US Extradites Teenager Accused of Participating in $8M Crypto Ransom Demand

A 19-year-old dual citizen of the US and Estonia has been extradited to the US over his alleged involvement in a $8 million crypto ransom demand made by the Scattered Spider hacking group. Peter Stokes was arrested in Finland in April 2026 under an Interpol Red Notice and had two 2TB hard drives seized from him at Helsinki airport, which gives some sense of the scale of data potentially tied to these operations.

The Department of Justice unsealed charges against Stokes on July 1, accusing him of involvement with Scattered Spider, a loosely organized cybercrime collective that has become one of the most prolific hacking groups in recent memory. The group's signature methods typically involve vishing (voice phishing), where attackers call employees and impersonate IT staff or other trusted parties to trick them into handing over credentials.

Stokes isn't the first Scattered Spider member to face consequences, as multiple arrests and guilty pleas from other group members have occurred throughout 2025 and 2026. The Interpol Red Notice and cross-border extradition process in Stokes' case illustrate just how much international cooperation is required to bring these cases to trial.