Audit log

Every state-changing event for MiCA Post-Deadline Crypto Firm Impersonation Scam Cluster — August 2026: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-08-07 17:08:28Z
   Score: ? → ? (no score change)
   anchorpending

   chain

   ●—

   hash

   Do2NhpG1mksT…2rNauxrccopysha256 → base58

   verifying row…

   canonical bytes (19469 B) ▸

   {"actor":"system:backfill","investigation_id":"7a46b309-a70d-44be-a0f7-6d3b9d0c2347","kind":"publish","page_slug":"mica-post-deadline-crypto-firm-impersonation-scam-cluster-august-2026","published_at":"2026-08-07T17:08:28.721Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"MiCA Post-Deadline Crypto Firm Impersonation Scam Cluster — August 2026","sections":[{"content":"This entry documents a confirmed scam cluster that emerged in the weeks following the July 1, 2026 MiCA (Markets in Crypto-Assets Regulation) compliance hard deadline. The cluster is not a single entity but a pattern of impersonation fraud carried out by unknown actors exploiting regulatory transition confusion in the European Union. Multiple EU financial watchdogs — ESMA, France's AMF, the Dutch AFM, and Belgium's FSMA — issued coordinated warnings beginning August 6, 2026, confirming the activity. The cluster targets retail investors who lost access to unlicensed platforms and are actively seeking MiCA-authorized replacements, making them particularly susceptible to fraudsters presenting false credentials of legitimacy.","heading":"Overview and Threat Classification","severity":"critical","sources":[{"credibility":2,"name":"EU watchdogs warn scammers are posing as crypto firms and regulators after MiCA deadline — The Block","type":"news_article","url":"https://www.theblock.co/post/410966/eu-watchdogs-warn-crypto-scams-mica"},{"credibility":2,"name":"EU Regulators Warn of Crypto Scams Amid MiCA Shakeout — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/eu-watchdogs-mica-crypto-impersonation-scams"},{"credibility":2,"name":"Scammers Pose as EU Regulators to Prey on MiCA Deadline Fallout — Decrypt","type":"news_article","url":"https://decrypt.co/375034/scammers-pose-as-eu-regulators-to-prey-on-mica-deadline-fallout"}]},{"content":"The Markets in Crypto-Assets Regulation (MiCA) core framework took effect December 2024, with a transitional window allowing crypto-asset service providers (CASPs) to continue operating under national frameworks until July 1, 2026. As that deadline passed, only approximately 320–338 firms across the European Economic Area had obtained full MiCA authorization, while an estimated 1,700+ previously registered providers were required to cease EU operations or restrict services. This created an unprecedented forced migration event: millions of retail customers simultaneously needed to identify and transfer assets to compliant platforms. Regulators explicitly flagged this migration window as the primary attack surface for the scam cluster. France's AMF, through its executive director Stéphane Pontoizeau, described the transition as 'an opportunity for scammers more than usual.' Notably, Binance — the largest exchange by trading volume — withdrew its MiCA application in Greece and as of the reporting period had not secured EU authorization, contributing to a large displaced user population.","heading":"Regulatory Background: MiCA Deadline and Market Displacement","severity":"high","sources":[{"credibility":3,"name":"83% of EU Crypto Firms Missed MiCA's July 1 Deadline — Eastern Herald","type":"news_article","url":"https://easternherald.com/2026/07/02/mica-casp-deadline-eu-crypto-firms-unlicensed-2026/"},{"credibility":2,"name":"ESMA Updates MiCA Register After Transition Deadline — Crowdfund Insider","type":"news_article","url":"https://www.crowdfundinsider.com/2026/07/289361-esma-updates-mica-register-after-transition-deadline-adding-standard-chartered-and-37-new-crypto-assets-service-providers/"},{"credibility":2,"name":"EU warns of crypto scams