News on crypto AML
Updated every day from our automatic service checks, public phishing lists and Tether’s newsroom. In-depth posts are on the blog. RSS
- BlogUSDT and USDC Freezes in October 2026: 563 Addresses
Our tracker read every USDT and USDC freeze on Ethereum and TRON in October 2026. 563 addresses, about $2.8 billion frozen, most of it in one evening.
- Fake sites1 new fake Chainalysis site
Public phishing lists (MetaMask, ScamSniffer) added 1 look-alike of Chainalysis, e.g. chainalysisscan[.]com. Open Chainalysis only from its official website.
- Fake sites5 new fake BestChange AML check sites
Public phishing lists (MetaMask, ScamSniffer) added 5 look-alikes of BestChange AML check, e.g. bestchange24[.]com, bestchangecrane[.]blogspot[.]com, bestchangeone[.]blogspot[.]com. Open BestChange AML check only from its official website.
- Fake sites3 new fake TRM Labs sites
Public phishing lists (MetaMask, ScamSniffer) added 3 look-alikes of TRM Labs, e.g. trmlabscoinab[.]com, trmlabscoinac[.]com, trmlabscoinad[.]com. Open TRM Labs only from its official website.
- BlogFinCEN's Crypto Mixing Rule: Proposed, Then Withdrawn
FinCEN proposed in 2023 to treat crypto mixing as a primary money laundering concern. What it would have required, and why it was withdrawn in 2026.
- TetherTether Freezes Over $1.5 Billion From Binance Hack, Keeping Funds Out of North Korea’s Reach
From Tether’s newsroom.
- BlogCrypto Recovery Scams: How Victims Get Hit Twice
How fake lawyers, fake agencies and fake crypto tracing firms target scam victims a second time, the red flags the FBI, FTC and CFTC list, and what to do.
- Fake sites1 new fake “AML check” site
Phishing lists added 1 site posing as an AML or wallet check, e.g. amlcheck-usdt[.]vercel[.]app. A real check never asks you to connect a wallet.
- Fake sites4 new fake BestChange AML check sites
Public phishing lists (MetaMask, ScamSniffer) added 4 look-alikes of BestChange AML check, e.g. bestchange[.]com[.]co, bestchange[.]guru, bestchange[.]pages[.]dev. Open BestChange AML check only from its official website.
- BlogToken Approvals and Wallet Drainers: What to Check
How ERC-20 approvals and Permit signatures let a fake "connect wallet" AML site empty a wallet, how to revoke them, and why a real check needs only an address.
- BlogThe Bybit Hack: How the Stolen Funds Were Laundered
What the FBI said about the 2025 Bybit hack by North Korea, how the stolen ETH was spread and swapped to Bitcoin, and what it means if you receive such coins.
- BlogBinance Hack: $6.3B Impact and What Users Should Know
Binance says an attacker made unauthorized withdrawals worth about $6.3 billion on 29 Oct 2026. What is confirmed, what is frozen and what to check now.
- BlogPig Butchering Crypto Scams: How They Work and What to Do
How pig butchering scams build trust and then take crypto, the red flags FinCEN lists, how stolen funds move, and what an AML check can and cannot show.
- BlogOFAC Sanctioned Crypto Addresses: How the SDN List Works
How OFAC lists crypto addresses on the SDN List, how to search them, what blocking means, and why AML checkers flag direct and indirect exposure.
- BlogGarantex and Grinex Sanctions: What Holders Should Know
How the US sanctioned Garantex in 2022, took it down in March 2025 and named Grinex and A7A5 in August 2025, and why linked funds get flagged.
- Fake sites5 new fake “AML check” sites
Phishing lists added 5 sites posing as an AML or wallet check, e.g. aml-checkbot[.]info, aml-usdtscan[.]com, bit-aml-check[.]com. A real check never asks you to connect a wallet.
- Fake sites2 new fake TRM Labs sites
Public phishing lists (MetaMask, ScamSniffer) added 2 look-alikes of TRM Labs, e.g. trmlabscoin[.]help, trmlabscoin[.]io. Open TRM Labs only from its official website.
- Tether
- PricesGetBlock Crypto AML changed its prices
The amounts on GetBlock Crypto AML’s pricing page changed (confirmed by two checks in a row). We are re-checking the review’s prices.
- BlogXRP Ledger Freeze, Deep Freeze and Clawback Explained
How freezes, Deep Freeze, No Freeze and clawback work for tokens on the XRP Ledger, why XRP itself is exempt, and what holders should check.
- BlogLitecoin MWEB and AML Checks: What a Checker Can See
What an AML checker can and cannot see when Litecoin passes through MWEB, and what the 2026 MWEB incidents mean for anyone receiving LTC.
- BlogBitcoin ATM Scams: How They Work and What to Do
How Bitcoin ATM scams work, what FTC data shows, why the payment cannot be reversed, and what an AML check can and cannot do.
- StatusMetaSleuth: couldn’t check
Our automatic check changed MetaSleuth’s status from “Working” to “Couldn’t check”.
- Fake sites1 new fake TRM Labs site
Public phishing lists (MetaMask, ScamSniffer) added 1 look-alike of TRM Labs, e.g. trmlabscoin[.]org. Open TRM Labs only from its official website.
- Fake sites1 new fake AMLBot site
Public phishing lists (MetaMask, ScamSniffer) added 1 look-alike of AMLBot, e.g. amlbot-usdt[.]net. Open AMLBot only from its official website.
- Fake sites6 new fake “AML check” sites
Phishing lists added 6 sites posing as an AML or wallet check, e.g. aml-tron[.]com, amlscancheck[.]com, amlscanner[.]com. A real check never asks you to connect a wallet.
- BlogUSDT vs USDC: How Tether and Circle Decide What to Freeze
Tether and Circle can both block addresses, but their rules differ. Compare their terms, contract functions, written policies and 2025 freeze data.
- BlogInside the T3 FCU: How Tether, TRON and TRM Freeze USDT
What the T3 Financial Crime Unit is, how much USDT it says it has frozen, how fast it acts, and what that means for P2P traders on TRON.
- BlogTornado Cash Delisted: What Changed for AML Checks
Tornado Cash was sanctioned in 2022 and delisted in 2025. What the court and Treasury said, and why AML reports can still flag mixer history.
- Fake sites1 new fake “AML check” site
Phishing lists added 1 site posing as an AML or wallet check, e.g. aml-checking[.]website. A real check never asks you to connect a wallet.
- Fake sites1 new fake TRM Labs site
Public phishing lists (MetaMask, ScamSniffer) added 1 look-alike of TRM Labs, e.g. h5[.]trmlabscoin[.]net. Open TRM Labs only from its official website.
- BlogAddress Poisoning: How Look-Alike Addresses Steal USDT
How address poisoning plants a look-alike address in your wallet history, what the research shows on Ethereum, BNB Chain and TRON, and how to avoid it.
- StatusBestChange AML check: working
Our automatic check changed BestChange AML check’s status from “Couldn’t check” to “Working”.
- StatusBestChange AML check: couldn’t check
Our automatic check changed BestChange AML check’s status from “Working” to “Couldn’t check”.
- Tether