Monica Dillon, a former Assistant US Attorney in the Southern District of West Virginia, faces five federal counts of identity theft for allegedly using the names, Social Security numbers, and birth dates of five victims to open and operate online gambling accounts between January 2021 and January 2023. The charges were filed April 22, 2026 in federal court in Charleston, West Virginia and Dillon has agreed to plead guilty to all five counts.

The plea agreement provides for dismissal of the charges after 24 months of supervision and compliance with the agreement’s conditions. The arrangement is unusual for a federal identity-theft case at this scale, where winnings from the victim-funded accounts exceeded $1,000 across one-year periods for several of the named victims.

A Career Inside the Office She Now Faces

Dillon spent nearly two decades as an Assistant US Attorney in the Southern District. From 2021 to 2024, the period inside which the alleged conduct ran, she led a team prosecuting white-collar fraud, healthcare fraud, environmental, tax, and civil rights cases. The professional file reads as the kind of prosecutor career that builds expertise in exactly the data-handling and fraud-mechanics that caught her in the end.

Public records show Dillon filed for personal bankruptcy in 2022, midway through the alleged scheme period. The bankruptcy is not the charge. The indictment turns on the identity theft of five named individuals whose personal information was used to register online gambling accounts and run financial transactions in their names.

The Mechanics of the Allegation

The court filing does not name the specific online gambling platforms. The conduct described, opening accounts with stolen names, SSNs, and birth dates, then making financial transactions in the victims’ names, is the same KYC-circumvention pattern that has driven federal money-laundering enforcement against offshore operators for the last five years.

Regulated US online operators run mandatory identity verification before any deposit. The framework requires government photo ID, address verification, and a Social Security number cross-check. The pattern the indictment describes, registering accounts with full personal data of real victims, would clear the standard KYC pass at most US-licensed iGaming sites in the states where she lived.

Why the Plea Deal is Notable

A federal identity-theft case with five named victims, more than $1,000 in winnings on multiple accounts, and a two-year window would typically end in substantial prison time. The plea agreement converts that to 24 months of supervision and conditional dismissal. The arrangement is the type of pre-trial diversion sometimes available to first-time defendants, but the involvement of a senior federal prosecutor as the defendant gives the deal an unusual structural shape.

Out-of-state judges typically handle cases that involve current or former DOJ personnel from the affected district. Dillon was scheduled to appear before an out-of-state judge for the guilty pleas. The substantive question, why a 24-month deferred-dismissal arrangement is on offer rather than a sentencing recommendation, will be answered when the deal terms are publicly filed.

What it Says About KYC

The case is a quiet vote of confidence in regulated operator KYC controls as a back-end fraud trip-wire even when front-end registration passes. Identity-theft cases typically surface when withdrawal requests, IP-location mismatches, or third-party complaints route the account to fraud review. The federal case here did not turn on a gambling operator’s report. The case description suggests the victims discovered the activity through other channels and the DOJ traced the account history.

The wider point is operational. Even when a regulated licensed online casino account passes initial KYC with valid documents, the audit trail behind the account, deposit method, IP history, withdrawal destination, is what makes the platform usable in a later federal prosecution. Offshore operators serving the same users do not consistently maintain that audit trail. In the cases that follow this one, the prosecution’s evidence will come from the records the regulated operators kept.