JOEL ORTIZ▊
He graduated valedictorian and won a scholarship to UMass. Then, from his mother's Boston apartment, a lonely teenager figured out that a 99-cent SIM card and a phone call could drain a stranger's crypto wallet in minutes. Over about a year he hit roughly forty people, cleared north of $5 million, and blew it on Gucci, Airbnbs, and bottles of glow-in-the-dark Dom Perignon poured over designer watches. At a New York blockchain conference he emptied one entrepreneur of $1.5 million — a million of it crowdfunded from strangers — in a single afternoon. He flaunted the ultra-rare handle "@0," a single character he'd hijacked, in club videos. He was the biggest name on OGusers, the flea market for stolen "OG" usernames. And in 2019 he became the first person on Earth convicted of SIM-swapping — ten years, the opening act of an entire teenage crime scene.
@0
Not a quote — a flex. The single-character handle Ortiz hijacked and paraded, the rarest thing on OGusers, waved on placards in a club video that Motherboard tied to him and VICE later confirmed was his known alias. On the forum he traded under "J." In a scene where status was a short username, he owned the shortest one there was.
- WHO
- Joel Ortiz — Boston college student, high-school valedictorian, UMass scholarship recipient; SIM-swap handle "@0," OGusers account "J" FACT
- SCENE
- Top figure on OGusers, the marketplace for short / "OG" social handles, and a marquee name in the emergent SIM-swap-kids underground that fed off it
- THE DRAMA
- A one-year spree hijacking ~40 phone numbers to steal more than $5 million in cryptocurrency — including ~$1.5M in three attacks at the Consensus blockchain conference — then flaunting the loot in Gucci and champagne while the SIM-swap scene watched itself get famous
- RECORD
- Arrested at LAX July 2018 en route to Europe; charged with identity theft, hacking, and grand theft. In 2019 pleaded to a 10-year term — the first SIM-swapping conviction and sentence in the U.S. ADJUDICATED
- STATUS
- CONVICTED & INCARCERATED — serving 10 years at Centinela; the template every teenage SIM swapper after him was measured against
SIM-swapping didn't start with Ortiz, but the prosecutions did — he was the first one the law actually landed. The REACT Task Force in Santa Clara built the playbook on his case: subpoena the carrier for the IMEI, subpoena Google for the accounts tied to it, subpoena the exchanges for the cash-out. The same wire that unmasked him unmasked the whole cohort of "kids aged mainly between 19 and 22" the task force said were "being able to steal millions of dollars in cryptocurrencies." This file is the origin story of that scene — the OGusers status economy, the one-letter handles, the club-video flexing — told through the kid who made it visible and then became the first to fall.
the drama timeline
ACT I — THE VALEDICTORIAN (to 2017)
A gifted, isolated Boston teenager whose whole social world is online finds the one corner of the internet where a short username is worth more than a degree.
-
EARLY 2010s
Top of the class
By the account of the prosecutors who later charged him, Ortiz is a standout student — graduates as valedictorian, earns a scholarship to UMass. He grows up modestly, the son of a disabled immigrant solo mother, and by investigators' telling is an isolated teen whose only real connections are online. "He had skills that were really usable in this way," deputy district attorney Erin West would say. "He exploited a vulnerability that I don't think the rest of the nation was really thinking much about."
-
2017–18
OGusers, and the handle "@0"
Ortiz becomes a fixture on OGusers, a forum where members buy and sell "OG" social handles — short usernames that, as Krebs put it, "convey an aura of prestige or the illusion of an early adopter" and "can be resold for thousands of dollars." His account is reported as "J." He acquires and flaunts the single-character handle "@0" on Twitter and Instagram — the kind of name you could only have registered the day a platform launched, or taken from whoever did. In this scene, that handle is the flex.
ACT II — THE CRYPTO BANDIT (2017–2018)
The handle economy meets the phone company's help desk, and a teenager discovers he can rob a stranger from his mother's living room.
-
2017–18
Forty phones, one method
Ortiz and unnamed associates run a SIM-swap spree: trick or bribe a carrier rep into porting a target's number to a SIM they control, then reset the passwords on the victim's email, exchange, and social accounts — defeating SMS two-factor along the way. Investigators later tie roughly forty AT&T numbers to the phones he used. He targets people known in the crypto world, drawing up lists of "whales." All told, prosecutors put the haul at more than $5 million (VICE's 2024 documentary later placed the total near $7.5M).
