Cybercrime

UK Student Sentenced to Prison for Selling Phishing Kits

Ollie Holman was sentenced to prison for selling over 1,000 phishing kits that caused estimated losses of over $134 million.

Hacker sentenced to prison

A British student was sentenced to seven years in prison for selling more than 1,000 phishing kits impersonating legitimate entities in 24 countries.

The individual, Ollie Holman, 21, of Eastcote, West London, was initially arrested in October 2023, and then again in May 2024. On both occasions, law enforcement seized devices containing digital evidence liking him to his online activities.

Holman, who pleaded guilty to seven counts, admitted to selling phishing kits containing fraudulent web pages that tricked victims into sharing their personal and financial information with cybercriminals.

According to UK law enforcement, Holman built and sold 1,052 phishing kits that targeted 69 financial institutions and large organizations, including charities, causing more than £100 million (approximately $134 million) in losses, globally.

Scripts within the fraudulent web pages collected the user-supplied information, including login credentials and banking information.

Holman sold the phishing kits over Telegram, and provided cybercriminals with advice and technical assistance in committing fraud. Authorities say that, even after he was arrested in 2023, he continued to provide support for the phishing kits through his Telegram channel.

Advertisement. Scroll to continue reading.

Following the sentencing, authorities will take Holman back to court to pursue the confiscation of the illegal proceeds.

“By creating and selling phishing kits, Ollie Holman facilitated a widespread fraud which others used to exploit innocent victims on a vast scale,” Crown Prosecution Service specialist prosecutor Sarah Jennings said.

“I hope this case sends a clear message to those who intend on committing fraud: no matter how sophisticated your methods, you cannot hide behind online anonymity or encrypted platforms. Fraudsters like Holman will be robustly pursued by law enforcement, prosecuted by the CPS, and brought to justice,” Jennings added.

Related: US Targets North Korea’s Illicit Funds: $15M Rewards Offered as American Woman Jailed in IT Worker Scam

Related: Nigerian Involved in Hacking US Tax Preparation Firms Sentenced to Prison

Related: Trump Pardons Founder of Silk Road Website

Related: Notorious Vietnamese Hacker Turns Government Cyber Agent

Related Content

Data Breaches

Most of the data is related to applications, claims, and payments submitted between 2007 and 2025.

Cybercrime

Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.

Cybercrime

The former core infrastructure engineer deleted admin accounts, reset hundreds of passwords, and demanded 20 bitcoin to spare the company’s servers.

Data Breaches

Hackers compromised a third-party communication platform and sent rogue notifications to ASOS users.

Cybercrime

Cameron John Wagenius was sentenced to 70 months in prison for stealing information from the wireless carriers.

Cybercrime

Karen Vardanyan has also been ordered to pay over $1.2 million in restitution to victims.

Cybercrime

The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets.

Phishing

Analysis of 2.47 million simulated attacks shows why organizations should measure credential leaks and reporting, not just clicks.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version