Endicott Gets 10 Months for Crypto SIM Swap Scheme

DETROIT – Garrett Endicott, 22, of Warrensburg, Missouri, received a 10-month prison sentence yesterday for his participation in a brazen, multi-million dollar SIM hijacking scheme. The sentencing marks the final resolution in a case indicted back in 2019, bringing an end to the prosecution of “The Community,” an international hacking group preying on cryptocurrency holders.

Acting U.S. Attorney Saima Mohsin for the Eastern District of Michigan, alongside Acting Special Agent in Charge James C. Harris of U.S. Immigration and Customs Enforcement’s Homeland Security Investigations (HSI) Detroit, announced Endicott’s fate. Endicott pleaded guilty and was also ordered to pay restitution totaling $121,549.37. The group targeted victims nationwide, including those in California, Missouri, Michigan, Utah, Texas, New York and Illinois.

The operation, known as “SIM Hijacking” or “SIM Swapping,” exploited vulnerabilities in mobile phone security. “The Community” seized control of victims’ phone numbers, rerouting calls and text messages to devices they controlled. This wasn’t always a technical feat; members frequently bribed mobile phone provider employees or impersonated victims to customer service representatives to facilitate the “swap” to a SIM card under their control. This access became the key to unlocking substantial digital fortunes.

Once a phone number was compromised, “The Community” used it to reset passwords and bypass two-factor authentication (2FA) on email, cloud storage, and, crucially, cryptocurrency exchange accounts. The resulting theft totaled tens of millions of dollars in cryptocurrency, with individual victims suffering losses ranging from under $2,000 to over $5 million. Endicott’s direct involvement contributed to a total of approximately $50,000 to over $9 million in stolen funds.

Endicott isn’t the only member of “The Community” facing consequences. Ricky Handschumacher, 28, of Pasco Country, Florida, received a 48-month sentence and $7,681,570.03 in restitution. Colton Jurisic, 22, of Dubuque, Iowa, was sentenced to 42 months and ordered to pay $9,517,129.29. Reyad Gafar Abbas, 22, of Charleston, South Carolina, received 24 months and $310,791.90. Even international members faced justice: Conor Freeman, 22, of Dublin, Ireland, was sentenced to three years by an Irish court, while Ryan Stevenson, 29, of West Haven, Connecticut, received probation in the District of Connecticut – both ordered to pay restitution.

“The actions of these defendants resulted in the loss of millions of dollars to the victims, some of whom lost their entire retirement savings,” stated Acting U.S. Attorney Mohsin. “This case should serve as a warning: exploiting vulnerabilities to steal cryptocurrency isn’t a victimless crime, and those who engage in it will be held accountable.” The investigation highlights the increasing sophistication of cybercrime and the challenges of prosecuting international hacking rings.