Deconflict

📱In a few weeks one phone number will be able to live on two Apple iPhones, and most fraud programs still treat that number as proof of who is holding the device. The feature is called iPhone Handoff, sounds scary already, I know! Apple gave it one line on a WORLD WIDE WEB DEVELOPERS conference slide in June and said almost nothing else. It only drew attention this week when a working demo surfaced from the iOS 27 beta. Here is the practical version. You designate a main iPhone. That one keeps your real eSIM and controls every cellular setting. The second receives what Apple calls a companion eSIM, issued by your carrier, carrying the same phone number on different hardware. Whichever phone is unlocked and in use becomes the active endpoint. Calls, texts and location sharing all follow it there. Only one device holds the line at a time, so this is a handoff rather than a clone. The carrier hands out the second profile on purpose. Both phones must run iOS 27, which supports iPhone 11 and newer (including the SE 2nd generation and later). Setup requires the devices near each other, and nothing works until a carrier turns on support. Early signals point to T-Mobile in the US and Deutsche Telekom, but no US carrier has committed to a date yet. Apple built in some friction during the process. The technology is fine. My concern sits downstream, with every bank, brokerage and exchange that still reads an SMS code as proof the real customer is on the other end. 📲A companion profile carries a different IMEI and a different ICCID under the same phone number. If your fraud logic keys on the number alone, a second device quietly joining a line looks like nothing at all. The old SIM swap needed a carrier store or a bribed employee. The next version of that script is a caller posing as carrier support who walks a victim through Settings, Cellular, Handoff in about ninety seconds, and then owns every password reset text that number receives. Time to change your controls? before the first case lands: ✅ Alert when a new IMEI or ICCID binds to an existing number ✅ Treat an active device change as a step-up authentication event ✅ Require in-app or hardware key approval to provision a companion profile, never an SMS ✅ Move high-value accounts off SMS codes to passkeys or an authenticator app ✅ Ask victims in takeover cases whether a second iPhone was ever added to their line What I keep seeing with new techniques is that they surface in one agency at a time, get written off as isolated account takeovers, and stay local until the same method has run through a dozen jurisdictions. That is the visibility problem we built Deconflict to close. 🚔 Free for law enforcement, and that is not changing. 👉 For the fraud teams here: is device identity part of your authentication model yet, or is the phone number still carrying that weight? I would like to hear how you are handling it. Operation Shamrock ACAMS NW3C, Inc.

Yesterday, I had the opportunity to brief Senate staff on how the Clarity Act could strengthen law enforcement capabilities and enhance protections for the American people. The legislation extends Bank Secrecy Act and sanctions obligations to digital commodity brokers, dealers, and exchanges. It also establishes a Treasury-led information-sharing framework that unifies DOJ, FBI, DEA, and select private-sector partners to proactively identify and respond to illicit finance risks and emerging threats. From a law enforcement perspective, the benefits are clear: greater visibility, faster coordination, and fewer blind spots for bad actors to exploit. For victims, this translates to earlier detection, more effective disruption of illicit activity, and stronger safeguards before losses occur. I also emphasized that policy alone is not enough. To fully realize the benefits of this framework, additional funding must be allocated to law enforcement agencies for specialized training, modern investigative tools, and the resources required to operate effectively in an increasingly complex digital asset environment. This is exactly why Deconflict.com exists—to enable real-time information sharing across law enforcement and trusted partners, helping dismantle criminal organizations and better protect the American people. As illicit finance grows more complex, the ability to coordinate quickly and act decisively is no longer optional; it is mission critical. Expanding U.S. oversight in this space helps close longstanding gaps between agencies and industry, strengthening our collective ability to disrupt and prevent financial exploitation at scale. It was an honor to be joined by Rain CLO Christopher G., DCG ’s Kyle S.., and Blockchain Association’s Lindsay Fraser. Michael Clinton Adam M. Robert Whitaker Hazel Cerra, MBA, CISM Erin West Eric Zimmerman 🐟 Will Maidens Derek Brisson Matthew Hogan, MS Scott Simons Thomas R. Alber Kipp Loving

Law Enforcement Training: Cryptocurrency Case Fundamentals A practical introduction to tracing and understanding cryptocurrency activity in investigations. Free live session led by a Ret. HSI Special Agent.

Cryptocurrency Investigation Training for Law Enforcement Officers Learn how digital assets move, how cases unfold, and how to identify key investigative leads in crypto-related activity. Led by a Ret. HSI Special Agent. Free live webinar.

Free Live Training: Cryptocurrency Investigations for Law Enforcement Understand how crypto transactions are traced and how investigators build actionable leads in real cases. Taught by a Ret. HSI Special Agent.

Cryptocurrency Investigations for Law Enforcement. A practical overview of how digital asset transactions are structured and how investigators can identify actionable intelligence in real cases. Free live training led by a Ret. HSI Special Agent.