Polish authorities, with support from the FBI and HSI, have arrested four members of an organized cybercrime group suspected of conducting SIM-swapping attacks to steal cryptocurrency. The group allegedly breached telecommunications partners and hijacked email accounts to obtain data for SIM swaps, allowing them to take over victims' phone numbers, intercept SMS and emails, and gain control of crypto exchange accounts. According to the Polish Cybercrime Bureau (CBZC), the stolen funds, estimated in the tens of millions of Polish złoty (over $5 million), were laundered through a distributed financial network involving multiple bank accounts and digital wallets across countries. The suspects used specialized software and social engineering to gain unauthorized access to telecom infrastructure and employee emails. Blockchain investigator ZachXBT identified one of the arrested individuals as Wojtek Kulisz, aka "Merry." The four face charges of organized crime, hacking, and money laundering, with a maximum penalty of 25 years in prison.

Key facts

• Four arrests in Poland for SIM-swap attacks targeting crypto exchanges.
• Group used specialized software and social engineering to hack telecom partners.
• Over $5 million stolen and laundered through multi-country bank accounts and wallets.
• Suspects face charges of organized crime, hacking, and money laundering.
• Blockchain investigator ZachXBT identified one suspect as Wojtek Kulisz.