Volodymyr Kvatchuk, a 25‑year‑old software developer hired by Microsoft in 2016 to test the firm’s online retail platform, was found guilty on March 5 2020 of 18 federal felony counts. The jury’s verdict stems from a two‑year fraud scheme that siphoned roughly $10 million in digital currency from the company.
Initially, Kvatchuk pilfered about $12,000 worth of stored‑value gift cards that could be redeemed for Microsoft products. He sold the cards on the open market, and the theft gradually escalated. Over time, he began exploiting coworkers’ test email accounts to amass larger sums, eventually turning the company’s own retail system into a conduit for the fraud.
The operation remained hidden until Microsoft’s internal Fraud Investigation Strike Team detected an abnormal surge in Xbox subscriptions purchased with in‑store credits. The anomaly prompted a deeper probe that uncovered the full extent of Kvatchuk’s activities.
During the trial, Kvatchuk maintained that he was working on a “special project” intended to benefit Microsoft and denied any intent to defraud the corporation. The jury rejected his explanation, concluding that the evidence demonstrated a clear pattern of theft. Authorities highlighted that the stolen proceeds were not simply stored in a bank account.
Investigators traced most of the money to a $1.6 million lakefront property and a $160,000 Tesla, purchases that could not be justified as part of any legitimate Microsoft initiative. Special Agent in Charge Ryan Korner of the IRS Criminal Investigation Division emphasized the dual nature of the crime: “In addition to stealing from Microsoft, Volodymyr Kvatchuk also stole from the government by concealing his fraudulent income and filing false tax returns.” The false‑tax‑return allegations added aggravated identity‑theft charges to the indictment.
Kvatchuk now faces a statutory maximum of 20 years in federal prison, though the sentence will be determined by the judge within that range. Because he is a Ukrainian national, any term of confinement will likely be followed by deportation. The case underscores vulnerabilities in how large technology firms manage internal digital value.
Microsoft’s online store processes billions of dollars in transactions annually; an employee with legitimate test access was able to manipulate that system to extract $10 million. While the company’s dedicated strike team eventually intercepted the scheme, the theft grew from a few thousand dollars to a multi‑million‑dollar loss before detection.
Industry observers note that Kvatchuk’s conduct blurs the line between authorized testing and criminal exploitation. He leveraged internal tools—test email accounts, stored‑value mechanisms, and the retail platform—without needing external hacking skills. The involvement of the IRS also signals that digital‑currency theft carries significant tax‑related repercussions; illicit earnings remain taxable, and filing false returns can substantially increase sentencing.
Microsoft has not issued a public statement regarding the conviction. The outcome is expected to prompt other tech companies to reassess internal controls over digital assets and to consider more robust monitoring of employee access to financial systems.
With the conviction on 18 counts, the sentencing phase will determine Kvatchuk’s exact prison term. Should he serve the maximum, he could remain incarcerated until his mid‑40s before facing removal from the United States. The lake house and the Tesla have been seized as evidence, and the “special project” he claimed to be developing never materialized in court.
