London SIM Swap Case: How a Phone Number Became a Key
Four people lost control of their phone numbers in one week. The text messages that protected their accounts started arriving on someone else's phone.
By Siddharth ShankarUpdated October 12, 2026City of London Police say a man was sentenced to two and a half years at Inner London Crown Court on October 8, 2026 for a SIM swap fraud from the first week of November 2021. Four victims' accounts were compromised, with losses of roughly £40,000, £17,000, £8,000 and £130,000. See what to do if your number leaks.
Scammers start with details that have already leaked. Is your email one of them?
Free · About 30 seconds · No sign-up · Email not stored
The case below is about a number most people treat as incidental: the phone number attached to their accounts. For the people in this case, losing control of it meant losing control of far more.
What happened
City of London Police say a man was sentenced to two and a half years at Inner London Crown Court after pleading guilty on September 28, 2026 to conspiracy to commit fraud by false representation and to transferring criminal property. The sentence was imposed on October 8, 2026.
Four victims' accounts were compromised in the first week of November 2021. City of London Police give losses of about £40,000, £17,000, £8,000 (on Coinbase) and £130,000. He was arrested in 2021 and again at Heathrow in October 2023. The money funded trips to Dubai and gold dental grills.
How it worked
Criminals moved victims' phone numbers to SIM cards they controlled and then intercepted the one-time codes sent by text. Those codes are what many banks and crypto platforms use to confirm a sign-in or a payment.
BT identified unauthorised activity on its systems, and data it provided helped police identify suspects, including the man who was sentenced. A detective described the offence as "a complex and calculated fraud."
What was exposed
What the thieves held was the victims' phone numbers, and with them the text messages that unlock accounts. The police release does not say how the criminals obtained the victims' personal data to make the requests to the phone company, and we do not guess.
How it ended
Like many cyber-enabled frauds, this one took years. The offences were in 2021, the second arrest in 2023, and the sentence in 2026. The sentence of two and a half years is a conviction, but it does not state that the victims were repaid. We found no report of recovery.
Your best defence is knowing what scammers may already have. Check your email free.
Free · About 30 seconds · No sign-up · Email not stored
A timeline of the case
The sequence runs across five years. The thefts happened in the first week of November 2021. The first arrest came in 2021, a second arrest at Heathrow followed in October 2023, a guilty plea came in September 2026 and the sentence followed on October 8, 2026.
The dates come from the City of London Police release. The detail worth taking from it is that the losses happened within days, while the justice process took years.
Key facts at a glance
- Sentence: two and a half years at Inner London Crown Court
- Offences: first week of November 2021
- Victims: four, with losses of about £40,000, £17,000, £8,000 and £130,000
- Method: numbers moved to SIM cards the criminals controlled
- Arrests: 2021 and again at Heathrow in October 2023
- Source: City of London Police release, October 2026
How to protect your number
1Ask your mobile provider for a number-port or SIM-change PIN
Many providers can add an extra passcode that is needed to move or replace your SIM.
2Use an authenticator app instead of text codes
App codes do not travel by phone number.
3Know the warning sign
If your phone suddenly loses service, contact your provider and bank immediately from another device.
4Reduce how easily your number can be found
What the police release does not say
The police release does not say how the criminals got victims' details or whether any money was returned. For the same crime in another country, see the Massachusetts SIM swap case.
Why this case matters
Phone numbers were designed to reach people, not to prove who they are. Over time, banks, exchanges and email providers began to use them as proof, because sending a code by text was cheap and easy. A SIM swap exploits that shortcut.
The case also shows the value of telecom-side evidence. BT's records of unauthorised activity helped police identify suspects. For the account holder, the lesson is to remove the single point of failure: move to an authenticator app where possible and ask your provider for a PIN so that a request to move your number needs more than a few personal details.
Your own exposure is the part you can still change. These guides cover what to do if your phone number was in a breach, what an exposed phone number means and how scammers find your phone number and email. You can also try our free phone number exposure check.
Sources
- City of London Police: SIM-swap fraudster jailed (sentence, plea, four victims and losses, arrests)
Frequently asked questions
What is a SIM swap?
A SIM swap moves your phone number to a SIM card controlled by a criminal, so they receive your calls and text messages, including one-time codes.
What sentence was given?
Two and a half years at Inner London Crown Court, according to City of London Police.
How much did victims lose?
The police release gives about £40,000, £17,000, £8,000 and £130,000 across four victims.
How can I avoid being SIM swapped?
Ask your provider for a port-out or SIM change PIN, use an authenticator app instead of SMS codes and act quickly if you lose signal.
See if your email has already leaked
- Checks your email against known data breaches
- Shows which sites leaked it, when, and what leaked
- We do not store the email you check
Get alerted when your email leaks
Every NordVPN plan includes Dark Web Monitor, which alerts you if your email appears in new leaks.
See NordVPN →Affiliate link. We may earn a commission at no extra cost to you.
Prefer a one-time report first? Scan My Shadow, our sister service, $9.99.