Nicholas Truglia Sentenced: From 18 Months to 12 Years — The SIM Swap Scammer Who Chose Luxury Over Restitution

Key Facts

• Nicholas Truglia, 27, was re-sentenced on July 10, 2025 by U.S. District Judge Alvin Hellerstein from 18 months to 12 years in federal prison — more than eight times his original sentence — for willfully failing to pay $20.4 million in restitution to his victim (Bloomberg / Cointelegraph, July 2025)
• Truglia's original sentence in December 2022 was premised on his promise to repay the full $20 million — a commitment that Judge Hellerstein determined he had no intention of honoring, noting at re-sentencing: "You paid not a cent, not one cent" (CryptoNews / Crypto.news, July 2025)
• At his original sentencing, Truglia was shown to hold assets worth $61,830,828.10 — including cryptocurrency, fine art, and jewelry — well above his restitution obligation, yet court records assert he made zero restitution payments (Cointelegraph / Bitdefender, July 2025)
• A court filing from April 2025 documented Truglia purchasing $92,000 in luxury goods — designer hoodies, watches, and sneakers — while making no restitution payments (The Block, July 2025)
• The "Perry Mason moment" at re-sentencing was the playing of a Vice on Showtime video in which Truglia, speaking in a masked voice, stated he would "still get to keep his stolen crypto even after being in prison for 10 years" — a statement Judge Hellerstein cited in his sentencing order (Cointelegraph, July 2025)
• The underlying crime was a 2018 SIM swap targeting crypto investor and Transform Group CEO Michael Terpin — draining $24 million from Terpin's accounts; Terpin also won a separate $75 million civil judgment against Truglia in 2019 (Cointelegraph / AInvest, July 2025)
• The 12-year sentence exceeds federal guidelines of 51–63 months by a significant margin — Truglia's attorneys called it "an extraordinary abuse of discretion" and confirmed plans to appeal (CryptoNews, July 2025)

Breaking: A federal judge just handed down the harshest sentence in U.S. history for a crypto SIM swap scammer — not because of the original crime, but because of what Nicholas Truglia did after the crime.

The $24 million theft happened in 2018. The guilty plea came in 2021. The 18-month sentence was handed down in 2022, premised on Truglia's solemn commitment in open court to repay his victim. Then came the designer hoodies, the luxury watches, the masked video boasting about keeping stolen crypto, and eventually the courtroom moment where Judge Hellerstein looked at a man who had owned over $61 million in assets and told him he had paid "not a cent, not one cent." The 12-year sentence that followed isn't just about Nicholas Truglia. It's a statement about what happens when the American legal system decides it has been deliberately deceived.

Signal 1 — The SIM Swap That Started Everything: How Truglia Stole $24 Million

The technical mechanism of Truglia's crime is worth understanding precisely — because SIM swapping remains one of the most active attack vectors against crypto holders in 2026, and the anatomy of the Terpin theft is the clearest case study in how it actually works.

SIM swapping exploits a vulnerability in mobile carrier authentication systems. When a phone number is "swapped" to a new SIM card — as happens legitimately when someone gets a new phone — the carrier verifies the transfer through employee-controlled processes. Truglia and his associates exploited a corrupt or manipulated telecom employee to transfer Michael Terpin's phone number to a SIM card under their control. Once that transfer was complete, they controlled Terpin's phone number.

Phone numbers are the backbone of most two-factor authentication systems. A user receiving a text code to verify a login assumes the code is going to their own device. Truglia's group now controlled where those texts went. With access to SMS verification, they could reset passwords on Terpin's email accounts, then use those email accounts to reset passwords on his cryptocurrency exchange accounts. The chain of authentication failures — each individually relying on security that had already been compromised — allowed the attackers to access and drain crypto accounts worth approximately $24 million.

Truglia's specific role was converting the stolen cryptocurrency into Bitcoin — the mixing and laundering step that transforms identifiable stolen assets into less traceable holdings. Other members of the broader operation managed the SIM swapping and account takeovers. The scheme was part of a wider campaign targeting investors in California's San Francisco Bay Area. Other named victims in the case included 0Chain CEO Saswatu Basu, SMBX co-founder Gabrielle Katsnelson, and hedge funder Myles Danielsen.

Terpin's response was unusually aggressive for a crypto theft victim. He filed a $224 million civil lawsuit against AT&T in 2018 for negligence — alleging his wireless carrier allowed the SIM swap to occur — a landmark case that highlighted carrier liability for SIM swap losses. He separately sued Truglia for $75 million and won a full civil judgment in 2019. By the time of Truglia's December 2022 criminal sentencing, Terpin had already secured the largest known civil judgment against a SIM swap attacker in history.

