How members of the Community, a group of teenage SIM swappers who met on the forum OGUsers, stole millions in crypto in 2018 before turning on each other
Michael Terpin lost a fortune to a phone “SIM swap.” When he went to war to get it back, he found some surprising allies.
Context & Ripple Effects
This account traces a 2018 crypto theft ring back to OGUsers and shows how internal conflict can make an otherwise anonymous SIM-swap attack more attributable. It follows reporting on a $36.5 million SIM-swap theft allegation and international arrests tied to alleged celebrity-targeted crypto thefts.
The story also provides an early case study for a threat that did not disappear: later coverage linked phone-based social engineering to a $243 million crypto heist.
First-order effects
- Michael Terpin’s loss becomes connected to a defined group of alleged perpetrators rather than an isolated account takeover, giving his recovery effort identifiable adversaries and potential allies from within the group.
- The Community’s members face heightened exposure when their own disputes undermine the secrecy that helped sustain the thefts.
Second-order effects
- Investigators, victims, and mobile carriers gain a clearer model of how online communities, social engineering, and control of a phone number can combine to compromise crypto accounts.
- Crypto holders and services have stronger reason to reduce reliance on SMS-based account recovery, since a phone-number takeover can become a path to irreversible asset loss.
Third-order effects
- If SIM swapping remains a viable route into financial accounts, phone numbers will continue to lose standing as high-assurance identity credentials, pushing more security toward phishing-resistant authentication and recovery controls.
- The case fits a broader legitimacy challenge for crypto: losses may occur through conventional identity compromise while recovery depends on fragmented evidence, private platforms, and cross-border enforcement.
The trend: Crypto crime is increasingly shaped by the security of identity and account-recovery systems surrounding wallets, not only by the security of the blockchain itself.