Fake AML Checks for Crypto Wallets: How to Spot the Scam Sites
A legitimate AML check on a crypto address needs exactly one thing from you: the public address. It needs no access to your wallet, no connection, no signature and certainly no advance payment. Anyone who asks you to connect your wallet for a money-laundering check is not running a check at all. That is exactly what a wave of fraud relies on, described by the security firm Malwarebytes on August 19, 2026, with infrastructure that our own measurement found still running twelve days later.
Fake AML check: what Malwarebytes found in August 2026
Stefan Dasic, a malware researcher at Malwarebytes, has documented a series of websites that pose as screening services for crypto addresses. They imitate the legitimate provider AMLBot or operate under colorless generic names such as "AML Check". The setup is similar in every case: you select a cryptocurrency, click a button labeled "Check Wallet", and are then asked to connect your wallet.
From that point on the site is no longer a screening tool. It is a stage. A progress bar runs, accompanied by status messages such as "Checking wallet historyโฆ" and "Verifying complianceโฆ". Then comes an invented error message: the check cannot be completed, the balance is too low, a small top-up is needed to cover the fee. Click "Retry" and you see the same animation once more, followed by a reassuring result, usually a "Clean, Low Risk".
โฆ Continue reading the full article at the original source below.
