Codex / Learn

History

OGU has been launched, breached five times, tied to SIM-swap prosecutions and the 2020 Twitter hack, cracked down on by the big platforms, renamed, renamed back, and has kept growing past a million members. This page is the full timeline.

Sources: press coverage, OGU's official Telegram channel, and the community-run OGU/FLIPD News Week archive (#5–#22).

At a glance

EraYearsWhat defined it
Origins2017OGUsers launches as a marketplace for rare handles.
Hijacking era2018–2020SIM swapping, press investigations, indictments, the Twitter hack, the first breaches.
Crackdown2021–2022Platforms remove hundreds of accounts tied to OGU. Two more breaches.
FLIPD2023–2024Renamed to escape its reputation. A server failure wipes months of data.
Modern OGU2024–nowThe name comes back, stricter rules, a million members, takedowns across the wider scene, the Meta conflict.

Origins (2017)

APR 2017
OGUsers launches
It was founded by a user known as "Ace". The owner, arc, is UID 4 and registered on 21 April 2017, and many long-standing trusted members registered on 29 April. Besides handles, early listings included PSN, Steam and other gaming accounts.
2017
What "OG" meant
In US court filings, "OG" was explained as "original gangster", meaning a veteran user. The handles prized most were short, real words like @food or @snow, and a single name could sell for tens of thousands of dollars.

The hijacking era (2018–2020)

JUL 2018
Motherboard investigation
Reporters documented members trading hijacked Instagram and Twitter accounts with rare handles. One member showed off access to an internal phone-carrier portal. The admin answered that SIM-swap discussion had been banned and that black-hat activity broke the rules.
2018
"OG" enters security reporting
KrebsOnSecurity described the forum as a main hangout for SIM swappers, who hijack a victim's phone number to reset their accounts. OG handles were a common target.
MAY 2019
First database leak
A December 2018 backup with about 113,000 accounts appeared on rival forum RaidForums. It held usernames, emails, IP addresses, private messages and MD5 password hashes. Krebs expected investigators to make heavy use of it.
MAY 2019
"The Community" indicted
US prosecutors charged six members of a SIM-swapping group, and three phone-company employees who allegedly helped them, over about $2.4M in stolen cryptocurrency.
2017–2022
The Massachusetts OG ring
A separate group hijacked OG social media accounts and stole crypto from late 2017 onward, with at least ten victims and about $330k taken. Its members were sentenced to prison in 2022.
APR 2020
Second breach
An attacker abused the avatar upload feature to plant a web shell, and reached data on more than 200,000 users.
15 JUL 2020
The Twitter hack
Accounts belonging to Barack Obama, Elon Musk, Apple and others posted a bitcoin scam. Reporting traced it to people in the OG-handle scene. Before the attack, a member had advertised changing the email on any Twitter account for $250. Joseph O'Connor ("PlugWalkJoe") was arrested in Spain in 2021, extradited, pleaded guilty in 2023, and was sentenced to five years.
DEC 2020
Leaks turned into evidence
Krebs reported that the leaked databases were being used to identify the people behind major account takeovers.

Crackdown (2021–2022)

4 FEB 2021
The platforms strike together
Facebook, Instagram, TikTok and Twitter coordinated to remove hundreds of accounts tied to OGUsers, including "swappers" and middlemen. Instagram said the group targeted handles under five letters, and Facebook said many of those involved were minors. TikTok reclaimed squatted names, and Twitter suspended accounts under its spam rules.
2021
Cease-and-desist letters
Instagram sent legal letters to people it identified as running the hijacked-handle trade.
APR 2021
Fourth breach
About 348,000 email addresses were exposed and the data was sold on a rival forum.
JUL 2022
Fifth breach
About 529,000 email addresses, IP addresses and argon2 password hashes were exposed.

