How SIM swapping led to a $1.8M cyber fraud case

Fox News

10-05-2025

A San Fernando Valley, California, man has been sentenced to more than five years in federal prison after orchestrating a massive fraud operation that targeted dozens of victims, many of them elderly.
Oren David Sela, 36, stole mail, hijacked phone numbers through SIM swapping, and used victims' identities to drain bank accounts, stealing over $1.8 million.
Here is how the scheme worked and what you can do to avoid becoming a victim of a similar attack.
SIM swapping is a form of identity theft where a scammer tricks a mobile carrier into transferring your phone number to a new SIM card they control. Once they hijack your number, they can intercept text messages, including verification codes, and gain access to your bank accounts, emails and more.
There are two common ways scammers pull off SIM swaps:
Once they control your phone number, they can:
SIM swapping turns your phone number into a master key for stealing your identity and money.
Between November 2021 and October 2023, Sela stole mail from homes in Beverly Hills, California, and nearby neighborhoods. He collected personal information, including:
Using this information, Sela carried out SIM swapping attacks to bypass two-factor authentication (2FA) protections. This allowed him to:
Sela made hundreds of fraudulent withdrawals and transfers. He attempted to steal nearly $2.6 million and successfully stole at least $1.8 million.
Sela often spent the stolen money on luxury goods, including a nearly $17,000 watch. In 2022, he was arrested in Beverly Hills and found with nearly $25,000 in cash, various pieces of expensive jewelry, and numerous fraudulent debit and credit cards belonging to elderly victims. Despite this arrest, Sela continued committing fraud. During two subsequent searches of his properties in 2022 and 2023, law enforcement discovered more than $70,000 in cash, stolen mail, fraudulent identification documents, and banking information linked to dozens of victims.
In October 2024, Sela pleaded guilty to bank fraud and aggravated identity theft. On April 22, 2025, he was sentenced to 61 months in federal prison and ordered to pay $1,818,369 in restitution.
Two-factor authentication provides an extra layer of security, but it is only effective if the attacker cannot access your phone. When scammers hijack your phone number, they can intercept 2FA codes sent by text and quickly take control of your accounts. Once inside your email or banking app, they can:
They do not even need your password if they can control your number.
Take these important steps to secure your information:
1. Monitor your accounts: Regularly review your bank statements, credit card statements, and financial accounts for unauthorized activity. Report any suspicious transactions immediately.
2. Lock your SIM card: Set a PIN on your SIM card through your mobile carrier. Without it, your number cannot be moved without your permission.
3. Be cautious about sharing personal information: Limit the amount of personal information you share online, especially on social media. Scammers often use small details like birthdays, pet names, or locations to guess security questions or impersonate you.
4. Place a fraud alert: Contact one of the three major credit bureaus (Equifax, Experian, or TransUnion) and request a fraud alert. This makes it harder for identity thieves to open new accounts in your name.
5. Check your credit reports: Obtain free copies of your credit reports and review them carefully for suspicious activity. If you find errors or signs of fraud, report them right away.
6. Freeze your credit: A credit freeze prevents new accounts from being opened in your name without your consent. It is free to set up and does not affect your credit score.
7. Use an authenticator app, not SMS for two-factor authentication: Use apps like Microsoft Authenticator or Google Authenticator instead of relying on text message codes, which can be intercepted if your phone number is stolen.
8. Strengthen your passwords: Create strong, unique passwords for each account. Consider using a password manager to generate and store complex passwords securely. Get more details about my best expert-reviewed Password Managers of 2025 here.
9. Invest in identity theft protection: Identity Theft companies can monitor personal information like your Social Security Number (SSN), phone number, and email address and alert you if it is being sold on the dark web or being used to open an account. They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals. See my tips and best picks on how to protect yourself from identity theft.
10. Be cautious of phishing attempts and use strong antivirus software: Watch out for emails, texts, or calls asking for personal information. Always verify the source before providing sensitive details. Installing antivirus software on all your devices can help protect you by blocking malicious links, detecting phishing attempts, and stopping malware before it can steal your private information. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.
If scammers can steal your phone number, they can steal your money, your accounts, and even your identity. SIM swapping is a serious threat because it gives criminals a shortcut around your strongest defenses. Take action today to protect your phone, your accounts, and your personal information. A few small steps can make the difference between staying safe and facing a devastating financial loss.
Have you ever been targeted by a SIM swapping scam or identity theft? Let us know by writing us at Cyberguy.com/Contact
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter
Follow Kurt on his social channels:
Answers to the most-asked CyberGuy questions:
New from Kurt:
Copyright 2025 CyberGuy.com. All rights reserved.