Audit log

Every state-changing event for EU MiCA Regulator Impersonation Scam Wave: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-08-20 12:04:38Z
   Score: ? → ? (no score change)
   anchorpending

   chain

   ●—

   hash

   Hw9psTxYqZDJ…gS6pAy4ccopysha256 → base58

   verifying row…

   canonical bytes (19451 B) ▸

   {"actor":"system:backfill","investigation_id":"e554ffac-0e94-4306-af8b-f69c8a52c9d9","kind":"publish","page_slug":"eu-mica-regulator-impersonation-scam-wave","published_at":"2026-08-20T12:04:38.785Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"EU MiCA Regulator Impersonation Scam Wave","sections":[{"content":"The Markets in Crypto-Assets Regulation (MiCA) entered full force on December 30, 2024 and included a transitional period allowing crypto-asset service providers (CASPs) already operating in EU member states to continue while seeking authorization. That transitional period expired on July 1, 2026. By the deadline, only 323 firms appeared on ESMA's official interim MiCA register as authorized CASPs. Data provider VASPnet estimated that more than 1,700 unlicensed companies were required to cease serving EU clients. TRM Labs, in an analysis published around August 7, 2026, identified 1,062 EEA-operating firms without MiCA authorization as of July 1, with 281 holding authorization in its dataset. The scale of the forced migration — potentially affecting as many as 10 million retail users simultaneously directed to move digital assets — created the precise conditions that impersonation fraudsters exploit: urgency, unfamiliar new platforms, and plausible cover in the form of genuine wind-down communications already circulating from exiting firms.","heading":"Overview and Regulatory Context","severity":"high","sources":[{"credibility":2,"name":"EU Regulators Warn of MiCA Migration Scams as 1,700 Crypto Platforms Face EU Exit — FinanceFeeds","type":"news_article","url":"https://financefeeds.com/eu-regulators-warn-of-mica-migration-scams-as-1700-crypto-platforms-face-eu-exit/"},{"credibility":2,"name":"MiCA scam warnings rise as 1,000+ firms lose EU access — crypto.news","type":"news_article","url":"https://crypto.news/mica-scam-warnings-rise-as-firms-lose-eu-access/"},{"credibility":2,"name":"MiCA Deadline Leaves 1,700 Unlicensed Crypto Firms' Customers Exposed to Impersonation Fraud — The Currency Analytics","type":"news_article","url":"https://thecurrencyanalytics.com/regulations/mica-deadline-leaves-1700-unlicensed-crypto-firms-customers-exposed-to-impersonation-fraud-281933"},{"credibility":2,"name":"July 1 MiCA Deadline Looms: More Than 80% of EU Crypto Firms Still Unlicensed — Yahoo Finance","type":"news_article","url":"https://finance.yahoo.com/markets/crypto/articles/july-1-mica-deadline-looms-103215096.html"}]},{"content":"Both ESMA and France's AMF issued formal public warnings about the impersonation scam wave following the July 1, 2026 deadline. ESMA stated that it does not contact investors to reclaim lost funds or request administrative fees, and confirmed it was aware of fraudulent activity misusing its name, branding, and logo — including falsified documents — to lend scams a veneer of official legitimacy. ESMA advised that its official emails use only the '@esma.europa.eu' domain and that suspected impersonation incidents should be reported through the contact information on its fraud and scam page. France's AMF, through Stéphane Pontoizeau, its executive director and head of market intermediaries supervision, characterized the regulatory transition as creating 'an opportunity for scammers more than usual.' The AMF separately confirmed it does not offer financial services or contact people to conduct financial operations on its behalf. The Dutch Authority for the Financial Markets (AFM) and Belgium's FSMA also raised public awareness about the pattern, and Austria's FMA advised customers to verify providers through ESMA's register before making any