The FLIPD years (2023–2024)

FEB 2023
A week offline
The site went down for about a week while rumors of a seizure spread on rival forums.
9 MAR 2023
Renamed FLIPD
The forum moved to flipd.gg. It later explained that the goal was to distance itself from past controversy caused by weak moderation and unclear policies.
JUN 2023
New Trusted members
faiq and louie joined the Trusted middleman team.
JUL 2023
Vouch rules tightened
Free middleman deals no longer earn vouches, and a vouch requires a deal of at least $5.
28 JUL 2023
Server failure
The host's server failed along with the weekly backups stored on it. The forum was restored from a 10 April 2023 copy, losing about 3½ months of data, and moved to off-server backups.
AUG 2023
Fake staff wave
Accounts posing as staff, including a fake arc, told members their accounts were "compromised". The official reply: staff never ask for passwords, and support happens only on-site.
APR 2024
FLIPD News Week
A member started a weekly news thread. Early issues covered a $150k exchange, a disputed $45k sale of the Instagram handle @star (sold without its original email), an Instagram ban wave, and the Bitcoin halving.
MAY 2024
Phishing & rebrand hints
A FLIPD phishing site appeared, the owner confirmed a rebrand was coming, and the Telegram network quietly switched back to "OGU".

Modern OGU (2024–2026)

18 MAY 2024
The OGU name returns
Activity had dropped after the rename, and copycat sites had used the change to confuse members. The forum moved to oguser.com under the OGU name with a new design, redirected flipd.gg and ogusers.gg there, and survived a data rollback with daily backups.
MAY–JUN 2024
Growth
A new official middleman (bingo) and new Telegram chat moderators were appointed, and member UID 700,000 registered.
SEP 2024
Exchange rules clarified
This followed misuse of the Crypto Exchange section.
DEC 2024
Scam surge
There was a wave of deal disputes and TikTok scams, a PSN alert, and a $180k deal milestone.
30 JAN 2025
Operation Talent
An FBI and Europol-led operation seized major cybercrime forums and the Sellix shop platform, which many sellers used for automatic delivery. OGU changed its auto-buy policy as a result. Members have been asking for "a Sellix alternative" ever since.
JAN–FEB 2025
Team changes
9 was promoted to Trusted, a new staff member came from the mentor ranks, a $50k exit scam was reported, and a suspected rep and vouch farmer was flagged.
MAR 2025
Epic Games sues a member
An OGU member was served in a lawsuit over selling "illegally obtained" Fortnite accounts. The same issue warned about a Telegram bug that let people fake conversations while showing another member's username.
AUG 2025
The "Boss" case
A $55k deal dispute came with accusations of faked vouches, plus an Instagram username incident and several bans.
SEP 2025
"The Com"
OGU circulated X's findings on paid "unban" services linked to crypto scams run by the loose network known as The Com.
DEC 2025
Exit surge
News Week #19 described a rise in illicit deals and exits, including a member already in DWC who exited on his own partner. A Verified seller lost his rank over off-site disputes.
FEB 2026
Crash & impersonation
A site crash hit, an ex-Apollo member was placed in DWC, a fake OGU site was used to impersonate users, a Telegram flaw leaking IP addresses was reported, and a member was accused of a memecoin "rug pull".
FEB–MAR 2026
Promotions & clone warning
fame was promoted to Trusted and Eviona to Staff. OGU named clone domains: oguser.cc, .app, .to, .id and .us.
29 APR 2026
Nine years
JUL 2026
Domain suspended, Meta conflict
The registrar suspended oguser.com, and the forum ran on ogusers.gg until the domain came back two days later. After "drama with Meta", the Instagram sections were removed. The OGUsers subreddit was banned, two staff stepped down, a Trusted member was demoted, and a member was banned for selling his OGU account.
2026
One million members
The site passed 1,000,000 registered accounts and launched an official Telegram bot. An ex-staff member was reported to have exited with about $650k in total, and a $2.5M middleman deal for the Telegram username "ghost" set a record.
6 OCT 2026
Instagram sections return
They came back but are visible only to upgraded members.

Outlets disagree on the breach count and some dates. Breach details follow Have I Been Pwned and KrebsOnSecurity. Forum events are as reported by OGU's own channels.