US cryptocurrency investor sues AT&T in LA District Court seeking $224M in damages after $23.8M in currency was allegedly stolen via SIM swap fraud
Gertrude Chavez-Dreyfuss / Reuters :
Context & Ripple Effects
In August 2018, a US cryptocurrency investor filed suit against AT&T in LA District Court seeking $224M in damages after $23.8M in currency was allegedly stolen through SIM swap fraud — an attack that hijacks a victim's phone number to intercept authentication codes. The suit landed just as prosecutors were beginning to treat SIM hijacking as a serious crime rather than a curiosity.
The arc since then has validated the claim's significance: a federal judge later refused to dismiss the $224M case against AT&T, keeping the carrier's liability question alive, while a college student became the first person in the US sentenced for SIM hijacking with a 10-year prison term. Larger arrests followed, including a Canadian teenager accused of a $36.5M single-victim theft, and by 2024 the DOJ had charged three people over a phone-hacking scheme tied to the FTX exchange hack.
First-order effects
- AT&T faces direct litigation exposure over its customer-account security practices, with the court allowing the case to proceed toward testing whether carriers owe damages when SIM swaps enable theft.
Second-order effects
- Other SIM-swap victims gain a template for suing carriers rather than only pursuing anonymous thieves, shifting recovery efforts toward deep-pocketed telecoms; carriers face pressure to add port-out and SIM-change safeguards that raise their operating costs.
Third-order effects
- If courts hold carriers financially responsible for SIM-swap losses, phone numbers lose viability as a sole authentication factor, pushing exchanges, banks, and carriers toward stronger identity verification — and making SIM hijacking a consistently prosecuted felony category, as the first sentencing already signaled.
The trend: SIM swapping is maturing from a niche crypto-theft trick into a litigated and prosecuted attack class that puts wireless carriers on the hook as de facto guardians of digital identity.