-
FEB–MAR 2018
"Tell your dad to give us bitcoin"
By investigators' account, Ortiz repeatedly targets one blockchain investor — hijacking his number twice, resetting his email and crypto passwords, even adding his own authenticator to lock the victim out. He doesn't stop at the wallet: on March 20 he allegedly calls the investor's wife from the stolen number and messages the man's daughter and friends demanding bitcoin. The court file includes a screenshot of the iMessage thread. Menace, aimed at a family, over a phone number.
-
MAY 2018
The Consensus heist
At the high-profile Consensus blockchain conference in New York City, Ortiz works the room. In at least three attacks during the event, he allegedly steals more than $1.5 million from one cryptocurrency entrepreneur — including nearly $1 million the victim had just crowdfunded in an ICO. "I looked at my phone and it was dead," the entrepreneur told Motherboard. Another attendee that week texted a friend the line that named the whole genre: "My fucking SIM got hacked."
-
2018
Gucci, glow-in-the-dark Dom, and a scene watching itself
Ortiz spends nearly as fast as he steals: a Gucci bag flashed on a spree, rented Los Angeles mansions and Airbnbs, club parties in Vegas and LA. One video posted to a hijacked, highly sought Instagram handle shows the crew pouring $200 bottles of glow-in-the-dark Dom Perignon over designer watches. He also, per Krebs, becomes a teacher — coaching other SIM swappers on technique and on how to avoid getting swapped themselves. The scene is getting rich, loud, and visible all at once.
ACT III — THE FALL (2018–2019)
The same visibility that made him a legend makes him a case. The task force follows the phone.
-
JUL 12, 2018
Arrested at the gate
The REACT Task Force follows the trail — carrier records to IMEI numbers, Google to the accounts on those phones (one email held a selfie of Ortiz with his Massachusetts ID), exchanges to the cash-out. Ortiz is arrested at Los Angeles International Airport on his way to Europe, reportedly flashing a Gucci bag. He faces 28 charges — 13 counts of identity theft, 13 of hacking, 2 of grand theft. After his Miranda warning he tells investigators he and his "co-conspirators" have access to millions in cryptocurrency. Bail: $1 million.
-
JUL–AUG 2018
"Who do you think is next?"
News of the arrest tears through OGusers. A member opens a thread titled "Who do you think is next?"; another, "everyone is gone." Staff close accounts, simmers "go into hiding." Ortiz's own arrest becomes the thread that unravels the cohort: within weeks the same investigative wire — a reused device IMEI — helps put California SIM swapper Xzavyer Narvaez at the scene of his own hijacks. "Anyone who's ever done anything illegal is going to get snitched on," a longtime member warned. "I warned these kids."
-
EARLY 2019
The first conviction
Ortiz accepts a plea deal: 10 years in prison. Prosecutors and REACT call him the first person ever convicted — and sentenced — for SIM-swapping. "Each arrest that we made sent shockwaves through that community," Erin West said. "In looking at Joel's sentence — 10 years — it shows that our community will not tolerate this type of crime." VICE's later reporting describes the disposition as a no-contest plea to eight counts of identity theft and computer crimes.
ACT IV — THE RECKONING (2019–)
One conviction, then a wave. The scene Ortiz made famous is arrested one bedroom at a time.
-
2019–20
The cohort falls
The prosecutions cascade. In May 2019, nine people are charged over a SIM-swap ring calling itself "The Community" — more than $2.4 million stolen, plus three former phone-store employees charged with helping them. Ortiz's Consensus co-conspirator, Dublin hacker Conor Freeman, is arrested and sentenced in November 2020 to two years and eleven months; the funds stolen from one of Ortiz's victims are recovered and returned. The REACT playbook built on Ortiz's phone becomes the standard model for the whole category.
