Fake Crypto AML Checkers Target Users’ Wallets

Anti-money laundering checks are widely used in crypto markets to assess whether a public wallet address is linked to sanctions, scams or other high-risk fund flows. Malwarebytes said criminals are exploiting users’ compliance concerns by impersonating services including AMLBot. Legitimate screening tools generally need only a public address to conduct an assessment and do not require users to connect a wallet, approve token spending or authorize a transaction.

Malwarebytes recently warned that fraudulent AML-checking websites are directing visitors to connect crypto wallets and sign permissions presented as part of a verification process. Those approvals may instead allow attackers to transfer assets from the victim’s wallet. Users should abandon any screening page that requests transaction approval, token allowances or an unexplained signature, and should review and revoke previously granted permissions if they have already interacted with a suspected site.