The defendants reportedly sourced this stolen personal data through darknet marketplaces and the encrypted messaging platform, Telegram. To further their scheme, they maintained accounts on background-check websites, enabling them to acquire additional victim information, which was used to answer identity-verification queries during account registration.
US Attorney David X. Sullivan emphasized the grave nature of the alleged crimes, underscoring that Kapoor and Lillaney exploited thousands of stolen identities to engage in gambling activities with illicitly obtained funds. Sullivan stated that their actions have now led to legal consequences.
Federal prosecutors made it clear that an indictment does not imply guilt, with both defendants presumed innocent until proven otherwise in a court of law.