-
ONGOING
The missing millions
Ortiz is serving his sentence at Centinela in California, due out around 2028. When arrested he showed investigators about $250,000 in cryptocurrency and had blown roughly as much again — but "there was a huge gap between what he could account for and what we knew he took," West said. The bulk of the stolen millions was laundered by the gang and remains unaccounted for. "Buried in a forest somewhere," investigator Samy Tarazi shrugged. "I don't know."
both sides, on the record
The record: Ortiz pleaded to a 10-year term and became the first person in the country convicted and sentenced for SIM-swapping. The conduct is documented in court filings obtained by Motherboard and in the REACT Task Force's on-record statements: roughly forty victims, more than $5 million stolen, three attacks at the Consensus conference netting $1.5 million from a single entrepreneur (a million of it crowdfunded), and a documented pattern of harassing victims' families — calling a wife, messaging a daughter to demand bitcoin.
He was a teacher, not just a thief: per Krebs, Ortiz coached other SIM swappers on technique. His arrest wasn't the end of a lone spree — it was the thread that unspooled an entire cohort of them.
He didn't act alone: the court documents themselves reference "unnamed accomplices," and Ortiz operated inside a hacker ring — he was the first to fall, not the sole author of the scheme [4].
He took the plea: rather than force ~40 victims through a trial, Ortiz pleaded (reported as guilty, and by VICE as no contest) and, when arrested, showed investigators the ~$250,000 in crypto he still held [6] [7].
Context, not excuse: by investigators' own account he was a gifted, isolated teenager from a modest immigrant household — a valedictorian who found the wrong forum. It explains how he got here; it does not undo the theft or the sentence [7].
YOU DECIDE
There's no whodunit here — Ortiz pleaded, and he's doing the ten years. What the file is really about is the scene he made legible: the OGusers status economy where a one-character handle outranked a bank balance, the "kids aged mainly between 19 and 22" the task force said were pulling off historic thefts from their mothers' spare rooms, the champagne-over-watches flexing that doubled as a confession. He didn't invent SIM-swapping. He made it famous, and then he made it prosecutable — for everyone who came after.
The archive keeps the plea, the sentence — and the single-character handle he thought was worth more than a UMass scholarship.
evidence locker
PRIMARY / CONTEMPORANEOUS REPORTING
Motherboard / VICE — "'Tell Your Dad to Give Us Bitcoin'" (Jul 2018) FACT — the founding account: ~40 victims, $5M+, the three Consensus attacks and the $1.5M / $1M-ICO theft, OGusers membership and the "J"/"@0" handles, the family harassment, the LAX arrest, the 28 charges, the post-Miranda statement.
vice.com/en/article/hacker-allegedly-stole-millions-bitcoin-sim-swapping
CONVICTION & AFTERMATH
CONTEXT & CROSS-LINKS
KrebsOnSecurity — "Busting SIM Swappers and SIM Swap Myths" (Nov 2018) ATTRIBUTED — the REACT interview: "kids aged mainly between 19 and 22 being able to steal millions," the 99-cent-SIM economics, and the note that Ortiz "taught many other SIM swappers how to perfect their techniques."
krebsonsecurity.com/2018/11/busting-sim-swappers-and-sim-swap-myths/ troll.fan — LAPSUS$ CROSS-LINK — the later, purest evolution of the teenage-extortion-crew model Ortiz's cohort prototyped.
troll.fan/dossiers/lapsus.html troll.fan — X / Twitter (the hacker drama) CROSS-LINK — where the SIM-swap scene’s skills kept landing: the platform’s decade of account takeovers, from the @N extortion to the 2020 God-mode hack.
troll.fan/dossiers/twitter-x.html troll.fan — The Timeline CROSS-LINK — where the 2018–2019 SIM-swap prosecutions sit in the scene's larger chronology.
troll.fan/timeline.html
The standard. Joel Ortiz's arrest, charges, plea, and 10-year sentence — the first SIM-swapping conviction in the United States — are on the public record via the Santa Clara County prosecution as reported by Motherboard/VICE and KrebsOnSecurity. The theft totals, the ~40 victims, and the Consensus attacks are per court documents obtained by Motherboard and the REACT Task Force's on-record statements; where reporting differs on the total ($5M+ vs. VICE's later $7.5M) and on the plea's form (guilty vs. no contest), both are carried. OGusers membership, the "J" account, and the hijacked "@0" handle are attributed to Motherboard's reporting and presented as a documented flex, not a fabricated quotation. Victims who asked for anonymity are kept anonymous; co-conspirators are named only where charged or convicted. No motive beyond the record is asserted. If a line here couldn't survive scrutiny, it wouldn't be on the page.