Former AT&T store worker jailed after moonlighting as a SIM-swap gang’s inside man
A former AT&T retail worker, Kenneth Carter, was sentenced to prison for his role in a SIM swap scheme that targeted over 500,000 dollars in victims’ accounts. He used his insider knowledge to facilitate SIM swaps, allowing criminals to gain access to online banking and wire funds to Portugal. The case highlights the ease with which SIM swapping can be carried out and the importance of strengthening mobile security.
A 44-year-old Kenneth Carter from Portland, Oregon, has been sentenced to 16 months in a federal prison for his involvement in a SIM swap scheme. Carter, a former AT&T retail worker, exploited his access to customer information and store procedures to assist a group of criminals in hijacking mobile phone numbers.
Between May 2018 and November 2019, Carter facilitated SIM swaps, providing criminals with the ability to redirect victims’ phone numbers to SIM cards controlled by his co-conspirators. This allowed the gang to trigger password resets on online banking accounts and receive two-factor authentication codes, ultimately leading to the theft of over $593,963.77 from victims.
In one instance, a SIM swap at an AT&T store in Portland in December 2018 resulted in a successful theft of $99,528.33 from a victim known as "S.Q.T." The scheme involved multiple attempts to wire funds to bank accounts in Portugal. Investigators discovered that Carter possessed sensitive personal data belonging to the victims, including social security numbers, during a search of his home in November 2019.
The case highlights the relatively low technical skill required for SIM swapping – it primarily relies on social engineering and exploiting trust within a company. The delay in prosecution, spanning four years after the initial search, underscores the complexity of investigating and assembling evidence in these types of cases, particularly when some members of the conspiracy remain at large.
To mitigate the risk of SIM swapping, users are advised to utilize authentication apps or hardware keys and to require a PIN or passcode to prevent SIM changes.