Couple Caught Using Hidden Hotel Fridge Computer for Phishing Scheme

Unusual Cybercrime in a Japanese Hotel

Japanese law enforcement has arrested 39-year-old Chinese national Ye Jiafeng and his wife, Shen Qi, for setting up an illicit "server" inside their hotel room. The couple concealed a computer behind the room's refrigerator, connecting it to the network to launch large-scale cyberattacks. According to investigators, the device was used to distribute approximately 480,000 phishing emails.

The criminal scheme began on 15 May 2025, when Ye connected the computer to the hotel's Wi-Fi and tucked it away behind the fridge. The device was operated remotely, allowing the suspects to conduct operations without physical interaction. When police discovered the hardware, it contained a database of 2.4 million email addresses prepared for future attacks.

How the Fraudulent Scheme Operated

Investigators stated that the emails were sent under the guise of credit card companies. These messages redirected recipients to fraudulent websites designed to steal banking credentials. The scheme was uncovered after a recipient grew suspicious of an email and contacted the hotel. Analysis of metadata led police directly to the hotel's IP address, prompting staff to find the hidden device.

This is not the couple's first offence. During a search of their home, police seized 74 smartphones. It was determined that since 2024, the pair had made purchases worth 10 million yen (approximately $63,000 USD) using stolen credit card data. Authorities are currently investigating whether the suspects acted independently or as part of a larger criminal network.

Cybersecurity Challenges

Phishing remains one of the most profitable and prevalent forms of cybercrime. Recently, these activities have become more organised, evolving into a "phishing-as-a-service" model. Such platforms allow criminals to easily generate fake sites using artificial intelligence. Earlier this year, the FBI dismantled a massive network that had compromised 3.87 million credit cards, resulting in losses of up to $2 billion.

For readers in Georgia, this case serves as a reminder that any email claiming to be from a bank or financial institution that contains a suspicious link requires caution. It is vital that users never enter card details on unverified websites, even if the message appears highly credible.