A Massachusetts man has pleaded guilty to running a scheme to take over people’s social media accounts and steal hundreds of thousands of dollars in cryptocurrency, the Department of Justice (DOJ) stated on April 29.
Meiggs and his accomplices targeted people who they believed held significant amounts of cryptocurrency and “those who had high value or ‘OG’ (slang for ‘original gangster’) social media account names,” the statement said.
The scam involved convincing the victims’ cellphone carrier to reassign their phone number from the SIM card of the victim to a SIM card in a phone controlled by Meiggs and his co-conspirators. They would then pose as the victims when contacting online account providers to reset log-in credentials, using those to “hack into” the accounts.
“Using an illegal practice known as ‘SIM-swapping,’ Meiggs and others conspired to hack into and take control of these victims’ online accounts to obtain things of value, including OG social media account names and cryptocurrency,” the statement said.
At least 10 people fell prey to the hustle, the DOJ stated.
“Members of the conspiracy stole, or attempted to steal, more than $530,000 in cryptocurrency from these victims. Meiggs also took control of two victims’ ‘OG’ accounts with social media companies.”
Meiggs pleaded guilty to seven counts, including conspiracy, wire fraud, computer fraud and abuse, and aggravated identity theft—crimes for which he faces a mandatory minimum sentence of two years in jail. He is scheduled to be sentenced on Sept. 15.
Once Clark accessed the accounts, he shared a link to a bitcoin address on Twitter and wrote, “All bitcoin sent to our address below will be sent back to you doubled!” prompting a number of people to send in cryptocurrency in hopes of a quick profit.
“Instead, Clark kept the money,” the state attorney’s office wrote, adding that the so-called Bit-Con grift netted him more than $117,440. The money was seized by law enforcement and is expected to be returned to the rightful owners.
The incident represented an embarrassing security breach for Twitter, which was forced to suspend all verified accounts from sending tweets for several hours while it scrambled to secure the platform.