![\"A](\"https:\/\/static.toiimg.com\/thumb\/msid-134058626,imgsize-57759,width-400,height-225,resizemode-4\/sims.jpg\" "\\"Representative")
<\/div>\n<\/div>\n<\/div>\n<\/section>\n<\/div><\/div>\n<\/div>\nA cellphone number can appear to be a simple way to reach someone, but it is also often tied to bank accounts, password resets and two factor authentication. Federal prosecutors say a former AT&T retail employee exploited that connection by helping a hacker transfer customers\u2019 phone numbers to devices controlled by criminals. The scheme allegedly gave co conspirators access to victims\u2019 banking information and enabled fraudulent wire transfers. Three identified victims faced a combined intended loss of at least $593,963, according to court records and the US Department of Justice. As reported by AOL, former Oregon AT&T worker Kenneth Carter was sentenced to 16 months in federal prison and ordered to pay $99,528 in restitution after pleading guilty to conspiracy charges.How <\/span>SIM swapping<\/span> works<\/span>A SIM swap occurs when a mobile phone number is moved from the legitimate customer\u2019s SIM card to a different SIM card controlled by someone else. Once the transfer is completed, calls and text messages intended for the victim can reach the criminal\u2019s device instead.That can be especially damaging when a bank sends password reset links or security codes by text message. If a criminal already has personal information about the account holder, control of the phone number may provide the final step needed to enter an online bank account. The attacker can then change passwords, intercept verification messages and attempt to move money.SIM swapping does not necessarily require sophisticated hacking in the traditional sense. Often, the criminal relies on social engineering, stolen personal information or help from someone inside a telecommunications company. An employee with access to customer accounts may be able to make changes that an ordinary outsider could not.That insider access is what made the alleged scheme particularly serious. According to prosecutors, Carter did not merely provide information. He used his position at an AT&T store to carry out unauthorised changes on customer accounts.The alleged role of the former employee<\/span>Carter, 44, of Portland, Oregon, worked at an AT&T retail store from May 2018 through November 2019. Prosecutors said a co-conspirator identified potential victims, gathered personal identifying information and sent the details to Carter along with the victims\u2019 cellphone numbers.Carter then allegedly used his employee access to cause AT&T to transfer each victim\u2019s number from the legitimate SIM card to another phone controlled by him or his co conspirators. The criminals could then receive texts and calls meant for the account holder.The co-conspirator allegedly used that control to obtain password reset information and two-factor authentication codes for online bank accounts. Those details were then passed to another participant, who accessed the accounts and arranged fraudulent wire transfers.The indictment and plea materials describe a division of labour. One person gathered information, Carter performed the telecommunications changes and other conspirators used the stolen access to target bank accounts. Prosecutors said Carter and others typically received between $1,000 and $2,000 for each SIM swap.Nearly $600,000 in intended losses<\/span>The case involved at least three identified victims, who prosecutors said faced a combined intended loss of $593,963. One victim had nearly $100,000 transferred to a Portuguese bank account controlled by co-conspirators. Carter was ordered to pay $99,528 in restitution connected to that loss.The term \u201cintended loss\u201d is important in federal cases. It refers to the amount the conspirators sought or attempted to steal, not necessarily the amount that successfully left every victim\u2019s account. Prosecutors said fraud prevention systems at some banks stopped additional transfers before the money could be wired overseas.The alleged losses demonstrate why control of a mobile phone number can be so valuable to criminals. A phone number may serve as a gateway to accounts containing far more money than the cost of a phone plan or SIM card. Once the criminal intercepts security messages, the victim may find that familiar protections work against them.The victim may still have a working phone, but it suddenly loses service when the number is transferred. In other cases, the change may not be immediately noticed, giving attackers time to reset passwords and initiate transfers.Evidence found during the investigation<\/span>In November 2019, law enforcement searched Carter\u2019s Oregon residence and found personal identifying information connected to victims, according to prosecutors. The materials included names, cellphone numbers and Social Security numbers.The discovery helped connect the employee\u2019s access to the broader conspiracy. Carter later admitted that he performed SIM swaps involving other AT&T customers beyond the three victims whose intended losses were detailed in the case.The investigation involved several federal agencies, including the FBI, the FDIC Office of Inspector General and IRS Criminal Investigation. Their involvement reflected the case\u2019s overlap between telecommunications fraud, identity theft<\/a> and bank fraud.After the investigation, Carter pleaded guilty on March 24, 2026, to one count of conspiracy to commit wire fraud and bank fraud. A federal judge later sentenced him to 16 months in prison and ordered restitution, as per the report.A breach of trust<\/span>Prosecutors described the conduct as an abuse of employer trust. Carter\u2019s access existed so he could serve legitimate customers, but authorities said he sold that access to a hacker and used it to redirect customers\u2019 phone numbers.The case highlights a difficult security problem for telecommunications companies. Employees need enough access to resolve account issues, activate devices and make authorised changes. At the same time, that access can become dangerous if internal controls are weak or if employees cooperate with criminals.Companies can reduce the risk through stronger identity verification, detailed audit logs, limits on employee privileges and alerts for unusual account changes. A SIM transfer involving a high