Records · Verification table
Cybercrime pages: source verification, 2026-11-05
The working record behind the pages, published as written. Source file source/verify/cybercrime-2026-11-05.md. All records.
Scope. Every checkable claim on content/cybercrime.html, content/cybercrime-learn.html, content/cybercrime-do.html, content/cybercrime-practice.html, and the cybercrime entry of CORRECTIONS in tools/essays.py; the three cybercrime rows of source/stale.tsv.
Method. Each source was fetched fresh on 2026-11-05 (20:50–21:10 EST) with WebFetch. PDFs were saved by the fetcher and read with pdftotext; quotes below are from the extracted text. Where a fetch returned 403/404/timeout, the organisation's own alternative pages were tried (listed per row); a news page was used only as a fallback and is graded as such. Nothing below comes from memory. Web search was unavailable for this session (budget exhausted), so "no newer coverage found" means none on the pages fetched, not none anywhere.
Verdicts. CONFIRMED = the source's words support the page as written. CORRECTED = the page needs a wording change (fix given). NOT IN SOURCE = the cited source does not say it. UNFETCHABLE = the source could not be read today. NEWER DATA = a later edition exists. Definitional or rhetorical lines with no source on the page are listed separately and not counted.
Grades (the site's scale): primary · research · own figures (the organisation describing itself) · news · industry projection.
Source fetch log (one line per URL; dates are what the source prints):
- FBI IC3 2025 Internet Crime Report PDF — fetched, 66 pp.; file created 2026-04-16; figures already reported by Help Net Security on 2026-04-07. primary
- FTC press release 2026-03-25 and written testimony PDF (Joint Economic Committee, March 25, 2026) — fetched. primary
- Cybersecurity Ventures, "Sausalito, Calif. – Nov. 13, 2020" — fetched. industry projection
- Anderson et al., "Measuring the Changing Cost of Cybercrime" PDF (UCL Discovery) — fetched; the record page (year) returned 403; the paper's own text is dated to 2019 by its references ("as of February 2019"). research
- Florêncio & Herley — the cited URL is a slide deck; the MSR publication page gives the abstract (MSR-TR-2011-75, June 2011). research
- FBI PSA I-022625-PSA (Bybit) — fetched. primary
- Joint advisory AA25-239A PDF (v1.1, Sept 2025; "27 August 2025, v1.0: Initial publication") — fetched. primary
- Cyber Monitoring Centre, retail statement (June 2025) and JLR statement (October 2025) — fetched. primary (independent non-profit; scenario model)
- UK National Crime Agency, 10 July 2025 — fetched. primary
- NIST, August 13, 2024 — fetched. primary
- UK NCSC, PQC migration timelines (20 March 2025) and Password managers (reviewed and updated 21 May 2026) — fetched. primary
- CISA quantum-readiness page (August 21, 2023) and the CISA/NSA/NIST factsheet PDF — fetched. primary
- LastPass notice (Update as of Thursday, December 22, 2022) — fetched. own figures
- StateScoop 2026-09-01, 2025-11-18, and the SLCGP tag page — fetched. news
- FBI PSA I-120324-PSA (December 3, 2024) — fetched. primary
- FTC consumer alert, March 20, 2023 (voice clones) — fetched. primary
- Google help: 185839 (2-Step Verification), 13548313 (passkeys), 9457609 (Password Checkup), chrome/95414, android/2819582; Workspace admin 2SV page — fetched. primary
- Apple: 102660 (Aug 13, 2026), 104955, 109016 (Oct 1, 2026), 108366 (Sep 24, 2026), 108047 (Sep 16, 2026), 104984 (Oct 16, 2026), 118575 (Sep 15, 2026), 102195 (Sep 16, 2024), Mac User Guide mchlpx1065 (macOS 27), apple.com/icloud — fetched. primary
- Microsoft: create-save-passkey, Back up your Windows PC, Windows 10 end of support, Entra security defaults (ms.date 2025-07-21; updated_at 2026-10-16) — fetched. primary
- Bitwarden pricing — fetched. primary
- Verizon KB 309293 and about/account-security page — fetched; two FAQ URLs 404. primary
- AT&T 000102016 (Last updated: April 22, 2026) — fetched. primary
- T-Mobile: 5 URLs on t-mobile.com (sim-protection with and without slash, help-with-t-mobile-account-fraud, privacy-center SIM-swap page, account-takeover-protection) — all 403. UNFETCHABLE
- FTC consumer: credit freezes article (August 2025), "Free credit freezes are here" (page dated June 23, 2022), free credit reports (June 2026), identity theft article (September 2024), identity-theft feature page; ftc.gov Sentinel page, data-contributors page, Sentinel reports index, press-release pages 6–8 — fetched. primary
- Equifax freeze page, Experian freeze page — fetched; TransUnion (3 URLs) 403. primary
- CFPB List of Consumer Reporting Companies 2025 PDF — fetched. primary
- IRS IP PIN page (02-Nov-2026) — fetched. primary
- Have I Been Pwned home and FAQs — fetched. own figures
- identitytheft.gov (3 URLs) — loads only the title (script app); reportfraud.ftc.gov — title only. UNFETCHABLE for their own text
- senate.gov senators-contact — fetched. primary
- annualcreditreport.com (2 URLs) — 403. UNFETCHABLE
- CSIS "Hidden Costs of Cybercrime" page (December 9, 2020) — fetched; McAfee report PDF timed out twice; ITPro 7 December 2020 — fetched. primary / news
- ic3.gov home and AnnualReport/Reports index — fetched. primary
- congress.gov H.R. 5078 — 403.
---
1. Overview — content/cybercrime.html
| # | Page text | Source | Fetch | Source words | Verdict | Grade |
|---|---|---|---|---|---|---|
| O1 | "Americans reported a record $20.9 billion in losses to the FBI in 2025." | IC3 2025 report PDF | OK | "2025 complaint highlights: 1,008,597 complaints; $20.877 billion in losses; 26% increase in losses from 2024". "In 2025, losses reported to IC3 continued to climb, surpassing the $20 billion mark." Losses-by-year chart: $20.877bn (2025), $16.6bn (2024), $12.5bn (2023), $10.3bn, $6.9bn, $4.2bn … — 2025 is the highest, so "record" holds. | CONFIRMED | primary |
| O2 | "One hour, $0" (h1; door "1 hour · $0") | Arithmetic over the Do page's step times | n/a | Do page: 10 + 15 + 5 + 15 + 3 + 5 + 5 + 2 = 60 min. $0 holds with the Do page's own stated exceptions (Mac Time Machine needs a drive; iCloud 50 GB $0.99 optional). | CONFIRMED (arithmetic) | — |
| O3 | Learn door "10 minutes" | Learn page lede "Ten minutes." | n/a | Internal; consistent. | CONFIRMED (internal) | — |
| O4 | Practice door: "Six messages: scam or not?" | Practice page | n/a | Practice page lede and meta description say "Seven messages"; there are seven <details class="drill">. | CORRECTED → "Seven messages: scam or not?" | — |
| O5 | "Two minutes: agree a family safe word" | Do page step 8 "2 min" | n/a | Consistent. | CONFIRMED (internal) | — |
| O6 | "Fifteen minutes: a passkey or two-step sign-in on your email" | Do page step 2 "15 min" | n/a | Consistent. | CONFIRMED (internal) | — |
Not counted: the one-line description of what the essay argues (essay page is out of scope).
