A former Ohio bank employee who was hired to help protect customers from fraud has been sentenced to 10 years in federal prison for secretly taking over the accounts of elderly customers aged 90 to 103 and moving about $2 million of their money. Yue Cao, 36, was sentenced to 120 months by U.S. District Judge J. Philip Calabrese, the U.S. Attorney’s Office for the Northern District of Ohio announced on Sept. 17. A federal jury convicted him in February of 10 counts of bank fraud, four counts of aggravated identity theft and one count of money laundering.
A fraud-prevention job turned into a way in
According to evidence presented at trial and summarized by federal prosecutors in Cleveland, Cao worked as a quant analytics manager at an Ohio-based bank. His role was to help protect customers from fraud. Instead, prosecutors said, he used his access to confidential client information to steal the identities and money of elderly customers.
He focused on a specific group: older customers who had never enrolled in the bank’s online services. Because those customers had never signed up, there was no existing online profile or linked email address that the real owner might notice being changed. That absence became the opening Cao exploited.
In addition to the prison term, Judge Calabrese ordered Cao to serve five years of supervised release after he leaves prison. Under federal law, each aggravated identity theft conviction carries a mandatory two-year prison term that must run consecutively to the sentence for the underlying fraud.
No online account is not the same as no online risk. For families of the oldest account holders, the practical step this case points to is confirming who is enrolled in online banking and keeping a dated log of every contact with the bank, both covered by the fraud evidence and report log in The Senior Fraud Defense & First-Hour Recovery Kit.
Fake email addresses, rerouted statements and options trading
Prosecutors said Cao used an offshore service to create email addresses in the names of more than 100 victims. He then used those addresses to enroll the victims in online banking, all without their knowledge or authorization.
He also redirected the victims’ bank statements and other notifications to the email addresses he had created. That step cut off the flow of information that might have tipped off the customers or their families. Because he controlled their online banking, Cao transferred the victims’ money directly to his own personal bank and credit card accounts.
The scheme went further. According to the Justice Department, Cao used the victims’ identities to open new bank accounts in their names, again without their knowledge, and moved their money into those accounts. Some were brokerage accounts, where he engaged in options trading with the victims’ funds. In all, prosecutors said, he conducted approximately $2 million in unauthorized transfers using his control of the victims’ accounts.
Victims in five states, ages 90 to 103
The victims lived in New York, Pennsylvania, Connecticut, Washington and Ohio, including Canton in Stark County. They ranged in age from 90 to 103 at the time Cao secretly enrolled them in online banking.
That age range matters. Customers in their 90s and older are among the least likely to use online banking, and many depend on paper statements, phone calls and visits to a branch. For them, a new email address or a switch from paper to electronic statements is exactly the kind of change that can go unnoticed, particularly if someone else has taken over the mail and notifications that would normally reveal it.
The FBI’s Cleveland Division investigated the case. Assistant U.S. Attorneys Edward D. Brydle and Michael L. Collyer led the prosecution. The Justice Department classified the case under its elder justice work, and its Elder Justice Initiative offers resources for older victims of financial exploitation and the people who care for them.
How older customers and families can guard against insider schemes
Insider fraud is harder to spot than a scam phone call, because the thief never has to talk to the victim. The Cao case shows that a customer who stays entirely offline can still have an online banking profile created in his or her name, along with an email address the customer has never seen. Cao’s position also shows the limit of relying on a bank’s internal controls alone: the employee assigned to help guard against fraud was the one committing it, so an outside check by the customer or a trusted family member serves as an important backstop.
Several steps can reduce that risk. Families helping a very elderly relative can ask the bank, in person or by calling the number on a statement, whether any online banking profile, email address or electronic-statement setting exists on the account. If the relative does not want to bank online, the family can ask the bank to note that preference on the account and to confirm any future enrollment by phone or mail. Some families choose to set up online access themselves, with the account holder’s permission, so that the real owner holds the login and receives the alerts.
Paper statements that stop arriving are one of the clearest warning signs. So is a statement showing transfers to unfamiliar accounts, or a letter about a new account the customer never opened. Checking a credit report periodically can reveal accounts opened in an older person’s name, and a credit freeze makes it harder for anyone to open new credit accounts using that identity.
Brokerage firms are required to ask customers for a trusted contact person, and some banks offer a similar option. That contact gives the institution someone to call if it notices unusual activity. Suspected elder financial exploitation can also be reported to the bank’s fraud department, to local adult protective services and to the FBI.
When the threat sits inside the bank
Families of the oldest customers rarely think to ask whether someone has opened an online profile or new account in a parent’s name, and when they find one, they need to act on several fronts at once.
The Senior Fraud Defense & First-Hour Recovery Kit includes the free credit-freeze steps, the first-hour recovery plan and a fraud evidence and report log, which help shut the door on new accounts and document each unauthorized transfer for the bank and investigators.
Prepare the family’s response with The Senior Fraud Defense & First-Hour Recovery Kit.
This article was prepared with AI assistance and reviewed against the linked official sources.
Warren Cohen is a finance writer based in Phoenix, Arizona, covering personal finance topics including credit, banking, and beginner investing. He earned his degree in business administration from Arizona State University and began his career working in consumer finance, where he gained direct experience with lending and credit systems. He now writes for personal finance websites and fintech platforms, focusing on clear, practical content that helps readers make informed financial decisions.
