# Scam tracker

Source: https://pausebeforesend.com/scams/  
Last updated: 2026-10-19  
AI-assisted, human-reviewed by J (2026-10-24).

**What this is:** a dated log of scams and wallet-security incidents we have checked against primary or named sources. Each row has a confidence rating and links to its sources. Get the whole log as [incidents.csv](https://pausebeforesend.com/data/incidents.csv).

## Confidence ratings

- **HIGH:** an official statement (agency, company or court filing) plus at least one independent source agree.
- **MED:** the event is confirmed, but the amount or cause is preliminary or disputed.
- **LOW:** a single source. We rarely list these, and we always say so.

## Log (newest first)

| Date | What | Where | Reported loss | Confidence | Read |
| --- | --- | --- | --- | --- | --- |
| 2026-10-16 | Fake "Ledger firmware update" phishing pages built to steal recovery phrases | Global | n/a | HIGH | [Is it a scam?](https://pausebeforesend.com/scams/fake-ledger-firmware-update/) |
| 2026-10-15 | FBI warns of midterm-election fraud: fake PACs, a fake "campaign investment pool," fake voter-registration texts, merchandise that never ships | US | n/a | HIGH | [IC3 PSA](https://www.ic3.gov/PSA/2026/PSA261015-3) |
| 2026-10-13 | FTC sues "sextortion help" company Digital Forensics, alleging it took thousands of dollars on false promises. Same pattern as fake crypto "recovery" services | US | n/a | HIGH (allegations) | [FTC](https://consumer.ftc.gov/consumer-alerts/2026/10/how-avoid-deceptive-sextortion-assistance-services-and-find-real-help) |
| 2026-10-09 to 10-15 | Ledger devices sold by reseller CryptoBilis fitted with a hidden implant that steals the recovery phrase | Southeast Asia | ~$93.2M (Bitquery est.; not confirmed by Ledger) | HIGH (event), MED (amount) | [Timeline](https://pausebeforesend.com/scams/fake-ledger-firmware-update/#why-now) |
| 2026-10-08 | Kansas and 33 other state regulators settle with kiosk operator Coinme for $2.5M; Coinme to exit kiosks by 2027-01-01 | KS + 33 states | n/a | HIGH | [KS/MO page](https://pausebeforesend.com/scams/crypto-atm-scams-kansas-missouri-2025/#kansas-law) |
| 2026-09-25 to 10-07 | Four address-poisoning losses on Ethereum | Global | $415,136 (sum) | MED (single tracker; on-chain) | [How it works](https://pausebeforesend.com/scams/address-poisoning/) |
| 2026-10-01 | Fake Apple support call led to a $20,000+ crypto-ATM loss; a Liberty, Mo. clerk stopped a second one | US | $20,000+ | MED (news report) | [KS/MO page](https://pausebeforesend.com/scams/crypto-atm-scams-kansas-missouri-2025/#how) |
| 2026-09-09 | Fake-warrant crypto-ATM scam in Sedgwick County; victim refunded by check under Kansas HB 2591 | Wichita, KS | not stated | HIGH | [KS/MO page](https://pausebeforesend.com/scams/crypto-atm-scams-kansas-missouri-2025/#kansas-law) |
| 2026-05-20 | Missouri AG sues CoinFlip, alleging it facilitated kiosk scams | MO | up to $1.826M penalties sought | HIGH (allegations) | [KS/MO page](https://pausebeforesend.com/scams/crypto-atm-scams-kansas-missouri-2025/#missouri-law) |
| 2026-05-15 | FBI publishes 2025 crypto-kiosk complaint data by state | US | $388,981,267 (2025) | HIGH | [KS/MO page](https://pausebeforesend.com/scams/crypto-atm-scams-kansas-missouri-2025/) |

## Data downloads

All our datasets, with tables, JSON, methodology and a citation, are on the [data page](https://pausebeforesend.com/data/).

- [incidents.csv](https://pausebeforesend.com/data/incidents.csv): this log, one row per entry, with source URLs.
- [ic3-kiosk-2025-by-state.csv](https://pausebeforesend.com/data/ic3-kiosk-2025-by-state.csv): FBI IC3 2025 crypto-kiosk complaints and losses for every state, with our ranks and per-complaint averages.

You can reuse this data with a link back to this page. If you find an error, tell us and we will fix it with a dated note.

## Method

We list an item only after reading the primary source (an agency, the company, a court filing, or the security firm that first reported it) or two independent named outlets. Loss figures are as reported and are not converted. When a third-party estimate is the only figure, we say so. We never call a named private individual a scammer. A row appears here only when a public authority or the affected company has made the claim.

**Update cadence:** we update this log weekly.

## Changelog

- 2026-10-19: Log started with 10 entries.