Overview

• Urban was ordered to pay $13 million in restitution and to forfeit approximately $4.8 million in assets, including cryptocurrency, according to the Justice Department.
• Senior U.S. District Judge Harvey E. Schlesinger imposed a 120‑month term with three years of supervised release, exceeding prosecutors’ eight‑year recommendation.
• Prosecutors said Urban and co‑conspirators used SIM swapping and SMS phishing to harvest credentials and drain crypto wallets, with access gained at more than 130 companies such as Twilio, LastPass, DoorDash, Mailchimp, Caesars, and MGM.
• Urban was arrested in January 2024 and pleaded guilty on April 4, 2025 in consolidated cases; he is the first Scattered Spider member to receive a prison sentence, with other defendants still being prosecuted or extradited.
• A court transcript shows a separate intrusion into a magistrate judge’s email account during the case, after an impersonator obtained a password reset from a contractor and accessed a copy of Urban’s sealed indictment.