Nicholas Truglia Sentenced to 12 Years for Failing to Pay Restitution in Landmark Crypto Fraud Case

A federal court has significantly increased the prison sentence of convicted crypto scammer Nicholas Truglia, extending his term to 12 years after he refused to repay stolen cryptocurrency assets to his victim. What started as an 18-month sentence in 2022 has now evolved into a much harsher penalty—a stark reminder of law enforcement’s determination to hold digital asset fraudsters accountable. Judge Alvin Hellerstein’s July 2024 order reveals a troubling pattern: despite owning assets valued at over $61 million, Nicholas Truglia made zero payments toward the $20 million restitution owed to Michael Terpin, the founder and CEO of Transform Group.

The SIM-Swapping Attack That Changed Everything

Michael Terpin’s nightmare began in 2018 when Nicholas Truglia executed a sophisticated SIM-swapping attack targeting his mobile phone. The scheme involved transferring Terpin’s phone number to a different SIM card—a deceptively simple yet devastatingly effective method that allowed Truglia to intercept authentication codes from crypto exchanges and financial institutions. Once in control of the phone number, Truglia gained access to Terpin’s cryptocurrency holdings and made off with approximately $24 million worth of digital assets. The attack exposed a critical vulnerability in mobile carrier security protocols that remains a concern for the crypto industry today.

Nicholas Truglia’s original conviction centered on a single count of wire fraud, yet the implications extended far beyond one criminal act. He had systematically targeted cryptocurrency investors in California’s San Francisco Bay Area, using the same SIM-swapping technique to compromise multiple accounts. The sophistication of the attack—and its effectiveness against a seasoned investor—demonstrated how authentication systems could be exploited through cellular networks rather than direct account breaches.

The Legal Battle and Asset Concealment

What makes this case particularly significant is the apparent disconnect between Nicholas Truglia’s claimed inability to pay and his substantial asset holdings. Court documents indicate he possessed over $61 million in assets—more than three times the original restitution amount—yet refused to comply with the court’s order. This non-compliance transformed the narrative from standard fraud prosecution to obstruction of justice. The escalated 12-year sentence serves as a warning that evasion of restitution obligations carries severe consequences.

Michael Terpin pursued multiple legal avenues beyond the criminal case. In 2019, he won a $75 million civil judgment against Nicholas Truglia directly and simultaneously filed a separate $224 million negligence lawsuit against AT&T, his wireless carrier, for failing to prevent the SIM swap. AT&T ultimately settled the civil claims, acknowledging systemic weaknesses in how carriers verify SIM swap requests. The AT&T case underscored an uncomfortable truth: mobile carriers, not cryptocurrency platforms, often serve as the weakest link in security chains.

Industry Wake-Up Call on Digital Security

The Nicholas Truglia case crystallizes the vulnerability of crypto investors who rely on traditional authentication methods. SIM-swapping has evolved from an obscure exploit to a widespread threat targeting both individual traders and institutional players. The case demonstrates why the cryptocurrency sector must push mobile carriers to implement additional verification layers—such as biometric authentication or mandatory in-person verification for SIM transfers—before processing requests.

The broader implications extend beyond mobile security. This prosecution signals that federal courts will aggressively pursue restitution in crypto crime cases and that asset concealment will be treated as a secondary criminal violation. For the cryptocurrency community, the takeaway is clear: technological security improvements alone are insufficient without corresponding strengthening of identity verification and carrier protocols.