Just came across this wild case that really shows how deep the rabbit hole goes with crypto scams. So there's this guy Nicholas Truglia who pulled off a SIM-swapping scheme back in 2018 targeting investors in the San Francisco Bay Area. He basically transferred a victim's phone number to another SIM card, which let him intercept authentication messages and raid their crypto wallets.

The victim here was Michael Terpin, a crypto investor and CEO of Transform Group. Truglia managed to steal $24 million in cryptocurrency through this SIM-swap hack. Initially, Nicholas Truglia got hit with an 18-month sentence back in 2022, but here's where it gets interesting—he was ordered to pay over $20 million in restitution to Terpin. Sounds reasonable, right? Except he basically ghosted on the whole thing.

Fast forward to this year, and a judge discovered something pretty damning. Nicholas Truglia actually owned assets worth over $61 million—way more than what he owed—but made zero payments. Judge Alvin Hellerstein wasn't having it and extended his prison sentence to 12 years in a July order. That's a massive jump from the original 18 months.

What's even crazier is that Terpin didn't stop there. He filed a $224 million lawsuit against AT&T for negligence in allowing the SIM swap to happen, plus a separate $75 million civil lawsuit against Nicholas Truglia himself, which he won in 2019.

This whole thing is a brutal reminder of how vulnerable mobile security still is in the crypto space. SIM-swapping is still one of the easiest ways for scammers to compromise accounts, and the consequences can be absolutely devastating. If you're holding significant crypto, this is a wake-up call to beef up your security game way beyond just a password.