Polish law enforcement arrested four individuals connected to a SIM-swap operation that allegedly siphoned cryptocurrency assets and laundered tens of millions of zloty. The FBI assisted in the investigation, pointing to a cross-border dimension that likely extends to US victims or infrastructure.
SIM swapping is essentially identity theft with a phone number twist. Attackers convince (or bribe) mobile carriers into transferring a victim’s phone number to a new SIM card. Once they control the number, they intercept two-factor authentication codes and drain crypto wallets, exchange accounts, or anything else protected by SMS verification.
What we know about the operation
The four suspects used social engineering alongside SIM-swap techniques to compromise their targets. Social engineering in this context means manipulating people, whether telecom employees, victims themselves, or intermediaries, into handing over access or sensitive information.
Polish authorities have not publicly identified the suspects by name, nationality, or age. The proceeds allegedly laundered amount to tens of millions of zloty. For context, ten million Polish zloty converts to roughly $2.5 million, so “tens of millions” puts the suspected laundering activity somewhere in the multi-million-dollar range at minimum.
