Fake AML Truffa relativa alla verifica: How Scammers Impersonate Compliance Strumenti

Fake AML verification scams are a rapidly growing crypto threat where attackers create fraudulent websites impersonating legitimate Anti-Money Laundering compliance tools — most prominently AMLBot.com. These sites trick users into connecting their Web3 wallets for a fake "compliance check," which triggers a malicious smart contract that drains all assets. PhishDestroy tracks over 1,054 AML scam domains, with the official AMLBot warning that fake platforms are surging.

The AML scam ecosystem uses sophisticated infrastructure. Domini typically use .com, .org, .app TLDs registered through privacy-friendly registrars (NICENIC, WEBCC account for 163+ domains). Many use Cloudflare CDN for legitimacy.

The drainer mechanism is identical to other wallet-connect phishing: upon connection, the site calls setApprovalForAll() or increaseAllowance() on the victim's token contracts. The drainer scans all assets, estimates value, and prioritizes extraction of highest-value tokens first.

According to AMLBot's 2025 Crypto Crime Relazione, 65% of crypto incidents are driven by social engineering rather than technical exploits, with phishing ranking as the #2 attack type (18% of all incidents).

Key technical indicators: domains containing 'aml', 'amlbot', 'aml-check', 'aml-verify' in the URL; wallet connection prompts (the real AMLBot never requires this); recently registered domains; missing or fake SSL certificates.

Real Cases

1 2 3 4 Avanti » Pagina 1 di 22