Skip to content
SlabHeist
Check

SlabHeist

A public tracker of the slabs stolen on October 13, 2026.

Get Updates

Check a cert against PSA’s list of stolen slabs

Paste one cert or a whole list to see right away if any are among the 6,451 certs PSA deactivated after the October 13, 2026 theft.

6,451 stolen certs

One number, or paste a whole list in any format.

Checks against the list PSA published on October 23, 2026 (PDF). SlabHeist is independent and not affiliated with PSA.

A 1st Edition Charizard from PSA’s list, to see how a match looks. It only fills the field.

Results land here

Each cert gets a plain answer. A match shows the card, how many copies were stolen and who to call.

How to check a PSA cert

  1. Get the cert number.

    It is printed on the slab’s label. Ask the seller for it, or read it off the listing photos.

  2. Check it here.

    Paste one number or a whole list. Each one is matched against PSA’s list of the 6,451 deactivated certs.

  3. Look it up on PSA’s site.

    Open the cert at psacard.com/cert and make sure PSA’s record matches the card, the grade and the label. Mantel reports that stolen certs show there as decertified.

  4. Check the card as well as the number.

    A thief can crack a card out of its slab and sell it raw or get it graded again. Search the stolen cards by name, and ask the seller where the slab came from.

What a deactivated cert means

Every PSA slab carries a certification number that leads to PSA’s record of the card and its grade. After the theft, PSA deactivated all 6,451 certs from the stolen orders. It published the list on October 23, 2026 and sent it to marketplaces, auction houses and selling apps.

Deactivating a cert changes nothing on the slab itself. The label and the case look the same as before, so you can only tell by the number. PSA’s lookup shows a stolen cert as decertified but does not say why. This checker tells you whether a number is on the theft list.

What to do if a slab matches

If a cert you are offered is on the list, treat the slab as stolen property.

  1. Do not buy it, and do not confront the seller.

    Step away from the deal. Let the police handle the seller.

  2. Save what you saw.

    Write down the cert number and the seller’s name or handle. Screenshot the listing or the chat, and note where and when you saw it.

  3. Report it to the police.

    PSA asks for tips to go to the Santa Ana Police Department or the FBI in Los Angeles.

    FBI Los Angeles: Press 1 and ask for the duty agent.

  4. Flag the listing.

    Report it to the marketplace, auction house or app where it is listed. PSA has sent them the list too.

Phone numbers as printed in PSA’s theft update of October 23, 2026. If the slab came from your own PSA order, see what PSA is paying owners.

Questions about the checker

Is this PSA’s official cert lookup?

No. SlabHeist is an independent site, not affiliated with PSA or Collectors Universe. This checker matches numbers against the list PSA published. PSA’s own lookup is at psacard.com/cert.

Where does the list of stolen certs come from?

From PSA. Its theft update of October 23, 2026 links a PDF of 6,451 cert numbers, each with PSA’s description of the card. The checker uses that file, number for number. The PDF has no grades or values.

Does a clear result mean the slab is safe to buy?

No. It only means the number is not one of the 6,451 certs from this theft. Look the cert up on PSA’s site, make sure the card and grade match, and ask the seller where the slab came from. A card cracked out of its slab will not show up in any cert check.

Can I check a lot of certs at once?

Yes, up to 500 at a time. Paste them in any format: one per line, with commas or spaces between them, or straight from a spreadsheet or a listing. Repeats are dropped, numbers labeled as an order, SKU or invoice number are skipped, and the checker tells you how many certs it found before you run the check. A share link holds up to 200 certs; Copy result keeps them all, with the date of PSA’s list and the time you checked.

Are the cert numbers I check sent anywhere?

The check runs in your browser against a copy of the list, so the numbers you type are not sent to SlabHeist to be checked. Our analytics record that a check ran, how many certs it had and how many matched, but not the numbers. A shared result link carries its certs in the address, like any web link.

What if one of my own slabs is on the list?

Then it was in one of the stolen orders. PSA says it is paying affected customers fair market value, up to each item’s Maximum Insured Value, and has refunded grading fees on those orders. Payments are going out on orders shipped on PSA’s return label. Orders on your own label are handled one by one, and dealer submissions go through the dealer. If an item is recovered later, PSA says the owner can keep the payment or take the item back. Contact PSA about your order.