Justice Served: SIM-Swapper from Scattered Spider Sentenced to 10 Years

Noah Michael Urban, a member of the Scattered Spider cybercrime group, has been sentenced to 10 years in prison for his role in a series of SIM-swapping attacks that defrauded victims of over $800,000. This case underscores the importance of mobile security and the legal repercussions of cybercrime.

SIM-Swapper from Scattered Spider Sentenced to 10 Years in Prison

A 21-year-old man from Palm Coast, Florida, has been sentenced to 10 years in federal prison for his role in the cybercrime group known as "Scattered Spider." Noah Michael Urban was also ordered to pay approximately $13 million in restitution to the victims of his crimes.

Understanding SIM-Swapping Attacks

SIM-swapping is a cybercrime technique where attackers exploit vulnerabilities in mobile networks to gain control of a victim’s phone number. This often involves convincing a mobile carrier to transfer the victim's phone number to a SIM card that the attacker controls. Once in possession of the phone number, attackers can intercept calls and text messages, which can lead to identity theft, unauthorized access to financial accounts, and other serious crimes.

The Criminal Activities of Noah Urban

In April 2025, Urban pleaded guilty to charges of wire fraud and conspiracy. Prosecutors detailed how he collaborated with others in Scattered Spider to steal over $800,000 from five different victims through SIM-swapping attacks. These attacks not only resulted in significant financial losses for the victims but also highlighted the serious risks associated with mobile security vulnerabilities.

The Legal Consequences and Restitution

The federal court's decision to impose a 10-year prison sentence on Urban reflects the severity of his actions. In addition to his prison term, Urban is required to pay restitution of around $13 million to compensate victims for their losses. This case serves as a warning to others involved in cybercrime, illustrating that law enforcement is committed to holding perpetrators accountable.

Implications for Cybersecurity

As incidents of SIM-swapping continue to rise, it is crucial for individuals to take proactive measures to secure their personal information and mobile accounts. Here are some tips to enhance your mobile security:

  • Enable Two-Factor Authentication (2FA): Use 2FA wherever possible, especially for sensitive accounts. This adds an extra layer of security by requiring a second form of verification.
  • Contact Your Carrier: Inquire if your mobile carrier offers additional security measures for your account, such as a PIN or passphrase.
  • Monitor Account Activity: Regularly check your bank and credit accounts for unauthorized transactions.
  • Be Cautious with Personal Information: Limit the amount of personal information you share online, as attackers can use this information for social engineering attacks.

Conclusion

Noah Michael Urban's case is a stark reminder of the ongoing threats posed by cybercriminals. As technology evolves, so do the tactics used by these criminals. By staying informed and taking appropriate security measures, individuals can better protect themselves from SIM-swapping and other cyber threats.

An Oregon man has been charged with operating the 'Rapper Bot' botnet, implicated in various DDoS attacks, including a major incident that took Twitter/X offline in March 2025. This case highlights the growing threat of DDoS services rented out by cybercriminals and the continuous battle against online extortion.

Read more

Noah Michael Urban, a 21-year-old from Florida, was sentenced to 10 years in prison for his involvement in SIM-swapping attacks as part of the Scattered Spider cybercrime group. This case sheds light on the dangers of such cybercrimes and emphasizes the importance of robust cybersecurity measures to protect personal information.

Read more

Noah Michael Urban, a 21-year-old from Florida, was sentenced to 10 years in prison for his involvement in the Scattered Spider cybercrime group, which executed SIM-swapping attacks that defrauded victims of over $800,000. This article explores the implications of such cybercrimes and offers tips on how to protect against similar threats.

Read more