Fake Crypto AML Checkers Are Trying to Drain Users' Wallets
Scammers are using fake crypto anti-money-laundering websites to lure users into connecting wallets and approving malicious transactions. These sites impersonate wallet-risk checkers, sometimes copying AMLBot or using generic names like “AML Check.” Real AML checks need only a public wallet address; they do not require wallet connection, permissions, or signing. The fake sites instead ask users to connect wallets, then show fake progress and “clean” results, sometimes demanding a small payment first. Connecting a wallet does not directly steal funds, but it exposes the public address, letting attackers inspect assets and craft harmful approval requests. Malwarebytes said the same scam template is being reused under different names. It advised revoking suspicious token approvals, and treating any revealed recovery phrase or private key as a full compromise, requiring a new wallet and asset transfer.
