HAMILTON, Ontario (AP) — A judge denied bail Tuesday to a Canadian man accused in a massive hack of Yahoo emails, arguing he had the means and incentive to flee.

Karim Baratov, 22, has alleged ties to Russian agents and access to significant amounts of cash, making him a serious flight risk if freed on bail, a prosecutor said.

Baratov was arrested last month and faces extradition to the US. He was indicted in the United States for computer hacking along with three other people, including two alleged Russian intelligence agents.

Justice Alan Whitten denied bail in a written decision, saying Baratov appeared to be highly skilled at hacking and calling the US case extremely strong.

“Baratov is a flight risk. He could instantaneously access the funds,” the judge wrote. “He can ply his trade from anywhere in the world.”

Baratov looked at his parents and shrugged when he exited the courtroom.

US law enforcement officials call Baratov a “hacker-for-hire” paid by Russian Federal Security Service members. He has Kazakh origins, arriving in Canada in 2007 and becoming a citizen in 2011.

“It would appear that Baratov’s activities were quite the cash cow: a million by age 15 and the array of extremely expensive sports cars,” the judge said in his ruling. “There is the potential for further income … Baratov would appear to be a valuable operative for the FSB.”

Prosecutor Heather Graham noted earlier that Baratov owned a number of luxury cars and flaunted his lifestyle on social media. She also said he has webmail and PayPal accounts with “large unknown sums of money” accessible anywhere. Graham said police seized about $22,000 ($30,000 Canadian) cash from his home and another $670 ($900 Canadian) from his wallet when he was arrested.

She also said there is evidence Baratov may have been trafficking in identity information. And there are allegations he continued hacking while on vacation in Jamaica.

Graham also noted Baratov faces up to 20 years in a US prison.

“The evidence of Mr Baratov’s connections to Russian officials exponentially elevate the flight risk in this case,’ Prosecutor Heather Graham said.

Baratov’s parents had offered to act as their son’s sureties and offered their home but the judge said they “were obviously prepared to turn a blind eye to” his online activities.

The young man’s attorney Deepak Paradkar said the father had agreed to turn off the internet in the family home.

The breach at Yahoo affected at least a half billion user accounts, but Paradkar said Baratov is only accused of hacking 80 to 100 accounts. He said the charges against his client have been “inflated” and said he financed many of his luxury cars.

Paradkar maintains an Instagram account under the name “Cocaine Lawyer” and has often used the hashtag #bestcocainelawyer.

Baratov’s other lawyer, Amedeo DiCarlo, arrived to the courthouse again Tuesday in a chauffeured Rolls-Royce.

In a scheme that prosecutors say blended intelligence gathering with old-fashioned financial greed, the four men targeted the email accounts of Russian and US government officials, Russian journalists and employees of financial services and other private businesses, American officials said.

In some cases using a technique known as “spear-phishing” to dupe Yahoo users into thinking they were receiving legitimate emails, the hackers broke into at least 500 million accounts in search of personal information and financial data such as gift card and credit card numbers, prosecutors said.

The case, announced amid continued US intelligence agents’ scepticism of their Russian counterparts, comes as American authorities investigate Russian interference through hacking in the 2016 presidential election. Officials said those investigations are separate.

Alexsey Belan, one of the others accused, is on the list of the FBI’s most wanted cybercriminals and has been indicted multiple times in the United States. It’s not clear whether he or the other two defendants, Dmitry Dokuchaev and Igor Sushchin, will ever step foot in an American courtroom because there’s no extradition treaty with Russia.

The indictment identifies Dokuchaev and Sushchin as officers of the Russian Federal Security Service, or FSB. Belan and Baratov were paid hackers directed by the FSB to break into the accounts, prosecutors said.

Whitten, the judge, noted the evidence against Baratov includes large volumes of emails between Baratov and Dokuchaev, who instructs Baratov as to what email accounts to target. He also noted screenshots sent by Baratov to Dokuchaev, proving that he had successfully hacked the accounts.