scam

According to Bitcoin News monitoring, a German Ledger user @jayr_crypto reported receiving a forged letter again this week. The letter impersonates Ledger, claiming that new regulations require users to register their Bitcoin wallets through a service called ZenLedger by October 31. The letter uses Ledger's official branding elements and mentions German financial regulators, while also including a QR code that directs users to a so-called mandatory registration process.The user believes that addresses exposed in a previous data breach are being used for targeted attacks on Ledger users. In the same week, Ledger coordinated with MediaMarktSaturn to suspend the sale of its hardware wallets in a European retail network covering 11 countries and over 1,000 stores.Earlier reports indicated that malicious spy implants were found inside Ledger devices purchased from European retailers. Ledger confirmed separately that compromised devices sold by a Southeast Asian distributor contained implants capable of stealing recovery phrases and transmitting them over cellular networks. Ledger has not confirmed any breaches of devices in Europe. Ledger users are currently facing physical supply chain tampering and targeted phishing attacks initiated using home addresses. Do not scan suspicious QR codes or enter recovery phrases.

According to a report from the official Coinbase blog, the Anti-Scam Centre (ASC) of the Singapore Police Force released a briefing on scams and cybercrime for the first half of 2026, showing that cryptocurrency scam losses in Singapore decreased by 43% year-on-year, from 114.9 million Singapore dollars to 65.5 million Singapore dollars.The ASC attributes this achievement in part to the actions taken by industry partners, including the shutdown of 47,500 mobile lines, 37,500 WhatsApp accounts, and 52,200 malicious websites, as well as investigations into over 2,900 money mules and scammers, resulting in approximately 470 prosecutions. The Coinbase Global Intelligence Team identified over 720 potential victims through four joint operations with the ASC, helping to intercept potential losses of over 18.9 million Singapore dollars.

According to the City of London Police report, 25-year-old London man Ajay Shinjin (also known as AJ Marley Cruz) was sentenced to two and a half years in prison by the Inner London Crown Court for his involvement in a SIM swap fraud case. He pleaded guilty on September 28 to two charges of conspiracy to commit fraud by false representation and transferring criminal property. The case involved the theft of cryptocurrency worth nearly £200,000 (approximately $265,000).In early November 2021, British telecom operator BT discovered unauthorized activity in its systems, where customers' phone numbers were transferred to SIM cards controlled by criminals, who intercepted one-time verification codes sent by banks and cryptocurrency platforms. The police identified several suspects based on device data provided by BT, and Shinjin was linked to four of the devices. He profited over £44,000, which he used for a vacation in Dubai, a luxury apartment in Canary Wharf, and a gold-plated dental grill.Details of the case revealed that one victim lost approximately £40,000 in cryptocurrency on November 2, 2021, with about £27,000 flowing into Shinjin's personal crypto account; a second victim had approximately £17,000 entirely transferred to his wallet; he also assisted in stealing about £8,000 from a third victim's Coinbase account and around £130,000 from a fourth victim. Shinjin was first arrested at his residence in 2021 and was re-arrested at Heathrow Airport upon returning from Dubai in October 2023.

According to The Block, Kishu Inu founder Alexander Sisemore faces three counts of telecommunications fraud related to a so-called "rug pull" scheme involving an amount of $9 million.Prosecutors allege that Sisemore secretly sold off the tokens allocated to him at the project's launch while making false statements to investors. Currently, the Federal Bureau of Investigation (FBI) is seeking Kishu Inu investors.

According to Scam Sniffer monitoring, a user suffered an address poisoning attack on Ethereum, resulting in a loss of 30,004 USDT.

According to Scam Sniffer monitoring, a user lost LINK tokens worth $167,342 after signing a phishing authorization for Permit2 on Ethereum.The authorization was signed on August 18, 2025.

A 60-year-old woman in Hong Kong reported that she was defrauded by a scammer who claimed to be an investment expert that she met on an online platform, and was later induced to invest in cryptocurrency on a fake website. Between April 14 and September 22, the woman transferred a total of approximately 21.5 million Hong Kong dollars to a designated investment account multiple times.The platform then required her to pay a margin to prove that the investment account was not used for money laundering. The police have initially classified the case as obtaining property by deception, and the fourth team of the criminal investigation unit of the Sau Mau Ping Police District is following up on the case, with no arrests made yet.

