Real-World Cases

Case Studies

Landmark financial fraud and money laundering cases examined through interactive timelines, key facts, and authoritative sources.

Educational Content - All information is sourced from public court documents, regulatory filings, and award-winning investigative journalism. This content is for educational purposes only and does not constitute legal advice.
Crypto Fraud Misappropriation

FTX & Alameda Research

2019–2024 · Estimated customer losses: $8B+

FTX was a cryptocurrency exchange founded in 2019 by Sam Bankman-Fried (SBF) and Gary Wang. At its peak in January 2022, the exchange was valued at approximately $32 billion. FTX collapsed in November 2022 after reporting by CoinDesk revealed that Alameda Research - a trading firm also controlled by SBF - held a significant portion of its balance sheet in FTT, FTX's own token.

The revelations triggered a liquidity crisis. Binance CEO Changpeng Zhao announced the sale of Binance's FTT holdings, accelerating customer withdrawals. FTX halted withdrawals and filed for Chapter 11 bankruptcy on November 11, 2022. Court-appointed CEO John J. Ray III - who had previously overseen the Enron liquidation - described FTX's corporate controls as a "complete failure."

Investigations revealed that billions in customer deposits had been diverted to Alameda Research for speculative trading, venture investments, political donations, and personal expenditures. Bankman-Fried was arrested in the Bahamas in December 2022, extradited to the United States, and convicted on seven counts of fraud and conspiracy in November 2023. He was sentenced to 25 years in federal prison in March 2024.

Timeline

$32B

Peak Valuation

$8B+

Customer Losses

25 yrs

Prison Sentence

7

Criminal Charges

Sources & References
  1. U.S. Department of Justice - Indictment, United States v. Samuel Bankman-Fried, Case No. 1:22-cr-00673, S.D.N.Y. (December 2022)
  2. U.S. Securities and Exchange Commission - Complaint, SEC v. Samuel Bankman-Fried, "SEC Charges Samuel Bankman-Fried with Defrauding Investors in Crypto Asset Trading Platform FTX" (December 13, 2022)
  3. U.S. Commodity Futures Trading Commission - Complaint against FTX Trading Ltd, Alameda Research LLC, and Samuel Bankman-Fried (December 13, 2022)
  4. U.S. Bankruptcy Court, District of Delaware - Chapter 11 Petition, In re FTX Trading Ltd, Case No. 22-11068 (November 11, 2022)
  5. U.S. District Court, S.D.N.Y. - Sentencing Judgment, 25 years imprisonment (March 28, 2024)
  6. CoinDesk - "Divisions in Sam Bankman-Fried's Crypto Empire Blur on His Trading Titan Alameda's Balance Sheet" (November 2, 2022)
  7. First Day Declaration of John J. Ray III, FTX Chapter 11 Proceedings (November 17, 2022)
Accounting Fraud TradFi

Wirecard AG

1999–2020 · Missing funds: €1.9 billion

Wirecard AG was a German payment processor and financial services company that joined the DAX 30 index in September 2018, replacing Commerzbank. The company claimed to process electronic payments for approximately 300,000 merchants worldwide. Investigative reporting by the Financial Times, led by journalist Dan McCrum beginning in 2015, raised persistent questions about the company's accounting practices, particularly regarding third-party acquiring operations in Asia.

On June 18, 2020, auditor Ernst & Young refused to sign off on Wirecard's 2019 annual accounts after being unable to confirm the existence of €1.9 billion in cash balances purportedly held in trustee accounts at two Philippine banks. Both banks subsequently stated that no such accounts existed. CEO Markus Braun resigned on June 19 and was arrested on June 22. The company filed for insolvency on June 25, 2020.

COO Jan Marsalek fled Germany and remains a fugitive subject to an Interpol Red Notice. Criminal proceedings against Markus Braun and two co-defendants began in Munich in December 2022, representing the largest financial fraud trial in German post-war history. The German Bundestag established a parliamentary committee of inquiry to investigate regulatory failures, particularly BaFin's controversial decision to ban short-selling of Wirecard shares rather than investigating the fraud allegations.

Timeline

€1.9B

Missing Funds

€24B

Peak Market Cap

DAX 30

Index Membership

2

Fugitives (Interpol)

Sources & References
  1. Ernst & Young - Statement regarding non-issuance of audit opinion for Wirecard AG fiscal year 2019 (June 18, 2020)
  2. BaFin (Federal Financial Supervisory Authority) - General Decree prohibiting creation and enlargement of net short positions in Wirecard shares (February 18, 2019)
  3. German Bundestag - 3rd Committee of Inquiry ("Wirecard"), Final Report, Bundestag-Drucksache 19/30900 (2021)
  4. Financial Times - Investigative series on Wirecard by Dan McCrum and team (2015–2020). McCrum subsequently authored Money Men (2022)
  5. KPMG - Special Investigation Report on Wirecard AG, commissioned by Wirecard's supervisory board (April 27, 2020)
  6. Munich Regional Court I (Landgericht München I) - Criminal proceedings against Markus Braun et al., Case No. 6 KLs 404 Js 209792/20 (commenced December 8, 2022)
  7. Interpol - Red Notice for Jan Marsalek, former COO of Wirecard AG (2020)
State-Sponsored Cybercrime Crypto / TradFi

Lazarus Group (APT38)

2014–present · Estimated total theft: $3B+

The Lazarus Group is a state-sponsored cybercrime organization attributed by the FBI, the U.S. Department of Justice, and multiple cybersecurity firms to the Democratic People's Republic of Korea (DPRK). The group, also tracked as APT38 by security researchers, has been linked to some of the largest cyber-enabled financial thefts in history, spanning traditional banking systems and cryptocurrency platforms.

