SIM Swapper Who Stole $20 Million in Crypto Resentenced to 12 Years in Jail – Decrypt

A New York federal decide has resentenced convicted cybercriminal Nicholas Truglia to 12 years in jail, following an 18-month sentence years earlier, after he didn’t pay $20 million in restitution to his sufferer.

The ruling, handed down on Thursday, got here after Truglia missed deadlines to repay crypto investor and promoter Michael Terpin for a 2018 SIM-swapping assault that resulted within the theft of greater than $23 million in crypto. 

The revised sentence exceeds federal pointers by greater than double, which recommends between 51 and 63 months.

Truglia was sentenced to 18 months in jail in December 2022, with 12 months of time already served. He was launched shortly after sentencing below the situation that he repay greater than $20 million in restitution, a dedication he didn’t honor.

He was detained once more in Could 2023 in Miami for suspected violations of supervised launch, after persevering with to maneuver funds and buy luxurious items.

Regardless of a contempt order, Truglia was launched in November 2024 after the presiding decide decided he stood a greater likelihood of repaying restitution outdoors jail. Once more, he didn’t make any funds.

Prosecutors mentioned Truglia allowed co-conspirators to make use of his crypto accounts to obtain Terpin’s stolen funds, changing them to Bitcoin and taking a minimize. He personally retained roughly $673,000.

His preliminary sentencing listening to revealed, nonetheless, that he had greater than $53 million in property.  

Courtroom data present that Truglia was ordered to repay $12.1 million by December 31, 2022, and an extra $8.3 million by January 30 of the next 12 months. His failure to take action led to his resentencing on Thursday.

One other member of the group, Ellis Pinsky, who was simply 15 on the time of the hack, reached a $22 million settlement with Terpin.

“It is a turning level in how the authorized system views the theft of cryptocurrency,” Terpin instructed Decrypt.

“The ‘Perry Mason’ second within the listening to was the taking part in of a video from Vice on Showtime the place Truglia said in a masked voice that he would have the ability to hold his stolen crypto even when he needed to be in jail for ten years as a result of it could’t be seized like a checking account. He’s about to seek out out what greater than ten years looks like,” he added.

“Perry Mason” refers to a fictional protection lawyer from a long-running American authorized drama, first showing in a collection of novels, then in a well-liked TV present that started within the Nineteen Fifties. The present was recognized for its dramatic courtroom scenes, particularly last-minute revelations or confessions on the stand that turned the trial in Mason’s favor.

Terpin has been preventing authorized battles ever for the reason that assault, which exploited a vulnerability within the cellphone quantity porting techniques of cellular service suppliers. 

He sued Truglia and one other then-teenaged hacker, Ellis Pinsky, 5 years in the past, in addition to telecoms large AT&T in 2018, alleging it didn’t safeguard his information. His civil swimsuit in opposition to AT&T was initially thrown out however later revived.

SIM swapping is a cyberattack approach by which hackers trick or bribe telecom workers into transferring a sufferer’s cellphone quantity to a brand new SIM card.

As soon as the quantity is hijacked, attackers intercept SMS-based two-factor authentication codes, getting access to e-mail, crypto wallets, and different delicate accounts.

In response to the FBI’s Web Crime Criticism Middle, SIM swapping scams led to over $25 million in reported losses final 12 months, down from practically $48 million in 2023 and $73 million in 2022.