transfers.","heading":"Formal Regulatory Warnings","severity":"critical","sources":[{"credibility":2,"name":"ESMA warns of MiCA scam surge as fraudsters impersonate EU crypto regulators — Coin Turk","type":"news_article","url":"https://en.coin-turk.com/esma-warns-of-mica-scam-surge-as-fraudsters-impersonate-eu-crypto-regulators/"},{"credibility":2,"name":"Scammers Pose as Regulators to Exploit EU's MiCA Wind-Down, Watchdogs Warn — Crypto Times","type":"news_article","url":"https://www.cryptotimes.io/2026/08/06/scammers-pose-as-regulators-to-exploit-eus-mica-wind-down-watchdogs-warn/"},{"credibility":2,"name":"EU watchdogs warn crypto scams MiCA — The Block","type":"news_article","url":"https://www.theblock.co/news/regulation/2026-08-06-eu-watchdogs-warn-crypto-scams-mica-410966"},{"credibility":2,"name":"EU warns of crypto scams after MiCA compliance deadline — Cryptopolitan","type":"news_article","url":"https://www.cryptopolitan.com/eu-warns-crypto-scams-mica-deadline/"}]},{"content":"Reporting by The Block, Crypto Times, CoinDesk, and others, as well as statements from ESMA and the AMF, describe a multi-vector fraud cluster with the following common mechanics. First, fraudsters copy the exact language from genuine wind-down and migration notices already being sent to users by exiting unlicensed platforms. These cloned communications are delivered via email, SMS, telephone, and social media. Second, victims are directed to counterfeit websites that mimic the interfaces of legitimate exchanges or the visual identity of EU regulators, including copied logos, regulatory case numbers, and official-looking document templates. Third, once on a fake platform, victims are asked to enter login credentials or authentication codes — harvested for account takeover — or are instructed to transfer assets to an attacker-controlled wallet described as a 'temporary compliant platform' or 'MiCA-approved escrow.' Fourth, a parallel pattern identified by the AMF involves fraudsters posing as AMF employees and demanding upfront 'administrative fees' from victims seeking to recover funds from closed platforms — a form of advance-fee fraud layered on top of the migration confusion. Chainalysis data cited in contemporaneous reporting estimated that crypto scam and fraud losses globally reached $17 billion in 2025, with impersonation fraud described as the fastest-growing category.","heading":"Scam Mechanics","severity":"critical","sources":[{"credibility":2,"name":"MiCA Scammers Target EU Crypto Users During Exchange Closures — Coindoo","type":"news_article","url":"https://coindoo.com/mica-scammers-target-eu-crypto-users/"},{"credibility":2,"name":"Scammers Pose as Regulators to Exploit EU's MiCA Wind-Down, Watchdogs Warn — Crypto Times","type":"news_article","url":"https://www.cryptotimes.io/2026/08/06/scammers-pose-as-regulators-to-exploit-eus-mica-wind-down-watchdogs-warn/"},{"credibility":1,"name":"How the EU's new crypto rules triggered a massive scam wave — CoinDesk","type":"news_article","url":"https://www.coindesk.com/business/2026/08/14/mica-s-cleanup-is-creating-a-new-scam-wave-across-the-european-union"},{"credibility":3,"name":"EU Warns of Impersonation Scams After MiCA Deadline — GNCrypto News","type":"news_article","url":"https://www.gncrypto.news/news/eu-impersonation-scams-after-mica-deadline/"}]},{"content":"The scale of potential victim exposure is unusually large. With an estimated 1,700 or more unlicensed platforms simultaneously directing users to migrate assets, analysts described the situation as affecting as many as 10 million retail users across EU member states. This creates a broad, time-pressured pool of targets who have already received genuine migration notices, making them more susceptible to spoofed equivalents. Notable platforms that either exited or came under scrutiny during this period include Binance, which withdrew its MiCA application in Greece in June 2026 and remained without a