Audit log

Every state-changing event for MiCA Post-Deadline Impersonation Scam Cluster — ESMA/AMF Warning August 2026: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-08-07 12:05:35Z
   Score: ? → ? (no score change)
   anchorpending

   chain

   ●—

   hash

   DU6vGy1Kendx…SNorR8oHcopysha256 → base58

   verifying row…

   canonical bytes (21866 B) ▸

   {"actor":"system:backfill","investigation_id":"a531e342-f813-4cf2-ad17-392497d9e60f","kind":"publish","page_slug":"mica-post-deadline-impersonation-scam-cluster-esma-amf-warning-august-2026","published_at":"2026-08-07T12:05:35.203Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"MiCA Post-Deadline Impersonation Scam Cluster — ESMA/AMF Warning August 2026","sections":[{"content":"The EU Markets in Crypto-Assets (MiCA) Regulation entered its core operational phase in December 2024. Crypto-asset service providers (CASPs) that had been operating under national frameworks were granted a transitional period allowing continued operation until July 1, 2026, provided they applied for authorization. When the transitional period expired, entities that had not obtained full MiCA authorization were required to immediately cease providing services to EU clients. According to ESMA, approximately 323 firms appeared on its authorized register as of late July 2026, while VASPnet estimated that more than 1,700 providers would need to halt or restrict EU operations. Notable unlicensed firms include Binance, which withdrew its MiCA application in Greece and suspended EU services from July 1, 2026. This created an environment in which millions of retail investors simultaneously received legitimate communications from their providers instructing them to withdraw or migrate their assets, a condition that investigators and regulators identified as highly favorable for impersonation fraud.","heading":"Background: MiCA Transitional Period and Market Disruption","severity":"medium","sources":[{"credibility":1,"name":"ESMA Public Statement: ESMA calls on unauthorised crypto-asset service providers to wind down orderly (June 2026)","type":"regulatory","url":"https://www.esma.europa.eu/sites/default/files/2026-06/ESMA75-113276571-1710_Public_Statement_MiCA_transitional_period_ends.pdf"},{"credibility":1,"name":"AMF: End of the MiCA transitional period — ESMA sets out its expectations","type":"regulatory","url":"https://www.amf-france.org/en/news-publications/news/end-mica-transitional-period-esma-sets-out-its-expectations-professionals-and-warns-retail-investors"},{"credibility":2,"name":"CoinDesk: Binance tells EU users it will no longer provide services after failing to secure MiCA license","type":"news_article","url":"https://www.coindesk.com/policy/2026/06/26/binance-tells-eu-users-it-will-no-longer-provide-services-after-failing-to-secure-mica-license"},{"credibility":2,"name":"Decrypt: Scammers Pose as EU Regulators to Prey on MiCA Deadline Fallout","type":"news_article","url":"https://decrypt.co/375034/scammers-pose-as-eu-regulators-to-prey-on-mica-deadline-fallout"}]},{"content":"On or around August 6, 2026, multiple EU financial regulators publicly warned of a surge in impersonation scams exploiting the MiCA transition. ESMA stated it was aware of fraudulent activity misusing its own logo, name, and identity — including falsified documents — to lend scams an appearance of official legitimacy. ESMA clarified that it does not contact investors to reclaim lost funds, request administrative fees, or instruct consumers to transfer crypto-assets to specific accounts or wallets. Stéphane Pontoizeau, executive director at France's AMF, described the period as 'an opportunity for scammers more than usual,' and confirmed the AMF had observed cases in which fraudsters impersonated AMF representatives, directing victims to fake websites to transfer their cryptocurrency. The Dutch Authority for the Financial Markets (AFM) and Belgium's Financial Services and Markets Authority (FSMA) issued parallel warnings. ESMA confirmed that official communications from the authority always originate from email addresses ending in @esma.europa.eu.","heading":"Regulator Warnings and Official Statements","severity":"critical","sources":[{"credibility":2,"name":"Decrypt: Scammers Pose as EU Regulators to Prey on MiCA Deadline Fallout","type":"news_article","url":"https://decrypt.co/375034/scammers-pose-as-eu-regulators-to-prey-on-mica-deadline-fallout"},{"credibility":2,"name":"CoinTelegraph: