Europol Dismantles SIM Farm Network Behind 49 Million Fake Accounts

Operation SIMCARTEL SIM farm network Europol cybercrime SIM-box scam phishing investment fraud
Edward Zhou
Edward Zhou

CEO & Co-Founder

 
October 21, 2025
2 min read

TL;DR

  • Europol's Operation SIMCARTEL has dismantled a global SIM farm network that enabled cybercriminals to create over 49 million fake online accounts. This network facilitated phishing, smishing, and investment fraud, impacting thousands of victims worldwide with millions in financial losses. The operation resulted in seven arrests and the seizure of substantial assets, including SIM-box devices, servers, luxury vehicles, and cryptocurrency.

Operation SIMCARTEL Dismantles Massive SIM Farm Network

Europol's Operation SIMCARTEL dismantled a global SIM-box scam network spanning Austria, Estonia, Finland, and Latvia. This operation targeted a cybercrime-as-a-service (CaaS) platform facilitating various crimes, including phishing and investment fraud. The coordinated effort involved 26 searches, resulting in seven arrests.

Operation Simcartel

Image courtesy of Europol

Seizures and Arrests

During the raids conducted on October 10, 2025, law enforcement seized approximately 1,200 SIM-box devices containing 40,000 active SIM cards. Five servers supporting the criminal infrastructure were also dismantled. Additionally, authorities seized four luxury vehicles and froze €431,000 ($502,000) in bank accounts and €266,000 ($310,000) in cryptocurrency accounts belonging to the suspects. Two websites, gogetsms.com and apisim.com, which advertised the illegal service, were taken over and now display seizure banners. Five of the seven arrested suspects are Latvian nationals. Latvian authorities shared footage of a raid showing computer hardware and large quantities of SIM cards.

Criminal Network and Impact

The criminal network facilitated the creation of over 49 million fake online accounts. These accounts were used for various cybercrimes, including phishing, smishing, and financial fraud. The network offered phone numbers registered to individuals from over 80 countries, enabling criminals to obscure their identities and locations. The platform was designed for anonymous communication and payments, impacting at least 3,200 victims across multiple countries. Europol believes that the criminal enterprise offered phone numbers registered to people from more than 80 countries.

Financial Losses and Fraud Cases

The SIM farm has been linked to over 1,700 cyber fraud cases in Austria and 1,500 in Latvia. These cases resulted in financial losses of approximately €4.5 million ($5.25 million) in Austria and €420,000 ($489,000) in Latvia. The criminal network enabled a multitude of serious crimes, including fraud on online second-hand marketplaces, investment fraud, and fake bank websites. Total losses are counted in the millions, with financial loss just in Austria amounting to roughly €4.5 million. In Latvia, it was around €420,000. Europol and Latvian authorities estimated that the “sophisticated” SIM-box service enabled 49 million fake online accounts.

Services Offered and User Complaints

GoGetSMS was marketed as a way to obtain "fast and secure temporary phone numbers." The service offered over 10 million numbers to receive verification codes from over 160 online services. It also offered a way to monetize existing SIM cards by turning them into "powerful assets for generating passive income." Users on Trustpilot complained about issues with obtaining temporary numbers and unresponsive customer support.

Edward Zhou
Edward Zhou

CEO & Co-Founder

 

CEO & Co-Founder of Gopher Security, leading the development of Post-Quantum cybersecurity technologies and solutions.

Related News

NIST Standards Drive 2026 Mandates for Securing AI Infrastructure and Model Context Protocol Deployments
NIST AI Risk Management Framework

NIST Standards Drive 2026 Mandates for Securing AI Infrastructure and Model Context Protocol Deployments

Prepare for 2026 NIST AI mandates. Learn how to secure autonomous agents and Model Context Protocol (MCP) deployments against evolving enterprise security threats.

By Alan V Gutnov June 11, 2026 6 min read
common.read_full_article
Active Directory Certificate Services Now Supports Post-Quantum Cryptography for Windows Environments
Post-Quantum Cryptography AD CS

Active Directory Certificate Services Now Supports Post-Quantum Cryptography for Windows Environments

Microsoft adds Post-Quantum Cryptography (PQC) to AD CS. Learn how ML-DSA and hybrid key exchanges protect Windows environments against Harvest Now, Decrypt Later.

By Edward Zhou June 12, 2026 4 min read
common.read_full_article
Enterprises Face 2026 Deadline for NIST-Compliant Post-Quantum Cryptography Migration and Infrastructure Readiness
NIST post-quantum cryptography standards 2026

Enterprises Face 2026 Deadline for NIST-Compliant Post-Quantum Cryptography Migration and Infrastructure Readiness

Is your enterprise ready for the 2026 NIST PQC deadline? Learn how to mitigate Harvest Now, Decrypt Later threats and update your infrastructure to quantum-resistant standards.

By Brandon Woo June 10, 2026 7 min read
common.read_full_article
Cloud and Zero Trust Architecture Adoption Accelerate Modernization of Industrial Control Systems Security
industrial control systems zero trust

Cloud and Zero Trust Architecture Adoption Accelerate Modernization of Industrial Control Systems Security

Explore how Zero Trust Architecture and cloud adoption are transforming Industrial Control Systems (ICS) security to mitigate modern cyber threats.

By Alan V Gutnov June 9, 2026 4 min read
common.read_full_article