Danger · High risk

Scam in an AML report

Money taken through fake investments, phishing, impersonation and similar deception.

What it means

Scam labels mark addresses that collected money by deceiving people: fake investment platforms, romance scams, phishing sites, giveaway frauds, impersonated support desks and wallet drainers.

Why it is a risk for you as the recipient

Coins from scam addresses are often reported by victims and traced by exchanges. If they reach you, they may be frozen while victims try to recover them — and you may be asked to prove you were not part of the scheme.

  • Chainalysis estimates that illicit addresses received at least USD 154 billion in 2025, with stablecoins making up 84% of illicit volume.[1]
  • Fake “AML check” websites have been used to drain wallets: they ask visitors to connect a wallet and then approve a transaction that hands over their tokens.[2]

Example situation

Illustrative scenario, not a real case. A stranger pays you generously in USDT for a small service and asks you to forward part of it to another address. The incoming coins trace back to a fake trading platform. You have just been used as a money mule.

What to do if it shows up in a report

  1. Do not forward the funds anywhere — that can make you part of the laundering chain.
  2. Report the situation to your exchange’s official support and keep all chats.
  3. Beware of “recovery” services that contact you afterwards; they are a common second scam.
A high risk score is a reason to look closer, not proof of a crime. A low score does not guarantee that an exchange or issuer will not freeze funds.

FAQ

I was paid by a scam address but did nothing wrong. What now?

Stop moving the funds, write down how the payment happened and contact your exchange through official channels. Honest, documented explanations help.

Can an AML check spot a brand-new scam wallet?

Not always. A new address may have no labels yet — that is “no data”, not “safe”.

Sources

  1. Chainalysis (original research report) — 2026 Crypto Crime Report Introduction (8 Jan 2026). Checked 4 Nov 2026.
  2. Malwarebytes — Scammers are using fake crypto AML checkers to drain your wallet (Aug 2026). Checked 4 Nov 2026.