Scammers use fake crypto AML checkers to target wallet holders
Fake AML checkers trick crypto users into risky transactions
Scammers are creating fake anti-money laundering (AML) checkers to trick crypto users into approving transactions that could drain their wallets. Cybersecurity firm Malwarebytes reported that these fake services impersonate legitimate tools that scan crypto wallets for stolen or illegal funds.
The scam sites mimic real services like AMLBot and use fake progress messages to appear legitimate. Users are asked to connect their crypto wallets, which can expose their assets to theft.
How the scam works
The fake AML checkers prompt users to connect their crypto wallets instead of just entering a public wallet address. After connecting, the sites simulate a scan with fake results. Some even ask for a small fee before showing a "clean" result, regardless of whether a real check was done.
Malwarebytes warned that connecting a wallet alone does not steal funds, but it reveals the wallet’s public address. This allows scammers to see the wallet’s assets and create transactions for the user to approve, potentially leading to theft.
Key warning signs
- Fake AML checkers ask users to connect their wallets instead of just entering a public address.
- Legitimate AML checks only require a public wallet address, not wallet connections or transaction approvals.
- Scam sites may ask for small fees to complete a fake scan.
What is confirmed
- Malwarebytes identified fake AML checkers impersonating services like AMLBot.
- These sites trick users into connecting wallets and approving transactions.
- A basic AML check only needs a public wallet address, not a wallet connection.
What users should watch for
If an AML checker asks you to connect your wallet, treat it as a red flag. Legitimate services do not require wallet connections or transaction approvals to check for suspicious activity.
Why this matters for crypto users
Crypto wallets hold digital assets like Bitcoin or Ethereum. If users unknowingly approve transactions on fake AML sites, they risk losing their funds. Being cautious about wallet connections can help prevent theft.
