A cellphone number can appear to be a simple way to reach someone, but it is also often tied to bank accounts, password resets and two factor authentication.
asserted
it → appear → accounts
Federal prosecutors say a former AT&T retail employee exploited that connection by helping a hacker transfer customers’ phone numbers to devices controlled by criminals.
asserted
hacker → say → criminals
The scheme allegedly gave co conspirators access to victims’ banking information and enabled fraudulent wire transfers.
uncertain
scheme → give → transfers
Three identified victims faced a combined intended loss of at least $593,963, according to court records and the US Department of Justice.
uncertain
victims → identify → Justice
As reported by AOL, former Oregon AT&T worker Kenneth Carter was sentenced to 16 months in federal prison and ordered to pay $99,528 in restitution after pleading guilty to conspiracy charges.
asserted
Carter → report → charges
How SIM swapping worksA SIM swap occurs when a mobile phone number is moved from the legitimate customer’s SIM card to a different SIM card controlled by someone else.
asserted
number → worksA → someone
Once the transfer is completed, calls and text messages intended for the victim can reach the criminal’s device instead.
asserted
calls → complete → device
That can be especially damaging when a bank sends password reset links or security codes by text message.
asserted
bank → send → message
If a criminal already has personal information about the account holder, control of the phone number may provide the final step needed to enter an online bank account.
uncertain
control → have → account
The attacker can then change passwords, intercept verification messages and attempt to move money.
SIM swapping does not necessarily require sophisticated hacking in the traditional sense.
asserted
swapping → change → sense
Often, the criminal relies on social engineering, stolen personal information or help from someone inside a telecommunications company.
asserted
criminal → rely → company
An employee with access to customer accounts may be able to make changes that an ordinary outsider could not.
uncertain
outsider → make → changes
That insider access is what made the alleged scheme particularly serious.
asserted
scheme → make → ?
According to prosecutors, Carter did not merely provide information.
uncertain
Carter → accord → information
He used his position at an AT&T store to carry out unauthorised changes on customer accounts.
asserted
He → use → accounts
The alleged role of the former employeeCarter, 44, of Portland, Oregon, worked at an AT&T retail store from May 2018 through November 2019.
uncertain
role → allege → November
Prosecutors said a co-conspirator identified potential victims, gathered personal identifying information and sent the details to Carter along with the victims’ cellphone numbers.
asserted
conspirator → say → numbers
Carter then allegedly used his employee access to cause AT&T to transfer each victim’s number from the legitimate SIM card to another phone controlled by him or his co conspirators.
uncertain
AT&T → use → him
The criminals could then receive texts and calls meant for the account holder.
uncertain
criminals → receive → holder
The co-conspirator allegedly used that control to obtain password reset information and two-factor authentication codes for online bank accounts.
uncertain
conspirator → use → accounts
Those details were then passed to another participant, who accessed the accounts and arranged fraudulent wire transfers.
asserted
who → pass → transfers
The indictment and plea materials describe a division of labour.
asserted
indictment → describe → labour
One person gathered information, Carter performed the telecommunications changes and other conspirators used the stolen access to target bank accounts.
asserted
conspirators → gather → accounts
Prosecutors said Carter and others typically received between $1,000 and $2,000 for each SIM swap.
asserted
Carter → say → swap
Nearly $600,000 in intended lossesThe case involved at least three identified victims, who prosecutors said faced a combined intended loss of $593,963.
asserted
prosecutors → intend → 593,963
One victim had nearly $100,000 transferred to a Portuguese bank account controlled by co-conspirators.
asserted
100,000 → have → conspirators
Carter was ordered to pay $99,528 in restitution connected to that loss.
asserted
Carter → order → loss
It refers to the amount the conspirators sought or attempted to steal, not necessarily the amount that successfully left every victim’s account.
asserted
that → refer → account
Prosecutors said fraud prevention systems at some banks stopped additional transfers before the money could be wired overseas.
uncertain
money → say → transfers
The alleged losses demonstrate why control of a mobile phone number can be so valuable to criminals.
asserted
control → allege → criminals
A phone number may serve as a gateway to accounts containing far more money than the cost of a phone plan or SIM card.
uncertain
number → serve → plan
Once the criminal intercepts security messages, the victim may find that familiar protections work against them.
uncertain
protections → intercept → them
The victim may still have a working phone, but it suddenly loses service when the number is transferred.
uncertain
number → have → service
In other cases, the change may not be immediately noticed, giving attackers time to reset passwords and initiate transfers.
uncertain
change → notice → transfers
Evidence found during the investigationIn November 2019, law enforcement searched Carter’s Oregon residence and found personal identifying information connected to victims, according to prosecutors.
uncertain
enforcement → find → prosecutors
The materials included names, cellphone numbers and Social Security numbers.
asserted
materials → include → names
The discovery helped connect the employee’s access to the broader conspiracy.
asserted
discovery → connect → conspiracy
Carter later admitted that he performed SIM swaps involving other AT&T customers beyond the three victims whose intended losses were detailed in the case.
asserted
losses → admit → case
The investigation involved several federal agencies, including the FBI, the FDIC Office of Inspector General and IRS Criminal Investigation.
asserted
investigation → involve → General
Their involvement reflected the case’s overlap between telecommunications fraud,
identity theft and bank fraud.
asserted
involvement → reflect → theft
…and 31 more, not listed.
