Scam in an AML report
Money taken through fake investments, phishing, impersonation and similar deception.
What it means
Scam labels mark addresses that collected money by deceiving people: fake investment platforms, romance scams, phishing sites, giveaway frauds, impersonated support desks and wallet drainers.
Why it is a risk for you as the recipient
Coins from scam addresses are often reported by victims and traced by exchanges. If they reach you, they may be frozen while victims try to recover them — and you may be asked to prove you were not part of the scheme.
- Chainalysis estimates that illicit addresses received at least USD 154 billion in 2025, with stablecoins making up 84% of illicit volume.[1]
- Fake “AML check” websites have been used to drain wallets: they ask visitors to connect a wallet and then approve a transaction that hands over their tokens.[2]
Example situation
Illustrative scenario, not a real case. A stranger pays you generously in USDT for a small service and asks you to forward part of it to another address. The incoming coins trace back to a fake trading platform. You have just been used as a money mule.
What to do if it shows up in a report
- Do not forward the funds anywhere — that can make you part of the laundering chain.
- Report the situation to your exchange’s official support and keep all chats.
- Beware of “recovery” services that contact you afterwards; they are a common second scam.
FAQ
I was paid by a scam address but did nothing wrong. What now?
Stop moving the funds, write down how the payment happened and contact your exchange through official channels. Honest, documented explanations help.
Can an AML check spot a brand-new scam wallet?
Not always. A new address may have no labels yet — that is “no data”, not “safe”.
Sources
- Chainalysis (original research report) — 2026 Crypto Crime Report Introduction (8 Jan 2026). Checked 4 Nov 2026.
- Malwarebytes — Scammers are using fake crypto AML checkers to drain your wallet (Aug 2026). Checked 4 Nov 2026.