Police arrest 3 people in cybercrime investigation, seize ‘SMS blasters’ used to defraud victims

Toronto police say they’ve arrested three people in connection to a cybercrime investigation that used “SMS blasters,” a new technology not previously detected in Canada, that mimics a cell tower to defraud victims. 

Speaking at a news conference Thursday, Det.-Sgt. Lindsay Riddell said the investigation began in November 2025, when police were alerted to a suspected SMS blaster operating in downtown Toronto.

Police later determined that the blaster was operating out of a car, which allowed it to move around the city and Greater Toronto Area, Riddell said.

“We believe tens of thousands of devices connected to the blaster over several months,” she said, noting that more than 13 million network disruptions were identified by police.

Riddell said an SMS blaster mimics “a legitimate cellular tower” that sends fraudulent text messages to connected phones with links to websites designed to steal personal, financial or log-in information.

Beyond the financial risk, police said the SMS blasters also posed a safety risk because they could cause issues with contacting emergency services like 911 due to regular cell service being intercepted.

Three men from Markham and Hamilton, ranging in age from 21 to 27, have been arrested and charged with offences including fraud and mischief.

Arrests Made in Project Lighthouse, First-of-its-Kind SMS Blaster Investigation in Canada <br>News release: <a href=”https://t.co/kDAgK2NTnx”>https://t.co/kDAgK2NTnx</a> <a href=”https://t.co/1dO2K1DQDb”>pic.twitter.com/1dO2K1DQDb</a>

Riddell said the investigation, which is ongoing, involved the Royal Canadian Mounted Police, York Regional Police and Hamilton police. Police have yet to determine how much money was lost.

Riddell also said that police are “pretty confident” they’ve dealt with the risk from SMS blasters, but the broader risk of fraudulent texts remains.

Police are advising the public to remain cautious of links attached to unexpected texts and to never share personal or login information over text message.