-skiing. This time, amidst the Alps, he planned to bring his spouse along to celebrate their anniversary.

In the United States, prosecutors initiated the preparation of a criminal charge against Klyushin. The FBI contacted Swiss authorities for assistance. On Sunday, March 21, 2021, Klyushin and his wife departed from Moscow in a private jet. “You’re literally holding your breath,” Frank remarked to CNBC. After about four hours, the Klyushins touched down at Sion airport, Switzerland, donned in ski attire, ready to board a helicopter. Frank narrated, “He was already equipped in ski gear, alighting from the aircraft geared up to fly by a chopper. That’s when the Swiss agents swooped in.”

This juncture in the narrative takes a bewildering turn. Reports from local media revealed that Klyushin arrived in Sion in handcuffs and shackles, where he was detained in solitary incarceration without bail. However, according to Oliver Ciric, the Swiss attorney quickly enlisted in Klyushin’s defense, his client remained composed and unperturbed throughout the ordeal. Ciric, an expert in multilingual responses to Western sanctions by Russia and, surprisingly, an honorary consul from the Republic of Vanuatu, stated that Klyushin’s arrest followed his rejection of advances from British and American intelligence personnel in a bar in southern France and subsequently in Edinburgh, Scotland. This insinuated that the alleged spies were attempting to extract information about his connections in the Kremlin or possibly recruit him as an asset. Despite Klyushin’s proximity to the Putin administration, Ciric lacked evidence to substantiate these claims.

On April 7, the Kremlin urged the Swiss authorities to extradite Klyushin back to Moscow, citing him as a fugitive accused of large-scale financial deception. This demand appeared peculiar in light of the substantial support Klyushin’s company received from the Kremlin. More confounding was Klyushin’s voluntary compliance with the extradition plea, potentially exposing him to the notorious Russian judicial system. The US government also proposed extradition of Klyushin to the United States, triggering a 12-day period

Subsequently. The appeal was approved towards the end of June. All parties involved reached an agreement on the swift nature of the process—a high-profile extradition case that could typically linger for years. “It deviated completely from the usual protocols,” Ciric remarks. “This anomaly is attributed to the political pressures imposed.”

During that same year in June, at a lakeside residence near Geneva, Putin and US president Joe Biden deliberated on the possibility of a prisoner exchange. This subject had been under deliberation for some time through various avenues—formal dialogues between diplomats, informal conversations engaged in by a fluctuating network of external legal representatives and advocates. No accords were reached on that day. However, the two nations established a new line of communication, this time between the CIA and their Russian counterparts.

Following a sequence of appeals, Klyushin was transferred to the US in December and incarcerated at Plymouth County detention facility. A trial date was scheduled approximately a year later. For a case of such intricacy, even this timeline seemed remarkably swift. This was partly due to an accord struck between the Justice Department, Klyushin’s defense attorneys, and the presiding judge, Patti Saris.

Both parties, for their individual reasons, sought to minimize Klyushin’s ties within the Russian government and society. Saris, for her part, expressed concerns that extensive discussions on these connections could bias the jury. The prosecutors, as per Frank, aimed to “emphasize the actual facts of the insider trading.” Meanwhile, Klyushin’s American legal representatives completely reversed their earlier defense strategy, avoiding any mention of the alleged interactions with Western intelligence or the reasons those intelligence agencies might have had an interest in their client.

Thus, the trial did not disclose the identities of Klyushin’s investors—individuals such as Aleksandr Borodaev and Boris Varshavskiy, the individual who received the Russian gold medal for mining. Nor did it delineate the extent of Russians that gained from the scheme. It omitted any reference to the fact that when Klyushin showed Ermakov photographs in August 2019 of a safe filled with $3 million in $100 bills, that safe was situated within the Russian Ministry of Defense.

The trial concluded in 16 days. Klyushin was convicted on all counts. Nonetheless, he appeared indifferent to the verdict.

By 2022, the American and Russian administrations exchanged two sets of detainees. They swapped Konstantin Yaro-shenko, a Russian narcotics smuggler, for Trevor Reed, and they exchanged Viktor Bout, the arms dealer infamous as the “Merchant of Death,” for the American basketball athlete Brittney Griner.

Bout was a figure akin to a real-life antagonist, fueling conflicts from Afghanistan to Angola. Yaroshenko agreed to transport 8,800 pounds of cocaine. Conversely, Griner had been detained for nearly a year for possessing less than a gram of hash oil. Reed was falsely accused of assaulting a Russian officer once. Undoubtedly, the release of wrongly apprehended American civilians was a cause for celebration. However, what message did this convey to Putin, that he could exchange Bout’s liberty for Griner’s? Yaroshenko’s for Reed’s? Doug London, a CIA veteran of 34 years, expressed concerns that while the trade was well-received politically, it might not be in the long-term interest of the US. “Russia felt emboldened by this,” he informs. “They will likely take more hostages and make more arrests.”

Klyushin was convicted on Valentine’s Day, 2023. Approximately six weeks later, on March 29, Russian authorities seemingly abducted Evan Gershkovich, the Wall Street Journal journalist, and charged him with espionage. This sparked an international uproar. Subsequently, negotiations were initiated to facilitate a potential swap to secure his return.

Reports vary on whether Klyushin was a focal point of discussion as negotiators convened through various avenues—or if he remained unmentioned. The Russian tycoon Roman Abramovich purportedly played a significant role—while others dispute his involvement. The State Department was purportedly coordinating an international coalition to secure the release of the next batch of Western detainees or was perceived to be ineffectually navigating the periphery. The CIA was either spearheading talks on behalf of the US or, as one out of 10 sources noted, simply “delivering the mail” for the Biden administration, which was dictating all decisions. Adding to the complexity, numerous of the 24 individuals eventually liberated in the extensive prisoner exchange of August had their own advocates, all attempting to liaise with governments and among themselves. One American detainee even had two sets of representatives, each of whom denigrated the other in my interactions.

About Author

Subscribe To InfoSec Today News

You have successfully subscribed to the newsletter

There was an error while trying to send your request. Please try again.

World Wide Crypto will use the information you provide on this form to be in touch with you and to provide updates and marketing.