{
  "name": "Pause Before Send scam and wallet-security incident log",
  "description": "Dated log of crypto and consumer scams, wallet-security incidents and enforcement actions, each with a confidence rating and primary source URL.",
  "url": "https://pausebeforesend.com/data/#incidents",
  "license": "CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/)",
  "publisher": "Pause Before Send",
  "updated": "2026-10-24",
  "rows": [
    {
      "date_start": "2026-10-16",
      "date_end": "2026-10-16",
      "title": "Fake Ledger firmware-update phishing campaign",
      "region": "Global",
      "category": "phishing",
      "reported_loss_usd": null,
      "loss_note": null,
      "confidence": "HIGH",
      "primary_source": "https://x.com/SlowMist_Team/status/2110988183039332417",
      "secondary_source": "https://www.ledger.com/phishing-campaigns-status",
      "site_page": "/scams/fake-ledger-firmware-update/"
    },
    {
      "date_start": "2026-10-15",
      "date_end": "2026-10-15",
      "title": "FBI PSA: 2026 midterm election fraud schemes",
      "region": "US",
      "category": "impostor/fraud",
      "reported_loss_usd": null,
      "loss_note": null,
      "confidence": "HIGH",
      "primary_source": "https://www.ic3.gov/PSA/2026/PSA261015-3",
      "secondary_source": null,
      "site_page": null
    },
    {
      "date_start": "2026-10-13",
      "date_end": "2026-10-13",
      "title": "FTC alert and lawsuit vs Digital Forensics (sextortion 'assistance')",
      "region": "US",
      "category": "recovery-service fraud",
      "reported_loss_usd": null,
      "loss_note": "allegations",
      "confidence": "HIGH",
      "primary_source": "https://consumer.ftc.gov/consumer-alerts/2026/10/how-avoid-deceptive-sextortion-assistance-services-and-find-real-help",
      "secondary_source": null,
      "site_page": null
    },
    {
      "date_start": "2026-10-09",
      "date_end": "2026-10-15",
      "title": "Ledger devices from reseller CryptoBilis fitted with seed-stealing implant",
      "region": "Southeast Asia",
      "category": "supply-chain",
      "reported_loss_usd": 93200000,
      "loss_note": "Bitquery estimate; not confirmed by Ledger",
      "confidence": "HIGH event / MED amount",
      "primary_source": "https://www.ledger.com/blog-response-hardware-implant-attack",
      "secondary_source": "https://www.bleepingcomputer.com/news/security/ledger-asks-sellers-across-asia-to-halt-sales-after-supply-chain-attack/",
      "site_page": "/scams/fake-ledger-firmware-update/"
    },
    {
      "date_start": "2026-10-08",
      "date_end": "2026-10-08",
      "title": "Multistate $2.5M settlement with kiosk operator Coinme (Kansas + 33 regulators)",
      "region": "US",
      "category": "enforcement",
      "reported_loss_usd": null,
      "loss_note": null,
      "confidence": "HIGH",
      "primary_source": "https://osbckansas.gov/kansas-joins-2-5-million-settlement-with-crypto-kiosk-operator/",
      "secondary_source": null,
      "site_page": "/scams/crypto-atm-scams-kansas-missouri-2025/"
    },
    {
      "date_start": "2026-09-25",
      "date_end": "2026-10-07",
      "title": "Four address-poisoning losses on Ethereum",
      "region": "Global",
      "category": "address poisoning",
      "reported_loss_usd": 415136,
      "loss_note": "sum of 4 Scam Sniffer reports",
      "confidence": "MED",
      "primary_source": "https://x.com/realScamSniffer/status/2107644588953633116",
      "secondary_source": "https://support.metamask.io/stay-safe/protect-yourself/wallet-and-hardware/address-poisoning-scams/",
      "site_page": "/scams/address-poisoning/"
    },
    {
      "date_start": "2026-10-01",
      "date_end": "2026-10-01",
      "title": "Fake Apple support call leads to crypto-ATM loss; Liberty MO clerk stops another",
      "region": "US",
      "category": "crypto ATM",
      "reported_loss_usd": 20000,
      "loss_note": "more than $20,000 (one victim)",
      "confidence": "MED",
      "primary_source": "https://www.kmbc.com/article/crypto-atm-scam-warning-signs-how-to-avoid-losing-money/73987866",
      "secondary_source": null,
      "site_page": "/scams/crypto-atm-scams-kansas-missouri-2025/"
    },
    {
      "date_start": "2026-09-09",
      "date_end": "2026-09-09",
      "title": "Fake-warrant crypto-ATM scam; refund under Kansas HB 2591",
      "region": "Sedgwick County KS",
      "category": "crypto ATM",
      "reported_loss_usd": null,
      "loss_note": "not stated",
      "confidence": "HIGH",
      "primary_source": "https://www.sedgwickcounty.org/district-attorney/consumer-protection-division/consumer-protection-media-releases/new-consumer-protection-law-helps-scam-victim-recover-money-lost-to-cryptocurrency-atm/",
      "secondary_source": "https://www.kwch.com/2026/09/09/new-law-credited-helping-wichita-area-woman-recover-money-lost-cryptocurrency-scam/",
      "site_page": "/scams/crypto-atm-scams-kansas-missouri-2025/"
    },
    {
      "date_start": "2026-05-20",
      "date_end": "2026-05-20",
      "title": "Missouri AG sues CoinFlip (GPD Holdings) over kiosk scams",
      "region": "MO",
      "category": "enforcement",
      "reported_loss_usd": null,
      "loss_note": "allegations; penalties sought up to 1826000",
      "confidence": "HIGH",
      "primary_source": "https://ago.mo.gov/attorney-general-hanaway-files-suit-against-crypto-atm-network-for-enabling-scams/",
      "secondary_source": null,
      "site_page": "/scams/crypto-atm-scams-kansas-missouri-2025/"
    },
    {
      "date_start": "2026-05-15",
      "date_end": "2026-05-15",
      "title": "FBI IC3 2025 crypto-kiosk complaint data by state",
      "region": "US",
      "category": "data release",
      "reported_loss_usd": 388981267,
      "loss_note": "2025 adjusted losses, all states and territories",
      "confidence": "HIGH",
      "primary_source": "https://www.ic3.gov/PSA/2026/PSA260515-2",
      "secondary_source": null,
      "site_page": "/scams/crypto-atm-scams-kansas-missouri-2025/"
    }
  ]
}
