Just came across something that really underscores how serious SIM-swapping threats are in crypto. There's this case involving Nicholas Truglia that got extended recently - dude had his prison sentence bumped up to 12 years because he refused to pay back what he owed after getting caught in 2022.

So here's what went down. Truglia ran a SIM-swapping scam targeting investors in the San Francisco Bay Area back in 2018. He basically compromised Michael Terpin's phone - Terpin is a crypto investor and CEO of Transform Group - and drained his crypto holdings. The damage? Terpin lost $24 million in cryptocurrency from that single attack.

What's wild is that Nicholas Truglia was initially hit with just 18 months, ordered to pay over $20 million in restitution to Terpin. But here's the kicker - Judge Alvin Hellerstein found out that Truglia actually owned assets worth more than $61 million. The guy had the money to pay but just... didn't. Made zero payments. So the judge extended his sentence to 12 years as a result.

The technical side of this is pretty straightforward but devastating. SIM-swapping means transferring someone's phone number to a different SIM card, which lets scammers intercept authentication codes from exchanges and banks. Once they get those codes, your crypto is basically gone. Terpin ended up filing a $224 million lawsuit against AT&T for negligence too, and won a $75 million civil case against Nicholas Truglia himself.

This case is honestly a reminder of how vulnerable mobile-based security can be. The crypto sector has been a major target because the stakes are so high and transactions are irreversible. If you're holding significant amounts, this is worth thinking about - maybe look into hardware wallets or more robust authentication methods beyond SMS. The Truglia situation shows what happens when security gets compromised.