Europol has dismantled a large cybercrime network that used mobile networks to carry out phishing attacks. These attacks targeted individuals for account theft, credential theft, and financial data theft. The group also ran investment scams and fake emergency schemes. Authorities linked the group to over 3,200 fraud cases with financial losses of around $5.3 million in Austria and $490,000 in Latvia.
The operation named "SIMCARTEL" led to the arrest of seven people and the seizure of 1,200 SIM box devices. These devices contained 40,000 active SIM cards that were used to carry out cyber crimes over telecom networks. According to officials the infrastructure was highly sophisticated and well run, allowing criminals to create fake accounts on social media and communication platforms.

The action took place on October 10 in Latvia, where authorities carried out 26 searches. During the operation, they seized hundreds of thousands of additional SIM cards, five servers, two websites, four luxury vehicles and $833,000 in bank and crypto addresses linked to the suspects.

The operation focused on two main websites, "GoGetSMS" and "APISIM" which provided temporary phone numbers from over 80 countries. These services helped criminals get around online verification steps, like SMS-based two-factor authentication (2FA). This made it easy for them to bypass phone verification systems used by banks, exchanges, and social media platforms, allowing them to quickly create fake accounts which would be used for things like phishing, smishing (SMS phishing), money laundering, extortion and crypto fraud.
Europol is still investigating the full scope of the cybercrime operation, but they have already traced the network to more than 49 million accounts created and used by the criminals. The services provided by the group were allegedly also used in extortion, migrant smuggling, and scams related to second-hand marketplaces, fake shops, and fake investment schemes.
This coordinated takedown highlights the growing global issue of SIM farms, which are large networks of SIM cards used to carry out and sell services for scams and various criminal activities through mobile network infrastructure. For example, last month, the U. S. Secret Service disrupted a network in New York City that involved more than 300 servers and 100,000 SIM cards across multiple sites in the region.
