Senior Personnel At Telecommunications Company Charged With Multimillion Dollar Fraud Following Company Self-Report

United States Attorney for the Southern District of New York, Jay Clayton, and Assistant Director in Charge of the New York Field Office of the Federal Bureau of Investigation, James C. Barnacle, Jr., announced today the unsealing of an Indictment charging MOHD HAFIZ LOCKMAN, MOHD YUZAIMI YUSOF, and KHANH THUONG NGUYEN, three former senior employees of Telekom Malaysia (USA) Inc., the wholly owned U.S. subsidiary of Telekom Malaysia Berhad, with wire fraud conspiracy, wire fraud, and aggravated identity theft. The charges in the Indictment arise from an alleged scheme by the defendants to divert more than $20 million of company funds through four interconnected frauds. The defendants used false statements, forged records, fictitious transactions, and corporate and individual impersonations to deceive counterparties, suppliers, auditors, and supervisors. LOCKMAN was arrested on April 20, 2026, at San Francisco International Airport, and NGUYEN and YUSOF surrendered to authorities on April 22 and 23, respectively. The case has been assigned to U.S. District Judge Dale E. Ho.

U.S. Attorney Jay Clayton also announced that the criminal conduct was reported by Telekom Malaysia Berhad to the U.S. Attorney's Office in early April 2026, and the company has been cooperating with the Office's ongoing investigation.

"Today's fraud charges come within weeks of receiving a self-report from the company," said U.S. Attorney Jay Clayton. "As alleged, Mohd Hafiz Lockman, Mohd Yuzaimi Yusof, and Khanh Thuong Nguyen perpetrated a sprawling fraud to steal over $20 million. The defendants deceived counterparties, suppliers, auditors, and their own supervisors. As a result of the fact that the conduct was reported to this Office and quickly investigated, the defendants will now be held to account for fraudulently lining their own pockets."

"These three individuals are alleged to have conducted a deliberate and calculated embezzlement scheme, falsifying corporate records for their own financial benefit," said FBI Assistant Director in Charge James C. Barnacle, Jr. "These charges highlight the FBI's commitment to aggressively investigating and identifying fraud schemes that exploit the corporate system."

As alleged in the Indictment unsealed today in Manhattan federal court and other public records of court proceedings:[1]

From July 2020 through February 2026, LOCKMAN, YUSOF, and NGUYEN were senior managers at Telekom Malaysia (USA) Inc. ("the American Subsidiary"), which is wholly owned by Telekom Malaysia Berhad (the "Parent Company," and, collectively with the American Subsidiary, "Telekom Malaysia"), a major telecommunications company in Malaysia. The American Subsidiary's primary business is selling access to broadband infrastructure to technology companies in the United States. The Parent Company approved major contracts of the American Subsidiary, relying on management of the American Subsidiary for information about U.S. deals.

While employed at the American Subsidiary, LOCKMAN, YUSOF, and NGUYEN pursued a multifaceted scheme to steal more than $20 million. First, they devised a scheme to sell Telekom Malaysia's broadband capacity without the Parent Company's authorization and to divert the proceeds of those sales to accounts under their control. For example, they requested Parent Company approval to sell eight terabytes of capacity to a multinational corporation headquartered in the United States ("U.S. Customer-1") for roughly $54 million, but, in reality, $54 million was the price the American Subsidiary charged U.S. Customer-1 for six terabytes of capacity, not eight. After receiving the Parent Company's approval, the defendants prepared two versions of the contract: one for U.S. Customer-1 that memorialized a sale of six terabytes, and another for the Parent Company that memorialized a sale of eight terabytes and that fraudulently bore signatures and initials of representatives of U.S. Customer-1, including one representative based in the United States. After misappropriating the excess two terabytes from the Parent Company, the defendants sold it for their own personal benefit to third parties, including a large U.S.-based internet services company and a subsidiary of a U.S.-based social media and technology company. To conceal those illicit sales from the Parent Company, and pocket the proceeds, the defendants executed the sales through a sham entity they incorporated with a name meant to look like the American Subsidiary's name, and directed payments to bank accounts in the name of that entity, which they controlled.