What This Means For You

• For active traders with significant crypto holdings, the Truglia case is the most detailed public documentation of how SIM swap attacks execute against crypto accounts. The attack chain — carrier compromise, phone number takeover, email reset, exchange account drain — is preventable at every step with hardware-based authentication rather than SMS-based 2FA.
• For long-term holders securing large positions, the specific vulnerability the attack exploited is still present in most mobile carrier systems. Any account using SMS-based authentication for login verification or password resets is theoretically vulnerable to a well-executed SIM swap regardless of how sophisticated the exchange's own security is.
• For newcomers, the practical security lesson from the Truglia case is direct: never use your phone number as a security factor for any crypto account. Use hardware keys, authenticator apps, or passkeys instead. Your phone number can be stolen from your carrier without any action on your part.

Signal 2 — The Re-sentencing: How $61 Million in Assets Became "Not a Cent" in Restitution

The judicial process between Truglia's December 2022 sentencing and his July 2025 re-sentencing is one of the most detailed public records of a crypto criminal attempting to hide assets while maintaining a luxury lifestyle — and being caught doing it.

At his 2022 sentencing, Truglia presented himself as a man prepared to make full restitution. He was given 60 days to pay $20,379,007. The court noted his asset portfolio: $61,830,828.10 in cryptocurrency, art, and jewelry — more than three times his restitution obligation. He agreed to pay. He was released after serving 12 months of his 18-month sentence, with three years of supervised release contingent on meeting his obligations.

He then paid nothing. In May 2023, he was re-arrested for allegedly violating supervised release terms — evidence had surfaced that he was moving crypto holdings and purchasing luxury goods rather than directing funds toward restitution. He was briefly released again in November 2024 after the judge allowed him to remain free conditional on payment commitments.

The April 2025 court filing that triggered the re-sentencing was stark. It documented $92,000 in luxury purchases — designer hoodies, watches, sneakers — at a time when he claimed inability to pay restitution. The court's framing in the sentencing order was precise: "Truglia's failure to give account to what he had and favoring his own indulgences over his obligation to pay is indicative of his intent never to pay his debt, his willfulness."

The "Perry Mason moment" that Terpin described at re-sentencing was a video played in court — footage from a Vice on Showtime documentary in which Truglia, speaking in a masked voice, stated he would be able to keep his stolen crypto even after serving 10 years in prison. The implication was explicit: he had calculated that the original sentence's sentence-to-remaining-wealth ratio favored serving time over paying restitution. That calculation, preserved on camera, destroyed any remaining argument that his failure to pay was circumstantial rather than deliberate.

Judge Hellerstein's language at sentencing reflected genuine judicial frustration: "You didn't have a job, but you lived in splendor." The 12-year sentence — exceeding federal guidelines of 51–63 months by nearly six years — reflected a court that had been systematically misled at the original sentencing and was imposing a penalty calibrated to that deliberate deception rather than the original guidelines.

What This Means For You

• For active traders following crypto crime enforcement, the Truglia re-sentencing establishes a significant precedent: restitution promises made at sentencing are enforceable obligations, and willful non-compliance can result in sentences that dramatically exceed original guidelines. The 8x sentence increase is the most visible example of this enforcement posture in crypto crime history.
• For long-term holders, the case illustrates the specific risk profile of holding large amounts of verifiably stolen crypto as leverage against prosecution — Truglia's apparent strategy of "serve the sentence, keep the crypto" was precisely what the re-sentencing dismantled. The 12-year term makes the mathematical calculation he articulated in the Vice video definitively wrong.
• For newcomers, the most instructive detail is the masked video itself. Truglia apparently assessed his situation and concluded that the original sentence was an acceptable cost of business compared to paying $20 million in restitution. The court's response was to make that calculation obsolete by restructuring the cost structure of crypto crime non-compliance.

Signal 3 — What the Truglia Sentence Means for the Broader Crypto Enforcement Landscape

The Truglia case doesn't exist in isolation — it arrives in a 2025–2026 enforcement environment that includes the Malone Lam syndicate's RICO prosecution, the Celsius/Mashinsky sentencing, and a DOJ increasingly applying traditional organized crime frameworks to crypto fraud.