exploiting MiCA licensing transition — crypto.news","type":"news_article","url":"https://crypto.news/eu-warns-of-crypto-scams-exploiting-mica-licensing-transition/"},{"credibility":1,"name":"AMF notice on MiCA transitional period end — AMF France (official)","type":"regulatory","url":"https://www.amf-france.org/en/news-publications/news/amf-reminds-digital-asset-service-providers-transitional-period-allowing-them-continue-providing"}]},{"content":"Investigators and regulators have documented several distinct attack methods used within this scam cluster. First, impersonation of regulatory staff: fraudsters contact victims via email or messaging platforms while posing as ESMA or AMF representatives, using official-looking email addresses and stolen branding. ESMA clarified that all legitimate official communications originate from addresses ending in @esma.europa.eu and that the authority would never ask investors to transfer cryptocurrency or pay administrative fees. Second, fabricated MiCA authorization documents: scammers present forged CASP authorization certificates and spoofed ESMA registration numbers to establish false legitimacy when soliciting investment. Third, cloned websites: fraudulent websites mimicking ESMA's official portal, national competent authorities, and licensed exchanges have been identified, designed to collect credentials, private keys, or direct asset transfers. Fourth, recovery scams targeting prior victims: fraudsters also approach individuals who already suffered losses from unlicensed platforms, offering to recover funds in exchange for upfront fees. Fifth, urgency exploitation: scammers leverage the genuine regulatory deadline to create artificial urgency, threatening victims with claims of legal non-compliance if they do not act immediately to transfer assets to alleged 'compliant' wallets.","heading":"Scam Tactics and Attack Vectors","severity":"critical","sources":[{"credibility":2,"name":"ESMA warns of MiCA scam surge as fraudsters impersonate EU crypto regulators — Coin Turk","type":"news_article","url":"https://en.coin-turk.com/esma-warns-of-mica-scam-surge-as-fraudsters-impersonate-eu-crypto-regulators/"},{"credibility":3,"name":"EU Warns of Impersonation Scams After MiCA Deadline — GN Crypto News","type":"news_article","url":"https://www.gncrypto.news/news/eu-impersonation-scams-after-mica-deadline/"},{"credibility":2,"name":"Scammers Pose as Regulators to Exploit EU's MiCA Wind-Down — Crypto Times","type":"news_article","url":"https://www.cryptotimes.io/2026/08/06/scammers-pose-as-regulators-to-exploit-eus-mica-wind-down-watchdogs-warn/"},{"credibility":2,"name":"EU warns of crypto scams after MiCA compliance deadline — Cryptopolitan","type":"news_article","url":"https://www.cryptopolitan.com/eu-warns-crypto-scams-mica-deadline/"},{"credibility":3,"name":"MiCA Scammers Target EU Crypto Users During Exchange Closures — Coindoo","type":"news_article","url":"https://coindoo.com/mica-scammers-target-eu-crypto-users/"}]},{"content":"ESMA issued a formal advisory on August 6, 2026, confirming it was 'aware of criminals using the regulator's name, logo and forged documents' to deceive investors during the MiCA transition period. The advisory stated ESMA does not contact investors to reclaim lost funds or request administrative fees, and that criminals may fabricate documents, clone legitimate websites, or claim to be investigating crypto platforms. France's Autorité des Marchés Financiers (AMF) corroborated the ESMA advisory with its own warnings, with executive director Stéphane Pontoizeau explicitly noting cases in which fraudsters posed as AMF representatives and directed users to transfer assets through counterfeit websites. The Dutch Authority for the Financial Markets (AFM) and Belgium's Financial Services and Markets Authority (FSMA) also issued parallel warnings. The AMF noted it had deliberately advised against creating a strict customer migration