Early operations included the 2014 destructive attack on Sony Pictures Entertainment and the 2016 attempted theft of $951 million from Bangladesh Bank via fraudulent SWIFT messages, of which $81 million was successfully exfiltrated. In 2017, the group was attributed as the source of the WannaCry ransomware attack that affected over 200,000 systems across 150 countries.

Since 2020, the group has increasingly targeted cryptocurrency platforms. The March 2022 Ronin Bridge hack - which drained approximately $620 million from the Axie Infinity gaming network - was confirmed by the FBI as a Lazarus Group operation. The United Nations Panel of Experts has reported that proceeds from these operations fund the DPRK's weapons of mass destruction programs. The U.S. Treasury's OFAC has designated Lazarus Group and associated cryptocurrency addresses.

Timeline

$3B+

Estimated Total Theft

$620M

Largest Single Heist

150+

Countries Affected

10+ yrs

Active Operations

Sources & References
  1. Federal Bureau of Investigation - Criminal Complaint, United States v. Park Jin Hyok, Case No. MJ 18-1479 (September 6, 2018)
  2. U.S. Department of Justice - "Three North Korean Military Hackers Indicted in Wide-Ranging Scheme to Commit Cyberattacks and Financial Crimes" (February 17, 2021)
  3. United Nations Security Council - Panel of Experts Report, S/2023/171, monitoring sanctions on DPRK (2023)
  4. Federal Bureau of Investigation - "FBI Confirms Lazarus Group Cyber Actors Responsible for Harmony's Horizon Bridge Currency Theft" (January 23, 2023)
  5. Federal Bureau of Investigation - Statement confirming DPRK attribution for Ronin Bridge intrusion (April 14, 2022)
  6. U.S. Department of the Treasury - OFAC Designation of Lazarus Group as Specially Designated National (September 13, 2019)
  7. Chainalysis - "The 2023 Crypto Crime Report: Cryptocurrency-related crime trends and typologies" (2023)
Offshore Finance Tax Evasion / AML

The Panama Papers

2015–2018 · Leaked documents: 11.5 million

The Panama Papers represent the largest data leak in history at the time of publication. In 2015, an anonymous source - identified only as "John Doe" - contacted the German newspaper Süddeutsche Zeitung and provided 11.5 million confidential documents from the internal database of Mossack Fonseca, a Panamanian law firm specializing in the creation of offshore shell companies.

The Süddeutsche Zeitung shared the documents with the International Consortium of Investigative Journalists (ICIJ), which coordinated a global investigation involving over 370 journalists from 76 countries. The findings, published on April 3, 2016, revealed that Mossack Fonseca had created more than 214,000 offshore entities for clients including heads of state, politicians, FIFA officials, and individuals subject to international sanctions.

The political consequences were immediate and far-reaching: Iceland's Prime Minister Sigmundur Davíð Gunnlaugsson resigned within days of publication; Pakistan's Prime Minister Nawaz Sharif was disqualified by the Supreme Court in July 2017. Multiple countries launched tax evasion investigations, and global reforms to beneficial ownership transparency were accelerated. Mossack Fonseca announced its closure in March 2018. The ICIJ was awarded the Pulitzer Prize for Explanatory Reporting in 2017.

Timeline

11.5M

Documents Leaked

214K+

Offshore Entities

76

Countries Investigated

370+

Journalists Involved

Sources & References
  1. International Consortium of Investigative Journalists - "The Panama Papers: Exposing the Rogue Offshore Finance Industry" (April 3, 2016)
  2. Süddeutsche Zeitung - Original investigation and ongoing reporting on the Panama Papers (2015–2018)
  3. Pulitzer Prize Board - 2017 Pulitzer Prize for Explanatory Reporting, awarded to ICIJ, McClatchy, and the Miami Herald for the Panama Papers
  4. Supreme Court of Pakistan - Imran Khan v. Mian Muhammad Nawaz Sharif, disqualification judgment (July 28, 2017)
  5. European Parliament - Resolution on the Panama Papers, 2016/2879(RSP) (2016)
  6. Financial Action Task Force - Mutual Evaluation Report on Panama, assessing AML/CFT measures (2018)
  7. Mossack Fonseca - Statement announcing cessation of operations (March 14, 2018)
  8. ICIJ - Follow-up investigation: "The Pandora Papers" (October 3, 2021)