The SIM-Swap Hack and Bitcoin Scam
Joseph James O’Connor, the British hacker linked to the infamous 2020 Twitter hack, has been ordered to pay $5.4 million for his role in a massive Bitcoin scam. This penalty comes as restitution for victims defrauded by the SIM-swap attack that shook the tech and political world.
The 2020 hack saw high-profile Twitter (now X) accounts including those of Elon Musk, Barack Obama, Jeff Bezos, and Apple being hijacked. The attacker used these verified accounts to post fake BTC giveaway links, scamming unsuspecting followers into sending cryptocurrency with the promise of doubling it—a classic yet surprisingly effective trick.
O’Connor was involved in a major SIM-swap hack in 2020. He hijacked accounts of Musk, Obama, and others to run a BTC scam. He was ordered by the court to repay $5.4 million in restitution.
How the SIM-Swap Scam Worked
O’Connor was part of a cybercrime group that used a technique known as SIM swapping. By gaining control of victims’ mobile numbers, the group could bypass two-factor authentication and access Twitter’s internal tools. This allowed them to hijack some of the platform’s most influential accounts and push out messages to millions.
Authorities reported that the scam netted the group over $100,000 in Bitcoin in just a few hours. Although O’Connor was arrested in Spain in 2021 and later extradited to the U.S., the legal process has now reached a point where he’s being held financially accountable.
UPDATE: UK man behind the celeb/brand account takeovers for a $BTC scam is ordered to pay back over $5M.
— Cointelegraph (@Cointelegraph) November 18, 2025
Joseph James O’Connor must repay $5.4M for the 2020 SIM-swap hack that hijacked Musk, Obama and other X accounts. pic.twitter.com/JERnm5vBth
A Reminder of Crypto’s Security Risks
This high-profile case serves as a stark reminder of the ongoing risks in the crypto world. While blockchain technology is secure, the platforms and people using it are often the weakest link. SIM-swap hacks continue to be a threat, especially when tied to social media platforms with massive influence.
The ruling sends a clear message to cybercriminals: accountability follows, no matter how far or wide the internet reaches.

