Toronto Police detain 10 individuals after probing ‘SIM Swap’ fraud scheme
Toronto Police Service (TPS) has apprehended 10 individuals and brought forth over 100 accusations in a significant “SIM swap” scam investigation.
SIM swapping is characterized by an individual seizing control of a victim’s cellphone number by exploiting vulnerabilities in two-factor authentication. The culprit typically contacts the victim’s mobile service provider and persuades them to believe they are a legitimate customer. They then replace the SIM card linked to their account, enabling the wrongdoer to access the phone and receive SMS messages for password retrieval or modifications. They can also infiltrate social media profiles, bank accounts, and email accounts.
According to TPS, over 1,500 mobile accounts nationwide were breached, resulting in a collective loss exceeding $1 million for individuals, telcos, and financial institutions.
“In this ploy, perpetrators compromised an unwary victim’s cellphone by swapping the associated SIM card, either by impersonating the customer at a cell store or gaining unauthorized access to the accounts,” explained Detective David Coffey from the Financial Crimes Unit during the briefing.
The investigation commenced in June 2023 following reports filed by multiple telecom companies with the police.
Related Stories
TPS reveals that they executed several search warrants in the investigation, uncovering over 400 counterfeit identifications.
In numerous instances, suspects would impersonate victims at multiple locations using fake IDs, as per police reports.
“Often, they would then use the same identification at the victim’s banking institutions to take control of their accounts,” stated Coffey.
In other scenarios, perpetrators employed phishing tactics involving deceptive web links and sites.
- Noah Ibgui, 24, charged with various offenses including fraud over $5,000, intercepting private communication, fraudulently obtaining computer service, and mischief to computer data;
- Many other individuals are being sought in connection with the case.
Understanding SIM Swap Strategies
Det.-Const. Michael Gow clarified that SIM swapping revolves around digital identity theft rather than physically removing someone’s SIM card.
He explained, “They’re capable of convincing telecommunication companies that they are indeed the targeted customer. Subsequently, they leverage that customer’s data, circumvent security measures, and seize control of the phone number instructing the communication company to transfer the specific customer’s number to the SIM card in their possession.”
According to Gow, fraudsters then utilize the phone number to bypass someone else’s two-factor verification.
He mentioned, “They attempt to access services like their email, triggering the ‘Forgot My Password’ process. The one-time verification code intended for email account access is then forwarded to the criminals instead of the rightful recipients.”
Gow highlighted that victims often have minimal warning of the crime, except for the presence of an SOS indicator on their phone.
“All they see is SOS displayed in the top right corner of the phone. This signifies a SIM card in their phone with no signal transmission. Consequently, the victims remain unaware of the unfolding events,” added Gow.
Guidelines to Safeguard Against SIM Swapping
TPS outlined preventive measures for Canadians to shield themselves against SIM swapping:
Familiarize Yourself with Your Online Presence
Gow emphasized that offenders track individuals online to select potential targets.
He stated, “They’re seeking vulnerable targets where they can extract more gains… almost like cyberstalking in advance. Once they gather sufficient intel, they execute their plan.”
Gow further advised, “The more personal information you disclose online, the higher the risk of impersonation by fraudsters.”
Comprehend Privacy Settings
In addition to restricting online posts, exercising caution while disclosing personal information is crucial. Gow cautioned against responding to internet surveys or queries that solicit personal data like familial names or pet names.
“Always question the source when providing such details,” Gow advised.
He recommended avoiding such online surveys and exclusively answering inquiries from reputable sources.
Stay Alert
TPS underlined that many individuals might not recognize instances of SIM swapping and fail to report such incidents.
Gow commented, “This crime often goes unreported, and our aim is to change that by educating the public.”
He pointed out that if individuals notice the SOS indicator on their phone while being in close proximity to cell towers, such as in downtown Toronto, it serves as a warning sign.
Avoid 2-Step Verification
It is advisable to refrain from utilizing phone number-based two-step verification.
“If feasible, disable this option and opt for alternative authentication methods like Google Authenticator or Microsoft Authenticator,” recommended Gow.
