The fraud ring wore branded clothing with their Bag Hunter logo while committing crimes. They are purchased on surveillance videos with hats as they deposited their counterfeit checks.
They specifically targeted the Employee Retention Credit and Qualified Sick Leave Wages credit established during the pandemic.
The ERC is a refundable tax credit for businesses and tax-exempt organizations that had employees during and were affected by the COVID-19 pandemic. The QSLW credit is a related credit that was also established in response to the COVID-19 pandemic.
Since the Bag Hunters did not have legitimate businesses, they could not qualify for the program so they needed to establish fake businesses and fake business bank accounts, and for that they turned to the Shan Anand to do the dirty work.
Anand was critical to the fraud rings operation because he enabled the fraud ring to use the bank as the conduit for the stolen funds and to establish fake businesses.
Anand didn’t just start working at the bank. He was a long-tenured employee who started working for the bank from 2014 until he left in 2024.
According to the indictment, it was until 2021 that his activities turned fraudulent. He would help the Bag Hunters open up new business accounts, or add additional users to existing business accounts so the checks could be deposited.
It didn’t stop at just opening accounts, Anand played an important role in unfreezeing accounts that the fraud department suspected were suspicious.
When the bank’s security systems flagged suspicious transactions, Anand would call the internal “fraud hotline” himself, falsely vouching for the legitimacy of transactions he knew were fraudulent and attempting to unfreeze accounts that had been locked for suspicious activity.
The indictment alleges the group attempted to steal approximately $80 million in total but succeeded in depositing about $50 million. The report also indicated that the group relied heavily on the “Fraud Bible”.
The group’s methods were outlined in what they called a “2021 Fraud Bible,” a document containing instructions for various types of financial crimes. Solomon Aluko, one of the defendants who used the online alias “D1 ReallyRich,” shared this guide with co-conspirator Nosakhare Nobore in November 2021.