Canadian police say the incident is ‘currently the biggest cryptocurrency theft reported from one person.
Police in Canada arrested a local teenager for stealing US$36 million in cryptocurrency from a single victim through a SIM-swapping attack.
On Tuesday, the Hamilton Police Service in Ontario reported it had arrested the unnamed “youth” following a joint investigation with the FBI and the US Secret Service.
“This is currently the biggest cryptocurrency theft reported from one person,” Hamilton police said. (Earlier this year, police in Europe arrested 10 suspects for collectively stealing $100 million in cryptocurrency through SIM-swapping attacks.)
The Canadian teen allegedly targeted a victim in the US. Details about the SIM swap attack were not revealed, but they often involve tricking a cellular provider into handing over access to the victim’s cell phone number. To pull this off, the attacker will first try to learn personal details about the victim’s background—such as ID numbers, address, and birthdate—and then try to impersonate them.
If the cellular provider falls for the trick, it’ll then duplicate a new SIM card registered to the victim’s phone number, which can be plugged into a smartphone. The attack can be particularly devastating because mobile phone numbers are often used to receive one-time passcodes to log in or reset the password for an online account.
In this case, the Canadian teen used the SIM-swap attack to do just that by intercepting the two-factor authentication codes used to log into the victim’s cryptocurrency accounts.
Hamilton Police said they began investigating the crime with US authorities in March 2020. Investigators then noticed some of the cryptocurrency stolen in the attack was used to buy “an online username that was considered to be rare in the gaming community,” which led them to identify the alleged culprit. As part of the arrest, Canadian police also seized US$5.5 million in cryptocurrency assets.
Unfortunately, traditional cell phone companies are not doing much to protect you. But it is not all bad news, there is a cellular phone company named efani that has stepped up and made it more difficult for hackers.
Replace your existing mobile service plan with a secure efani SAFE plan today, No Contract! efani is a secure mobile service with an encrypted SIM Card that secures your mobile account from potential SIM Swap vulnerabilities, your personal information, as well as $5M insurance coverage per individual in the event of loss as a result of a SIMSwap.
The SAFE plan comes with a 100% money-back guarantee for 60-days includes:
You’re protected up to $5 million for financial losses resulting from a SIM hack. (includes: Crypto, Banking, Brokerage & Other Losses)