Key conclusions: :
- Polish services dismantled an organized crime group using SIM swap attacks to steal cryptocurrencies.
- The case shows the growing scale of financial cybercrime and the weaknesses of security systems based on mobile telephony.
- The high potential sentences underscore that law enforcement is taking these types of crimes increasingly seriously.
How did the SIM swap mechanism work?
This method exploits one of the greatest weaknesses of current security systems – the dependence of regaining access on having a SIM card.
The funds were then laundered using bank accounts in Poland and abroad, payment platforms and multi-currency wallets. According to investigators, the suspects treated criminal activity as a permanent source of income.
It is estimated that the total value of the laundered funds may reach tens of millions of zlotys, which makes the case one of the largest operations of this type in Europe in recent years.
The stolen funds were immediately entered into legal circulation via a distributed financial network. The perpetrators, making it a permanent source of income, used numerous personal bank accounts in Poland and abroad, international payment platforms and multi-currency digital wallets for transfers.
– explains the Central Office for Combating Cybercrime.
The international dimension of the investigation
American services are also involved in the case: the FBI and Homeland Security Investigations. This suggests that some of the victims or criminal infrastructure were located outside Poland.
The case shows how quickly cybercrime related to digital assets is developing. As the popularity of cryptocurrencies increases, so does the number of attacks targeting individual users and institutions.
Experts emphasize that systems based on SMS as a second authentication factor are becoming more and more risky. Authenticator apps or dongles are increasingly being recommended instead of phone number-based security.
What’s next?
The investigation is being conducted by the Regional Prosecutor’s Office in Kraków, and CBZC has not yet disclosed detailed information about the suspects. The case is ongoing and further arrests are possible.
For the cryptocurrency market, this is another signal that user security remains one of the biggest challenges. At the same time, the increasing effectiveness of law enforcement agencies may act as a deterrent to future perpetrators.
