Europol, working with US, UK, and others, says 10 people have been arrested for allegedly stealing $100M in cryptocurrency from celebrities via SIM-swap attacks
Eight men were arrested in England and Scotland as part of an investigation into a series of SIM swapping attacks targeting US celebrities.
Context & Ripple Effects
The arrests fit Europol’s established cross-border cybercrime role: its earlier joint operation with the FBI targeted the GozNym network accused of compromising 44,000 computers. Here, alleged SIM-swap theft connects UK arrests with celebrity victims in the US.
Related coverage also records a separate $36.5 million alleged SIM-swap crypto theft, indicating that account-takeover attacks remained a material route into cryptocurrency holdings beyond this investigation.
First-order effects
- The 10 suspects face an immediate disruption to the alleged operation, while Europol and its US and UK partners gain custody of people tied to the claimed $100 million thefts.
- Celebrity cryptocurrency holders targeted in the investigation gain a concrete law-enforcement response, though the report does not establish recovery of the allegedly stolen funds.
Second-order effects
- The case makes international coordination central to SIM-swap investigations because the alleged victims, arrests and participating authorities span multiple countries.
- It reinforces that SIM-swap theft is not only a telecom-account problem: access to a victim’s phone number can expose cryptocurrency accounts, concentrating risk at account-recovery and authentication steps.
Third-order effects
- If cross-border cases continue to link SIM swaps to large crypto losses, enforcement is likely to treat mobile-number hijacking as financial cybercrime rather than a standalone identity-fraud offense.
- The broader pattern is a convergence of cybercrime investigations around the financial infrastructure behind theft, from compromised devices in the GozNym takedown to cryptocurrency-focused fraud rings.
The trend: Cross-border law enforcement is increasingly pursuing cryptocurrency theft through the account-takeover and fraud networks that enable it, not just through the movement of stolen funds.