Following two arrests in April, the Halton Regional Police Service (HRPS) have arrested and laid multiple charges after an investigation into a SIM swap scam operating in Halton Region.
The HRPS Regional Fraud Unit began a three month long investigation labelled Project Buff back in February, where police identified a fraud network operating within Halton Region and the surrounding area.
As a result of the investigation into the SIM swap scam, two male suspects were arrested and charged with multiple offences last month.
Read more here: Two facing charges in Halton SIM swap scam investigation
Following up on investigative leads garnered from these arrests, a third suspect was identified and a search warrant sought.
A search warrant was executed at an apartment in Toronto two weeks ago, on Thursday, May 2, 2024. As a result of the search warrant, the following items were located and seized by police:
- 200 counterfeit identity documents (drivers licenses, SIN cards and birth certificates)
- Notebooks and portfolios containing personal identifying information
Investigators say they have identified 136 victims who had their identity compromised.
As a result of the investigation, Michael O’Hara (60), has been charged with the following:
- Fraud over $5,000 (three counts)
- Personation with intent (three counts)
- Possess counterfeit mark (three counts)
- Failure to comply with release order (three counts)
O’Hara has been released on an undertaking with an upcoming court date scheduled for May 21, 2024 in Milton.
Investigation is ongoing and further charges are anticipated.
Being aware of the scam
HRPS say that scammers are using SIM swapping and phone number porting to gain access to victim's emails, social media and financial accounts. From there, they can access your personal information and data.
With this information, they may:
- empty your bank accounts
- apply for credit in your good name
- impersonate you to defraud your entire contact list
In the event of a SIM swap, you will lose service to your mobile device (an indicator that your phone number has been ported). Once the fraudsters have access to your account, they will immediately begin resetting your passwords and gain knowledge of your security answers.
How it works
Your SIM card connects your phone number and mobile service to your mobile device. You connect dozens of your accounts to your mobile device through the use of applications. Most application logins are linked to your email address, phone number or both (if you setup two-factor authentication).
A fraudster will impersonate you to gain access to your mobile account and may claim that their phone has been lost or stolen. Your phone number will be linked to a new SIM and device that the fraudster controls.
The fraudster then downloads a series of the most popular and most attractive applications. They will select the 'Forgot Password' button on all applications. If an account is associated to your phone number or email address, the fraudster will receive a verification code. They will then use this code to confirm ownership of the account, create their own password and takeover the accounts.
Additional resources are also available online here.