In a significant blow to cybercrime, Europol has successfully dismantled a sophisticated cybercrime-as-a-service (CaaS) platform that operated an extensive SIM farm, enabling a multitude of illicit activities worldwide. This operation, known as Operation SIMCARTEL, involved coordinated efforts across multiple countries and led to the arrest of key suspects and the seizure of critical infrastructure.
Operation SIMCARTEL: A Coordinated Effort
On October 19, 2025, Europol announced the culmination of Operation SIMCARTEL, a concerted law enforcement initiative targeting a complex network facilitating various cybercrimes. The operation encompassed 26 searches, resulting in the arrest of seven individuals and the confiscation of 1,200 SIM box devices containing 40,000 active SIM cards. Notably, five of the arrested individuals are Latvian nationals.
The collaborative effort included authorities from Austria, Estonia, Finland, and Latvia, working alongside Europol and Eurojust. This international cooperation underscores the global nature of cybercrime and the necessity for cross-border collaboration in combating such threats.
Seizure of Infrastructure and Assets
In addition to the arrests, the operation led to the dismantling of five servers and the takeover of two websites—gogetsms[.]com and apisim[.]com—on October 10, 2025. These websites, previously used to advertise the illicit services, now display seizure banners indicating law enforcement control.
Further actions included the confiscation of four luxury vehicles and the freezing of substantial financial assets. Authorities froze €431,000 ($502,000) in suspects’ bank accounts and €266,000 ($310,000) in cryptocurrency accounts, disrupting the financial operations of the criminal network.
Scope of the Criminal Network
The dismantled network has been linked to over 1,700 cyber fraud cases in Austria and 1,500 in Latvia, resulting in losses of approximately €4.5 million ($5.25 million) and €420,000 ($489,000) in these countries, respectively. Europol highlighted the technical sophistication of the network, which enabled perpetrators worldwide to utilize the SIM-box service for a wide range of telecommunications-related cybercrimes.
The infrastructure provided telephone numbers registered to individuals from over 80 countries, facilitating the creation of more than 49 million online accounts. These accounts were instrumental in various criminal activities, including:
– Phishing and Smishing Attacks: Fraudsters used the fake accounts to send deceptive messages, tricking victims into revealing sensitive information or clicking on malicious links.
– Financial Fraud: Victims were lured into investing funds in fraudulent trading schemes, resulting in significant financial losses.
– Impersonation Scams: Criminals contacted targets via platforms like WhatsApp, posing as family members with new phone numbers and requesting urgent financial assistance.
– Other Offenses: The platform also enabled extortion, migrant smuggling, and the distribution of child sexual abuse material (CSAM).
The Role of GoGetSMS and API SIM
Archived snapshots reveal that GoGetSMS marketed itself as a provider of fast and secure temporary phone numbers, boasting over 10 million numbers and the ability to receive verification codes from more than 160 online services. The platform also offered users the opportunity to monetize existing SIM cards by transforming them into assets for generating passive income through specialized software.
However, user reviews on platforms like Trustpilot indicate dissatisfaction with GoGetSMS’s services. Customers reported issues obtaining functional temporary numbers and criticized the platform’s unresponsive support, highlighting the deceptive nature of the service.
Implications and Future Outlook
The successful dismantling of this SIM farm network represents a significant victory in the fight against cybercrime. By disrupting the infrastructure that facilitated the creation of millions of fake accounts, law enforcement agencies have curtailed a major avenue for various cyber offenses.
This operation underscores the importance of international cooperation in addressing cyber threats that transcend national borders. It also highlights the need for continuous vigilance and adaptation to counter the evolving tactics of cybercriminals.
As cybercrime methodologies become increasingly sophisticated, law enforcement agencies must remain proactive, leveraging technology and cross-border partnerships to identify and dismantle criminal networks effectively. Public awareness and education are also crucial in preventing individuals from falling victim to such schemes.
Conclusion
Operation SIMCARTEL serves as a testament to the effectiveness of coordinated international efforts in combating cybercrime. The dismantling of the SIM farm network not only disrupts ongoing criminal activities but also sends a strong message to cybercriminals about the risks and consequences of their actions. Continued collaboration and innovation in law enforcement strategies will be essential in staying ahead of the ever-evolving landscape of cyber threats.
