Episode

EP 23 — Vladimir Levin

01 October 2018 Official episode · Official transcript

cybercrime

The episode describes Vladimir Levin’s 1994 unauthorized Citibank money transfers through Sprintnet, the ensuing FBI investigation, and the case’s significance as an early online bank robbery.

Topics: X.25 packet-switched networking, Sprintnet/Telenet access, Citibank cash-management systems, Cleartext credential exposure, Credential reuse across network nodes, Network reconnaissance and mapping, Fraudulent electronic bank transfers, Transaction monitoring and alerting, International cybercrime investigation, Digital forensics

Official episode-page sources

Links published on the Darknet Diaries episode page. Not LLM output.

Entities (28)

Claims (21)

Qualified statements from this episode, not graph facts.

Jack Rhysider AUTHORED Darknet Diaries

Jack says the show is made by him, identifying him as its creator.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“This show is made by me, the Karate Skid, Jack Rhysider”

Jack Rhysider · offsets 27689–27744

Sprintnet USES X.25

Sprintnet, formerly Telenet, used the X.25 protocol to communicate between systems.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“It used what’s known as the X.25 protocol to communicate between two systems.”

Jack Rhysider · offsets 1232–1309

Citibank USES Sprintnet

Citibank used Sprintnet to communicate among its offices and with other connected banks.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“Citibank used Sprintnet to communicate between their major offices and other banks that were connected to it.”

Jack Rhysider · offsets 4103–4212

Phrack MENTIONS Sprintnet

Phrack issue 42 listed known Sprintnet numbers and connection details.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“issue 42 of Phrack was released and in this issue there was a massive listing of all known Sprintnet numbers”

Jack Rhysider · offsets 3564–3672

Phrack MENTIONS Citibank

Phrack published the online locations of 363 Citibank computers.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“This issue of Phrack told you the online location of 363 different Citibank computers.”

Jack Rhysider · offsets 4015–4101

online bank robbery INVOLVES Citibank

The first online bank robbery involved fraudulent transfers from Citibank systems.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“the first online bank robbery”

Jack Rhysider · offsets 351–380

“Vladimir logged into the Citibank cash management system”

Jack Rhysider · offsets 9010–9067

online bank robbery INVOLVES Vladimir Levin

The incident involved Vladimir Levin as the principal hacker who conducted the fraudulent transfer attempts.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“Vladimir Levin attempted forty fraudulent money transfers totalling ten million dollars.”

Jack Rhysider · offsets 25159–25247

online bank robbery ATTRIBUTED_TO Vladimir Levin

The episode attributes the online bank robbery to Vladimir Levin; he later pled guilty and admitted to the conduct.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“he pled guilty and explained and admitted to everything”

Jack Rhysider · offsets 25101–25156

online bank robbery INITIAL_ACCESS_VIA Sprintnet

The fraudulent activity initially reached Citibank through dial-up access to Sprintnet.

Derived Confidence 88% · Jack Rhysider EP 23 Details

“He dialed into Sprintnet. He logged into the Citibank cash management system”

Jack Rhysider · offsets 9673–9750

online bank robbery COMPROMISES Citibank cash management system

Vladimir gained access to and used Citibank’s cash management system to initiate transfers.

Explicit Confidence 98% · Jack Rhysider EP 23 Details

“Vladimir logged into the Citibank cash management system and confirmed he could type commands in it.”

Jack Rhysider · offsets 9000–9086

Vladimir Levin USES Sprintnet

Vladimir used Sprintnet to connect to the Citibank computer and issue transfer commands.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“Vladimir went to work, fired up his computer, dialed into Sprintnet, logged into the Citibank computer”

Jack Rhysider · offsets 9440–9524

Vladimir Levin USES Citibank cash management system

Vladimir used the Citibank cash management system to transfer money to foreign accounts.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“typed in the commands to transfer some money to Finland and hit Enter”

Jack Rhysider · offsets 10318–10387

Buckazoid ASSOCIATED_WITH Vladimir Levin

According to a story Jack says may not be true, Buckazoid told Vladimir Levin about the Citibank access and transfer method, and Vladimir paid him for the information.

Uncertain Confidence 78% · Jack Rhysider EP 23 Details

“The story of Buckazoid and his hacker friend in St. Petersburg may not be true.”

Jack Rhysider · offsets 8395–8474

“he told another computer guy in St. Petersburg named Vladimir Levin what he found”

Jack Rhysider · offsets 7913–7994

online bank robbery INVOLVES Tambov gang

The incident involved members of the Tambov gang, who agreed to finance travel, bank accounts, and collection of transferred funds.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“The Tambov gang agreed to this plan and would finance the people to fly to foreign countries, set up bank accounts there, and collect the money”

Jack Rhysider · offsets 14437–14580

online bank robbery INVOLVES FBI

The FBI investigated the fraudulent Citibank transfers and pursued the participants.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“Citibank quickly called the FBI.”

Jack Rhysider · offsets 11223–11255

“I was a case agent on the Vladimir Levin case.”

Steve Garfinkel · offsets 11457–11503

Steve Garfinkel MEMBER_OF FBI

Steve Garfinkel says he was an FBI agent for twenty-one years and worked as the case agent on the Levin case.

Explicit Confidence 99% · Steve Garfinkel EP 23 Details

“I’m a retired FBI agent. I spent twenty-one years in the FBI”

Steve Garfinkel · offsets 11391–11452

Steve Garfinkel USES digital forensics

Steve participated in forensic examination of computers seized in the investigation and says digital forensics became part of crime investigations.

Explicit Confidence 94% · Steve Garfinkel EP 23 Details

“I went over there with a guy who was an FBI agent who was a forensic examiner.”

Steve Garfinkel · offsets 23769–23847

“Every crime now digital forensics are involved.”

Steve Garfinkel · offsets 26762–26809

online bank robbery INVOLVES Aleksey Loshmanov

The incident involved Aleksey Loshmanov, who was arrested in Israel while connected to a planned transfer.

Explicit Confidence 98% · Steve Garfinkel EP 23 Details

“The Israeli cops arrested a guy by the name of Aleksey Loshmanov.”

Steve Garfinkel · offsets 15841–15906

online bank robbery INVOLVES Yevgeny Korolkov

The incident involved Yevgeny Korolkov, who opened bank accounts and later cooperated with the FBI.

Explicit Confidence 98% · Jack Rhysider EP 23 Details

“This time a guy named Yevgeny Korolkov would travel with his wife to San Francisco and open up numerous bank accounts there.”

Jack Rhysider · offsets 16121–16245

online bank robbery INVOLVES Katarina

The incident involved Katarina, who was left in San Francisco to withdraw transferred funds and was arrested by the FBI.

Explicit Confidence 98% · Steve Garfinkel EP 23 Details

“When she came back the following day FBI San Francisco office was waiting for her and arrested her.”

Steve Garfinkel · offsets 17099–17198

online bank robbery INVOLVES Anatoly Lysenkov

The incident involved a man identified at the time as Anatoly Lysenkov, who was arrested in Holland while attempting to collect transferred money.

Explicit Confidence 98% · Steve Garfinkel EP 23 Details

“The Dutch police arrested a Anatoly Lysenkov, the guy who was arrested in Holland picking up money.”

Steve Garfinkel · offsets 21199–21298

Transcript references

Works mentioned in the transcript. Distinct from show-note sources.

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T05:09:09.137517+00:00