The U.S. Securities and Exchange Commission (SEC) has filed two lawsuits in New York, accusing Cryptoaiml and TSAI of fraud under the guise of AI trading, involving approximately $15 million.The two lawsuits claim that investors were shown fabricated profit data and were asked to add more funds when attempting to withdraw.

According to The Block, the UK's Financial Conduct Authority (FCA) has obtained a court order requiring two individuals involved in a fraudulent cryptocurrency investment scheme to jointly repay £851,402, with plans to return the funds to the victims.At least 65 investors have collectively lost £1.54 million, and the amount being recovered is approximately half of that.

DyorSwap officially announced that the so-called "GIWA Mainnet" identified by the team earlier is actually a fake chain set up by scammers. This fake network used the correct GIWA chain ID (9134), making it appear legitimate during the initial verification phase. The team also identified several suspicious messages and individuals within the related community that may be connected to this incident. The announcement stated that significant losses have occurred due to this fraudulent cross-chain bridge.DyorSwap stated that it is taking three immediate actions: first, contacting a professional security team to conduct further on-chain tracking and investigate the involved addresses, transactions, and fund flows; second, preserving all relevant evidence, including chat records, RPC information, cross-chain bridge addresses, and on-chain transactions; third, preparing to use treasury funds to compensate affected users, with eligibility criteria, loss verification processes, compensation scope, and detailed plans to be announced after the investigation and verification processes are completed.DyorSwap emphasized that until further notice, users should not use any unofficial GIWA mainnet RPCs, cross-chain bridges, or contracts, and should not send funds to any related addresses. The official team deeply apologizes to every affected user in this incident and states that subsequent updates will be released as soon as possible.

DyorSwap officially announced that the so-called "GIWA mainnet" previously identified by the team is actually a fake chain set up by scammers. This fake network used the correct GIWA chain ID (9134), making it appear legitimate during the initial verification phase. The team also identified several suspicious messages and individuals within the related community that may be connected to this incident. The announcement stated that significant losses have occurred due to this fraudulent cross-chain bridge.DyorSwap stated that it is taking three immediate actions: first, contacting a professional security team to conduct further on-chain tracking and investigate the involved addresses, transactions, and fund flows; second, preserving all relevant evidence, including chat records, RPC information, cross-chain bridge addresses, and on-chain transactions; third, preparing to use treasury funds to compensate affected users, with eligibility criteria, loss verification processes, compensation scope, and detailed plans to be announced after the investigation and verification processes are completed.DyorSwap emphasized that until further notice, users should not use any unofficial GIWA mainnet RPCs, cross-chain bridges, or contracts, and should not send funds to any related addresses. The official team deeply apologizes to every affected user in this incident and states that subsequent updates will be released as soon as possible.

The WeChat Security Center has released a governance announcement regarding the crackdown on organizers and promoters of illegal activities such as pyramid schemes and fraud. Recently, some black and gray market accounts have falsely claimed to be "national projects," "ethnic asset unfreezing," and "blockchain virtual currencies, stablecoins," using high returns as bait to lure users into groups and implement pyramid-style "referral" schemes. Subsequently, they induce users to input their account passwords and download fraudulent imitation apps through forged links, ultimately committing property fraud or account theft.WeChat officials stated that once verified, they will take tiered penalties against violating accounts based on the severity of the circumstances, in accordance with relevant laws and platform regulations. This includes banning community functions, restricting feature usage, and permanently banning accounts. They also remind users to be wary of Ponzi schemes that claim to be associated with blockchain but lack substantive technology and applications, and to avoid participating in paying entry fees, developing downlines, and downloading applications from unofficial channels.

