Raelene Vandenbosch Rogers Kiosk SIM Swap Shakepay Ledger

Notice: This page is a freshly imported case study from the original repository. The original content was in a different format, and may not have relevant information for all sections. Please help restructure the content by moving information from the 'About' section to other sections, and add any missing information or sources you can find. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.

Notice: This page contains sources which are not attributed to any text. The unattributed sources follow the initial description. Please assist by visiting each source, reviewing the content, and placing that reference next to any text it can be used to support. Feel free to add any information that you come across which isn't present already. Sources which don't contain any relevant information can be removed. Broken links can be replaced with versions from the Internet Archive. See General Tutorial on Wikis, Anatomy of a Case Study, and/or Citing Your Sources Guide for additional information. Thanks for your help!

SIM Swapping Attack

A Canadian woman, Raelene Vandenbosch, is suing Rogers Communications and Match Transact Inc. after losing 12 Bitcoin (worth $531,000 in 2021, now $1.8 million) in a SIM swap scam. She alleges a Match-owned mobile store employee shared her information with a hacker, enabling the theft. The British Columbia Supreme Court ruled most of the case must go to arbitration, except for a public admission of wrongdoing. Vandenbosch accuses the companies of negligence and breach of privacy, while Rogers denies fault and highlights evolving fraud risks.

This exchange or platform is based in Canada, or the incident targeted people primarily in Canada.

About Multiple

"Raelene Vandenbosch uses Rogers Communication Canada Inc. (“Rogers”) as the service provider for her personal cell phone. She first signed up with Rogers in December 2015 and continued to be a Rogers customer. On June 30, 2021, her personal information was hacked when someone pretending to be a Rogers technician called into a retail mobile kiosk in Quebec City owned by Match Transact Inc. (“Match”). The hacker asked a clerk at the kiosk to enable screen sharing and the hacker gained access to Rogers’ customer database, including the plaintiff’s personal information. The hacker performed a SIM swap on the plaintiff’s Rogers’ account and quickly gained access to her phone number, phone and internet accounts, including the plaintiff’s cryptocurrency account. Within a few minutes of the SIM swap, the hacker withdrew the plaintiff’s bitcoins from her cryptocurrency account. A few hours later, the hacker gained access to a second cryptocurrency account and withdrew additional bitcoins. The plaintiff alleges the lost bitcoins were valued at approximately $534,530 at the time of the theft and were valued at approximately $1 million shortly after."

At the time, the cryptocurrency was worth $535k. The value has since grown past $1m USD.

The initial reaction of Raelene Vandenbosch is unknown.

Raelene Vandenbosch filed lawsuits against Rogers Communication Canada Inc. and Match Transact Inc.

It is unclear if any recovery will be possible through the arbitration process.

The case has been moved into an arbitration process.

This exchange or platform is based in Canada, or the incident targeted people primarily in Canada.

The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.

Include:

• Known history of when and how the service was started.
• What problems does the company or service claim to solve?
• What marketing materials were used by the firm or business?
• Audits performed, and excerpts that may have been included.
• Business registration documents shown (fake or legitimate).
• How were people recruited to participate?
• Public warnings and announcements prior to the event.

Don't Include:

• Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
• Anything that wasn't reasonably knowable at the time of the event.

There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.

The Reality

This sections is included if a case involved deception or information that was unknown at the time. Examples include:

• When the service was actually started (if different than the "official story").
• Who actually ran a service and their own personal history.
• How the service was structured behind the scenes. (For example, there was no "trading bot".)
• Details of what audits reported and how vulnerabilities were missed during auditing.

What Happened

12 bitcoin were lost after a mobile kiosk employee was tricked into screensharing with a hacker who claimed to work with Rogers.

Key Event Timeline - Raelene Vandenbosch Rogers Kiosk SIM Swap Shakepay Ledger

Date	Event	Description
June 30th, 2021	Breach Of Plaintiff Cell Phone	The plaintiff's "personal information was hacked when someone pretending to be a Rogers technician called into a retail mobile kiosk in Quebec City owned by Match Transact Inc. (“Match”). The hacker asked a clerk at the kiosk to enable screen sharing and the hacker gained access to Rogers’ customer database, including the plaintiff’s personal information. The hacker performed a SIM swap on the plaintiff’s Rogers’ account and quickly gained access to her phone number, phone and internet accounts, including the plaintiff’s cryptocurrency account. Within a few minutes of the SIM swap, the hacker withdrew the plaintiff’s bitcoins from her cryptocurrency account. A few hours later, the hacker gained access to a second cryptocurrency account and withdrew additional bitcoins."
June 19th, 2023	Court Auction Started Up	The plaintiff starts a court action against both Rogers and Match Interactive.
November 7th, 2024	Stay In Favour Of Arbitration	Court submissions show that the four prerequisites for a stay in favour of arbitration have been met.
March 31st, 2025	Dispute Resolution Clauses Prohibited	The British Columbia legislature passes amendments to the Business Practices and Consumer Protection Act (BPCPA), which forbids arbitration clauses in legal contracts with consumers, including forced arbitration.
July 5th, 2025 6:02:00 AM MDT	Cryptopolitan Article Published	An article on the incident is published in Cryptopolitan.

Technical Details

"Raelene Vandenbosch uses Rogers Communication Canada Inc. (“Rogers”) as the service provider for her personal cell phone. She first signed up with Rogers in December 2015 and continued to be a Rogers customer. On June 30, 2021, her personal information was hacked when someone pretending to be a Rogers technician called into a retail mobile kiosk in Quebec City owned by Match Transact Inc. (“Match”). The hacker asked a clerk at the kiosk to enable screen sharing and the hacker gained access to Rogers’ customer database, including the plaintiff’s personal information. The hacker performed a SIM swap on the plaintiff’s Rogers’ account and quickly gained access to her phone number, phone and internet accounts, including the plaintiff’s cryptocurrency account. Within a few minutes of the SIM swap, the hacker withdrew the plaintiff’s bitcoins from her cryptocurrency account. A few hours later, the hacker gained access to a second cryptocurrency account and withdrew additional bitcoins. The plaintiff alleges the lost bitcoins were valued at approximately $534,530 at the time of the theft and were valued at approximately $1 million shortly after."

Total Amount Lost

At the time, the cryptocurrency was worth $535k. The value has since grown past $1m USD.

The total amount lost has been estimated at $535,000 USD.

Immediate Reactions

The initial reaction of Raelene Vandenbosch is unknown.

Ultimate Outcome

Raelene Vandenbosch filed lawsuits against Rogers Communication Canada Inc. and Match Transact Inc.

Total Amount Recovered

It is unclear if any recovery will be possible through the arbitration process.

There do not appear to have been any funds recovered in this case.

Ongoing Developments

The case has been moved into an arbitration process.

Individual Prevention Policies

No specific policies for individual prevention have yet been identified in this case.

For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.

Platform Prevention Policies

Policies for platforms to take to prevent this situation have not yet been selected in this case.

For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.

Regulatory Prevention Policies

No specific regulatory policies have yet been identified in this case.

For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.