---
2. Learn — content/cybercrime-learn.html
| # | Page text | Source | Fetch | Source words | Verdict | Grade |
|---|---|---|---|---|---|---|
| L1 | Fact 1: "$20.9 billion in losses to the FBI in 2025, from just over a million complaints. Up 26% in a year." | IC3 2025 PDF | OK | "1,008,597 complaints; $20.877 billion in losses; 26% increase in losses from 2024". Arithmetic: 20.877 / 16.6 = 1.258 → 26%. | CONFIRMED | primary |
| L2 | "The FTC separately logged 3 million fraud reports and $15.9 billion." | FTC testimony PDF, 25 Mar 2026; press release | OK | "In 2025, consumers submitted 3 million fraud reports to CSN and reported $15.9 billion in losses." (2024: "2.6 million fraud reports and reported fraud losses of over $12 billion.") | CONFIRMED | primary |
| L3 | "Don't add them: the FBI's data feeds the FTC's." | FTC testimony fn 3; ftc.gov data-contributors page | OK | "CSN government data contributors include the Federal Bureau of Investigation's Internet Crime Center (IC3), U.S. Postal Inspection Service, U.S. Social Security Administration…". Data-contributors page lists "Internet Crime Complaint Center" among contributors. | CONFIRMED | primary |
| L4 | Fact 2: "The FTC's estimate for all consumer fraud in 2024, adjusted for under-reporting, runs as high as $195.9 billion." | FTC testimony PDF | OK | "When taking underreporting into account, the FTC has estimated that the overall cost of fraud to consumers for 2024 could be as high as $195.9 billion." | CONFIRMED | primary |
| L5 | Fact 3: "'Trillions a year' is a forecast… a 2020 security-industry projection that counts lost productivity and reputation and publishes no data collection." | Cybersecurity Ventures | OK | Dateline "Sausalito, Calif. – Nov. 13, 2020". "reaching $10.5 trillion USD annually by 2025, up from $3 trillion USD in 2015"; growth "15 percent per year over the next five years". "Cybercrime costs include damage and destruction of data, stolen money, lost productivity, theft of intellectual property, theft of personal and financial data, embezzlement, fraud, … reputational harm." Method: "based on historical cybercrime figures including recent year-over-year growth" — no data collection described. | CONFIRMED | industry projection |
| L6 | "Academics who tried to total global cybercrime declined to give one number." | Anderson et al. 2019 PDF | OK (record page 403) | "We warned that 'it is entirely misleading to provide totals lest they be quoted out of context, without all the caveats and cautions that we have provided'. Yet journalists happily ignored this and simply added up the columns, proclaiming large headline figures for global cybercrime". Summary table gives per-category ranges, no total. | CONFIRMED | research |
| L7 | Fact 4: "People over 60 lost $7.7 billion, more than any other age group. Most of it to fraud, not hacking." | IC3 2025 PDF | OK | Age table: "60+: 201,266 complaints, $7.7 billion in losses"; next largest "50-59: 124,820 complaints, $3.7 billion". Elder section: "$7.748 Billion in Losses". 60+ losses by type: Investment $3,519,296,354; Tech/Customer Support $1,040,730,043; Confidence/Romance $584,032,745; BEC $568,048,472; Government Impersonation $413,206,251 — all fraud types; Malware $3,433,325; Ransomware $5,644,789. | CONFIRMED | primary |
| L8 | Fact 5: "Phishing and spoofing drew 191,561 complaints in 2025, the largest category." | IC3 2025 PDF | OK | "By Complaint Count … Phishing/Spoofing 191,561"; next "Extortion 89,129". (Cryptocurrency 181,565 is listed under "Descriptors", not a crime type.) | CONFIRMED | primary |
| L9 | "Business email scams… cost $3.05 billion." | IC3 2025 PDF | OK | "Business Email Compromise $3,046,598,558" — second by loss after "Investment $8,648,617,756". | CONFIRMED | primary |
| L10 | Fact 6: "AI fraud is now counted: 22,364 complaints and $893 million in 2025." | IC3 2025 PDF | OK | "AI Related 22,364"; "AI Related $893,346,472"; "In 2025, IC3 received more than 22,000 complaints reporting AI-related information. Adjusted losses of these complaints exceed $893 million." The report has a dedicated section, p. 39. | CONFIRMED | primary |
| L11 | "Cloned-voice 'I'm in trouble, send money' calls alone took over $5 million." | IC3 2025 PDF p. 39 | OK | "grandparent scams, or 'distress' scams, in which voice cloning technology is used to mimic the sound of a loved one in distress. Victims claimed losses over $5 million in 2025 to distress scams." | CONFIRMED | primary |
| L12 | Fact 7: "The FBI's recovery team chased $1.16 billion in 2025 and froze $679 million of it." | IC3 2025 PDF p. 17 | OK | "3,900 Incidents · $1,163,919,846 Attempted Theft · $679,013,183 Frozen · 58% Success Rate". | CONFIRMED | primary |
| L13 | Fact 8: "North Korea took $1.5 billion from one crypto exchange." | FBI PSA I-022625-PSA | OK | "North Korea Responsible for $1.5 Billion Bybit Hack" … "responsible for the theft of approximately $1.5 billion USD in virtual assets from cryptocurrency exchange, Bybit, on or about February 21, 2025" (actor "TraderTraitor"). | CONFIRMED | primary |
| L14 | "Chinese intelligence sat inside telecom networks in at least five countries, by an advisory 13 governments signed." | AA25-239A PDF | OK | "This cluster of cyber threat activity has been observed in the United States, Australia, Canada, New Zealand, the United Kingdom, and other areas globally." Authoring/co-sealing agencies from 13 countries: US, Australia, Canada, New Zealand, UK, Czech Republic, Finland, Germany, Italy, Japan, Netherlands, Poland, Spain. "ultimately can provide Chinese intelligence services with the capability to identify and track their targets' communications and movements around the world." | CONFIRMED (the signatories are agencies of 13 countries; "13 governments" is a fair gloss) | primary |
| L15 | "Two UK retailers lost an estimated £270 to £440 million to one ransomware crew" | Cyber Monitoring Centre, June 2025 | OK | "The CMC estimates the total financial impact across affected parties at £270 million to £440 million." "CMC has assessed the incidents as a single combined cyber event" because "one threat actor claimed responsibility for both M&S and Co-op." "It has not included an incident affecting UK retailer Harrods at a similar time." "Category 2 systemic event." | CONFIRMED | primary (scenario model; page says "estimated") |
| L16 | "four of whom were arrested aged 17 to 20" | UK NCA, 10 July 2025 | OK | "Four people have been arrested in the UK" … "Two males aged 19, another aged 17, and a 20-year-old female were apprehended" … "on suspicion of Computer Misuse Act offences, blackmail, money laundering and participating in the activities of an organised crime group". | CONFIRMED (arrests on suspicion; not convictions) | primary |