deadline, citing concerns that artificial urgency increases susceptibility to fraud — a concern borne out by the scam cluster's exploitation of deadline-driven panic.","heading":"Official Regulatory Warnings","severity":"critical","sources":[{"credibility":2,"name":"EU Regulators Warn of Crypto Scams Amid MiCA Shakeout — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/eu-watchdogs-mica-crypto-impersonation-scams"},{"credibility":2,"name":"EU warns of crypto scams after MiCA compliance deadline — Cryptopolitan","type":"news_article","url":"https://www.cryptopolitan.com/eu-warns-crypto-scams-mica-deadline/"},{"credibility":1,"name":"ESMA Markets in Crypto-Assets Regulation — Official ESMA Page","type":"regulatory","url":"https://www.esma.europa.eu/esmas-activities/digital-finance-and-innovation/markets-crypto-assets-regulation-mica"},{"credibility":2,"name":"EU Watchdogs Flag Scam Surge After Fraudsters Mimic Crypto Firms — Crypto Economy","type":"news_article","url":"https://crypto-economy.com/eu-watchdogs-flag-scam-surge/"}]},{"content":"The scam cluster is structured around a specific, identifiable victim profile: retail EU investors who were customers of one or more of the 1,700+ unlicensed crypto firms forced offline by the MiCA deadline. These investors share key characteristics that make them high-value targets: they are actively seeking new, compliant platforms; they are unfamiliar with what genuine MiCA authorization looks like; they may be experiencing anxiety about their assets following service disruptions; and they are engaged in a genuine process of responding to regulatory communications from their departing platforms, making it easier for fraudulent messages to blend into legitimate contact. Scammers are alleged to have obtained contact details of displaced users through data purchased on dark web markets originating from data breaches of shuttered or exiting exchanges, though this specific vector has not been confirmed by regulators as of the reporting date. The Chainalysis 2026 Crypto Crime Report documented $17 billion in global crypto scam losses in 2025, with impersonation scams representing the fastest-growing fraud category and losses growing more than 1,400 percent compared to 2024.","heading":"Victim Profile and Targeting Logic","severity":"high","sources":[{"credibility":2,"name":"AI, Impersonations Drove Crypto Scam Losses to Record $17 Billion in 2025 — Decrypt","type":"research","url":"https://decrypt.co/354624/ai-impersonation-drove-crypto-scam-losses-record-17-billion-2025-chainalysis"},{"credibility":2,"name":"Chainalysis: Impersonation and AI scams are becoming crypto's biggest threat — CoinDesk","type":"research","url":"https://www.coindesk.com/business/2026/01/14/chainalysis-report-reveals-impersonation-and-ai-crypto-scams-surpass-cyberattacks"},{"credibility":2,"name":"EU warns of crypto scams exploiting MiCA licensing transition — crypto.news","type":"news_article","url":"https://crypto.news/eu-warns-of-crypto-scams-exploiting-mica-licensing-transition/"}]},{"content":"ESMA maintains a publicly accessible interim register of authorized crypto-asset service providers, updated weekly, available through the ESMA website. This register contains five CSV datasets tracking authorized CASPs, asset-referenced token issuers, e-money token issuers, non-compliant entities, and crypto-asset white papers. As of late July 2026, the register contained approximately 322–338 authorized firms across the European Economic Area. Coinbase, Kraken, and OKX are among confirmed MiCA license holders. Regulators advise investors to verify any platform's authorization status directly via the official ESMA register before transferring assets, and to initiate contact with any crypto service provider independently through the provider's verified official website rather than responding to inbound communications. Official ESMA emails exclusively use the domain @esma.europa.eu. Any