Polish cybercrime investigators arrested four suspects accused of hijacking phone numbers, breaking into crypto exchange accounts and laundering large sums through bank accounts, payment platforms and digital wallets via SIM-swapping attacks

Key takeaways

• Polish cyber police arrested four alleged members of an organized cybercrime group.
• Investigators say the gang used SIM swapping to take over victims’ phone numbers and crypto accounts.
• The operation received support from FBI and Homeland Security Investigations agents.
• Suspects face charges tied to organized crime, hacking, theft and money laundering.

Poland’s Central Bureau for Combating Cybercrime says officers detained four people suspected of running a large operation built around SIM-swapping attacks, cryptocurrency theft and money laundering.

Investigators alleged the group broke into systems belonging to entities working with telecom operators and accessed employee email accounts. That data was then used to clone or take over victims’ phone numbers.

Crypto accounts became the prize

With control of a victim’s number, attackers could intercept SMS messages and emails, giving them a path into online accounts, including cryptocurrency exchange profiles. Once inside, they allegedly drained digital assets at scale.

Authorities estimate the laundered proceeds exceeded several tens of millions of Polish złoty. The money was reportedly moved through personal bank accounts in Poland and abroad, as well as international payment platforms and multi-currency digital wallets.

International support signals a wider case

The operation was carried out by Polish cybercrime officers with support from the FBI and Homeland Security Investigations, underscoring how SIM-swap and crypto-theft cases routinely cross borders.

The investigation is being supervised by the Regional Prosecutor’s Office in Kraków. The four suspects, held in pre-trial detention, face charges including participation in an organized criminal group, computer system break-ins and money laundering. If convicted, they could face up to 25 years in prison.

Why users should move beyond SMS security

SIM swapping remains dangerous because many accounts still treat a mobile number as proof of identity. Crypto investors, high-value social media users and anyone relying on SMS codes for account recovery should switch to app-based authentication, passkeys or hardware security keys wherever available.

To reduce exposure, users should also lock down email accounts, remove phone numbers from recovery flows when possible, and monitor whether personal data is circulating online. Bitdefender Digital Identity Protection can help users monitor exposed personal information, while Bitdefender Ultimate Security adds broader protection for devices, privacy, scams and identity risks.