Scammers are using fake crypto AML checkers to drain your wallet

This threat involves scam websites impersonating legitimate cryptocurrency AML checking services such as AMLBot. Instead of performing legitimate wallet screening by requesting only public addresses, these fraudulent sites prompt users to connect their wallets and approve transactions or token permissions. The attackers exploit users' security awareness by displaying fake progress bars, compliance verification messages, and fraudulent error notifications requesting small fees. Once users approve these requests, attackers gain the ability to transfer or drain cryptocurrency holdings from the victims' wallets. The scam's effectiveness is due to its professional appearance and the exploitation of legitimate security practices, making malicious requests appear routine and trustworthy.

Victims who interact with these fake AML checker websites risk unauthorized transactions and token approvals that enable attackers to steal their cryptocurrency holdings. The scam can lead to direct financial loss through wallet draining. There is no indication of exploitation of software vulnerabilities; the attack relies on social engineering and user deception.

There is no software patch or fix applicable as this is a social engineering scam. Users should avoid connecting their wallets or approving transactions on untrusted or suspicious AML checking websites. Verification of website legitimacy through official sources and avoiding unsolicited wallet connection requests are recommended. Security awareness training to recognize such scams is advised.