According to the Dutch police (politie.nl), the police in eastern Netherlands arrested two men suspected of using counterfeit EURC cryptocurrency to purchase multiple Rolex watches on the second-hand platform Marktplaats. The victims discovered that the tokens they received were counterfeit and worthless after the payment was made.After the case was exposed on the television program "Plaats Delict," the police identified the suspects through viewer reports. The two men are a 24-year-old male from Geleen and a 45-year-old male from Leiden. During the search, firearms and drugs were found at the residence of the former, who has been detained for 14 days; the latter has been released but remains a suspect in the case. The police remind the public to be cautious with cryptocurrency payments and to avoid using unfamiliar payment methods.

According to a report from the Public Security Bureau of Linwu County, Hunan Province, on August 19, 2026, the Public Security Bureau of Linwu County, Chenzhou City, Hunan Province discovered fraud clues during routine inspections and successfully cracked a virtual currency investment fraud case, arresting two criminal suspects.Upon investigation, on May 1, 2026, the suspect Li met the victim, Ms. Yue, through private messages on a social platform, falsely claiming to teach virtual currency investment skills with guaranteed profits. He induced her to download a certain app to purchase Tether (USDT) and then exchange it for a newly issued virtual currency manipulated by his "superior." Li, in collusion with his "superior," created the illusion of rising prices to lure the victim into increasing her investment; once the funds were in place, they quickly crashed the market, causing the virtual currency's value to drop to zero. Ms. Yue lost approximately 30,000 yuan, while Li illegally profited tens of thousands of yuan, which was collected by his friend Lei and squandered.On August 19, the investigating police arrested Li; on September 17, Lei, who was suspected of collecting the stolen funds, was also apprehended. Both have been criminally detained according to the law. The police remind: virtual currency is not legal tender, and there are no "guaranteed profit" projects. Recommendations for high returns made through private messages online are all fraud traps. Do not easily trust investment recommendations from strangers or transfer money to unfamiliar platforms.

According to on-chain detective Specter monitoring, the attackers of this activity provided so-called arbitrage bot tutorials and code through YouTube videos, guiding victims to compile and deploy contracts using a counterfeit Remix development interface.The attackers registered an ENS name containing "Uniswap," disguising the related address as a legitimate source of income for DeFi activities, leading victims to mistakenly believe that the deployed arbitrage bot was profiting through Uniswap. After victims injected their own assets into the contract, the funds were transferred away by the attackers. The attackers currently seem to still be active and hold a significant portion of the stolen funds across two addresses.

According to on-chain analyst ZachXBT, the recently launched 10K PFP NFT project zkSNARKs on the Zcash chain is suspected of being a rug pull. The project attracted a total of 16,971 bids through a blind auction, ultimately settling at a clearing price of 1.5 ZEC (approximately $2,190) for 8,000 allocations, with a total transaction volume reaching 25,305 ZEC (approximately $36.94 million), and refunds of 13,309 ZEC (approximately $1.943 million) have been gradually returned.ZachXBT pointed out that the project raised about $17 million, while reserving 10% for the team, 5% for royalties, and approximately $2,000 for minting fees, yet it has no practical value, resembling the common "money grab and run" tactics used in the Ordinals series.

On-chain detective ZachXBT posted that the wallet address associated with 7zarc has received 4,870 ETH (approximately 15 million USD), with the funds originating from addresses related to the Raidparty project's approximately 70 million USD "exit scam." Subsequently, this portion of ETH was transferred to recharge addresses of several centralized exchanges.ZachXBT pointed out that 7zarc disappeared from public view in 2022 and only became active again in September 2026. Based on this, he publicly questioned the need for an explanation regarding the flow of the related funds.

NVIDIA CEO Jensen Huang connected a call with U.S. President Donald Trump during a panel discussion at the All-In Summit in Los Angeles on Monday. Trump referred to the dangers of artificial intelligence as a "hoax" during the call.Trump criticized the push to slow down the development of artificial intelligence as being driven by political motives or a conspiracy from China. Huang agreed with the president's viewpoint, stating that Trump sees through the complexity of the issue.

According to Decrypt, MetaMask announced the launch of a new wallet protection feature in its mobile app and browser extension, adding warnings for similar addresses, investment and pig-butchering scams, as well as first-time transfer recipients, and providing a clearer transaction confirmation page on mobile and browser extension.Another feature, Added Protection, will automatically roll back transactions that do not match the preview, first launching in the browser extension, with mobile support to follow.