The Latvian government says it will extradite a 28-year-old man accused of creating the Web injects for the highly destructive Gozi malware, which targeted over a million computers globally, specifically aimed at bank accounts. US prosecutors say the malware was used to steal millions of dollars from its targets.

According to the Associated Press, Latvian ministers voted Tuesday (7 to 5, with one abstention), to extradite Deniss Calovskis to the United States. Calovskis has previously denied involvement in the Gozi operation.

“I am like a hostage in this situation,” he said in an August 3 interview with Latvian television, according to Bloomberg. “I don’t know about the Gozi virus. I haven’t helped any schemers to get money and I haven’t received any.”

American authorities revealed arrest warrants for Calovskis and his two other co-conspirators in January 2013. The other two were arrested earlier this year.

There had been some resistance in Latvia to extraditing Calovskis, largely due to the fact that many feel his potential maximum sentence—67 years in prison if found guilty—is excessive. The BBC reported earlier this month that Latvian foreign minister Edgars Rinkevics had decried the American potential sentence, saying that such crimes only deserved "proportionate punishment.”

However, it may not be the end of the line for the young Latvian just yet—the AP also noted that “Calovskis' lawyer, Saulvedis Varpins, has told Latvian media that he will appeal to the European Court of Human Rights to prevent the extradition.”