# aml-checkwallet.net — SUSPICIOUS

> aml-checkwallet.net impersonates AML Scam to steal crypto via fake wallet checks. VirusTotal flags only 2 of 95 vendors, yet it's blocked by MetaMask and SEAL.

## Summary
aml-checkwallet.net is a fake AML wallet scam that pretends to help users verify their crypto wallets but secretly aims to steal funds and personal data. Criminals register domains like this to ride on the reputation of real services—especially ones tied to financial compliance like AML (Anti-Money Laundering) checks—so victims believe the site is legitimate. Once on the page, users are often tricked into connecting their real crypto wallets or entering seed phrases and private keys, giving scammers direct access to steal all digital assets stored in those wallets.  This domain was flagged by the cybersecurity community just days after it went live. PhishDestroy identifies that aml-checkwallet.net was registered on March 30, 2026, through TUCOWS.COM in Canada and is tied to IP address 188.114.97.3. While only 2 out of 95 security vendors on VirusTotal currently detect it, the domain has already appeared on two major blocklists and been blocked by MetaMask and SEAL—two trusted tools in the crypto security space. Its SSL certificate comes from Let’s Encrypt, which criminals often use to simulate trustworthiness, but this alone should never be trusted.  If you visited aml-checkwallet.net or entered any information—especially wallet passwords, seed phrases, or private keys—you may be at risk of having your cryptocurrency stolen. Do not connect any wallets or share sensitive data with this site. Disconnect your device from the internet if possible, and immediately revoke any unauthorized wallet connections through your wallet app’s security settings. Report the domain to your cybersecurity team or use tools like MetaMask’s phishing detection to block it. For future safety, always double-check URLs and confirm official domains through trusted sources before entering sensitive information.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: AML Scam

## Domain Intelligence
- Registered: 2026-03-30 23:48:32
- Registrar: TUCOWS.COM, CO.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["MetaMask", "SEAL"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a5d4f153-7b38-4944-a228-db9635aff521
- PhishDestroy: https://phishdestroy.io/domain/aml-checkwallet.net/
- LLM endpoint: https://phishdestroy.io/domain/aml-checkwallet.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/aml-checkwallet.net/
Last updated: 2026-03-31