| L17 | Fact 9: "US standards for quantum-resistant encryption were finalised in August 2024" | NIST, August 13, 2024 | OK | "NIST has released a final set of encryption tools designed to withstand the attack of a quantum computer." FIPS 203, 204, 205. "NIST is encouraging computer system administrators to begin transitioning to the new standards as soon as possible." | CONFIRMED | primary |
| L18 | "the UK's migration timeline runs to 2035" | NCSC, 20 March 2025 | OK | "By 2035: Complete your migration to PQC, taking the opportunity to build more robust general cyber resilience into your systems." (2028: discovery and assessment; 2031: highest-priority migrations.) | CONFIRMED | primary |
| L19 | "Agencies warn attackers may be storing encrypted data to read later; no public case has confirmed it." | CISA/NSA/NIST factsheet PDF (Aug 2023) | OK | "Early planning is necessary as cyber threat actors could be targeting data today that would still require protection in the future (or in other words, has a long secrecy lifetime), using a catch now, break later or harvest now, decrypt later operation." | CONFIRMED for the warning. "No public case has confirmed it" is a claim of absence; nothing fetched contradicts it, and nothing can confirm it. Keep "may be". | primary |
| L20 | Words, Passkey: "Supported by Google, Apple and Microsoft" | Google 13548313; Apple 102195; Microsoft create-save-passkey | OK | Google: "Select Create a passkey" at myaccount.google.com/signinoptions/passkeys. Apple "About the security of passkeys" (Sep 16, 2024): passkeys work across Apple hardware with Touch ID/Face ID and are described as resistant to phishing. Microsoft: steps to add "Face, Fingerprint, PIN, or Security Key". | CONFIRMED | primary |
| L21 | Words, Credit freeze: "Free by law, no effect on your score, lifted online in under an hour… Different from a fraud alert, which only asks lenders to check." | FTC credit-freeze article (Aug 2025); CFPB 2025 list; FTC alert "Free credit freezes are here" | OK | FTC: "There's no cost to place or lift a credit freeze" … "doesn't affect your credit score"; fraud alert "requires businesses to verify your identity before granting new credit". CFPB: "By law each of these companies must freeze and unfreeze your credit file upon request and must do so at no charge to you." FTC alert: "If you request a lift of the freeze, the agency must lift it within one hour." | CONFIRMED | primary |
| L22 | Contest: "$20.9 billion (FBI), $15.9 billion (FTC), up to $195.9 billion (FTC's under-reporting estimate)… $10.5 trillion (a 2020 projection)" | As L1, L2, L4, L5 | OK | See rows above. | CONFIRMED | primary / industry projection |
| L23 | Contest: "about $945 billion globally (a 2020 industry survey)" | CSIS "The Hidden Costs of Cybercrime" (Dec 9, 2020); McAfee report PDF; ITPro 7 Dec 2020 | CSIS page OK; McAfee PDF timed out ×2; ITPro OK | CSIS page: "After surveying 1,500 decisionmakers in government and businesses" … global losses "approach $1 trillion" — the page itself does not print $945 billion. ITPro: "direct monetary losses of $945 billion combined with global spending on cyber security" ($145bn). | UNFETCHABLE at primary level for the exact figure; news-confirmed. Fix options: keep "$945 billion" and grade s3's CSIS/McAfee entry as "news" (ITPro, 7 Dec 2020), or use CSIS's own words: "approaching $1 trillion globally (a 2020 industry survey of 1,500 organisations)". | news (figure) / primary (method) |
| L24 | "the biggest numbers rest on surveys where a few unverified answers dominate the total" | Florêncio & Herley, MSR-TR-2011-75 (June 2011) | OK (abstract via MSR page; cited URL is slides) | "losses are based on unverified self-reported numbers"; "we find evidence that most surveys are dominated by a minority of responses in the upper tail (i.e., a majority of the estimate is coming from as few as one or two responses)". Slides: "Two respondents add $37 billion to ID Theft survey. (FTC ID Theft Survey, 2006)". | CONFIRMED | research |
| L25 | "One big one was breached in 2022 and encrypted vaults were copied; strong master passwords held." | LastPass, Dec 22, 2022 | OK | "The threat actor was also able to copy a backup of customer vault data from the encrypted storage container"; unencrypted fields include "website URLs"; "it would take millions of years to guess your master password" (if defaults were followed); non-default or reused master passwords "would significantly reduce the number of attempts needed to guess it correctly." | CONFIRMED | own figures (LastPass on LastPass) |
| L26 | "The UK's security agency still recommends them" | NCSC Password managers (reviewed and updated 21 May 2026) | OK | "there are tools that can help you, one of which is the password manager"; "so even if you haven't thought about using one before, you should try it." "You should also switch on two-step verification (2SV) on the password manager account." | CONFIRMED (no literal "recommend"; "you should try it") | primary |
| L27 | "the federal grant for town and school cyber defence lapsed in September 2025 and hadn't been renewed a year later." | StateScoop, 1 Sep 2026 | OK | "The SLCGP expired after its original four-year run in September 2025"; the PILLAR Act "did not move out of the Senate." | CONFIRMED | news |
| L28 | Read the originals: "FBI IC3 2025 report, the first ten pages. 15 minutes. Where almost every number above comes from." | IC3 PDF | OK | PDF pages 1–10 (printed pp. 1–7) hold the totals, 26%, the age table, both crime-type tables and the cyber-enabled-fraud top five (facts 1, 4, 5, 6's counts). RAT (printed p. 17) and the distress-scam $5m (p. 39) are later. | CONFIRMED ("almost") | primary |
| L29 | "FBI PSA on AI-enabled fraud, December 2024… Where the safe word comes from." | FBI I-120324-PSA | OK | "December 3, 2024"; "Create a secret word or phrase with your family to verify their identity." | CONFIRMED | primary |
| L30 | Source s1 text: "April 2026: 1,008,597 complaints, $20.877 billion; over-60s $7.7 billion; phishing/spoofing 191,561; BEC $3.05 billion; AI 22,364 complaints, $893 million; RAT froze $679 million of $1.16 billion." | IC3 PDF; Help Net Security 7 Apr 2026 | OK | All figures as quoted above. Release month: Help Net Security (April 7, 2026) already reports "$20.877 billion in 2025"; the PDF file is dated 2026-04-16; ic3.gov prints no release date. | CONFIRMED | primary (month: news + file metadata) |
