Just came across this case that really highlights how exposed we still are in crypto. So there's this guy Nicholas Truglia who ran a SIM-swapping scam back in 2018, targeting crypto investors in the San Francisco Bay Area. Sounds like ancient history but the legal consequences are still playing out.

Here's where it gets wild - Truglia got hit with wire fraud charges for compromising someone's phone through SIM-swapping. He basically transferred the victim's phone number to another SIM card, which let him intercept authentication codes from exchanges and banks. Pretty straightforward social engineering, but devastatingly effective.

His main target was Michael Terpin, a crypto investor and Transform Group CEO. Terpin lost $24 million in crypto through this scheme. Not small change. So Terpin went after both Truglia and AT&T legally - filed a $224 million lawsuit against his wireless carrier for negligence and a separate $75 million civil suit against Truglia himself. Won both.

Initially Nicholas Truglia got 18 months in prison back in 2022 plus $20 million in restitution. Pretty light, honestly. But here's the thing - he never actually paid. Judge Alvin Hellerstein looked at the records and found that Truglia owned over $61 million in assets. He had the money. He just didn't pay.

So the judge extended his sentence to 12 years in July. That's a massive jump from 18 months. The message seems clear - evading restitution obligations gets you serious prison time.

Why does this matter beyond just another fraud case? Because SIM-swapping is still one of the most effective attack vectors against crypto holders. People focus on exchange security and wallet hacks, but your phone number is often the weakest link. If someone can compromise that, they can drain your accounts through legitimate-looking authentication processes.

The Nicholas Truglia case shows both the power of this attack and what happens when you get caught. Worth knowing about if you're holding any significant crypto.