SIM Swapper Who Stole $20 Million in Crypto Resentenced to 12 Years in Prison – Decrypt

A New York federal choose has resentenced convicted cybercriminal Nicholas Truglia to 12 years in jail, following an 18-month sentence years earlier, after he did not pay $20 million in restitution to his sufferer.

The ruling, handed down on Thursday, got here after Truglia missed deadlines to repay crypto investor and promoter Michael Terpin for a 2018 SIM-swapping assault that resulted within the theft of greater than $23 million in crypto. 

The revised sentence exceeds federal pointers by greater than double, which recommends between 51 and 63 months.

Truglia was sentenced to 18 months in jail in December 2022, with 12 months of time already served. He was launched shortly after sentencing beneath the situation that he repay greater than $20 million in restitution, a dedication he did not honor.

He was detained once more in Could 2023 in Miami for suspected violations of supervised launch, after persevering with to maneuver funds and buy luxurious items.

Regardless of a contempt order, Truglia was launched in November 2024 after the presiding choose decided he stood a greater probability of repaying restitution outdoors jail. Once more, he didn’t make any funds.

Prosecutors mentioned Truglia allowed co-conspirators to make use of his crypto accounts to obtain Terpin’s stolen funds, changing them to Bitcoin and taking a reduce. He personally retained roughly $673,000.

His preliminary sentencing listening to revealed, nevertheless, that he had greater than $53 million in belongings.  

Courtroom information present that Truglia was ordered to repay $12.1 million by December 31, 2022, and an extra $8.3 million by January 30 of the next yr. His failure to take action led to his resentencing on Thursday.

One other member of the group, Ellis Pinsky, who was simply 15 on the time of the hack, reached a $22 million settlement with Terpin.



“This can be a turning level in how the authorized system views the theft of cryptocurrency,” Terpin advised Decrypt.

“The ‘Perry Mason’ second within the listening to was the taking part in of a video from Vice on Showtime the place Truglia acknowledged in a masked voice that he would be capable of maintain his stolen crypto even when he needed to be in jail for ten years as a result of it could’t be seized like a checking account. He’s about to seek out out what greater than ten years seems like,” he added.

“Perry Mason” refers to a fictional protection legal professional from a long-running American authorized drama, first showing in a sequence of novels, then in a preferred TV present that started within the Nineteen Fifties. The present was recognized for its dramatic courtroom scenes, particularly last-minute revelations or confessions on the stand that turned the trial in Mason’s favor.

Terpin has been combating authorized battles ever because the assault, which exploited a vulnerability within the cellphone quantity porting methods of cellular service suppliers. 

He sued Truglia and one other then-teenaged hacker, Ellis Pinsky, 5 years in the past, in addition to telecoms big AT&T in 2018, alleging it did not safeguard his information. His civil swimsuit towards AT&T was initially thrown out however later revived.

SIM swapping is a cyberattack method during which hackers trick or bribe telecom staff into transferring a sufferer’s cellphone quantity to a brand new SIM card.

As soon as the quantity is hijacked, attackers intercept SMS-based two-factor authentication codes, getting access to electronic mail, crypto wallets, and different delicate accounts.

In response to the FBI’s Web Crime Criticism Heart, SIM swapping scams led to over $25 million in reported losses final yr, down from practically $48 million in 2023 and $73 million in 2022.