| L31 | Source dates s2–s7: FTC 25 March 2026; CV 13 November 2020; Anderson 2019; Florêncio & Herley 2011; FBI 26 February 2025; AA25-239A 27 August 2025; CMC 20 June 2025; NCA 10 July 2025; NIST 13 August 2024; NCSC 20 March 2025; CISA August 2023; LastPass 22 December 2022; NCSC reviewed 21 May 2026; StateScoop 1 September 2026 | as listed | OK | Testimony "March 25, 2026"; CV "Nov. 13, 2020"; Anderson: text dated by "as of February 2019" (record page 403); MSR "June 2011"; PSA "February 26, 2025"; advisory "27 August 2025, v1.0: Initial publication"; CMC URL /2025/06/20/ and title "June 2025"; NCA "10 July 2025"; NIST "August 13, 2024"; NCSC "20 March 2025"; CISA page "August 21, 2023"; LastPass "December 22, 2022"; NCSC "Page reviewed and updated: 21 May 2026"; StateScoop "September 1, 2026". | CONFIRMED | — |
| L32 | Counts: "Nine facts", "six words" | the page | n/a | 9 <li> in ol.facts; 6 <dt>. | CONFIRMED (arithmetic) | — |
Not counted (definitional or unsourced general statements; nothing fetched contradicts them): the "Hacked", "Phishing", "SIM swap" and "Ransomware" definitions; "not yet by many banks"; "money moved to crypto or gift cards is mostly gone" (the FTC alert calls those payment demands "signs of a scam", not unrecoverable). If you want them sourced, say "unverified".
---
3. Do — content/cybercrime-do.html
| # | Page text | Source | Fetch | Source words | Verdict | Grade |
|---|---|---|---|---|---|---|
| D1 | Lede: "a record $20.9 billion in losses to the FBI in 2025" | IC3 PDF | OK | As O1. | CONFIRMED | primary |
| D2 | Step times "25 minutes", "20 minutes", "2 minutes"; section labels 10/15/5/15/3/5/5/2 min; "One hour" | arithmetic | n/a | 10 + 15 = 25; 5 + 15 = 20; 2; all eight = 60. | CONFIRMED (arithmetic) | — |
| D3 | "iPhone, iPad or Mac: the Passwords app is already there (iOS 18 and later)." | Apple 104955 | OK | "To use the Passwords app, update to iOS 18." (The page covers iPhone; it does not use the word "preinstalled" and does not state the Mac requirement.) | CONFIRMED | primary |
| D4 | "Turn on sync in Settings → [your name] → iCloud → Passwords." | Apple 109016 "Set up iCloud Keychain" (Oct 1, 2026) | OK | "Open the Settings app, tap your name, then tap iCloud." "Under Saved to iCloud, tap Passwords. In iOS 17 or earlier, tap Passwords and Keychain." Then "Sync this [Device]". Prerequisite: "two-factor authentication is enabled for your Apple Account". | CONFIRMED (optional: add "→ Sync this iPhone") | primary |
| D5 | "passwords.google.com → Password Checkup" | Google 9457609 | OK (passwords.google.com resolves: 302 to myaccount.google.com) | "Go to passwords.google.com." "Select Go to Password Checkup" then "Check passwords". Chrome route: More → Passwords and autofill → Google Password Manager → "Checkup". | CORRECTED → "passwords.google.com → Go to Password Checkup → Check passwords" | primary |
| D6 | "Bitwarden Free works on all of them, with unlimited passwords and devices." | bitwarden.com/pricing | OK | Free plan: "Always free." "Unlimited devices, unlimited passwords" "Passkey management and usage" "Free sharing with another user". (Premium "$1.65" per month, "Billed annually at $19.80".) | CONFIRMED | primary |
| D7 | Google: "myaccount.google.com → Security & sign-in → 2-Step Verification → Turn on" | Google 185839 | OK | "1. Open your Google Account. 2. Tap Security & sign-in. 3. Under 'How you sign in to Google,' select Turn on 2-Step Verification. 4. Follow the on-screen steps." | CORRECTED → "myaccount.google.com → Security & sign-in → How you sign in to Google → Turn on 2-Step Verification" | primary |
| D8 | "For a passkey: passkeys page [myaccount.google.com/signinoptions/passkeys] → Create a passkey." | Google 13548313 | OK | Go to myaccount.google.com/signinoptions/passkeys; "Select Create a passkey" (then "Create a passkey" again; unlock the device). Requirements: "A computer that runs at least Windows 10, macOS Ventura, ChromeOS 109, or up"; "A phone that runs Android 9, iOS 16, or up". | CONFIRMED | primary |
| D9 | Apple Account: "Settings → [your name] → Sign-In & Security → Two-Factor Authentication. It's on by default for most accounts" | Apple 102660 (Aug 13, 2026) | OK | "Go to Settings on your iPhone or iPad, or System Settings on your Mac." "Choose [your name], then Sign-In & Security." "Turn on two-factor authentication and follow the onscreen instructions." "Two-factor authentication is the default security method for most accounts." Web: "Go to account.apple.com" … "Tap Upgrade Account Security". | CONFIRMED (Apple writes the last step as the action "Turn on two-factor authentication") | primary |
| D10 | Microsoft: "account.live.com/proofs/manage → Add a new way to sign in or verify → Face, Fingerprint, PIN, or Security Key" | Microsoft create-save-passkey | OK | Sign in at account.live.com/proofs/manage ("Advanced Security Options"); "Add a new way to sign in or verify"; "Face, Fingerprint, PIN, or Security Key". | CONFIRMED | primary |
| D11 | "Text-message codes are the weakest kind… Google still says any two-step sign-in beats none." | Google 185839 | OK | "verification codes sent by texts or calls can be vulnerable to phone number-based hacks"; "passkeys and hardware security keys protect your Google Account from phishing attacks"; "Although any form of 2-Step Verification adds account security". | CONFIRMED | primary |
| D12a | Verizon: "My Verizon app → Me → Edit profile & settings → Security. Turn on SIM Protection, then Number Lock." | Verizon KB 309293 | OK | "Open the My Verizon app." "Tap the Me tab." "Tap Edit profile and settings." "Scroll to the Security section then tap SIM Protection." "Tap the switch to the right of the applicable number(s) to turn on or off." "Click Confirm." Number Lock: same, "tap Number Lock". | CORRECTED → "Me → Edit profile and settings → Security" ("and", not "&") | primary |
| D12b | "You need both: Number Lock alone doesn't stop a SIM change." | Verizon KB 309293; verizon.com/about/account-security | OK (two FAQ URLs 404) | "SIM Protection protects all or selected mobile numbers from unauthorized SIM or device changes (e.g., device upgrade, SIM card swap, etc.)." "Number Lock protects your mobile number from an unauthorized transfer." Account-security page: Number Lock "blocks anyone from moving your mobile number to another carrier"; SIM Protection "blocks anyone from moving your mobile number to another device". Neither page states a price. | CONFIRMED by the two definitions (no Verizon sentence says it in so many words) | primary |
