29 F.4th 1077
9th Cir.2022Background
- Volodymyr Kvashuk, a Microsoft software engineer, used coworkers’ Microsoft test accounts to generate $10 million in digital gift-card tokens; Microsoft cancelled $1.8M but lost about $8.2M when tokens were redeemed.
- Microsoft’s fraud team linked stolen transactions to IP addresses, fuzzy device IDs, and accounts tied to Kvashuk; corporate forensics and interviews implicated him.
- Kvashuk sold gift-card tokens on Paxful for Bitcoin, moved proceeds through Coinbase into his bank account, and purchased high-value items (Tesla, lakeside house).
- The government obtained Google and financial records, then executed search warrants on Kvashuk’s home and car; evidence seized supported charges including aggravated identity theft and wire/mail/access-device fraud.
- District court denied Kvashuk’s suppression motion and other pretrial requests; a jury convicted on all counts and the court sentenced him to nine years; Kvashuk appealed.
Issues
| Issue | Plaintiff's Argument | Defendant's Argument | Held |
|---|---|---|---|
| Probable cause for residential search warrant / Franks hearing | Warrant affidavit established nexus to residence and digital devices; no false statements warranting Franks hearing | Affidavit lacked nexus and was stale; affiant omitted/misstated facts requiring a Franks hearing | Affidavit provided a fair probability evidence would be on devices at home; staleness not dispositive for electronic evidence; no substantial showing for Franks hearing — suppression denied |
| Aggravated identity theft (18 U.S.C. §1028A): are Microsoft test accounts a “means of identification”? | Test accounts are tied to individual employees and can identify them; Congress intended expansive definition | Test accounts are corporate tools, shared/automated, and do not identify a specific individual | Test accounts can identify specific testers and were not so broadly shared as to negate identification; convictions affirmed |
| Exclusion of asylum-application evidence / right to present a defense | Excluding asylum evidence prevented Kvashuk from explaining legitimate reasons for using cryptocurrency (avoid Ukrainian detection) | Immigration/asylum evidence was only marginally probative and highly prejudicial (immigration consequences); court allowed limited alternative testimony | Exclusion was within discretion and did not deprive Kvashuk of presenting his defense; no new trial warranted |
| Failure to dismiss juror who previously worked on UST (implied bias) | Juror’s past Microsoft/UST work created extrinsic knowledge and required dismissal | Juror’s experience was remote in time, non-overlapping with Kvashuk’s work, and juror pledged impartiality | Not an implied-bias situation; juror’s background was not similar/identical to trial facts and removal was not required |
Key Cases Cited
- Illinois v. Gates, 462 U.S. 213 (totality-of-circumstances test for probable cause)
- Franks v. Delaware, 438 U.S. 154 (standard for obtaining a Franks hearing)
- United States v. Gourde, 440 F.3d 1065 (computers retain recoverable electronic evidence; supports searches for digital data)
- United States v. Adjani, 452 F.3d 1140 (computer-based schemes justify search of home computers)
- United States v. King, 985 F.3d 702 (deference to magistrate probable-cause determinations)
- United States v. Alexander, 725 F.3d 1117 (expansive construction of “means of identification”)
- United States v. Barrington, 648 F.3d 1178 (employee passwords/credentials can constitute personal identity information)
- Jones v. Davis, 8 F.4th 1027 (defendant’s right to present a complete defense)
- United States v. Gonzalez, 906 F.3d 784 (standards for implied juror bias)
- Frazier v. United States, 335 U.S. 497 (mere employment by a large government agency is not per se disqualifying)