Fake AML Checks for Crypto Wallets: How to Spot the Scam Sites

A legitimate AML check on a crypto address needs exactly one thing from you: the public address. It needs no access to your wallet, no connection, no signature and certainly no advance payment. Anyone who asks you to connect your wallet for a money-laundering check is not running a check at all. That is exactly what a wave of fraud relies on, described by the security firm Malwarebytes on August 19, 2026, with infrastructure that our own measurement found still running twelve days later. Fake AML check: what Malwarebytes found in August 2026 Stefan Dasic, a malware researcher at Malwarebytes, has documented a series of websites that pose as screening services for crypto addresses. They imitate the legitimate provider AMLBot or operate under colorless generic names such as "AML Check". The setup is similar in every case: you select a cryptocurrency, click a button labeled "Check Wallet", and are then asked to connect your wallet. From that point on the site is no longer a screening tool. It is a stage. A progress bar runs, accompanied by status messages such as "Checking wallet history…" and "Verifying compliance…". Then comes an invented error message: the check cannot be completed...