The specific innovation in the Truglia re-sentencing is what Judge Hellerstein called "willful" non-compliance as a sentencing aggravator. Federal courts have long had the ability to re-sentence defendants who violate supervised release conditions, but the explicit framing of the re-sentencing as a response to deliberate deception of the court at the original hearing — backed by documentary evidence including the masked video — creates a template for courts to treat asset-hiding after crypto theft as an independent basis for dramatically extended incarceration.

Terpin himself described the re-sentencing as "a turning point in how the legal system views the theft of cryptocurrency." That framing is more accurate than it might initially appear. Crypto theft had historically been treated as a property crime with sentence guidelines calibrated around dollar amounts — not fundamentally different from conventional fraud. The Truglia case introduces a dimension that's specific to crypto's properties: the possibility that stolen assets held in inaccessible wallets represent a deliberate strategy to outlast prosecution rather than a genuine inability to repay. When courts respond to that strategy by imposing sentences that make the calculation economically irrational, the enforcement landscape changes for everyone who might otherwise consider it.

The appeal that Truglia's attorney Mark Gombiner confirmed — calling the sentence "an extraordinary abuse of discretion" — is the remaining legal question. Federal guidelines for the re-sentencing were 51–63 months. The 12-year sentence is 144 months. Whether the Second Circuit upholds that departure from guidelines as justified by the documented willfulness will determine whether the Truglia precedent is durable or an outlier.

What This Means For You

• For active traders watching crypto crime enforcement trends, the Truglia re-sentencing is part of a 2025 enforcement pattern that includes RICO charges for the Malone Lam syndicate, 25 years for SBF, and 12 years for Mashinsky. U.S. courts are calibrating crypto fraud sentences above the general financial fraud guidelines — and the Truglia case adds a specific aggravator for asset-hiding post-conviction.
• For long-term holders focused on ecosystem legitimacy, the enforcement arc from the 2022 FTX collapse through the 2025 wave of convictions represents the most sustained U.S. prosecution effort against crypto fraud in the industry's history. That prosecutorial intensity directly addresses the institutional adoption concern about legal accountability in crypto markets.
• For newcomers, the Truglia case is a useful reference for understanding that crypto crime victims do recover funds through civil courts — Terpin won a $75 million judgment — and that persistent legal pursuit over years can produce accountability even when initial sentences appear lenient. The 18-month to 12-year trajectory took three years, but it arrived.

How Different Investors Are Reading This

The Truglia re-sentencing is generating reactions across three distinct communities — each focused on a different aspect of the same case.

Crypto security professionals and SIM swap researchers are reading the Truglia case primarily as a validation of the severity of carrier-level authentication vulnerabilities. The $24 million theft occurred in 2018 — seven years ago — and many of the SMS-based authentication vulnerabilities it exploited remain present in mobile carrier systems today. The enforcement outcome provides deterrence for would-be SIM swap attackers but doesn't address the underlying security architecture. For this community, the most actionable takeaway from the Truglia case is the same message it's been delivering for seven years: hardware authenticators and phishing-resistant 2FA are the only reliable defenses against SIM swap attacks at this scale.

Crypto investors who experienced similar attacks are reading the re-sentencing through a restitution-recovery lens. Terpin's $75 million civil judgment, combined with the criminal court's $20.4 million restitution order, represents the largest attempted recovery from a SIM swap attack in legal history. The fact that Truglia successfully avoided paying restitution for three years — before the re-sentencing dramatically raised the cost of that strategy — is as significant as the eventual accountability. For investors who have suffered theft, the Truglia timeline demonstrates both the possibility and the difficulty of meaningful restitution recovery.

Legal scholars tracking crypto crime sentencing are focused on the guidelines departure. The 12-year sentence at more than twice the upper guideline range of 51–63 months reflects Judge Hellerstein's determination that the standard guideline calculation — which doesn't account for deliberate post-conviction asset hiding — was inadequate for the specific facts presented. Whether the Second Circuit ratifies that departure will determine whether the "willful non-payment as sentencing aggravator" theory becomes available to other courts prosecuting crypto theft defendants who hide assets against restitution obligations.

For those tracking SIM swap security threats, crypto crime enforcement developments, and the legal landscape for crypto theft restitution — BYDFi's platform offers integrated news alerts and security-focused market monitoring tools that support staying informed across both market and security developments.

Disclaimer: This article is for informational purposes only and does not constitute financial, investment, or trading advice. Cryptocurrency markets are highly volatile and unpredictable. Past performance is not indicative of future results. Always conduct your own research and consult a qualified financial advisor before making any investment decisions.