EU Regulators Warn of Crypto Scams Amid MiCA Shakeout","type":"news_article","url":"https://cointelegraph.com/news/eu-watchdogs-mica-crypto-impersonation-scams"},{"credibility":2,"name":"Cryptopolitan: EU warns of crypto scams after MiCA compliance deadline","type":"news_article","url":"https://www.cryptopolitan.com/eu-warns-crypto-scams-mica-deadline/"},{"credibility":2,"name":"Crypto Times: Scammers Pose as Regulators to Exploit EU's MiCA Wind-Down, Watchdogs Warn (August 6, 2026)","type":"news_article","url":"https://www.cryptotimes.io/2026/08/06/scammers-pose-as-regulators-to-exploit-eus-mica-wind-down-watchdogs-warn/"},{"credibility":2,"name":"The Block: EU watchdogs warn scammers are posing as crypto firms and regulators after MiCA deadline","type":"news_article","url":"https://www.theblock.co/post/410966/eu-watchdogs-warn-crypto-scams-mica"}]},{"content":"The impersonation cluster employs several documented tactics. In the primary attack vector, fraudsters contact customers of unlicensed or exiting exchanges by phone, email, text message, or social media, posing as regulatory officials (e.g., ESMA or AMF staff) or as customer support representatives of licensed exchanges such as Coinbase, Kraken, or OKX. Victims are instructed to transfer their crypto-assets to a 'safe' or 'compliant' account, which in practice is a wallet or platform controlled by the criminals. Secondary tactics include: fabrication of official-looking documents bearing ESMA or national regulator branding; cloning of legitimate exchange websites with altered deposit addresses; creation of urgency by citing the MiCA compliance deadline as a reason for immediate action; and exploitation of AI-assisted social engineering and phishing. A secondary scam layer also targets prior fraud victims through alleged 'asset recovery services' that charge upfront fees before disappearing. Regulators explicitly warned that no legitimate regulator or authorized exchange will request passwords, private keys, seed phrases, or instruct consumers to transfer assets to an unfamiliar account.","heading":"Scam Tactics and Methods","severity":"critical","sources":[{"credibility":2,"name":"Coin Turk: ESMA warns of MiCA scam surge as fraudsters impersonate EU crypto regulators","type":"news_article","url":"https://en.coin-turk.com/esma-warns-of-mica-scam-surge-as-fraudsters-impersonate-eu-crypto-regulators/"},{"credibility":2,"name":"Crypto Times: Scammers Pose as Regulators to Exploit EU's MiCA Wind-Down, Watchdogs Warn","type":"news_article","url":"https://www.cryptotimes.io/2026/08/06/scammers-pose-as-regulators-to-exploit-eus-mica-wind-down-watchdogs-warn/"},{"credibility":2,"name":"Cryptopolitan: EU warns of crypto scams after MiCA compliance deadline","type":"news_article","url":"https://www.cryptopolitan.com/eu-warns-crypto-scams-mica-deadline/"},{"credibility":3,"name":"Spaziocrypto: MiCA Crypto Scams in Europe: How to Spot Fake Exchanges","type":"news_article","url":"https://en.spaziocrypto.com/security/mica-crypto-scams-europe-fake-exchanges-how-to-protect-yourself/"}]},{"content":"Belgium's FSMA took a more specific enforcement step on July 6, 2026, formally adding six entities to its official fraudulent crypto-asset service provider list following the MiCA deadline. The named entities are: Aurum Foundation, Bank Bit, Bithf Pro, Dxago, Global Dynamic Trade, and ZeriaFunding. The FSMA advised consumers not to engage with these businesses, which it stated were continuing to operate in Belgium despite lacking authorization as CASPs. The FSMA explicitly noted that the list 'is not exhaustive and will continue to be updated as new cases emerge.' The authority also warned against 'recovery rooms' — secondary scam services that pose as victim support or asset recovery operations — targeting individuals already defrauded by these entities.","heading":"Belgium FSMA Enforcement: Named Fraudulent Entities","severity":"critical","sources":[{"credibility":2,"name":"Crypto Times: Belgium Flags Six Crypto Firms as MiCA Enforcement Begins (July 6, 2026)","type":"news_article","url":"https://www.cryptotimes.io/2026/07/06/belgium-flags-six-crypto-firms-as-mica-enforcement-begins/"},{"credibility":2,"name":"The Currency Analytics: Belgium's FSMA Flags 6 Unauthorized Crypto Providers After MiCA Deadline Hits","type":"news_article","url":"https://thecurrencyanalytics.com/regulations/belgiums-fsma-flags-6-unauthorized-crypto-providers-after-mica-deadline-hits-273184"},{"credibility":3,"name":"Behind