valid EU authorization at the July 1 deadline, and several smaller national registrants across Poland, which alone had accounted for over 1,400 national VASP registrations. Reporting as of August 2026 had not produced specific aggregated victim loss figures attributable solely to this scam cluster, and no enforcement actions against identified perpetrators had been publicly announced. The scale of displacement is documented; the cumulative financial damage from scams exploiting it remains unquantified in publicly available sources as of this writing.","heading":"Scope and Victim Population","severity":"high","sources":[{"credibility":2,"name":"MiCA scam warnings rise as 1,000+ firms lose EU access — crypto.news","type":"news_article","url":"https://crypto.news/mica-scam-warnings-rise-as-firms-lose-eu-access/"},{"credibility":2,"name":"EU Regulators Warn of MiCA Migration Scams as 1,700 Crypto Platforms Face EU Exit — FinanceFeeds","type":"news_article","url":"https://financefeeds.com/eu-regulators-warn-of-mica-migration-scams-as-1700-crypto-platforms-face-eu-exit/"},{"credibility":2,"name":"Scammers posing as EU regulators prey on users — Yahoo Finance","type":"news_article","url":"https://finance.yahoo.com/markets/crypto/articles/scammers-pose-eu-regulators-prey-124619269.html"}]},{"content":"ESMA, the AMF, and national regulators converged on consistent public guidance. Legitimate regulators — including ESMA and the AMF — do not contact retail investors unsolicited to recover lost funds, request administrative fees, solicit private keys or seed phrases, create temporary wallets or escrow addresses, or ask for fund transfers via private messages. Users should verify any firm's authorization status via ESMA's official interim MiCA register (the specific legal entity, not just a parent brand name, must appear on the register, as global exchanges often operate via multiple subsidiaries with separate authorizations). Suspected impersonation of ESMA can be reported through ESMA's fraud and scam page. Victims should preserve all communications and transaction records, contact their national financial authority, and report incidents to local police. Red flags specific to this scam cluster include: unsolicited emails or calls referencing MiCA compliance deadlines, instructions to move funds to a platform described as 'MiCA-compliant' or 'licensed' that cannot be independently verified via the ESMA register, requests for upfront fees to release or transfer funds, and documents or email domains that do not exactly match official regulatory domains (e.g., '@esma.europa.eu').","heading":"Red Flags and Protective Guidance","severity":"medium","sources":[{"credibility":2,"name":"ESMA warns of MiCA scam surge as fraudsters impersonate EU crypto regulators — Coin Turk","type":"news_article","url":"https://en.coin-turk.com/esma-warns-of-mica-scam-surge-as-fraudsters-impersonate-eu-crypto-regulators/"},{"credibility":2,"name":"MiCA Scammers Target EU Crypto Users During Exchange Closures — Coindoo","type":"news_article","url":"https://coindoo.com/mica-scammers-target-eu-crypto-users/"},{"credibility":2,"name":"EU warns of crypto scams after MiCA compliance deadline — Cryptopolitan","type":"news_article","url":"https://www.cryptopolitan.com/eu-warns-crypto-scams-mica-deadline/"}]},{"content":"The MiCA impersonation wave sits within a broader acceleration of crypto impersonation fraud. Chainalysis reported that crypto scam and fraud losses globally reached $17 billion in 2025, rising from approximately $6 billion five years prior, with impersonation described as the fastest-growing fraud category in the sector. The MiCA transition created a structural vulnerability that is distinct from opportunistic impersonation: genuine wind-down notices from exiting firms provided fraudsters with authentic template language, authenticated branding, and plausible pretext — all delivered to the same victim pools at the same