Key facts
- Fake crypto AML checker websites have been identified by Malwarebytes.
- These sites impersonate legitimate services to trick users into connecting their wallets.
- Users are prompted to approve transactions, which can lead to asset theft.
- A genuine AML check only requires a public wallet address, not wallet connection.
- Malwarebytes advises revoking suspicious permissions and moving assets if a wallet is compromised.
Cybersecurity firm Malwarebytes has identified a new scam targeting cryptocurrency holders through fake anti-money laundering (AML) checker websites. These fraudulent sites impersonate legitimate services, such as AMLBot, and use deceptive tactics to trick users into connecting their crypto wallets and approving malicious transactions. The ultimate goal is to drain users' digital assets.
According to Malwarebytes, these fake websites simulate AML checks by displaying fake progress messages and results. Users are often prompted to connect their wallets, a step that, while not immediately compromising, allows scammers to view the wallet's public address and its associated assets. This information is then used to craft transaction requests for the victim to approve. In some instances, scammers have even requested a small top-up fee to supposedly cover a fee before returning a false 'Clean, Low Risk' result.