| D13 | AT&T: "AT&T app → the person icon → Wireless account lock → swipe to lock. Prepaid: Profile & Settings → Account Info & Preferences → Wireless Account Lock." | AT&T 000102016 | OK | "Last updated: April 22, 2026". "A free security feature." Postpaid: "Tap the person icon" → "select Wireless account lock" → "Swipe to lock". Prepaid: "Profile & Settings," then "Account Info & Preferences" → "Under Wireless Account Lock, choose Turn on" → enter the texted code → "Validate". Only users with "primary or secondary access" can change it. | CONFIRMED | primary |
| D14 | T-Mobile: "T-Life app → Account. Turn on SIM Protection and Port Out Protection (line by line), and set an account PIN. T-Mobile's site blocked our check" | t-mobile.com (5 URLs) | 403 ×5 | — | UNFETCHABLE (as the page already says; keep the "primary, unread" label and the in-app caveat) | — |
| D15 | Credit freeze: "free and doesn't touch your score. You place it at each bureau separately." | FTC article (August 2025); CFPB 2025 | OK | "There's no cost to place or lift a credit freeze" … "doesn't affect your credit score"; "Contact all three of the credit bureaus"; "If your child is under 16, request a free credit freeze". CFPB: "must do so at no charge to you." | CONFIRMED | primary |
| D16 | Equifax link | equifax.com freeze page | OK | "Placing, temporarily lifting, or removing a security freeze is free." Online management needs a myEquifax account; phone "(888) 298-0045". (CFPB lists Equifax's freeze line as "(888) 378-4329".) | CONFIRMED | primary |
| D17 | "Experian · 1-888-397-3742" | experian.com/freeze/center.html; CFPB 2025 | OK | "Freeze your credit file for free"; "1-888-EXPERIAN (1-888-397-3742)". CFPB: "Experian, (888) 397-3742". | CONFIRMED | primary |
| D18 | "TransUnion · 1-800-916-8800" (link to transunion.com/credit-freeze) | transunion.com (3 URLs); CFPB 2025 list; Experian's page | TransUnion 403 ×3; CFPB OK | CFPB: "TransUnion, (800) 916-8800" (freeze contact). Experian's comparison page also lists "TransUnion: 1-800-916-8800". | UNFETCHABLE (TransUnion's own page). The number is CONFIRMED by the CFPB list. Fix: label s7/the TransUnion link "site blocked automated reads; number from the CFPB's 2025 list". | primary (CFPB) |
| D19 | "an IRS Identity Protection PIN stops anyone else filing a tax return in your name"; s18 "updated 2 November 2026" | irs.gov IP PIN page | OK | "Page Last Reviewed or Updated: 02-Nov-2026". "An identity protection PIN (IP PIN) is a six-digit number that prevents someone else from filing a tax return using your Social Security number or Individual Taxpayer Identification Number." "A new IP PIN is generated each year for your account." Eligibility: "Anyone who has an SSN or individual taxpayer identification number (ITIN) and is able to verify his/her identity". No fee mentioned. | CONFIRMED | primary |
| D20 | "By law it has to come off within an hour." | FTC alert "Free credit freezes are here" | OK | "If you request a lift of the freeze, the agency must lift it within one hour." "If you request a freeze online or by phone, the agency must place the freeze within one business day." | CONFIRMED | primary |
| D21 | "Put your email into Have I Been Pwned and click Notify me." | haveibeenpwned.com; /FAQs | OK | Home page link label "Notify Me"; heading "Check if your email address is in a data breach". FAQ: "a free service for people to assess risk in relation to their account being caught up in a breach"; search is for "a single user-provided email address or username at a time". | CONFIRMED (label is capitalised "Notify Me") | own figures |
| D22 | iPhone backup: "Settings → [your name] → iCloud → iCloud Backup → Back Up This iPhone. The free 5 GB fills fast; 50 GB is $0.99 a month." | Apple 108366 (Sep 24, 2026); apple.com/icloud; Apple 108047 (Sep 16, 2026) | OK | "Settings" → "[your name]" → "iCloud" → "iCloud Backup" → make sure "Back Up This [Device]" is turned on. apple.com/icloud: "you'll get 5GB of free iCloud storage"; 50GB "$0.99/month". 108047 (US): 50 GB "$0.99", 200 GB "$2.99", 2 TB "$9.99". | CONFIRMED | primary |
| D23 | Android: "Settings → Google services → All services → Backup. It uses your Google account's free 15 GB." | Google android/2819582 | OK | "Open your device's Settings app." "Tap Google services → All services." "Turn Backup on or off." "You can back up to 15 GB of storage at no charge for your Google account." | CONFIRMED | primary |
| D24 | Mac: "System Settings → General → Time Machine → Add Backup Disk. You need an external drive" | Apple 104984 (Oct 16, 2026) | OK | Apple menu → "System Settings" → "General" → "Time Machine" → "Add Backup Disk" → "Set Up Disk". "Use a storage device with at least twice the storage capacity of your Mac." | CONFIRMED | primary |
| D25 | Windows 11: "open the Windows Backup app and turn on Desktop, Documents and Pictures." | Microsoft "Back up your Windows PC" | OK | "Type backup, and select Windows Backup from the results." "You can back up your Desktop, Documents, Pictures, Videos, and Music folders by toggling the switch for each folder to On." "Your free Microsoft account comes with 5 GB of OneDrive cloud storage." | CONFIRMED | primary |
| D26 | iPhone: "Settings → General → Software Update → Automatic Updates, all on." | Apple 118575 (Sep 15, 2026) | OK | Settings → "General" → "Software Update" → "Automatic Updates" → turn on "Automatically Install" (otherwise "Automatically Download"). | CONFIRMED | primary |
| D27 | Mac: "System Settings → General → Software Update → the (i) next to Automatic Updates → turn everything on." | Mac User Guide mchlpx1065 (macOS 27) | OK | System Settings → General → Software Update → "Click the Info button next to Automatic Updates" → toggles "Download new updates when available", "Install macOS updates", "Install Security Responses and system files" → Done. Laptops must be plugged in. | CONFIRMED | primary |
| D28 | Chrome: "it updates when it restarts. When you see Relaunch, click it." | Google chrome/95414 | OK | "Normally updates happen in the background when you close and reopen your computer's browser." Manual: "More" → "Help" → "About Google Chrome" → "Relaunch". "If you can't find the 'Relaunch' option, you're on the latest version." | CONFIRMED | primary |
| D29a | "Still on Windows 10? Support ended on 14 October 2025. Free extended security updates run to 12 October 2027" | Microsoft end-of-support page | OK | "On October 14, 2025, Windows 10 support ended." "ESU updates will only be provided through October 12, 2027". "Now that Windows 10 no longer receives security updates". | CONFIRMED | primary |