time. Multiple national regulators, including France's AMF, the Dutch AFM, Belgium's FSMA, and Austria's FMA, independently identified and publicly flagged incidents, indicating the scam cluster was widespread across member states rather than concentrated in a single jurisdiction.","heading":"Broader Fraud Landscape","severity":"high","sources":[{"credibility":1,"name":"How the EU's new crypto rules triggered a massive scam wave — CoinDesk","type":"news_article","url":"https://www.coindesk.com/business/2026/08/14/mica-s-cleanup-is-creating-a-new-scam-wave-across-the-european-union"},{"credibility":2,"name":"EU Watchdogs Flag Scam Surge After Fraudsters Mimic Crypto Firms Exploiting MiCA Rules — Crypto Economy","type":"news_article","url":"https://crypto-economy.com/eu-watchdogs-flag-scam-surge/"},{"credibility":3,"name":"Crypto Scams Surge After EU MiCA Rules Take Effect, With Fraudsters Posing as Regulators — Bloomingbit","type":"news_article","url":"https://en.bloomingbit.io/feed/news/118426"}]}],"sources_used":[{"credibility":1,"name":"How the EU's new crypto rules triggered a massive scam wave — CoinDesk","type":"news_article","url":"https://www.coindesk.com/business/2026/08/14/mica-s-cleanup-is-creating-a-new-scam-wave-across-the-european-union"},{"credibility":1,"name":"EU watchdogs warn crypto scams MiCA — The Block","type":"news_article","url":"https://www.theblock.co/news/regulation/2026-08-06-eu-watchdogs-warn-crypto-scams-mica-410966"},{"credibility":2,"name":"Scammers posing as EU regulators prey on users — Yahoo Finance","type":"news_article","url":"https://finance.yahoo.com/markets/crypto/articles/scammers-pose-eu-regulators-prey-124619269.html"},{"credibility":2,"name":"Scammers Pose as Regulators to Exploit EU's MiCA Wind-Down, Watchdogs Warn — Crypto Times","type":"news_article","url":"https://www.cryptotimes.io/2026/08/06/scammers-pose-as-regulators-to-exploit-eus-mica-wind-down-watchdogs-warn/"},{"credibility":2,"name":"MiCA scam warnings rise as 1,000+ firms lose EU access — crypto.news","type":"news_article","url":"https://crypto.news/mica-scam-warnings-rise-as-firms-lose-eu-access/"},{"credibility":2,"name":"ESMA warns of MiCA scam surge as fraudsters impersonate EU crypto regulators — Coin Turk","type":"news_article","url":"https://en.coin-turk.com/esma-warns-of-mica-scam-surge-as-fraudsters-impersonate-eu-crypto-regulators/"},{"credibility":2,"name":"EU warns of crypto scams after MiCA compliance deadline — Cryptopolitan","type":"news_article","url":"https://www.cryptopolitan.com/eu-warns-crypto-scams-mica-deadline/"},{"credibility":2,"name":"EU Regulators Warn of MiCA Migration Scams as 1,700 Crypto Platforms Face EU Exit — FinanceFeeds","type":"news_article","url":"https://financefeeds.com/eu-regulators-warn-of-mica-migration-scams-as-1700-crypto-platforms-face-eu-exit/"},{"credibility":2,"name":"MiCA Scammers Target EU Crypto Users During Exchange Closures — Coindoo","type":"news_article","url":"https://coindoo.com/mica-scammers-target-eu-crypto-users/"},{"credibility":2,"name":"MiCA Deadline Leaves 1,700 Unlicensed Crypto Firms' Customers Exposed to Impersonation Fraud — The Currency Analytics","type":"news_article","url":"https://thecurrencyanalytics.com/regulations/mica-deadline-leaves-1700-unlicensed-crypto-firms-customers-exposed-to-impersonation-fraud-281933"},{"credibility":2,"name":"EU Watchdogs Flag Scam Surge After Fraudsters Mimic Crypto Firms Exploiting MiCA Rules — Crypto Economy","type":"news_article","url":"https://crypto-economy.com/eu-watchdogs-flag-scam-surge/"},{"credibility":1,"name":"Europe's unlicensed crypto firms face wipeout as MiCA transition deadline falls — CoinDesk","type":"news_article","url":"https://www.coindesk.com/policy/2026/06/29/europe-s-unlicensed-crypto-firms-face-wipeout-as-final-regulatory-deadline-falls"},{"credibility":3,"name":"Fake Legal Exchange Scams Surge After MiCA Rollout — Bitcoin