Russian hacker Vitaliy Kovalev, known as “Bentley,” linked to major bank fraud and Trickbot network, avoided prosecution at home

13 April 2026 , 14:54

962     0

Russian hacker Vitaliy Kovalev, known as “Bentley,” linked to major bank fraud and Trickbot network, avoided prosecution at home

Vitaliy Kovalev, known in cybercriminal circles as “Bentley” or “Ben,” has been linked to large-scale banking fraud and some of the most notorious hacking groups, yet he has reportedly avoided significant legal consequences in Russia despite a previous detention.

According to a U.S. indictment, Kovalev was charged with conspiracy to commit bank fraud and eight counts of bank fraud for hacking into victims’ accounts across multiple American financial institutions in 2009–2010. These attacks predated his alleged involvement in later cybercrime operations tied to the Trickbot malware network. Investigators have long argued that Trickbot is closely connected to the Russian-based Conti group, one of the most aggressive cybercriminal organizations responsible for massive financial theft and ransomware attacks worldwide. In Russia, Kovalev was detained in 2016 under charges related to the creation and distribution of malicious software. However, instead of prosecution, he was released under minimal restrictions, and the case was eventually quietly dropped.

This outcome stands in stark contrast to other cybercrime cases, where figures linked to groups such as Flint or The Infraud Organization were arrested and prosecuted. The apparent leniency toward Kovalev has fueled speculation about protection, selective enforcement, or behind-the-scenes arrangements. The case highlights ongoing concerns about the uneven handling of cybercrime suspects, particularly those connected to high-profile Russian hacking networks operating on a global scale.

Sophie Walker

Deputy Editor & UK News