The sentencing follows investigation and arrest by specialist banking industry sponsored police unit, the Dedicated Card and Payment Crime Unit (DCPCU), in collaboration with TRM Labs, a platform which uses blockchain data to help tackle financial crime.

Between 2022 and February 2025, Syed Hussain, 34, made bulk online purchases of stolen customer information, such as card numbers, customer addresses, birthdays and security details, to sell onto other criminals. These would then be used by the criminals to commit further fraud directly to the customers and steal money from victims.

Through the police’s investigation, they discovered that Hussain used the online alias ‘spongebob808’ to make these sales, via an online automated marketplace known as the ‘Spongebobshopbot’.

The marketplace included an online bot which would give instructions to criminal customers on how to buy and test the card numbers and help process the sale. The site also offered refunds to customers that purchased details for cards that had already been blocked by the bank.

As the purchases were made using cryptocurrency, police were able to link the movement of the crypto to Hussain. The investigation into crypto wallets linked to Hussain found over £1 million had been made via these illegal sales.

Of the money that Hussain made from the crime, he spent at least £118,000 on gift cards, including for supermarkets, food delivery services and other retailers.

Hussain was sentenced to a total of 14 years: nine-and-a-half years for money laundering and four-and-a-half years for the possession of articles used to commit fraud, but the sentences will run concurrently.

Paul Curtis, Detective Chief Inspector at the DCPCU said:

Hussain cultivated an online marketplace that allowed fraud to take place on a mass scale. He profited off victims and tried to cover his tracks by using cryptocurrency.

“Thankfully, due to the efforts of police, in collaboration with TRM Labs, we were able to identify Hussain and stop him from committing further offences.

Phil Ariss, TRM Labs Director of Law Enforcement Relations UK, said:

Large-scale card fraud is complex and data-heavy, demanding innovative analysis to trace and disrupt organised activity. 

“TRM Labs was proud to support DCPCU in this case, a powerful example of how coordinated efforts between public and private sectors can protect victims and strengthen the UK’s financial system.