Second, LOCKMAN, YUSOF, and NGUYEN impersonated a supplier of goods for the American Subsidiary and captured payments the Parent Company intended for that supplier. In 2021, the American Subsidiary was to acquire a particular type of cable from the supplier and resell it to an affiliate of the Parent Company at a markup. Unbeknownst to the Parent Company, the defendants had caused the American Subsidiary to purchase the cable from the supplier for roughly $500,000. But the defendants falsely represented to the Parent Company that the American Subsidiary had paid roughly $2.9 million for the cable. The American Subsidiary sold the cable to the affiliate of the Parent Company for over $3 million, reflecting the markup, and the defendants then caused the American Subsidiary to transfer roughly $2.9 million-the amount that the American Subsidiary supposedly paid the supplier-to a bank account held by another sham entity with a name meant to look like the supplier's, but secretly controlled by the defendants. To accomplish this fraud, the defendants falsified several documents purportedly signed by individuals who the defendants represented were employees of the sham entity with the name substantially similar to the supplier's. In reality, those individuals were employees of the supplier, and the defendants had falsified their signatures.

Third, LOCKMAN, YUSOF, and NGUYEN impersonated employees and interns of the American Subsidiary and captured salaries intended for those employees and interns. For example, the defendants caused the American Subsidiary's records not to reflect the fact of a particular employee's departure in 2020, and, from August 2020 through May 2025, the defendants caused the American Subsidiary to pay that employee's monthly salary into a bank account that the defendants controlled. In 2025, the defendants finally recorded in the American Subsidiary's records that employee's departure, prompting Human Resources in Malaysia to request an exit interview with the employee. To sustain the fraud, the defendants recruited another individual to impersonate the employee during the exit interview. When Human Resources subsequently requested a video call, the defendants arranged for their imposter to disguise his appearance and bear the face of the departed employee through an artificial intelligence program.

Fourth, LOCKMAN, YUSOF, and NGUYEN sought reimbursements for fabricated work expenses. For instance, in January 2026, the defendants collaborated to request reimbursement for expenses incurred for a work trip that employees of the American Subsidiary supposedly made to Las Vegas in December 2025. In fact, no such trip occurred. When the Parent Company requested pictures from the trip, the defendants hastily organized a trip to Las Vegas and photographed scenes with Christmas trees to make it appear as though photographs had been taken in December.

Telekom Malaysia initiated an internal investigation of the American Subsidiary and the defendants. Upon discovering the fraud, Telekom Malaysia self-reported the conduct to the United States Attorney's Office and received a conditional declination of charges against the company based on the company's commitment to full cooperation, restitution, remediation of harm caused by the misconduct, and its agreement to report criminal conduct for a three-year period. Today's action reflects the Office's commitment to using self-reports as a means to quickly and effectively bring cases that hold individual executives accountable for their misconduct.

* * *

LOCKMAN, 48, of Dublin, California, YUSOF, 44, of Livermore, California, and NGUYEN, 48, of Manassas, Virginia, are charged with wire fraud conspiracy and wire fraud, each of which carries a maximum sentence of 20 years in prison, and aggravated identity theft, which carries a mandatory consecutive sentence of two years in prison.

The maximum and minimum sentences in this case are prescribed by Congress and provided here for informational purposes only, as any sentences of the defendants will be determined by the judge.

Mr. Clayton praised the outstanding work of the FBI.

This case is being handled by the Office's Securities and Commodities Fraud Task Force and the Complex Frauds and Cybercrime Unit. Special Assistant U.S. Attorney Michael S. DiBattista and Assistant U.S. Attorneys Samuel P. Rothschild and Matthew Weinberg are in charge of the prosecution.

The charges contained in the Indictment are merely accusations, and the defendants are presumed innocent unless and until proven guilty.