--- title: "Is this the Most Successful Business Email Compromise of All Time? | Phish Protection" description: "Evaldas Rimasauskas of Lithuania faces up to 30 years in prison for scamming Facebook and Google out of $122 million in a BEC scheme." image: "https://phishprotection.com/og/blog/is-this-the-most-successful-business-email-compromise-of-all-time.png" canonical: "https://phishprotection.com/blog/is-this-the-most-successful-business-email-compromise-of-all-time/" --- Quick Answer The bad news for Evaldas Rimasauskas of Lithuania is he's facing up to 30 years in prison for scamming Facebook and Google out of $122 million. The good news is that he only has to pay restitution of about $50million. It's not clear what's happened to the other $73m , according to an article on BoingBoing. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fis-this-the-most-successful-business-email-compromise-of-all-time%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Is%20this%20the%20Most%20Successful%20Business%20Email%20Compromise%20of%20All%20Time%3F&url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fis-this-the-most-successful-business-email-compromise-of-all-time%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fphishprotection.com%2Fblog%2Fis-this-the-most-successful-business-email-compromise-of-all-time%2F "Share on Facebook") [ ](https://reddit.com/submit?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fis-this-the-most-successful-business-email-compromise-of-all-time%2F&title=Is%20this%20the%20Most%20Successful%20Business%20Email%20Compromise%20of%20All%20Time%3F "Share on Reddit") [ ](mailto:?subject=Is%20this%20the%20Most%20Successful%20Business%20Email%20Compromise%20of%20All%20Time%3F&body=Check out this article: https%3A%2F%2Fphishprotection.com%2Fblog%2Fis-this-the-most-successful-business-email-compromise-of-all-time%2F "Share via Email") ![Phish Protection blog post image](https://media.mailhop.org/phishprotection/images/2019/04/what-is-a-zero-day-attack-3045.jpg) The bad news for Evaldas Rimasauskas of Lithuania is he’s[facing up to 30 years in prison](https://boingboing.net/2019/03/24/evaldas-rimasauskas.html)for scamming Facebook and Google out of $122 million. The good news is that he only has to pay restitution of about $50million.[It’s not clear what’s happened to the other $73m](https://boingboing.net/2019/03/24/evaldas-rimasauskas.html), according to an article on BoingBoing. So, when he gets out, he’s going to be a very rich man. In what has to be one of the most successful[business email compromises](/products/email-impersonation-protection/)of all time, Rimasauskas conned two of the most tech savvy companies in Silicon Valley out of millions of dollars. And how did he pull off this elaborate heist? Did he craft an incredibly convincing bogus website or send emails with embedded links hoping employees would click on them? Nope. _He just set up a dummy company and started sending invoices._ First, he set up a fake company called Quanta to mimic the real Quanta in Taiwan that manufactures hardware for both Facebook and Google. Then Rimasauskas sent emails to the firms claiming to come from Quanta[with forged invoices and fraudulent contracts](https://www.tripwire.com/state-of-security/featured/google-and-facebook-scammed-out-of-123-million-by-man-posing-as-hardware-vendor/). According to an article on the security site Tripwire, “_all of the messages were designed to create the false impression that they had been sent by employees and agents of Quanta._” The article goes on to say that “Through this subterfuge, Rimasauskas successfully managed to deceive the technology giants into wiring payments into bank accounts he had set up in the bogus company’s name in Cyprus and Latvia. Upon receipt, the funds would be quickly transferred into other bank accounts at various locations around the world including Latvia, Cyprus, Slovakia, Lithuania, Hungary and Hong Kong.” ![What is a zero day attack](https://media.mailhop.org/phishprotection/images/2019/04/what-is-a-zero-day-attack-3045.jpg) There you have it. Two of the most high tech and profitable companies in the world getting taken in by spoofed emails. You might think with all the money these two companies make \[( $46 billion\]() for Facebook and[$77 billion](https://www.stock-analysis-on.net/NASDAQ/Company/Alphabet-Inc/Ratios/Profitability)for Google), they’d spend a few bucks on **phishing awareness training** for their employees. Or better yet, invest in [anti-phishing tools](/content/anti-phishing-solution/) to prevent**display name spoofing**to [stop phishing emails](/content/protection-from-phishing/how-to-stop-phishing-emails/). Apparently not. The remarkable thing is the technology to [prevent phishing](/) attacks like this not only exists, but it’s very inexpensive. _You can protect a small company with up to 100 employees for less than $50/month._ If it can happen to the big boys, it can happen to you. Don’t wait for your Evaldas Rimasauskas to compromise your small business. Head on over to[email fraud protection](/products/email-fraud-protection/) and get **protected from phishing attacks** including business email compromise. Be smarter than Facebook and Google. ## Topics [ Phishing Awareness ](/tags/phishing-awareness/) ![Brad Slavin](https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg) [ Brad Slavin ](/authors/brad-slavin/) General Manager Founder and General Manager of DuoCircle. Product strategy and commercial lead across DuoCircle's 2,000+ customer base. [LinkedIn Profile →](https://www.linkedin.com/in/bradslavin) ## Protect your inbox from phishing attacks Real-time email security with 60-day free trial. No credit card required. [Start Free Trial](https://portal.duocircle.com/cart.php?a=add&pid=101&brand=phishprotection) [View Pricing](/pricing/) ## Related Articles [ Foundational 5m 0ktapus, Okta Breach Helps Attackers Launch Sophisticated Supply Chain Attacks Sep 5, 2022 ](/blog/0ktapus-okta-breach-helps-attackers-launch-sophisticated-supply-chain-attacks/)[ Foundational 14m 12 Real-World Spear Phishing Examples And The Red Flags You Missed Feb 4, 2026 ](/blog/12-real-world-spear-phishing-examples-and-the-red-flags-you-missed/)[ Foundational 2m 8 million Android users fell prey to SpyLoan malware on Google Play Store Dec 5, 2024 ](/blog/8-million-android-users-fell-prey-to-spyloan-malware-on-google-play-store/)[ Foundational 1m A Big Part of the Phishing Problem is You Sep 17, 2019 ](/blog/a-big-part-of-the-phishing-problem-is-you/) ```json {"@context":"https://schema.org","@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"Phish Protection","url":"https://phishprotection.com","description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"Is this the Most Successful Business Email Compromise of All Time?","description":"Evaldas Rimasauskas of Lithuania faces up to 30 years in prison for scamming Facebook and Google out of $122 million in a BEC scheme.","url":"https://phishprotection.com/blog/is-this-the-most-successful-business-email-compromise-of-all-time/","datePublished":"2019-04-01T06:39:13.000Z","dateModified":"2026-04-17T15:43:10.000Z","dateCreated":"2019-04-01T06:39:13.000Z","author":{"@type":"Person","@id":"https://phishprotection.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://phishprotection.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin is the founder and General Manager of DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. He founded DuoCircle in 2014 and has led the company's growth to 2,000+ customers across its email security product family. Brad's focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://phishprotection.com/blog/is-this-the-most-successful-business-email-compromise-of-all-time/"},"articleSection":"foundational","keywords":"Phishing Awareness","wordCount":461,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/phishprotection/images/2019/04/what-is-a-zero-day-attack-3045.jpg","caption":"Phish Protection blog post image","width":1200,"height":630},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://phishprotection.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://phishprotection.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://phishprotection.com/foundational/"},{"@type":"ListItem","position":4,"name":"Is this the Most Successful Business Email Compromise of All Time?","item":"https://phishprotection.com/blog/is-this-the-most-successful-business-email-compromise-of-all-time/"}]} ```