unsolicited communication requesting cryptocurrency transfer, wallet seed phrases, private keys, or upfront fees in exchange for regulatory compliance assistance should be treated as fraudulent.","heading":"How to Verify Legitimate MiCA Authorization","severity":"medium","sources":[{"credibility":1,"name":"ESMA MiCA CASP Register — Official ESMA","type":"regulatory","url":"https://www.esma.europa.eu/esmas-activities/digital-finance-and-innovation/markets-crypto-assets-regulation-mica"},{"credibility":2,"name":"MiCA CASP register: EEA authorised firms — Outrun Advisory","type":"other","url":"https://www.outrun.at/micar-dashboard"},{"credibility":2,"name":"MiCA-Authorized CASPs List — ChainScreen","type":"other","url":"https://chainscreen.io/regulations/mica-authorized-casps-list"},{"credibility":2,"name":"EU warns of crypto scams after MiCA compliance deadline — Cryptopolitan","type":"news_article","url":"https://www.cryptopolitan.com/eu-warns-crypto-scams-mica-deadline/"}]}],"sources_used":[{"credibility":2,"name":"EU watchdogs warn scammers are posing as crypto firms and regulators after MiCA deadline — The Block","type":"news_article","url":"https://www.theblock.co/post/410966/eu-watchdogs-warn-crypto-scams-mica"},{"credibility":2,"name":"EU Regulators Warn of Crypto Scams Amid MiCA Shakeout — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/eu-watchdogs-mica-crypto-impersonation-scams"},{"credibility":2,"name":"Scammers Pose as EU Regulators to Prey on MiCA Deadline Fallout — Decrypt","type":"news_article","url":"https://decrypt.co/375034/scammers-pose-as-eu-regulators-to-prey-on-mica-deadline-fallout"},{"credibility":2,"name":"EU warns of crypto scams exploiting MiCA licensing transition — crypto.news","type":"news_article","url":"https://crypto.news/eu-warns-of-crypto-scams-exploiting-mica-licensing-transition/"},{"credibility":2,"name":"EU warns of crypto scams after MiCA compliance deadline — Cryptopolitan","type":"news_article","url":"https://www.cryptopolitan.com/eu-warns-crypto-scams-mica-deadline/"},{"credibility":2,"name":"ESMA warns of MiCA scam surge as fraudsters impersonate EU crypto regulators — Coin Turk","type":"news_article","url":"https://en.coin-turk.com/esma-warns-of-mica-scam-surge-as-fraudsters-impersonate-eu-crypto-regulators/"},{"credibility":2,"name":"Scammers Pose as Regulators to Exploit EU's MiCA Wind-Down — Crypto Times","type":"news_article","url":"https://www.cryptotimes.io/2026/08/06/scammers-pose-as-regulators-to-exploit-eus-mica-wind-down-watchdogs-warn/"},{"credibility":2,"name":"EU Watchdogs Flag Scam Surge After Fraudsters Mimic Crypto Firms — Crypto Economy","type":"news_article","url":"https://crypto-economy.com/eu-watchdogs-flag-scam-surge/"},{"credibility":3,"name":"83% of EU Crypto Firms Missed MiCA's July 1 Deadline — Eastern Herald","type":"news_article","url":"https://easternherald.com/2026/07/02/mica-casp-deadline-eu-crypto-firms-unlicensed-2026/"},{"credibility":2,"name":"ESMA Updates MiCA Register After Transition Deadline — Crowdfund Insider","type":"news_article","url":"https://www.crowdfundinsider.com/2026/07/289361-esma-updates-mica-register-after-transition-deadline-adding-standard-chartered-and-37-new-crypto-assets-service-providers/"},{"credibility":1,"name":"AMF notice on MiCA transitional period end — AMF France (official)","type":"regulatory","url":"https://www.amf-france.org/en/news-publications/news/amf-reminds-digital-asset-service-providers-transitional-period-allowing-them-continue-providing"},{"credibility":1,"name":"ESMA Markets in Crypto-Assets Regulation — Official ESMA Page","type":"regulatory","url":"https://www.esma.europa.eu/esmas-activities/digital-finance-and-innovation/markets-crypto-assets-regulation-mica"},{"credibility":2,"name":"AI, Impersonations Drove Crypto Scam Losses to Record $17 Billion in 2025 — Decrypt","type":"research","url":"https://decrypt.co/354624/ai-impersonation-drove-crypto-scam-losses-record-17-billion-2025-chainalysis"},{"credibility":2,"name":"Chainalysis: Impersonation and AI scams are becoming crypto's biggest threat — CoinDesk","type":"research","url":"https://www.coindesk.com/business/2026/01/14/chainalysis-report-reveals-impersonation-and-ai-crypto-scams-surpass-cyberattacks"},{"credibility":3,"name":"MiCA Scammers Target EU Crypto Users During Exchange Closures — Coindoo","type":"news_article","url":"https://coindoo.com/mica-scammers-target-eu-crypto-users/"},{"credibility":2,"name":"MiCA-Authorized CASPs List — ChainScreen","type":"other","url":"https://chainscreen.io/regulations/mica-authorized-casps-list"}],"summary":"Following the July 1, 2026 expiry of MiCA transitional arrangements, which forced over 1,700 unlicensed crypto firms to cease EU operations, financial regulators including ESMA, France's AMF, the Dutch AFM, and Belgium's FSMA identified a coordinated surge in impersonation fraud targeting displaced retail investors. Fraudsters have misused ESMA's official name, logo, and branding — including fabricated MiCA authorization documents and spoofed regulator communications — to deceive users seeking compliant alternatives into transferring assets to fraudulent wallets. This scam cluster is confirmed by formal regulatory advisories published August 6, 2026 and represents a distinct pattern exploiting genuine regulatory transition confusion.","timeline":[{"date":"2024-12","event":"Core MiCA regulations take effect across the European Union; transitional arrangements allow existing CASPs to continue under national frameworks until July 1, 2026.","source":"crypto.news","source_url":"https://crypto.news/eu-warns-of-crypto-scams-exploiting-mica-licensing-transition/"},{"date":"2026-05","event":"Only 194 firms had secured MiCA authorization as deadline approached; regulatory pressure intensifies on remaining applicants.","source":"Crowdfund Insider","source_url":"https://www.crowdfundinsider.com/2026/07/289361-esma-updates-mica-register-after-transition-deadline-adding-standard-chartered-and-37-new-crypto-assets-service-providers/"},{"date":"2026-06","event":"Binance withdraws its MiCA license application in Greece, signaling it will not obtain EU authorization before the deadline.","source":"Decrypt","source_url":"https://decrypt.co/375034/scammers-pose-as-eu-regulators-to-prey-on-mica-deadline-fallout"},{"date":"2026-07-01","event":"MiCA transitional period expires. Approximately 1,700+ unlicensed crypto firms required to cease or restrict EU operations. Approximately 320 CASPs hold valid authorization. Mass customer migration begins.","source":"Eastern Herald","source_url":"https://easternherald.com/2026/07/02/mica-casp-deadline-eu-crypto-firms-unlicensed-2026/"},{"date":"2026-07-31","event":"ESMA updates the official MiCA CASP register to reflect 323–338 authorized providers following post-deadline additions including Standard Chartered.","source":"Crowdfund Insider","source_url":"https://www.crowdfundinsider.com/2026/07/289361-esma-updates-mica-register-after-transition-deadline-adding-standard-chartered-and-37-new-crypto-assets-service-providers/"},{"date":"2026-08-05","event":"ESMA's interim MiCA register receives its latest update prior to the coordinated regulatory warning.","source":"Coin Turk","source_url":"https://en.coin-turk.com/esma-warns-of-mica-scam-surge-as-fraudsters-impersonate-eu-crypto-regulators/"},{"date":"2026-08-06","event":"ESMA, France's AMF, the Dutch AFM, and Belgium's FSMA issue coordinated formal advisories confirming that scammers are impersonating regulators and licensed crypto firms using forged MiCA authorization documents, cloned websites, and misappropriated ESMA branding to defraud EU retail investors.","source":"The Block / CoinTelegraph / Decrypt","source_url":"https://cointelegraph.com/news/eu-watchdogs-mica-crypto-impersonation-scams"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 36215a3a-34b1-4ede-acbd-93c87781cdbbcopy