Sydney SMS Scammer Who Used Own Phone Number Dodges Prison

The Aussie charged with extortion in the wake of the massive Optus data breach has been sentenced to 100 hours of community service and conviction, but will avoid prison for his "opportunistic" and "unsophisticated" blackmail attempt.

20-year-old Dennis Su had pleaded guilty in November 2022 to two counts of using a telecommunications network with intent to commit a serious offence, after he tried to SMS scam people whose details were exposed in the Optus data breach, the Australian Federal Police reports.

Using the stolen records posted online by hackers after the Optus data breach in September 2022, Su sent text messages to at least 92 customers threatening to compromise their identity unless they transferred $2,000 to a bank account in his control.

Su naively used his own phone number and his brother’s bank account to carry out the scam, eventually leading investigators to identify and arrest him last year.

"It was his own number, it was his brother's account — he was going to be caught," said Magistrate Emma Maneain Sydney's Downing Centre Local Court. "In terms of the sophistication, it perhaps reflects his youth and immaturity."

On Nov. 8, 2022, Su pleaded guilty to two counts of using a telecommunications network with intent to commit blackmail.

As reported on this blog in November 2022, Su had told police officers he was unemployed and having a rough time, so he devised the scheme in a bid to make some “quick money.”

The teen’s lawyers followed with a letter of apology from Su, as well as character references from two counsellors.

Magistrate Manea said, “It's quite clear from the subjective material your client seems to have learned his lesson.”

“But I do think, on the balance, the community would be better served by a young person undertaking rehabilitation,” Ms. Manea added.

Su has been sentenced to an 18-month Community Correction Order and must complete 100 hours of community service, and duly follow all directions for counselling and treatment.

Bitdefender Digital Identity Protection scans the web for unauthorized leaks of your personal data, monitoring whether your accounts are exposed and making it easy to take action before disaster strikes.