| D29b | "…if you sign in with a Microsoft account." | same | OK | Free option: "At no additional cost if you are syncing your PC Settings"; alternatives: 1,000 Microsoft Rewards points, or a one-time $30 USD purchase; enrollment requires a Microsoft account; eligible personal devices on 22H2; one licence covers up to 10 devices. | CORRECTED → "Free extended security updates run to 12 October 2027 if you sync your PC settings to a Microsoft account (otherwise 1,000 Rewards points or $30)." Signing in alone is not the free condition. | primary |
| D30 | "The FBI recommends exactly this [a family safe word]." | FBI I-120324-PSA | OK | "Create a secret word or phrase with your family to verify their identity." "Verify the identity of the person calling you by hanging up the phone" and calling a researched number. | CONFIRMED | primary |
| D31 | "The FTC's rule for voice clones: 'Don't trust the voice.'" | FTC alert, March 20, 2023 | OK | "Don't trust the voice. Call the person who supposedly contacted you and verify the story." Use a number you know is theirs. | CONFIRMED | primary |
| D32 | "a payment you can't reverse (wire, crypto, gift cards)" | same | OK | "If the caller says to wire money, send cryptocurrency, or buy gift cards" — signs of a scam. ("Urgency, secrecy" are the page's framing, not quoted from a source.) | CONFIRMED (payment methods) | primary |
| D33 | "in 2025 the FBI's recovery team froze $679 million of the $1.16 billion it chased. Frozen isn't always returned." | IC3 PDF p. 17 | OK | "$1,163,919,846 Attempted Theft"; "$679,013,183 Frozen"; "58% Success Rate"; guidance: "If you discover a fraudulent transfer, time is of the essence." | CONFIRMED | primary |
| D34 | "identitytheft.gov builds a recovery plan and an official report." | identitytheft.gov (3 URLs); FTC article "What to know about identity theft" (September 2024) | identitytheft.gov returns only its title (script app); FTC article OK | FTC article: "If you think someone stole your identity, report it to the Federal Trade Commission" at IdentityTheft.gov; a recovery plan that walks you through each step; "print pre-filled letters and forms to send to credit bureaus, businesses, and debt collectors." The article does not name an Identity Theft Report. | UNFETCHABLE for "an official report" (the site's own text couldn't be read; the FTC article confirms the recovery plan and letters). Safe fix: "builds a recovery plan and pre-filled letters" or keep "official report" labelled unverified. | primary |
| D35 | "reportfraud.ftc.gov. Reports feed the database law enforcement uses." | FTC testimony; ftc.gov Sentinel page | OK (reportfraud.ftc.gov itself: title only) | Testimony: "The reports are stored in the Consumer Sentinel Network ('CSN'), a secure online database that the FTC makes available to international, federal, state, and local law enforcement". Sentinel page: "Consumer Sentinel is free and available to any federal, state or local law enforcement agency." Testimony fn 3: partners "host referral links to the FTC's consumer-facing website at www.ReportFraud.ftc.gov." | CONFIRMED | primary |
| D36a | Microsoft 365: "entra.microsoft.com → Entra ID → Overview → Properties → Manage security defaults → Enabled (free)" | learn.microsoft.com security-defaults | OK | "Sign in to the Microsoft Entra admin center" … "Browse to Entra ID > Overview > Properties." "Select Manage security defaults." "Set Security defaults to Enabled." "Select Save." "at least a basic level of security enabled at no extra cost". Required licences: "None". | CONFIRMED | primary |
| D36b | s20: "updated 16 October 2026" | same | OK | Page metadata: ms.date: 2025-07-21, updated_at: 2026-10-16T07:34. The date a reader sees on the article is the ms.date (21 July 2025). | CORRECTED (minor) → "article dated 21 July 2025, checked 5 Nov 2026" (or "page last updated 16 October 2026" with that wording) | primary |
| D37 | Google Workspace: "Admin console → Security → Authentication → 2-step verification, then set enforcement." | Workspace admin help, deploy 2-step verification | OK | Admin console: "Menu" → "Security" → "Authentication" → "2-step verification"; checkbox "Allow users to turn on 2-Step Verification"; Enforcement: "On" or "Turn on enforcement from date". "Google is enforcing 2SV for administrator accounts." | CONFIRMED | primary |
| D38 | "Business email scams cost $3.05 billion in 2025." | IC3 PDF | OK | "Business Email Compromise $3,046,598,558". | CONFIRMED | primary |
| D39 | Q&A: "Americans filed over a million complaints with the FBI in 2025; people over 60 lost $7.7 billion. Most weren't hacks." | IC3 PDF | OK | "1,008,597 complaints"; "60+: … $7.7 billion in losses"; cyber-enabled fraud "accounts for 45% of all 2025 complaints and 85% of all 2025 losses". | CONFIRMED | primary |
| D40 | Q&A: "In 2022 thieves copied LastPass customers' encrypted vaults; strong master passwords held, weak ones were at risk." | LastPass | OK | As L25; weak/reused: "would significantly reduce the number of attempts needed to guess it correctly"; "If you reuse your master password and that password was ever compromised". | CONFIRMED | own figures |
| D41 | "put two-step sign-in on the manager itself" | NCSC Password managers | OK | "You should also switch on two-step verification (2SV) on the password manager account." | CONFIRMED | primary |
| D42 | Q&A: "Google, Apple and Microsoft all support them [passkeys]." | as L20 | OK | As L20. | CONFIRMED | primary |
| D43 | Q&A: credit freeze "free and doesn't affect your score" | FTC Aug 2025 | OK | As D15. | CONFIRMED | primary |
| D44 | Q&A: "China's telecom break-ins targeted the carriers' own equipment, and North Korea's $1.5 billion theft hit a crypto exchange" | AA25-239A; FBI PSA | OK | "While these actors focus on large backbone routers of major telecommunications providers, as well as provider edge (PE) and customer edge (CE) routers"; "The authoring agencies strongly urge network defenders to hunt for malicious activity". Bybit as L13. | CONFIRMED | primary |
| D45 | Q&A: "That number ['trillions'] is an industry projection, not a count." | Cybersecurity Ventures | OK | As L5. | CONFIRMED | industry projection |
| D46 | Q&A: "$20.9 billion reported to the FBI in 2025, up 26% in a year." | IC3 PDF | OK | As L1. | CONFIRMED | primary |
| D47a | Ask for one thing: SLCGP "expired in September 2025… as of September 2026 it hadn't moved in the Senate." | StateScoop 1 Sep 2026 | OK | "The SLCGP expired after its original four-year run in September 2025"; the PILLAR Act "did not move out of the Senate." | CONFIRMED | news |
