Listen to the episode
TLDR
Scammers impersonate legitimate "AML" (anti money laundering) wallet screening services such as AMLBot. Victims are invited to "check" their crypto wallet for ties to crime, but the site tricks them into connecting the wallet and signing a...
How it works
Scammers impersonate legitimate "AML" (anti money laundering) wallet screening services such as AMLBot. Victims are invited to "check" their crypto wallet for ties to crime, but the site tricks them into connecting the wallet and signing a...
Red flags
- A real AML check only needs the wallet's public address
- if a site asks you to connect or sign, it is a scam. Fake progress bars, reassurance messages, and a surprise small "fee" to continue the check, all designed to look like a genuine compliance scan. Lookalike domains, logos, and branding copying well known services like AMLBot or generic "AML Check" tools
What to do
- 1For a wallet check, only paste the public address
- 2never connect a wallet or sign a transaction for a read only lookup. If you approved access, immediately revoke token permissions via your wallet's approval checker. If you signed an unknown transaction, move remaining funds to a fresh wallet with a new recovery phrase and treat the old one as compromised
Source
malwarebytes
Source reviewed by Mythos Forensic Team
https://www.malwarebytes.com/blog/threat-intel/2026/08/scammers-are-using-fake-crypto-aml-checkers-to-drain-your-walletFAQ
Is Fake crypto AML checkers drain wallets through bogus compliance lookups a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
A real AML check only needs the wallet's public address; if a site asks you to connect or sign, it is a scam. Fake progress bars, reassurance messages, and a surprise small "fee" to continue the check, all designed to look like a genuine compliance scan. Lookalike domains, logos, and branding copying well known services like AMLBot or generic "AML Check" tools
What should I do first?
For a wallet check, only paste the public address; never connect a wallet or sign a transaction for a read only lookup. If you approved access, immediately revoke token permissions via your wallet's approval checker. If you signed an unknown transaction, move remaining funds to a fresh wallet with a new recovery phrase and treat the old one as compromised
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.