FAQ

Who is Nicholas Truglia and what did he do?

Nicholas Truglia is a New York-based man who, in 2018 at approximately 21 years old, participated in a SIM swap scheme targeting cryptocurrency investors in California's San Francisco Bay Area. His most significant victim was Michael Terpin — crypto investor and CEO of public relations company Transform Group — from whom Truglia's group stole approximately $24 million in cryptocurrency by transferring Terpin's phone number to a SIM card under their control, using that control to bypass two-factor authentication on his crypto accounts. Truglia's specific role was converting the stolen cryptocurrency into Bitcoin. Other victims included 0Chain CEO Saswatu Basu and SMBX co-founder Gabrielle Katsnelson. Truglia was arrested in the Bay Area in 2018, pleaded guilty in 2021 to conspiracy to commit wire fraud, and was sentenced in December 2022 to 18 months in prison with a $20.4 million restitution obligation. He was re-sentenced in July 2025 to 12 years after willfully failing to pay restitution.

Why was Truglia's sentence increased from 18 months to 12 years?

U.S. District Judge Alvin Hellerstein re-sentenced Truglia to 12 years in July 2025 after determining he had willfully failed to honor his restitution obligation of $20.4 million. At his original 2022 sentencing, Truglia had assets documented at over $61.8 million and promised to repay his victim — a promise that Judge Hellerstein acknowledged was the basis for the relatively lenient 18-month sentence. Truglia subsequently paid nothing toward restitution. Court filings documented $92,000 in luxury purchases — designer hoodies, watches, and sneakers — during the period of non-payment. A court-introduced video from a Vice on Showtime documentary showed Truglia speaking in a masked voice, stating he would be able to keep his stolen crypto even after serving prison time — evidence the judge cited as showing deliberate intent never to pay. "You paid not a cent, not one cent," Judge Hellerstein told Truglia at re-sentencing. "You didn't have a job, but you lived in splendor."

What is a SIM swap attack and how can crypto holders protect themselves?

A SIM swap attack exploits mobile carrier authentication systems to transfer a victim's phone number to a SIM card controlled by the attacker. Once the attacker controls the phone number, they can intercept SMS-based two-factor authentication codes, enabling them to reset passwords and gain access to email accounts, exchange accounts, and other services that use phone number verification. The attack requires either a corrupt or social-engineered telecom employee, making it a carrier-level vulnerability that cannot be addressed through individual user security practices alone. The most effective defenses for crypto holders are: removing phone numbers as authentication factors for all crypto-related accounts; using hardware security keys, authenticator apps, or passkeys instead of SMS codes; setting a PIN with your carrier that is required before any SIM changes; and using separate email addresses for crypto accounts that are not publicly associated with your identity.

Who is Michael Terpin and what happened to his stolen funds?

Michael Terpin is a blockchain investor and CEO of Transform Group, a cryptocurrency-focused public relations company. He lost approximately $24 million in cryptocurrency to Truglia's SIM swap attack in 2018. Terpin responded aggressively through multiple legal channels: he filed a $224 million lawsuit against AT&T in 2018 for negligence in allowing the SIM swap, a landmark case that highlighted carrier liability; he filed a $75 million civil lawsuit against Truglia and was awarded full damages by the court in 2019; and he pursued the criminal case through his cooperation with prosecutors, ultimately testifying at the July 2025 re-sentencing by phone. Despite the civil judgment, recovery of the actual stolen funds has been complicated by Truglia's claims that most of his crypto is held in inaccessible wallets. Terpin called the 12-year re-sentencing "a turning point in how the legal system views the theft of cryptocurrency."

What does Truglia's sentence mean for other crypto fraud defendants?

The Truglia re-sentencing establishes a significant precedent for how courts can respond when crypto fraud defendants make restitution promises at sentencing and then fail to honor them. The 12-year sentence exceeded federal guidelines of 51–63 months by nearly six years — a substantial departure that Judge Hellerstein justified on the basis of documented willful non-compliance, active asset hiding, and evidence of deliberate intent never to pay, including the masked video. For other defendants, the case signals that courts treating the original lenient sentence as exchanged for genuine restitution commitment will impose substantially harsher sentences when that exchange is dishonored. Truglia's attorneys have confirmed plans to appeal, arguing the re-sentencing was an "extraordinary abuse of discretion" and violated double jeopardy protections. The Second Circuit's ruling on that appeal will determine whether the "willful non-payment as independent sentencing aggravator" theory is broadly available to courts in other crypto fraud cases.