| D47b | "The House passed a renewal" | StateScoop 1 Sep 2026 (cited as s15); StateScoop 18 Nov 2025; congress.gov | s15 OK; Nov 2025 OK; congress.gov 403 | s15 says the House "advanced" the PILLAR Act. StateScoop 18 Nov 2025: "House passes bill to reauthorize state and local cyber grant program" — the House "passed a bill by voice vote Monday evening" to "reauthorize the State and Local Cybersecurity Grant Program until 2033" (H.R. 5078; no funding amount specified). | CORRECTED (citation): the cited source doesn't say "passed". Add to s15: StateScoop, "House passes bill to reauthorize state and local cyber grant program", 18 November 2025 (news). Wording can stay. | news |
| D48 | "Find your senators at senate.gov [senators-contact.htm]" | senate.gov | OK | Page "Contacting U.S. Senators" loads; Capitol Switchboard "(202) 224-3121"; "Phone numbers are available on each state's web page or on your senator's website." | CONFIRMED | primary |
| D49 | s7: "free credit freezes, September 2018" | FTC alert page | OK | The page prints "June 23, 2022" as its date; the URL is /2018/09/ and the text says "Starting September 21, 2018, you can freeze and unfreeze your credit file for free." Byline: Andrew Smith (FTC) and Gail Hillebrand (CFPB). | CORRECTED → "FTC/CFPB consumer alert 'Free credit freezes are here' (page dated 23 June 2022; law in force since 21 September 2018)" | primary |
| D50 | Other source dates: s5 AT&T "updated 22 April 2026"; s11 Apple "13 August 2026"; s14 NCSC "reviewed 21 May 2026"; s18 IRS "updated 2 November 2026"; s8 "3 December 2024"; s9 "20 March 2023"; s13 "22 December 2022"; s16 "13 November 2020"; s2 "25 March 2026"; s1 "April 2026" | as listed | OK | "Last updated: April 22, 2026"; "Published Date: August 13, 2026"; "Page reviewed and updated: 21 May 2026"; "Page Last Reviewed or Updated: 02-Nov-2026"; "December 3, 2024"; "March 20, 2023"; "December 22, 2022"; "Nov. 13, 2020"; "March 25, 2026"; IC3 as L30. | CONFIRMED | — |
| D51 | Footer: "Each path was read from the company's own help page on 5 Nov 2026 unless the source says otherwise." | this check | n/a | True today for every path except T-Mobile, which the page and s6 already flag. | CONFIRMED | — |
Not counted: "urgency, secrecy" as tells (framing); "Menu names change every few months" (opinion); the three AI prompts; the Q&A "Many banks and smaller sites don't yet [offer passkeys]" (unsourced).
---
4. Practice — content/cybercrime-practice.html
| # | Page text | Source | Fetch | Source words | Verdict | Grade |
|---|---|---|---|---|---|---|
| P1 | "Seven messages." (lede, description, drill intro) | the page | n/a | Seven <details class="drill">. (Overview page says "Six" — see O4.) | CONFIRMED (arithmetic) | — |
| P2 | Drill 2: "Over-60s lost $7.7 billion in 2025, mostly to calls like this." | IC3 PDF pp. 44–46, 39 | OK | 60+ losses: "$7.748 Billion". By crime type: "Investment $3,519,296,354" (45%); "Tech/Customer Support $1,040,730,043"; "Confidence/Romance $584,032,745" (the category that "includes the Grandparent's Scheme"); "Business Email Compromise $568,048,472"; "Government Impersonation $413,206,251". AI section: "Victims claimed losses over $5 million in 2025 to distress scams." | NOT IN SOURCE. The report does not say most over-60 losses came from grandparent/distress calls; the largest slice is investment fraud, and distress scams are a few million. Fix: "Over-60s lost $7.7 billion in 2025, almost all of it to fraud rather than hacking. Investment and tech-support scams took the most; voice-clone 'distress' calls took over $5 million." | primary |
| P3 | Drill 5: "Business email scams cost $3.05 billion in 2025" | IC3 PDF | OK | "Business Email Compromise $3,046,598,558". | CONFIRMED | primary |
| P4 | "Pull one free credit report at annualcreditreport.com… Rotate the three bureaus." | annualcreditreport.com (2 URLs); FTC "Free credit reports" (June 2026) | 403 ×2; FTC OK | FTC: "Only one website — AnnualCreditReport.com — is authorized to fill orders for the free annual credit reports"; each bureau lets you check your report "from each once a week for free"; by law a free copy "once every 12 months if you ask for it." | UNFETCHABLE (the site itself). Its role and the free weekly reports are CONFIRMED by the FTC page; the page's quarterly rotation is more conservative than necessary and still right. Optional: cite the FTC page. | primary (FTC) |
| P5 | Heading "Your checklist: the eight doors" | the page | n/a | The list has nine items; the ninth ("Sent the Do page to the person…") is not one of the eight Do steps. | CORRECTED (minor) → "Your checklist: the eight doors, plus one" or move the ninth item out of the list. | — |
| P6 | Lede: "a quarterly check that takes ten minutes" | the page's own "Every quarter" list | n/a | Quarterly items: restore a file "Five minutes" + run the drill "Ten minutes" + pull a credit report (untimed) ≥ 15 minutes. | CORRECTED → "a quarterly check that takes about twenty minutes" (or drop the number) | — |
| P7 | "Tick things here; the ticks stay on your device." | built page site/cybercrime/practice/index.html | n/a | Inline script uses localStorage.getItem(key) / localStorage.setItem(key, …); no fetch, sendBeacon, XMLHttpRequest or external src on the page; <meta name="referrer" content="no-referrer">. | CONFIRMED | — |
| P8 | "A breach notice arrives from Have I Been Pwned: change that one password, and anywhere you reused it." | HIBP FAQs | OK | Notification service stores addresses "should they be caught up in a subsequent data breach"; notifications go only to the monitored address. | CONFIRMED | own figures |
| P9 | Sources: IC3 "April 2026"; FBI PSA "3 December 2024"; FTC "20 March 2023"; HIBP "checked 5 Nov 2026" | as listed | OK | As L30, L29, D31, D21. | CONFIRMED | — |
| P10 | Footer: "The scam scripts in the drill are composites of patterns the FBI and FTC describe, not real messages." | FBI PSA I-120324-PSA; FTC March 2023 alert | OK | PSA: criminals "generate short audio clips containing a loved one's voice" to impersonate a relative "in a crisis situation"; FTC: wire money, cryptocurrency, gift cards. The USPS text, bank email, gift-card boss, pop-up and friend's-account drills are not tied to a specific cited document. | CONFIRMED for drills 2 and 5; the others are composites with no source cited (label stands) | primary |
Not counted: "no carrier holds a parcel over thirty cents", "No operating system warns you with a phone number", "Banks… never need you to log in through an email link" (general guidance, unsourced on the page; nothing fetched contradicts them).