value customer account or a recent password reset may deserve additional review. Employee training and background checks can also play a role, although no single measure eliminates insider threats.For customers, the incident is a reminder that mobile carrier accounts should be treated as part of financial security, not merely as communication services.Why text message security can fail<\/span>Many people use text messages for two-factor authentication because they are convenient. A code sent by text is safer than a password alone, but it depends on the phone number remaining under the customer\u2019s control. A successful SIM swap breaks that assumption.Security specialists often recommend using an authentication app or a physical security key for important accounts when those options are available. Customers can also ask their carrier about account PINs, port out protections and alerts for SIM changes. These controls may make it harder for an attacker to move a number without the account holder\u2019s knowledge.No security method is perfect, especially when criminals possess personal information from data breaches or social media. However, using stronger authentication can reduce the damage if a phone number is stolen.Customers should also respond quickly to warning signs. Sudden loss of mobile service, unexpected password reset messages, banking alerts or unfamiliar transactions should be treated seriously. Contacting the mobile carrier and financial institution through verified channels can help limit further loss.The lasting lesson<\/span>The alleged scheme shows how cybercrime can combine human access with ordinary digital tools. The criminals did not need to break through every layer of a bank\u2019s security system if they could first take control of the victim\u2019s phone number. An insider at a telecommunications store made that step possible.For the victims, the consequences extended beyond financial loss. A stolen phone number can expose private messages, disrupt access to email and social accounts, and create weeks or months of recovery work. For employers, the case demonstrates why access must be monitored even when employees are authorised to use the system.Carter\u2019s sentence closes one part of the case, but the broader risk remains. As more financial services rely on mobile numbers for identity verification, SIM swapping will continue to attract criminals. The best defence combines carrier safeguards, stronger account authentication, bank fraud monitoring and careful protection of personal information.<\/div>\n A cellphone number can appear to be a simple way to reach someone, but it is also often tied to bank accounts, password resets and two factor authentication. Federal prosecutors say a former AT&T retail employee exploited that connection by helping a hacker transfer customers\u2019 phone numbers to devices controlled by criminals. The scheme allegedly […]<\/p>\n","protected":false},"author":1,"featured_media":22916,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-22915","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-31"],"magazineBlocksPostFeaturedMedia":{"thumbnail":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/09\/sims.jpg","medium":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/09\/sims.jpg","medium_large":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/09\/sims.jpg","large":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/09\/sims.jpg","1536x1536":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/09\/sims.jpg","2048x2048":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/09\/sims.jpg","blogsy-small":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/09\/sims.jpg","blogsy-small-tall":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/09\/sims.jpg","blogsy-small-square":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/09\/sims.jpg","blogsy-small-masonry":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/09\/sims.jpg","blogsy-medium":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/09\/sims.jpg","blogsy-medium-masonry":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/09\/sims.jpg","blogsy-large":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/09\/sims.jpg","blogsy-wide":"https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/09\/sims.jpg"},"magazineBlocksPostAuthor":{"name":"admin","avatar":"https:\/\/secure.gravatar.com\/avatar\/8709732a479614e7a8aa24d3eb1b239f30dc6d90c61464ed495001e7a469d856?s=96&d=mm&r=g"},"magazineBlocksPostCommentsNumber":"0","magazineBlocksPostExcerpt":"A cellphone number can appear to be a simple way to reach someone, but it is also often tied to bank accounts, password resets and two factor authentication. Federal prosecutors say a former AT&T retail employee exploited that connection by helping a hacker transfer customers\u2019 phone numbers to devices controlled by criminals. The scheme allegedly […]","magazineBlocksPostCategories":["\u0b26\u0b47\u0b36 \u0b2c\u0b3f\u0b26\u0b47\u0b36"],"magazineBlocksPostViewCount":1,"magazineBlocksPostReadTime":7,"magazine_blocks_featured_image_url":{"full":["https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/09\/sims.jpg",400,225,false],"medium":["https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/09\/sims.jpg",300,169,false],"thumbnail":["https:\/\/koshalsambada.in\/wp-content\/uploads\/2026\/09\/sims.jpg",150,84,false]},"magazine_blocks_author":{"display_name":"admin","author_link":"https:\/\/koshalsambada.in\/author\/admin"},"magazine_blocks_comment":0,"magazine_blocks_author_image":"https:\/\/secure.gravatar.com\/avatar\/8709732a479614e7a8aa24d3eb1b239f30dc6d90c61464ed495001e7a469d856?s=96&d=mm&r=g","magazine_blocks_category":"\u0b26\u0b47\u0b36 \u0b2c\u0b3f\u0b26\u0b47\u0b36<\/a>","_links":{"self":[{"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/posts\/22915","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=22915"}],"version-history":[{"count":0,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/posts\/22915\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=\/wp\/v2\/media\/22916"}],"wp:attachment":[{"href":"https:\/\/koshalsambada.in\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=22915"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=22915"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/koshalsambada.in\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=22915"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"