October 17, 2023

Amir Golestan, the 40-year-old CEO of the Charleston, S.C. based technology company Micfo LLC, has been sentenced to five years in prison for wire fraud. Golestan’s sentencing comes nearly two years after he pleaded guilty to using an elaborate network of phony companies to secure more than 735,000 Internet Protocol (IP) addresses from the American Registry for Internet Numbers (ARIN), the nonprofit which oversees IP addresses assigned to entities in the U.S., Canada, and parts of the Caribbean.

Amir Golestan, the former CEO of Micfo.

In 2018, ARIN sued Golestan and Micfo, alleging they had obtained hundreds of thousands of IP addresses under false pretenses. ARIN and Micfo settled that dispute in arbitration, with Micfo returning most of the addresses that it hadn’t already sold.

ARIN’s civil case caught the attention of federal prosecutors in South Carolina, who in May 2019 filed criminal wire fraud charges against Golestan, alleging he’d orchestrated a network of shell companies and fake identities to prevent ARIN from knowing the addresses were all going to the same buyer.

Prosecutors showed that each of those shell companies involved the production of notarized affidavits in the names of people who didn’t exist. As a result, the government was able to charge Golestan with 20 counts of wire fraud — one for each payment made by the phony companies that bought the IP addresses from ARIN.

Golestan initially sought to fight those charges. But on just the second day of his trial in November 2021, Golestan changed his mind and pleaded guilty to 20 counts of wire fraud in connection with the phantom companies he used to secure the IP addresses. Prosecutors estimated those addresses were valued at between $10 million and $14 million.

ARIN says the 5-year sentence handed down by the South Carolina judge “sends an important message of deterrence to other parties contemplating fraudulent schemes to obtain or transfer Internet resources.”

“Those who seek to defraud ARIN (or other Regional Internet Registries) are subject to costly and serious civil litigation, criminal charges, and, ultimately, a lengthy term of incarceration,” reads a statement from ARIN on Golestan’s sentencing.

By 2013, a number of Micfo’s customers had landed on the radar of Spamhaus, a group that many network operators rely upon to stem the tide of junk email. Shortly after Spamhaus started blocking Micfo’s IP address ranges, Micfo shifted gears and began reselling IP addresses mainly to companies marketing “virtual private networking” or VPN services that help customers hide their real IP addresses online.

Golestan did not respond to a request for comment. But in a 2020 interview with KrebsOnSecurity, Golestan claimed that Micfo was at one point responsible for brokering roughly 40 percent of the IP addresses used by the world’s largest VPN providers. Throughout that conversation, Golestan maintained his innocence, even as he explained that the creation of the phony companies was necessary to prevent entities like Spamhaus from interfering with his business going forward.

There are fewer than four billion so-called “Internet Protocol version 4” or IPv4 addresses available for use, but the vast majority of them have already been allocated. The global dearth of available IP addresses has turned them into a commodity wherein each IPv4 address can fetch between $15-$25 on the open market.

This has led to boom times for those engaged in the acquisition and sale of IP address blocks, but it has likewise emboldened those who specialize in absconding with and spamming from dormant IP address blocks without permission from the rightful owners.

The U.S Department of Justice says Golestan will serve 60 months in prison, followed by a 2-year term of court-ordered supervision. The Micfo CEO also was ordered to pay nearly $77,000 in restitution to ARIN for its work in assisting federal prosecutors.


25 thoughts on “Tech CEO Sentenced to 5 Years in IP Address Scheme

  1. Ray Tracy

    “Would you buy a used IP Address from this man?”

    1. Zard

      Check the links and what a scammy network – all around the planet!

    1. Mark F.

      True . . . and sad: if he has the energy and intellect to do what he did, he also has the energy and intellect to do honorable work in the field.

  2. Elastic Man

    Golestan was ultimately charged with 20 counts of wire fraud, corresponding to the payments made by the fraudulent companies that purchased the IP addresses from ARIN.

    1. Cranky

      Do you have a pertinent comment to add to the discussion or are you just here to make stupid political comments?

    2. LG

      That’s some real white privilege there, isn’t it Jack? Next time, leave your political comments at the door, instead of being a pure sheeple and jump right to your piss poor attempt with injecting your political opinion.

    3. RichG

      Grow up Jack. Stay on topic and don’t become juvenile.

      1. mealy

        And what topic are you on, the topic of Jack?
        Speaking of not becoming juvenile that is.

  3. Jake T

    “Prosecutors estimated those addresses were valued at between $10 million and $14 million.”

    “The U.S Department of Justice says Golestan will serve 60 months in prison, followed by a 2-year term of court-ordered supervision. The Micfo CEO also was ordered to pay nearly $77,000 in restitution to ARIN for its work in assisting federal prosecutors.”

    So, do the math:
    If these addresses were valued at the LOWEST end of the range, or $10 million,
    and
    his penalty was $77K,
    then
    Golestan paid less than 1% (penalty) of the (minimum) estimated market value of the “757,760 IP addresses”.

    Further-
    https://www.arin.net/blog/2023/10/16/micfo-golestan-sentencing/

    “Judge Gergel found that the costs were appropriate and noted that they were limited to those ARIN incurred assisting the government’s case….”

    Are you kidding me?

    1. sarahsmithe

      If there’s fraud, ARIN can just take those addresses back, which is what I imagine they did.

  4. Darkfader

    Quite the stretch by this guy to say or think that he ever ran a “business”.

  5. RICHARD GOLODNER

    Quite frankly, this guy got off easy. His operation was well orchestrated and successful.
    He should serve the full five and set an example for other v4 conmen. There are a few more I can think of.

  6. Mansoor P

    Good
    Another Iranian Thief behind BARS!
    KEEP HIM THERE.

  7. Fckyou

    He didn’t do anything wrong. They just don’t like that he cornered the market on ipv4 so they invent wire charges.

    1. PurpleCow

      Nothing wrong except lie on the affidavits. That’s the fraud. I can buy and sell things legally all day long if I don’t lie about anything in the transactions.

  8. Tyler

    So…this guy still got away with “basically” $9,923,000? Is that correct?

  9. Victor Wunschel

    “notarized affidavits in the names of people who didn’t exist”. One would hope the notary is now in jail.

Comments are closed.