Japan's FSA Logs 1,374 Crypto Complaints From Bitcoin (BTC) and Altcoin Users in Q2

Tokyo Consultation Desk Data

Japan's Financial Services Agency published new complaint statistics on September 11, and the headline number is a modest decline. The agency's Financial Services Users Consultation Office received 1,374 consultations on crypto assets between April 1 and June 30, 2026 — 92 fewer, or down 6.3%, than the 1,466 logged in the January–March quarter, and 76 below the 1,450 recorded in the same period a year earlier. Crypto accounted for roughly 9% of the 15,418 consultations the desk handled across all financial fields. By cause, disputes over the results of individual transactions and contracts dominated at 991 cases, or 72.1% of the crypto total, a category spanning Bitcoin (BTC) and altcoin trading. Requests and demands directed at the administration followed at 158 (11.5%), while questions on operator systems and procedures and general inquiries tied at 96 apiece, 7.0% each. The office referred 228 consultations to industry associations for further handling, though it does not mediate or arbitrate disputes itself. The agency, which announced the release in its own post on X, also disclosed that consultation content is shared with internal departments and feeds into financial monitoring — one cited use case involved inappropriate customer handling by a crypto exchange operator. Alongside the quarterly figures, consultations citing fraudulent investment solicitation totaled 1,961 across investment products and crypto assets combined: 1,616 were classified as involving damage and 345 as no damage or information only, based on each filer's own claim. In the combined age breakdown, filers in their 50s led with 383 cases, followed by those in their 60s at 372 and people aged 70 or older at 355, with 353 cases of unknown age.

its own post on Xhttps://x.com/fsa_JAPAN/status/2098291458172432588?ref_src=twsrc%5Etfw

Audits Missed 94% of Losses

A separate dataset released this week quantifies how technical assurance held up under fire. Researchers affiliated with the security firm ack3 and the Czech Technical University in Prague published a preprint analyzing 135 incidents reported in the first half of 2026, with attributable losses of $939.86 million across lending venues such as Aave, restaking platforms and derivatives exchanges. For 68 of those incidents, the team identified a public audit completed before the exploit. Within that audited subset, 46 attack paths fell entirely outside the documented audit scope — 67.6% of incidents by count, but 94.4% of reported losses. Twenty incidents touched at least one in-scope component, and two could not be classified. Two outliers dominate the dollar figure: a $292 million drain on restaking platform Kelp DAO and $285 million from Drift Protocol. Excluding those two, the out-of-scope share falls to 72.1%. The authors are explicit about the limits: the numbers describe the distribution of losses among reported cases rather than measuring audit effectiveness, two of the authors work for a firm that sells audits, and the study includes no unaffected control group and no metric for how long systems remained exposed. A concrete example shows the mechanism: in August, attackers exploited the audited withdrawal route of the ICON Network — a cross-chain bridge design — abusing flaws in uniqueness determination and a signature-message mismatch to re-execute transfers 1,490 times. The paper's practical takeaway is that the 'audited' label and what was actually reviewed are different variables, and meaningful disclosure would name the specific repositories and deployed addresses that were in scope. Readers tracking the market in real time can follow live spot and futures prices on Gate.

Read together, the two datasets describe the same consumer risk from opposite ends. The FSA's own published record — the primary document behind this story — shows 72.1% of Japanese crypto consultations concern transaction and contract outcomes, while the preprint shows that where audits existed, 94.4% of losses still landed outside the reviewed scope. COINOTAG's reading: assurance is failing at precisely the layer retail users rely on, and the age profile of the Tokyo data suggests the damage concentrates among older filers. In a market spanning L2 networks like Polygon and leveraged yield farming, an audit badge without scope disclosure is not diligence — it is decoration.