SIM Swapper Who Stole $20 Million in Crypto Resentenced to 12 Years in Prison

A New York federal choose has resentenced convicted cybercriminal Nicholas Truglia to 12 years in jail, following an 18-month sentence years earlier, after he did not pay $20 million in restitution to his sufferer.

The ruling, handed down on Thursday, got here after Truglia missed deadlines to repay crypto investor and promoter Michael Terpin for a 2018 SIM-swapping assault that resulted within the theft of greater than $23 million in crypto. 

The revised sentence exceeds federal pointers by greater than double, which recommends between 51 and 63 months.

Truglia was sentenced to 18 months in jail in December 2022, with 12 months of time already served. He was launched shortly after sentencing underneath the situation that he repay greater than $20 million in restitution, a dedication he did not honor.

He was detained once more in Might 2023 in Miami for suspected violations of supervised launch, after persevering with to maneuver funds and buy luxurious items.

Regardless of a contempt order, Truglia was launched in November 2024 after the presiding choose decided he stood a greater probability of repaying restitution outdoors jail. Once more, he didn’t make any funds.

Prosecutors stated Truglia allowed co-conspirators to make use of his crypto accounts to obtain Terpin’s stolen funds, changing them to Bitcoin and taking a minimize. He personally retained roughly $673,000.

His preliminary sentencing listening to revealed, nonetheless, that he had greater than $53 million in belongings.  

Courtroom information present that Truglia was ordered to repay $12.1 million by December 31, 2022, and a further $8.3 million by January 30 of the next 12 months. His failure to take action led to his resentencing on Thursday.

One other member of the group, Ellis Pinsky, who was simply 15 on the time of the hack, reached a $22 million settlement with Terpin.

“It is a turning level in how the authorized system views the theft of cryptocurrency,” Terpin instructed Decrypt.

“The ‘Perry Mason’ second within the listening to was the taking part in of a video from Vice on Showtime the place Truglia said in a masked voice that he would have the ability to preserve his stolen crypto even when he needed to be in jail for ten years as a result of it could’t be seized like a checking account. He’s about to search out out what greater than ten years appears like,” he added.

“Perry Mason” refers to a fictional protection lawyer from a long-running American authorized drama, first showing in a sequence of novels, then in a preferred TV present that started within the Nineteen Fifties. The present was recognized for its dramatic courtroom scenes, particularly last-minute revelations or confessions on the stand that turned the trial in Mason’s favor.

Terpin has been preventing authorized battles ever because the assault, which exploited a vulnerability within the cellphone quantity porting programs of cellular service suppliers. 

He sued Truglia and one other then-teenaged hacker, Ellis Pinsky, 5 years in the past, in addition to telecoms large AT&T in 2018, alleging it did not safeguard his knowledge. His civil swimsuit in opposition to AT&T was initially thrown out however later revived.

SIM swapping is a cyberattack approach by which hackers trick or bribe telecom workers into transferring a sufferer’s cellphone quantity to a brand new SIM card.

As soon as the quantity is hijacked, attackers intercept SMS-based two-factor authentication codes, having access to electronic mail, crypto wallets, and different delicate accounts.

In keeping with the FBI’s Web Crime Criticism Heart, SIM swapping scams led to over $25 million in reported losses final 12 months, down from practically $48 million in 2023 and $73 million in 2022.