University student who sold phishing kits to fraudsters jailed

A university student who sold more than a thousand phishing kits which were used to defraud victims of millions of pounds, has today been jailed. 

Ollie Holman, 21, admitted to selling phishing kits, which contained fraudulent webpages designed to look genuine, to dupe victims into filling in their own personal and financial information.

Holman, of Eastcote, West London, previously pleaded guilty to seven counts, including encouraging or assisting the commission of an offence, making or supplying articles for use in fraud, and transferring, acquiring, and possessing criminal property. 

He was sentenced at Southwark Crown Court to seven years imprisonment on Wednesday, 23 July 2025. He was also given a Serious Crime Prevention Order following an application from the prosecution. 

The Crown Prosecution Service (CPS) authorised the charges against Holman following an investigation by City of London Police, supported by international partners in Switzerland (Office of the Attorney General of Switzerland and Federal Office of Police) and Finland. 

Sarah Jennings, Specialist Prosecutor for the Crown Prosecution Service, said: “By creating and selling phishing kits, Ollie Holman facilitated a widespread fraud which others used to exploit innocent victims on a vast scale. 

“Holman acted with greed and profited handsomely from this illegal enterprise, funding his own lavish lifestyle at the expense of countless individuals and businesses who suffered devastating financial losses and emotional harm. 

“The prosecution team, working closely with City of London Police and international partners, was able to build a strong case with clear, compelling evidence, resulting in the defendant’s guilty pleas. 

“I hope this case sends a clear message to those intent on committing fraud: no matter how sophisticated your methods, you cannot hide behind online anonymity or encrypted platforms. Fraudsters like Holman will be robustly pursued by law enforcement, prosecuted by the CPS, and brought to justice.”

The defendant was responsible for the creation and supply of 1,052 phishing kits which targeted 69 financial institutions and large organisations, including charities, in 24 countries and resulted in estimated losses of at least £100 million globally. 

These kits contained a phishing webpage which was designed to look real. These fraudulent webpages had built-in scripts to enable the harvesting of information entered, including account log-in details and bank details. 

Holman distributed these phishing pages via the encrypted messaging service Telegram, where he also offered his advice and technical support to others intent on committing fraud. 

Holman was arrested in October 2023, his accommodation at Canterbury University was searched, and his devices seized. After his initial arrest, Holman continued to use his Telegram channel to provide support and maintenance of phishing kits until he was arrested again at his home address on 20 May 2024, with further devices seized. 

The investigation uncovered a large amount of digital evidence, which the prosecution used to build a strong case and successfully link Holman to the online offending. 

Following his sentencing, the CPS Proceeds of Crime Division will be taking Holman back to court to pursue confiscation proceedings against the defendant to recover his ill-gotten gains.