Rydox Founder Ardit Kutleshi Pleads Guilty After Cybercrime Marketplace Sold Thousands of Stolen Identities

A 28-year-old Kosovar national has pleaded guilty in the United States to federal charges stemming from his role in creating and operating Rydox, an online marketplace prosecutors say supplied cybercriminals with stolen identities, compromised access information and tools for committing fraud.

Ardit Kutleshi entered guilty pleas to aggravated identity theft and conspiracy to commit money laundering in the Western District of Pennsylvania, according to the US Department of Justice.

Prosecutors say Rydox operated for years and generated at least $232,000 from thousands of transactions before an international law enforcement operation dismantled the platform.

Rydox Founder Admits Role in Cybercrime Marketplace

Kutleshi admitted his involvement in the creation and operation of Rydox, which US authorities described as an illicit marketplace catering to cybercriminals.

The website allegedly allowed users to purchase, sell and exchange stolen personally identifiable information, commonly known as PII.

Customers could also obtain stolen access devices, identification information and other products and services that could be used to facilitate online fraud and cybercrime.

Assistant Attorney General A. Tysen Duva said Kutleshi’s guilty plea exposed what authorities regarded as a sophisticated business built around stolen identities and criminal tools.

More Than 7,600 Transactions Allegedly Conducted Through Rydox

Court documents indicate that Rydox had been operating since at least 2016.

During that period, prosecutors say the marketplace facilitated more than 7,600 transactions involving stolen personal information, access devices, identification data and cybercrime-related products.

Some of the information offered through the platform had allegedly been stolen from victims in the United States.

The marketplace generated at least $232,000 in revenue, according to federal authorities.

Stolen Identities and Login Information Put Up for Sale

The FBI said Rydox provided criminals with access to sensitive information belonging to thousands of victims.

Assistant Director Brett Leatherman of the FBI’s Cyber Division said the marketplace offered stolen identities and login credentials alongside tools that could help buyers carry out additional offences.

Federal investigators regarded shutting down the marketplace itself as an important component of the case because removing its infrastructure prevented users from continuing to access its services.

The investigation eventually extended beyond the website to the individuals accused of operating it.

Kutleshi Pleads Guilty to Identity Theft and Money Laundering Charges

Kutleshi pleaded guilty to two serious federal offences.

The first is aggravated identity theft, which carries a mandatory minimum sentence of two years in prison.

He also admitted to conspiracy to commit money laundering, an offence carrying a maximum potential sentence of 20 years.

Those statutory penalties do not mean Kutleshi will automatically receive the maximum available punishment.

A federal judge will determine his sentence after considering the US Sentencing Guidelines and other factors required under federal law.

Sentencing Scheduled for February 2027

Kutleshi is scheduled to be sentenced on February 9, 2027.

The aggravated identity theft conviction carries the mandatory minimum two-year prison term, while the money laundering conspiracy conviction exposes him to a substantially longer potential sentence.

The final punishment will be determined by the federal district court.

The guilty plea represents another major development in an investigation that has involved authorities across several countries.

Brother Jetmir Kutleshi Previously Pleaded Guilty

Ardit Kutleshi was not the only member of his family prosecuted in connection with Rydox.

His brother, Jetmir Kutleshi, also pleaded guilty in the United States.

According to US Attorney Troy Rivetti, Jetmir was sentenced in December 2025 before being deported to Kosovo.

Federal prosecutors accused the brothers of operating the marketplace for personal financial gain while providing other criminals with access to information and tools that could be used for online offences.

Prosecutors Say Cybercrime Leaves Victims With More Than Financial Losses

Rivetti said crimes involving stolen personal information can produce consequences extending well beyond immediate monetary losses.

Victims may also experience continuing psychological effects after discovering that their identities, account details or other sensitive information have been compromised.

Such offences can also damage confidence in financial institutions and online services, he argued.

Federal prosecutors said they intend to continue targeting individuals attempting to profit from stolen information and compromised access credentials.

Kosovo Authorities Arrested Kutleshi in 2024

The international effort to prosecute Kutleshi began with his arrest in Kosovo.

Kosovar law enforcement detained him in December 2024.

He was subsequently extradited to the United States in 2025 to face federal prosecution.

The extradition demonstrated the international nature of the investigation, with American authorities relying on cooperation from foreign law enforcement agencies to pursue suspects operating outside the United States.

US Government Seized Rydox Domain

Authorities also moved directly against the marketplace’s online infrastructure.

In December 2024, the United States judicially seized the Rydox.cc domain that hosted and provided access to the marketplace.

Taking control of the domain prevented the platform’s operators and other users from continuing to use that address to trade cybercrime tools and stolen personal information.

The action formed part of the wider effort to simultaneously disrupt Rydox’s infrastructure and prosecute those accused of operating it.

FBI Says International Cooperation Helped Bring Marketplace Down

The FBI’s Pittsburgh Field Office led the American investigation, but the case involved law enforcement organisations across multiple jurisdictions.

Authorities in Kosovo played an important role through the Kosovo State Prosecutor’s Special Prosecution Office and the Kosovo Police Cybercrime Investigation Directorate.

Investigators also worked with Albania’s Special Anti-Corruption Body, known as SPAK.

Malaysian authorities participated through the Royal Malaysia Police’s Commercial Crime Investigation Department and the Attorney General’s Chambers of Malaysia.

Justice Department Warns Cybercriminals Operating Overseas

Duva said the prosecution demonstrates that operating outside US territory does not necessarily protect cybercrime suspects from American law enforcement.

He pointed to international cooperation, technical capabilities and law enforcement expertise as important tools for identifying and prosecuting suspects abroad.

The Justice Department has increasingly relied on partnerships with foreign governments to dismantle online criminal marketplaces whose administrators, servers, customers and victims may be spread across several countries.

Kutleshi’s arrest in Kosovo and subsequent extradition illustrates how those partnerships can ultimately result in suspects appearing before American courts.

Federal Cybercrime Specialists Lead Prosecution

Senior Counsel Thomas Dougherty of the Justice Department’s Computer Crime and Intellectual Property Section and Assistant US Attorney Nicole Stockey for the Western District of Pennsylvania are prosecuting the case.

The Justice Department’s Office of International Affairs also provided assistance, particularly given the cross-border nature of the investigation and extradition.

The Computer Crime and Intellectual Property Section works with American and international authorities to investigate and prosecute cybercrime and intellectual property offences.

DOJ Says More Than 180 Cyber and IP Criminals Convicted Since 2020

The Kutleshi prosecution forms part of a much wider federal campaign against cybercrime.

According to the Justice Department, its Computer Crime and Intellectual Property Section has secured convictions against more than 180 cybercrime and intellectual property offenders since 2020.

Courts have also issued orders providing for the return of more than $350 million to victims during that period.

The figures illustrate the financial scale of cases increasingly handled by specialist cybercrime investigators.

Rydox Case Moves Toward Final Sentencing

With his guilty plea entered, Kutleshi’s case now moves toward sentencing in February.

The marketplace he helped operate has already been dismantled, its domain seized and his brother prosecuted and deported.

Federal authorities say the prosecution represents more than the shutdown of one illicit website.

For investigators, it is another example of an increasingly international strategy designed to pursue cybercriminals, disrupt the digital infrastructure supporting their operations and recover assets even when suspects operate thousands of miles from their victims.