Scam tracker

Updated

What this is: a dated log of scams and wallet-security incidents we have checked against primary or named sources. Each row has a confidence rating and links to its sources. Get the whole log as incidents.csv.

Confidence ratings

Log (newest first)

DateWhatWhereReported lossConfidenceRead
2026-10-16Fake "Ledger firmware update" phishing pages built to steal recovery phrasesGlobaln/aHIGHIs it a scam?
2026-10-15FBI warns of midterm-election fraud: fake PACs, a fake "campaign investment pool," fake voter-registration texts, merchandise that never shipsUSn/aHIGHIC3 PSA
2026-10-13FTC sues "sextortion help" company Digital Forensics, alleging it took thousands of dollars on false promises. Same pattern as fake crypto "recovery" servicesUSn/aHIGH (allegations)FTC
2026-10-09 to 10-15Ledger devices sold by reseller CryptoBilis fitted with a hidden implant that steals the recovery phraseSoutheast Asia~$93.2M (Bitquery est.; not confirmed by Ledger)HIGH (event), MED (amount)Timeline
2026-10-08Kansas and 33 other state regulators settle with kiosk operator Coinme for $2.5M; Coinme to exit kiosks by 2027-01-01KS + 33 statesn/aHIGHKS/MO page
2026-09-25 to 10-07Four address-poisoning losses on EthereumGlobal$415,136 (sum)MED (single tracker; on-chain)How it works
2026-10-01Fake Apple support call led to a $20,000+ crypto-ATM loss; a Liberty, Mo. clerk stopped a second oneUS$20,000+MED (news report)KS/MO page
2026-09-09Fake-warrant crypto-ATM scam in Sedgwick County; victim refunded by check under Kansas HB 2591Wichita, KSnot statedHIGHKS/MO page
2026-05-20Missouri AG sues CoinFlip, alleging it facilitated kiosk scamsMOup to $1.826M penalties soughtHIGH (allegations)KS/MO page
2026-05-15FBI publishes 2025 crypto-kiosk complaint data by stateUS$388,981,267 (2025)HIGHKS/MO page

Data downloads

All our datasets, with tables, JSON, methodology and a citation, are on the data page.

You can reuse this data with a link back to this page. If you find an error, tell us and we will fix it with a dated note.

Method

We list an item only after reading the primary source (an agency, the company, a court filing, or the security firm that first reported it) or two independent named outlets. Loss figures are as reported and are not converted. When a third-party estimate is the only figure, we say so. We never call a named private individual a scammer. A row appears here only when a public authority or the affected company has made the claim.

Update cadence: we update this log weekly.

Changelog