Federal judge refuses to dismiss $224M lawsuit against AT&T for allegedly letting a customer be SIM-swapped twice, leading to the loss of $24M in cryptocurrency
THIS INVESTOR LOST $24M IN CRYPTOCURRENCY AFTER HE WAS SIM-SWAPPED, TWICE — A US federal judge has rejected AT&T's request …
Context & Ripple Effects
This case has been grinding since the investor filed the $224M suit in LA District Court in August 2018, claiming two SIM swaps let thieves drain $23.8M in cryptocurrency from accounts tied to his phone number. AT&T moved to dismiss; the judge has now ruled the claims are strong enough to reach the merits rather than die at the pleading stage.
The ruling lands on a carrier already under legal pressure: earlier in 2018, an appeals court allowed the FTC's case alleging AT&T misled unlimited-data customers to proceed past AT&T's attempt to kill it — so this is now the second major consumer-facing claim against the company to survive an early dismissal bid.
First-order effects
- AT&T must now litigate the case through discovery, opening its account-security and employee-access practices around SIM swaps to examination while facing a nine-figure damages demand.
- The plaintiff's core theory — that repeated SIM swaps on one account constitute negligence worth compensating at the value of what was stolen — gets a factual airing instead of being resolved procedurally.
Second-order effects
- Rival carriers face the same exposure template: if AT&T can be held liable for losses flowing from SIM swaps, every US carrier's identity-verification process for number transfers becomes potential litigation ground, echoing the accountability logic behind the court's refusal to overturn T-Mobile's $92M location-data fine.
- Crypto holders with large balances gain a tested legal route against carriers whose account controls fail, raising the expected cost of weak verification and pushing carriers toward out-of-band authentication for SIM changes.
Third-order effects
- If courts keep treating a phone number as a security boundary the carrier is responsible for defending, SIM-swap fraud shifts from a consumer-loss problem to a carrier-liability problem — likely drawing FCC or legislative attention to mandated transfer safeguards, much as the T-Mobile ruling hardened the regulatory line on customer-data handling.
The trend: US courts are increasingly willing to hold wireless carriers financially liable for account-takeover and customer-data harms rather than letting those cases die before trial.