A university student who created and sold phishing kits used by criminals across the globe to steal millions of pounds has been jailed.
Ollie Holman, 21, was studying in Canterbury when he developed and distributed malicious software packages that mimic real websites to trick victims into handing over sensitive personal and financial information.
The University of Kent student was linked to 1,052 phishing kits, which targeted 69 financial institutions and large organisations – including charities – in 24 countries.
Investigators estimate the scam caused losses of at least £100 million globally.
These kits included fake web pages designed to look like genuine banking and login sites, which harvested details such as account credentials and bank card numbers from unsuspecting victims.
Holman, of Eastcote in west London, was sentenced at Southwark Crown Court yesterday (Wednesday) to seven years in prison after previously pleading guilty to seven offences, including making and supplying articles for use in fraud and possessing criminal property.
He was also handed a Serious Crime Prevention Order in a bid to restrict his future online activity.
The court heard Holman ran his illicit operation via encrypted Telegram channels, where he sold the kits, provided technical support, and advised other criminals on how to use them.
He was first arrested in October 2023, when police searched his university accommodation in the city and seized digital devices.
However, he continued to run his fraud operation remotely until a second arrest at his home address in London in May this year, which led to the seizure of further evidence.
An investigation led by City of London Police, with support from authorities in Switzerland and Finland, uncovered a significant volume of digital material linking Holman to the scam.
Sarah Jennings, specialist prosecutor for the Crown Prosecution Service, said: “By creating and selling phishing kits, Ollie Holman facilitated a widespread fraud which others used to exploit innocent victims on a vast scale.
“Holman acted with greed and profited handsomely from this illegal enterprise, funding his own lavish lifestyle at the expense of countless individuals and businesses who suffered devastating financial losses and emotional harm.
“The prosecution team, working closely with City of London Police and international partners, was able to build a strong case with clear, compelling evidence, resulting in the defendant’s guilty pleas.
“I hope this case sends a clear message to those intent on committing fraud: no matter how sophisticated your methods, you cannot hide behind online anonymity or encrypted platforms.
“Fraudsters like Holman will be robustly pursued by law enforcement, prosecuted by the CPS, and brought to justice.”
The CPS said it will now pursue confiscation proceedings to recover the profits Holman made from his cyber crime.
