SIM-Swapper from Scattered Spider Sentenced to 10 Years in Prison

A 21-year-old man from Palm Coast, Florida, has been sentenced to 10 years in federal prison for his role in the cybercrime group known as "Scattered Spider." Noah Michael Urban was also ordered to pay approximately $13 million in restitution to the victims of his crimes.

Understanding SIM-Swapping Attacks

SIM-swapping is a cybercrime technique where attackers exploit vulnerabilities in mobile networks to gain control of a victim’s phone number. This often involves convincing a mobile carrier to transfer the victim's phone number to a SIM card that the attacker controls. Once in possession of the phone number, attackers can intercept calls and text messages, which can lead to identity theft, unauthorized access to financial accounts, and other serious crimes.

The Criminal Activities of Noah Urban

In April 2025, Urban pleaded guilty to charges of wire fraud and conspiracy. Prosecutors detailed how he collaborated with others in Scattered Spider to steal over $800,000 from five different victims through SIM-swapping attacks. These attacks not only resulted in significant financial losses for the victims but also highlighted the serious risks associated with mobile security vulnerabilities.

The Legal Consequences and Restitution

The federal court's decision to impose a 10-year prison sentence on Urban reflects the severity of his actions. In addition to his prison term, Urban is required to pay restitution of around $13 million to compensate victims for their losses. This case serves as a warning to others involved in cybercrime, illustrating that law enforcement is committed to holding perpetrators accountable.

Implications for Cybersecurity

As incidents of SIM-swapping continue to rise, it is crucial for individuals to take proactive measures to secure their personal information and mobile accounts. Here are some tips to enhance your mobile security:

• Enable Two-Factor Authentication (2FA): Use 2FA wherever possible, especially for sensitive accounts. This adds an extra layer of security by requiring a second form of verification.
• Contact Your Carrier: Inquire if your mobile carrier offers additional security measures for your account, such as a PIN or passphrase.
• Monitor Account Activity: Regularly check your bank and credit accounts for unauthorized transactions.
• Be Cautious with Personal Information: Limit the amount of personal information you share online, as attackers can use this information for social engineering attacks.

Conclusion

Noah Michael Urban's case is a stark reminder of the ongoing threats posed by cybercriminals. As technology evolves, so do the tactics used by these criminals. By staying informed and taking appropriate security measures, individuals can better protect themselves from SIM-swapping and other cyber threats.