MLM: Aurum Foundation MiCA fraud warning from Belgium","type":"community_report","url":"https://behindmlm.com/companies/aurum-foundation-mica-fraud-warning-from-belgium/"}]},{"content":"No specific aggregate loss figure attributable exclusively to MiCA-related impersonation scams has been publicly disclosed by regulators as of August 2026. Chainalysis data cited in multiple news reports indicated that crypto scams and fraud generated approximately $17 billion in global illegal revenue in 2025, up from roughly $6 billion in 2020. Blockchain analytics firms noted that impersonation scams were among the fastest-growing categories of crypto fraud as of 2025. The MiCA transition created a structural vulnerability: approximately 1,700 or more unlicensed providers were required to contact their EU customers about asset transfers, meaning a large population simultaneously received legitimate fund-migration communications, creating an ideal impersonation surface. No on-chain forensic data attributing specific wallet clusters to this scam operation has been publicly published as of the investigation date.","heading":"Scale and Financial Context","severity":"high","sources":[{"credibility":2,"name":"Decrypt: Scammers Pose as EU Regulators to Prey on MiCA Deadline Fallout","type":"news_article","url":"https://decrypt.co/375034/scammers-pose-as-eu-regulators-to-prey-on-mica-deadline-fallout"},{"credibility":2,"name":"Crypto Economy: EU Watchdogs Flag Scam Surge After Fraudsters Mimic Crypto Firms Exploiting MiCA Rules","type":"news_article","url":"https://crypto-economy.com/eu-watchdogs-flag-scam-surge/"}]},{"content":"ESMA, the AMF, the AFM, and the FSMA collectively issued the following guidance to retail investors: (1) Verify any crypto-asset service provider against the official ESMA interim MiCA register before transferring funds or opening an account. (2) Navigate to exchange websites or apps directly — do not follow links from emails, SMS, or social media messages. (3) Official ESMA communications originate only from @esma.europa.eu email addresses; any other domain claiming to be ESMA should be treated as fraudulent. (4) Regulators do not cold-contact consumers to instruct them to transfer assets to specific accounts, reclaim lost funds, or charge administrative fees. (5) Legitimate exchanges do not request passwords, private keys, or seed phrases. (6) Victims of fraud should stop sending funds immediately, cease contact with the scammer, notify their bank, preserve all documentation, and report to the relevant national authority. (7) Individuals who have already been defrauded should be especially wary of secondary 'asset recovery' offers, which are themselves a known scam category.","heading":"Consumer Protection Guidance Issued by Regulators","severity":"low","sources":[{"credibility":1,"name":"AMF: End of the MiCA transitional period — ESMA sets out its expectations","type":"regulatory","url":"https://www.amf-france.org/en/news-publications/news/end-mica-transitional-period-esma-sets-out-its-expectations-professionals-and-warns-retail-investors"},{"credibility":2,"name":"Crypto Times: Scammers Pose as Regulators to Exploit EU's MiCA Wind-Down","type":"news_article","url":"https://www.cryptotimes.io/2026/08/06/scammers-pose-as-regulators-to-exploit-eus-mica-wind-down-watchdogs-warn/"},{"credibility":3,"name":"Coindoo: MiCA Scammers Target EU Crypto Users During Exchange Closures","type":"news_article","url":"https://coindoo.com/mica-scammers-target-eu-crypto-users/"}]},{"content":"As of August 2026, no individual perpetrators or organized criminal groups have been publicly named by ESMA, AMF, AFM, or FSMA in connection with the post-MiCA impersonation cluster. The Belgium FSMA named six allegedly fraudulent entities (Aurum Foundation, Bank Bit, Bithf Pro, Dxago, Global Dynamic Trade, ZeriaFunding) operating without CASP authorization, but these were characterized as unauthorized service providers rather than explicitly as impersonation scam operators. Law enforcement investigations, if initiated, have not been publicly disclosed. The entity described in this investigation should be understood as a cluster of operationally distinct but tactically similar fraud operations, not a single unified criminal organization.","heading":"Attribution and Perpetrators","severity":"high","sources":[{"credibility":2,"name":"Crypto