Crypto scam warnings: open data, API and MCP
Everything on the warning list is free to reuse: download it, query it, or plug it into an AI assistant.
Download
- crypto-scam-warnings.csv — one row per official warning: firm, websites, regulator, country, date, type, notice URL.
- crypto-scam-warnings.json — the same, grouped by firm.
Licence: CC BY 4.0 for our compilation. Please credit “Real Crypto Signals (realcryptosignals.com), compiled from official regulator warning lists”. The underlying notices belong to the regulators; follow their terms when you reuse the notice text.
JSON API
Static JSON, no key, CORS enabled. The search on this site uses the same files.
/api/v1/warnings/meta.json— sources, counts, last update./api/v1/warnings/latest.json— the newest 300 warnings./api/v1/warnings/names/<first character>.json— firms whose normalised name starts with that letter or digit (_for others)./api/v1/warnings/domains/<first character>.json— website → firm references, keyed by host and by registrable domain./api/v1/report-channels.json— official places to report scams in 27 countries.
MCP server for AI assistants
Endpoint: https://realcryptosignals.com/mcp (Streamable HTTP, read-only, no authentication). Tools: check_website, check_name, latest_warnings, list_sources, how_to_report. Descriptor: /.well-known/mcp.json.
Sources
| List | Country | Entries | Link and licence |
|---|---|---|---|
| AFM warnings (Netherlands) | Netherlands | 9,102 | official list Reuse with attribution to the AFM |
| AMF blacklists (France) | France | 3,467 | official list Licence Ouverte 2.0 (data.gouv.fr) |
| BaFin warnings about unauthorised business (Germany) | Germany | 11 | official list Reuse with attribution to BaFin (www.bafin.de) |
| CFTC RED List (Registration Deficient) | United States | 274 | official list US government work (public domain) |
| Central Bank of Ireland unauthorised firms | Ireland | 909 | official list Central Bank of Ireland PSI re-use licence |
| FSMA warnings: companies operating unlawfully in Belgium | Belgium | 996 | official list CC BY 4.0 |
| SEC PAUSE list (Public Alert: Unregistered Soliciting Entities) | United States | 1,649 | official list US government work (public domain) |
Method and limits
- Lists are downloaded daily from the regulators' own pages. Entries are copied as published; we only normalise names and website addresses.
- Entries are grouped into one firm only when they name the same website address, or when the same list names the same firm twice. Different lists are never joined on a name alone, because different companies can share a name.
- Private individuals are not published. Lists that relay clone warnings without saying which name is genuine (the AFM list) are used for website addresses only.
- Every listed firm and website can be searched; separate pages exist for a first set of firms named by several regulators or linked to crypto.
- Impersonation warnings (scammers using a genuine firm's name) are listed only under the fake website's address, never under the genuine firm's name.
- Only lists whose terms allow reuse are included. Some large lists (for example the UK FCA warning list) forbid building a database from them without written permission, and some sites block automated access; we respect both.
- The website checker and the MCP server also flag domains on the community-maintained MetaMask phishing blocklist (licence DBAD 1.2). Those domains are labelled as community-listed and never get a page here.
- Absence from these lists says nothing about safety: most scam sites are never listed.
Updated 17 Oct 2026. Corrections: [email protected].