POLAND — Polish authorities arrested four members of an organized cybercrime group involved in SIM-swapping attacks. The operation was conducted by the Polish Cybercrime Bureau (CBZC) with assistance from the FBI and Homeland Security Investigations (HSI).

The suspects face accusations of breaching telecommunications partners and hijacking email accounts to execute SIM-swapping attacks. The Polish Cybercrime Bureau stated, "Using specialized software and social engineering, the perpetrators gained unauthorized access to the infrastructure of entities cooperating with telecommunications operators and employee email accounts." The agency added that the data obtained enabled "so-called SIM swap attacks, which involve the illegal cloning and takeover of victims' phone numbers." The group hijacked victims' phone numbers, intercepted SMS messages and email communications, and subsequently gained control of accounts at cryptocurrency exchanges. Millions of U.S. dollars are estimated to have been stolen and laundered through a decentralized financial network. The bureau further stated, "It is estimated that the total value of the funds laundered in this manner exceeds several tens of millions of Polish złoty."

Polish authorities stated that the actors treated these activities as "a regular source of income," utilizing multiple bank accounts across various countries and digital wallets to transfer the stolen funds. The four arrested individuals have been placed in pre-trial detention. They face charges including participation in an organized criminal group, hacking into IT systems to commit theft, and money laundering. These offenses carry a maximum penalty of 25 years in prison. Blockchain crime investigator ZachXBT identified one of the arrested individuals as Wojtek Kulisz, also known as "Merry," based on images released by authorities following the police raid.

Why It Matters

The arrests reflect ongoing international efforts to combat SIM-swapping, a method cybercriminals use to bypass two-factor authentication and access sensitive financial and personal accounts. The involvement of the FBI and HSI alongside Polish authorities demonstrates cross-border collaboration in addressing sophisticated cybercrime operations. The estimated millions of U.S. dollars stolen and laundered illustrate the financial impact of such criminal enterprises.