Times: Belgium Flags Six Crypto Firms as MiCA Enforcement Begins","type":"news_article","url":"https://www.cryptotimes.io/2026/07/06/belgium-flags-six-crypto-firms-as-mica-enforcement-begins/"},{"credibility":2,"name":"The Block: EU watchdogs warn scammers are posing as crypto firms and regulators after MiCA deadline","type":"news_article","url":"https://www.theblock.co/post/410966/eu-watchdogs-warn-crypto-scams-mica"}]}],"sources_used":[{"credibility":1,"name":"ESMA Public Statement: MiCA transitional period ends (June 2026)","type":"regulatory","url":"https://www.esma.europa.eu/sites/default/files/2026-06/ESMA75-113276571-1710_Public_Statement_MiCA_transitional_period_ends.pdf"},{"credibility":1,"name":"AMF: End of the MiCA transitional period — ESMA sets out its expectations and warns retail investors","type":"regulatory","url":"https://www.amf-france.org/en/news-publications/news/end-mica-transitional-period-esma-sets-out-its-expectations-professionals-and-warns-retail-investors"},{"credibility":1,"name":"ESMA Statement on the end of transitional periods under MiCA (April 2026)","type":"regulatory","url":"https://www.esma.europa.eu/sites/default/files/2026-04/ESMA75-113276571-1679_Statement_on_the_end_of_transitional_periods_under_MiCA.pdf"},{"credibility":2,"name":"The Block: EU watchdogs warn scammers are posing as crypto firms and regulators after MiCA deadline","type":"news_article","url":"https://www.theblock.co/post/410966/eu-watchdogs-warn-crypto-scams-mica"},{"credibility":2,"name":"Decrypt: Scammers Pose as EU Regulators to Prey on MiCA Deadline Fallout","type":"news_article","url":"https://decrypt.co/375034/scammers-pose-as-eu-regulators-to-prey-on-mica-deadline-fallout"},{"credibility":2,"name":"CoinTelegraph: EU Regulators Warn of Crypto Scams Amid MiCA Shakeout","type":"news_article","url":"https://cointelegraph.com/news/eu-watchdogs-mica-crypto-impersonation-scams"},{"credibility":2,"name":"Cryptopolitan: EU warns of crypto scams after MiCA compliance deadline","type":"news_article","url":"https://www.cryptopolitan.com/eu-warns-crypto-scams-mica-deadline/"},{"credibility":2,"name":"Crypto Times: Scammers Pose as Regulators to Exploit EU's MiCA Wind-Down, Watchdogs Warn (August 6, 2026)","type":"news_article","url":"https://www.cryptotimes.io/2026/08/06/scammers-pose-as-regulators-to-exploit-eus-mica-wind-down-watchdogs-warn/"},{"credibility":2,"name":"Crypto Times: Belgium Flags Six Crypto Firms as MiCA Enforcement Begins (July 6, 2026)","type":"news_article","url":"https://www.cryptotimes.io/2026/07/06/belgium-flags-six-crypto-firms-as-mica-enforcement-begins/"},{"credibility":2,"name":"CoinDesk: Binance tells EU users it will no longer provide services after failing to secure MiCA license","type":"news_article","url":"https://www.coindesk.com/policy/2026/06/26/binance-tells-eu-users-it-will-no-longer-provide-services-after-failing-to-secure-mica-license"},{"credibility":2,"name":"Coin Turk: ESMA warns of MiCA scam surge as fraudsters impersonate EU crypto regulators","type":"news_article","url":"https://en.coin-turk.com/esma-warns-of-mica-scam-surge-as-fraudsters-impersonate-eu-crypto-regulators/"},{"credibility":2,"name":"Crypto Economy: EU Watchdogs Flag Scam Surge After Fraudsters Mimic Crypto Firms Exploiting MiCA Rules","type":"news_article","url":"https://crypto-economy.com/eu-watchdogs-flag-scam-surge/"},{"credibility":2,"name":"Crypto.news: EU warns of crypto scams exploiting MiCA licensing transition","type":"news_article","url":"https://crypto.news/eu-warns-of-crypto-scams-exploiting-mica-licensing-transition/"},{"credibility":2,"name":"The Currency Analytics: Belgium's FSMA Flags 6 Unauthorized Crypto Providers After MiCA Deadline","type":"news_article","url":"https://thecurrencyanalytics.com/regulations/belgiums-fsma-flags-6-unauthorized-crypto-providers-after-mica-deadline-hits-273184"},{"credibility":3,"name":"GNCrypto News: EU Warns of Impersonation Scams After MiCA Deadline","type":"news_article","url":"https://www.gncrypto.news/news/eu-impersonation-scams-after-mica-deadline/"},{"credibility":3,"name":"Coindoo: MiCA Scammers Target EU Crypto Users During Exchange Closures","type":"news_article","url":"https://coindoo.com/mica-scammers-target-eu-crypto-users/"},{"credibility":3,"name":"Spaziocrypto: MiCA Crypto Scams in Europe: How to Spot Fake