PSA Lists 6,451 Stolen Graded Cards as FBI Joins Santa Ana FedEx Probe
By Crypto Wire
October 24, 2026
Professional Sports Authenticator (PSA) published a recovery update after thieves took graded customer orders from a FedEx carrier truck that had just left the company’s Santa Ana, California facility on October 13. In an October 23 staff note still circulating on Oct. 24 desks, PSA said it is posting the complete inventory of 6,451 stolen items — including PSA certification numbers and serial numbers for serialized cards — and that both the Santa Ana Police Department and the FBI are investigating. TheGamer’s Oct. 24 wrap puts nearly 3,000 of those slabs in the Pokémon TCG lane and cites The New York Times for a haul valued above $963,000 across sports and other trading-card games. For a Phygital desk, this is a custody-chain story: the break happened after grading, on the return-ship leg, not inside a Brink’s-style vault — and the response that matters to tokenized-card markets is the public cert kill-list shared with marketplaces and digital commerce platforms.
PSA’s own breakdown of the investigation is concrete. The company says it supplied video footage, shipment manifests, and item-level records, briefed investigators on site, and remains in daily contact. It frames recovery of every stolen item as the top priority while asking tipsters to contact the FBI Los Angeles field office during business hours. On the market side, PSA says it has deactivated the certification numbers for every stolen graded item and circulated that full list to marketplace sellers, auction houses, and digital commerce platforms that are actively monitoring for the slabs. That is the bridge into NFT and vaulted-collectible rails: Courtyard, Collector Crypt, Beezie, and similar venues price and insure graded cards against PSA provenance. A deactivated cert is a hard stop for a clean buyback, redeem-to-ship, or secondary listing even when the physical card still exists somewhere in a stolen package.
The category mix underlines why Pokémon and One Piece desks are watching the same feed as sports-card traders. TheGamer’s tally of PSA’s published list puts Pokémon at 2,978 items and One Piece at 898, with basketball (880), baseball (640), and football (433) leading the sports side. PSA says attackers hit more than 200 packages after pickup near the Santa Ana grading center. The company also says its existing security measures safely return-shipped more than 99.9% of items entrusted to it over the past year — a company claim, not an independent audit — while apologizing to affected customers and pledging further shipping-partner review. None of that restores a vault proof for a buyer who is about to mint, buy back, or redeem a token tied to a PSA slab that now sits on a deactivated list.
Compensation is already moving while recovery continues. PSA says it has begun contacting affected customers and has refunded all grading fees on impacted orders, separate from item compensation. If the order shipped on PSA’s return label, the company’s insurance applies and payments are already going out based on fair market value up to the declared Maximum Insured Value, using comps, auction results, grades, and population data. Orders on a customer’s own return label get a dedicated PSA team; dealer-submitted orders go back through the dealer. Accepting compensation does not end recovery, PSA says — if a card is found later, the owner can choose to keep the payout or take the physical item back. That dual track matters for anyone who already listed or collateralized a vaulted twin: insurance cash is not the same as a live redeemable slab, and platforms that burn tokens on redemption still need a clean cert before shipping.
Keep this chapter separate from Courtyard’s weekly CryptoSlam tape, Collector Crypt’s pack-volume records, Beezie’s Base-to-Solana migration window through October 27, and Mudwater’s still-“coming soon” physical conversion — those are product and volume beats. This one is chain-of-custody after the grader’s door. Collectors shopping tokenized PSA inventory should treat the published cert list as a screening step before buybacks, marketplace bids, or redeem requests, and should not assume a slab that still appears in a vault UI is free of a deactivated number until the cert is checked against PSA’s release. Digital commerce platforms that already received the list are the first line; secondary Discord OTC and unlisted wallet transfers are where laundering risk concentrates if vigilance slips.
Custody check: Cross-check any PSA cert on a vaulted or redeemable card against PSA’s published 6,451-item stolen list before buyback, collateral, or ship-home redemption, and watch FBI/Santa Ana recovery notices for whether deactivated numbers stay permanently dead or get restored when packages are found.
Bottom line: PSA posted all 6,451 stolen graded certs after the Santa Ana FedEx truck theft, deactivated those numbers across marketplaces, and confirmed FBI and local police are on the case while insurance payouts start.
Disclaimer: This article is provided for informational and educational purposes only. It does not constitute financial, investment, legal, or trading advice. The NFT market is highly volatile, and past performance is not indicative of future results. Readers should conduct their own research and consult qualified professionals before making any decisions related to digital assets. The cover image for this article may have been created using artificial intelligence (AI).
