Free tools Windows power users keep installed
One-click scans. No signup required.
T-Mobile paid a reported $33 million after an arbitrator found the carrier liable in a dispute over a SIM-swap attack that preceded one customer’s cryptocurrency theft. The case involved a single customer, Joseph “Josh” Jones—not a nationwide class-action settlement—so other T-Mobile subscribers should not assume they can claim part of the award.
What happened in the T-Mobile SIM-swap case?
- February 21, 2020: An attacker took control of Jones’s phone number by transferring it to a SIM card the attacker controlled, according to reporting based on the court petition. SecurityWeek reported that more than 1,500 Bitcoin and about 60,000 Bitcoin Cash were stolen, worth roughly $38 million at the time.
- Fall 2023: Jones’s dispute with T-Mobile went through a reported 12-day private arbitration hearing, according to his law firm, Greenberg Glusker. The firm’s account says the arbitrator issued an award against the carrier.
- March 2025: Greenberg Glusker publicized the result through a petition in Los Angeles Superior Court seeking confirmation of the award. The firm said T-Mobile paid it.
The reported $38 million is the cryptocurrency’s estimated value at the time of the theft, not a current valuation. The $33 million award is a separate figure: it includes damages and other amounts, detailed below.
As an Amazon Associate I earn from qualifying purchases.
How a SIM swap can lead to financial loss
A SIM swap moves a customer’s phone number to a different SIM or device. If an attacker gains control of the number, they may be able to receive calls, text messages, password-reset links and SMS one-time codes intended for the customer. That can help them access online accounts or reset credentials.
The number takeover is an account-access mechanism; it is not necessarily the whole theft operation. The public accounts do not establish every technical step used to access Jones’s cryptocurrency. In general, a phone number can serve as a recovery route for email, financial, cryptocurrency and social-media accounts, which makes the carrier’s process for authorizing number changes an important security control.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Why was T-Mobile held liable?
Greenberg Glusker said its case focused on failures in T-Mobile’s security controls and handling of the account change. The firm said it proved that T-Mobile knew about flaws in its security measures but did not correct them. That is plaintiff’s counsel’s description of the arbitration; the complete evidentiary record and all findings are not publicly available in the materials reported.
The firm’s attorney profile describes the arbitrator as finding T-Mobile negligent under Section 222 of the Federal Communications Act, which concerns customer proprietary network information, or CPNI. The profile is a description from Jones’s legal team, rather than the full arbitration award.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
In a separate case, Terpin v. AT&T, a federal court discussed FCC rules requiring carriers to take reasonable measures against unauthorized access to CPNI and to authenticate customers before disclosing it. That ruling is legal context only; it is not the decision that awarded Jones money.
Recommended Free Tools
How the $33 million award was divided
| Reported component | Amount |
|---|---|
| Damages for Jones | Approximately $26.6 million |
| Attorneys’ fees, costs and interest | More than $6.5 million |
| Total award paid by T-Mobile | $33 million |
The rounded figures were reported from the court filing and law firm’s account. Yahoo’s report described the damages and fees breakdown. Greenberg Glusker said the total reflected an 89-page interim award addressing liability and damages and a separate 38-page ruling on fees, costs and interest. The award total and the estimated value of the stolen cryptocurrency measure different things, so they are not contradictory.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Was it a lawsuit, settlement or arbitration award?
The most precise description is a private arbitration award that T-Mobile paid. A court filing was later used to seek confirmation of the award and make details public; that is different from a conventional public jury trial. Some coverage calls the outcome a settlement, but the reported path was arbitration and an award. The available sources do not establish that T-Mobile admitted liability.
Greenberg Glusker said the arbitration and rulings had remained confidential after the 2023 hearing and accused T-Mobile of trying to keep the findings sealed. The award became public through the court-related filing, but that does not mean the full record, testimony and exhibits are available. SecurityWeek reported that it had contacted T-Mobile but had not received a response by publication; that is not evidence that the company has never commented.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Can other T-Mobile customers claim part of the money?
No class-action claims process is established by the available reporting. The $33 million result concerns Jones’s individual arbitration, not a nationwide fund for T-Mobile customers. A customer who suffered a SIM swap would need to assess their own evidence, losses, contract, arbitration terms, causation and applicable law; this award does not automatically entitle others to compensation.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteSeparate T-Mobile SIM-swap litigation illustrates that contract terms can affect where a dispute is heard. In Bennett v. T-Mobile, a court addressed arbitration in a separate putative class action. That case is distinct from Jones’s arbitration, and the terms and outcome of one dispute do not resolve every customer’s situation.
Best Value
- The information below is per-pack only
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
How to reduce the risk of a SIM-swap loss
- Use a passkey, authenticator app or hardware security key instead of SMS codes for high-value accounts when the service supports it. This reduces reliance on the phone number for login, though it does not prevent the number itself from being transferred.
- Protect the carrier account. Set a unique account PIN or passcode and ask the carrier what SIM-change or number-transfer lock options are available. These measures can reduce risk, but do not guarantee that a transfer cannot occur.
- Use unique passwords for email, financial, cryptocurrency and social accounts. A password manager can help avoid reuse; it does not block a carrier-level number transfer.
- Plan account recovery in advance. Keep recovery codes offline and secure, and ensure you can regain access if your phone is lost or unavailable.
- React quickly to warning signs. Sudden loss of cellular service, an unexplained SIM-change notice or an inability to receive calls and texts can have other causes, but warrants prompt checking with the carrier through a trusted channel.
- If you suspect a takeover, contact the carrier immediately to secure the number, then contact banks, exchanges, email providers and social platforms using trusted contact routes. Revoke active sessions where possible.
- Preserve evidence: carrier notices and logs, account alerts, emails, exchange records, wallet addresses, timestamps and any law-enforcement report can help document what happened.
What the case does—and does not—mean for consumers
The award highlights the potential consequences of weak number-transfer controls and the role a mobile carrier can play in protecting access to customer accounts. It is a major individual arbitration result, not a universal rule that a carrier is liable every time a customer suffers a SIM swap. Liability in another case would depend on its facts, proof of loss and causation, contract terms and applicable law.
Public reporting does not fully establish the technical route used to bypass Jones’s protections or disclose the complete arbitration findings. The firm characterized the result as landmark; its description should not be mistaken for an independently verified claim that this is the largest SIM-swap award ever.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