Exchanges","type":"news_article","url":"https://en.spaziocrypto.com/security/mica-crypto-scams-europe-fake-exchanges-how-to-protect-yourself/"}],"summary":"Following the expiry of the EU Markets in Crypto-Assets (MiCA) regulation transitional period on July 1, 2026, European regulators including ESMA, France's AMF, the Dutch AFM, and Belgium's FSMA documented a significant surge in impersonation scams targeting retail crypto investors. Fraudsters posed as regulatory officials and licensed exchanges to direct victims toward counterfeit websites, forged documents, and fraudulent transfer instructions. No individual perpetrators have been publicly named; the cluster encompasses multiple coordinated but distinct operations that share common tactics and timing.","timeline":[{"date":"2024-12","event":"MiCA Regulation's core provisions enter into force across the EU. Crypto-asset service providers begin applying for authorization under the new framework.","source":"ESMA / AMF regulatory publications","source_url":"https://www.amf-france.org/en/news-publications/news/end-mica-transitional-period-esma-sets-out-its-expectations-professionals-and-warns-retail-investors"},{"date":"2026-04","event":"ESMA issues statement on the end of transitional periods under MiCA, warning investors that not all current service providers will be authorized after July 1, 2026.","source":"ESMA Statement on the end of transitional periods under MiCA","source_url":"https://www.esma.europa.eu/sites/default/files/2026-04/ESMA75-113276571-1679_Statement_on_the_end_of_transitional_periods_under_MiCA.pdf"},{"date":"2026-05","event":"Approximately 194 companies have secured MiCA approval; more than 1,700 providers remain unlicensed with the July 1 deadline approaching.","source":"Crypto Times reporting","source_url":"https://www.cryptotimes.io/2026/08/06/scammers-pose-as-regulators-to-exploit-eus-mica-wind-down-watchdogs-warn/"},{"date":"2026-06-23","event":"ESMA issues public statement calling on unauthorized CASPs to wind down operations in an orderly manner; AMF publishes guidance warning retail investors to verify provider authorization.","source":"ESMA / AMF","source_url":"https://www.esma.europa.eu/sites/default/files/2026-06/ESMA75-113276571-1710_Public_Statement_MiCA_transitional_period_ends.pdf"},{"date":"2026-06-24","event":"Binance withdraws its MiCA license application in Greece.","source":"CoinDesk","source_url":"https://www.coindesk.com/policy/2026/06/26/binance-tells-eu-users-it-will-no-longer-provide-services-after-failing-to-secure-mica-license"},{"date":"2026-07-01","event":"MiCA transitional period expires. All unlicensed CASPs required to cease EU operations. Binance suspends services for EU users. Estimated 1,700+ entities must wind down or restrict services.","source":"Multiple — CoinDesk, Decrypt, ESMA register","source_url":"https://decrypt.co/375034/scammers-pose-as-eu-regulators-to-prey-on-mica-deadline-fallout"},{"date":"2026-07-06","event":"Belgium's FSMA formally adds six unauthorized entities — Aurum Foundation, Bank Bit, Bithf Pro, Dxago, Global Dynamic Trade, and ZeriaFunding — to its fraudulent crypto-asset service provider list.","source":"Crypto Times","source_url":"https://www.cryptotimes.io/2026/07/06/belgium-flags-six-crypto-firms-as-mica-enforcement-begins/"},{"date":"2026-07-31","event":"ESMA's interim MiCA register lists 338 authorized crypto companies. Post-deadline impersonation scam reports continue to accumulate across multiple EU member states.","source":"Cryptopolitan","source_url":"https://www.cryptopolitan.com/eu-warns-crypto-scams-mica-deadline/"},{"date":"2026-08-05","event":"ESMA updates its interim register; 320+ entities authorized. ESMA confirms it is aware of fraudulent activity misusing its logo and identity.","source":"Coin Turk","source_url":"https://en.coin-turk.com/esma-warns-of-mica-scam-surge-as-fraudsters-impersonate-eu-crypto-regulators/"},{"date":"2026-08-06","event":"Major crypto news outlets (Decrypt, CoinTelegraph, The Block, Crypto Times, Cryptopolitan) report on coordinated ESMA, AMF, and AFM warnings about the post-MiCA impersonation scam cluster. AMF official Stéphane Pontoizeau characterizes the moment as 'an opportunity for scammers more than usual.'","source":"Decrypt / CoinTelegraph / The Block / Crypto Times","source_url":"https://decrypt.co/375034/scammers-pose-as-eu-regulators-to-prey-on-mica-deadline-fallout"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 956576f5-d9de-4445-9a73-92b56db0942dcopy