A Florida software distributor has been sentenced to federal prison after being found guilty of trafficking Microsoft certificates of authenticity, a scheme that involved selling genuine software certification labels separately from the software they were intended to accompany.
See also: Microsoft: OAuth phishing attacks are evolving
Heidi Richards, 52, of Brandon, was sentenced to 22 months in prison and fined $50,000 after a jury found her guilty of conspiracy to traffic in counterfeit Microsoft Certificates of Authenticity (COA) labels. The sentencing was announced by U.S. Attorney Gregory W. Kehoe.
The case highlights a lesser-known corner of software-related cybercrime, where legitimate certification components are diverted into illegal distribution channels. Investigators say Microsoft's Certificate of Authenticity (COA) trafficking operation allowed product activation codes to be resold and potentially used to activate unauthorized software installations.
According to court documents and evidence presented at trial, Richards operated a company called Trinity Software Distribution. Through the business, she purchased thousands of genuine Microsoft COA labels from accomplices.
Prosecutors said Richards paid millions of dollars for the labels, often at prices significantly below the retail value of the software products they were originally associated with. Instead of selling them with the licensed software, Richards and her employees allegedly extracted the product codes printed on the labels. These activation codes were then sold in bulk to customers.
See also: Microsoft Copilot Tasks: New AI service for automatic task execution
Federal law prohibits the sale or distribution of COA labels separately from the software programs and hardware they are designed to accompany. In other words, these labels cannot be considered independent products in the marketplace.
The Microsoft Certificate of Authenticity trafficking case shows how genuine licensing components can be misused to bypass legitimate software distribution channels.
Certificates of Authenticity labels play an important role in verifying genuine Microsoft software. Each label contains security features and a unique product key that allows users to activate the software legally. These labels are typically attached to licensed devices or distributed with official software packages to confirm authenticity.
However, the presence of valid activation codes has created an underground market where COA labels are bought and sold illegally. Criminal resellers can extract the codes and use them to activate unauthorized software installations.
See also: Microsoft: Hackers target developers with malicious Next.js repositories
This demand has contributed to cases like the Microsoft Certificate of Authenticity trafficking scheme uncovered in Florida, where genuine labels became the main commodity in an illegal resale business.