World","type":"news_article","url":"https://bitcoinworld.co.in/fake-legal-exchange-scams-surge-mica/"},{"credibility":3,"name":"EU Warns of Impersonation Scams After MiCA Deadline — GNCrypto News","type":"news_article","url":"https://www.gncrypto.news/news/eu-impersonation-scams-after-mica-deadline/"}],"summary":"Following the July 1, 2026 expiry of MiCA's transitional period, which forced an estimated 1,700 or more unlicensed crypto firms to wind down EU operations, a coordinated wave of impersonation fraud emerged in which criminals pose as European financial regulators — including ESMA and France's AMF — and as shuttered exchanges, in order to steal funds from displaced users. France's AMF and ESMA have each formally warned of the pattern, describing fraudsters who clone official communications, fabricate regulatory documents, and charge upfront 'administrative fees' to victims seeking to recover assets. This is a systemic, infrastructure-level fraud cluster rather than a single actor, with multiple national regulators across the EU reporting incidents.","timeline":[{"date":"2024-12-30","event":"MiCA (Markets in Crypto-Assets Regulation) entered full force across the EU, with a transitional period for existing CASPs to obtain authorization.","source":"FinanceFeeds","source_url":"https://financefeeds.com/eu-regulators-warn-of-mica-migration-scams-as-1700-crypto-platforms-face-eu-exit/"},{"date":"2026-06-01","event":"Binance withdrew its MiCA licensing application in Greece, leaving it without EU authorization ahead of the July 1 deadline.","source":"Crypto Times","source_url":"https://www.cryptotimes.io/2026/08/06/scammers-pose-as-regulators-to-exploit-eus-mica-wind-down-watchdogs-warn/"},{"date":"2026-06-29","event":"CoinDesk reported that Europe's unlicensed crypto firms faced a 'wipeout' as the final MiCA regulatory deadline approached, with only a fraction of operating firms holding authorization.","source":"CoinDesk","source_url":"https://www.coindesk.com/policy/2026/06/29/europe-s-unlicensed-crypto-firms-face-wipeout-as-final-regulatory-deadline-falls"},{"date":"2026-07-01","event":"MiCA transitional period expired. An estimated 1,700 or more unlicensed crypto firms required to cease serving EU clients. Only 323 firms held valid MiCA authorization. As many as 10 million users began receiving wind-down and migration notices simultaneously.","source":"crypto.news","source_url":"https://crypto.news/mica-scam-warnings-rise-as-firms-lose-eu-access/"},{"date":"2026-07-31","event":"ESMA's updated interim MiCA register listed 323 authorized CASPs as of late July 2026.","source":"Crypto Times","source_url":"https://www.cryptotimes.io/2026/08/06/scammers-pose-as-regulators-to-exploit-eus-mica-wind-down-watchdogs-warn/"},{"date":"2026-08-06","event":"The Block, Crypto Times, and Yahoo Finance reported EU watchdogs — including ESMA and France's AMF — formally warning of a surge in impersonation scams exploiting the MiCA migration period. AMF's Stéphane Pontoizeau stated the transition created 'an opportunity for scammers more than usual.'","source":"The Block / Crypto Times / Yahoo Finance","source_url":"https://www.theblock.co/news/regulation/2026-08-06-eu-watchdogs-warn-crypto-scams-mica-410966"},{"date":"2026-08-07","event":"TRM Labs published an analysis identifying 1,062 EEA-operating firms without MiCA authorization as of July 1, alongside 281 authorized firms in its dataset.","source":"crypto.news","source_url":"https://crypto.news/mica-scam-warnings-rise-as-firms-lose-eu-access/"},{"date":"2026-08-14","event":"CoinDesk published a detailed report describing the MiCA cleanup as triggering 'a massive scam wave across the European Union,' documenting the full mechanics of the impersonation cluster.","source":"CoinDesk","source_url":"https://www.coindesk.com/business/2026/08/14/mica-s-cleanup-is-creating-a-new-scam-wave-across-the-european-union"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 8927e708-0617-4bd1-a27f-fde806d64d3ccopy