---
5. CORRECTIONS["cybercrime"] in tools/essays.py
| # | Text | Source | Fetch | Source words | Verdict | Grade |
|---|---|---|---|---|---|---|
| C1 | "'Measured in the trillions' is an industry projection, not a measurement. Americans reported $20.9 billion in losses to the FBI in 2025." | Cybersecurity Ventures; IC3 | OK | As L5, L1. | CONFIRMED | industry projection / primary |
| C2 | "Security agencies warn attackers may be collecting encrypted data to read later; no public case has confirmed it." | CISA/NSA/NIST factsheet | OK | "cyber threat actors could be targeting data today … using a catch now, break later or harvest now, decrypt later operation." | CONFIRMED (warning); the negative is unfalsifiable by fetch | primary |
| C3 | "The Jaguar Land Rover figure, about $2.5 billion, is a model of losses to the UK economy only." | Cyber Monitoring Centre, October 2025 | OK | "The CMC modelled loss for the event is £1.9 billion, with a range of £1.6 billion to £2.1 billion." "The estimate is for the ultimate impact of the event to the UK operations of all affected organisations"; "JLR's overseas operations and the impact to non-UK suppliers and dealerships is not included in the analysis."; "represents scenario-based analysis rather than confirmed operational data"; "the most economically damaging cyber event to hit the UK". £1.9bn ≈ $2.5bn at the ~$1.33/£ of October 2025. | CONFIRMED. Optional tightening to the CMC's words: "a model of losses to UK operations only, not confirmed figures". | primary |
---
6. Dated items — source/stale.tsv
| Row | Item | Status 2026-11-05 |
|---|---|---|
| 2027-04-30 · cybercrime/learn, cybercrime/do | FBI IC3 2026 report replaces the 2025 figures | Not yet due. ic3.gov/AnnualReport/Reports lists "2025 IC3 Annual Report" as the newest; no 2026 report. The 2025 figures are current. |
| 2027-10-12 · cybercrime/do | Windows 10 extended security updates end | Date unchanged on Microsoft's page today: "ESU updates will only be provided through October 12, 2027". ESU is running. |
| 2026-12-05 · all Do pages | Monthly re-read of every menu path | Done today for every path except T-Mobile (site 403). Two paths changed by a word (D7, D12a) and one label (D5); see Corrections. |
Also checked for newer editions (none found): FTC Sentinel reports index lists data books through 2024 only, and no FTC press release between 30 Jan and 13 Apr 2026 announces 2025 Sentinel figures, so the 25 March 2026 testimony remains the FTC's statement of record; StateScoop's SLCGP tag page shows nothing after 1 Sep 2026 and CISA's SLCGP page still lists the FY2025 NOFO (1 Aug 2025) as the latest — absence of coverage, not confirmation (no web search was possible).
---
7. Arithmetic the pages do themselves
- Do page: 10 + 15 + 5 + 15 + 3 + 5 + 5 + 2 = 60 minutes = "One hour". Step summaries 25 (10 + 15), 20 (5 + 15), 2. Holds.
- "Up 26% in a year": $20.877bn / $16.6bn = 1.258. Holds (IC3 prints 26%).
- "just over a million complaints" = 1,008,597. Holds.
- "froze $679 million of the $1.16 billion": $679,013,183 / $1,163,919,846 = 58.3%; IC3 prints 58%. Holds.
- "£270 to £440 million"; "aged 17 to 20"; "at least five countries"; "13 governments". Hold.
- JLR £1.9bn → "about $2.5 billion". Holds at Oct 2025 rates (~1.33).
- Learn: "Nine facts" (9), "six words" (6). Hold.
- Practice: "Seven messages" (7). Holds. Overview "Six messages". Fails (O4).
- Practice: "a quarterly check that takes ten minutes" vs 5 + 10 + untimed. Fails (P6).
- Practice: "the eight doors" heading over nine items. Loose (P5).
---
8. Summary by verdict
Counted rows: 6 (Overview) + 32 (Learn) + 55 (Do: D1–D51, with D12, D29, D36 and D47 each split into a/b) + 10 (Practice) + 3 (Corrections) = 106.
| Verdict | Count | Rows |
|---|---|---|
| CONFIRMED | 90 | all others |
| CORRECTED | 10 | O4, D5, D7, D12a, D29b, D36b, D47b, D49, P5, P6 |
| NOT IN SOURCE | 1 | P2 |
| UNFETCHABLE | 5 | L23 ($945bn primary), D14 (T-Mobile), D18 (TransUnion page), D34 (identitytheft.gov "official report"), P4 (annualcreditreport.com) |
| NEWER DATA | 0 | — |
Weakest links on the pages, by grade: the $945bn figure (news), the SLCGP status (news, and only as of 1 Sep 2026), and the IC3 release month (news + file metadata). Everything else that carries a number is on a primary document read today.
Contest a fact, suggest something, or tell us what’s broken
If someone is in danger right now, don’t use this form. Call your local emergency number (911 in the US). For trafficking: 1-888-373-7888, or text 233733.
No name, no account. Your note goes into the site’s private records, nothing about your browser or connection is stored with it, and the email box is the only way we’d know who you are. The weekly review reads every note, re-reads the original source, and fixes the page if it should. A contested fact and its outcome are listed on Contested, in the review’s words, never yours.
No tracking on any link.Ticks stay on this device.What changedContested