Fake AML Checks

A particularly widespread variant of phishing involves impersonating a wallet “cleanliness” check. Scammers offer to verify the origin of your assets — especially in the context of P2P trades or buying USDT at an attractive rate. You’re directed to a phishing site that perfectly mimics a well-known AML service, where you’re asked to connect your wallet “for verification.” The moment you connect and sign the permission, funds are swept instantly.

One thing to understand clearly: a real AML check never requires wallet connection. AML analysis is about reviewing an address, not accessing your assets. If a site asks you to connect your wallet and you weren’t planning a DeFi transaction — close the tab.

Malware

Scammers distribute specialized software that installs silently on users’ devices and PCs — then remotely logs keystrokes, takes screenshots, or intercepts crypto wallet login data. These programs spread through fake applications, links to untrusted sites, or infected files.

In 2024, Chinese hackers launched a scheme involving fake Skype and WhatsApp apps with built-in malware. Once installed, the software gave attackers access to device data — and automatically replaced any TRON or Ethereum addresses found in messages with the attackers’ own.

Clipboard Hijacking

One of the most basic yet effective methods. Malware monitors your clipboard: the moment you copy a recipient’s address, it silently replaces it with the attacker’s address. The switch is hard to spot visually, since the first and last characters of the fraudulent address are often identical to the original.

How to stay safe: Always verify at least the first and last 6–8 characters of an address before sending. For large amounts, verify the full address. A hardware wallet displays the final destination address independently of your computer’s state.

Fake Wallets and Browser Extensions

Scammers create fake apps or browser extensions that mimic legitimate crypto wallets. Once installed, they request private keys or seed phrases. In 2024, a fake WalletConnect scheme was particularly popular: users received notifications about “account issues,” and links in the emails led to phishing pages.

Match Systems recommendations:

• Always verify URLs before entering any data, especially if the link came via an ad or email.
• Only download official apps. If there’s little or no information about an app online — that’s a red flag.
• Regularly review and revoke unnecessary permissions using revoke.cash.

P2P Transactions and Legal Risks

This is a growing concern: the risks embedded in ordinary P2P transactions, even ones that appear entirely unrelated to fraud.

Here’s how the scheme works: you sell USDT through a P2P platform, and the money arrives in your bank account. Later, it turns out the payment came from a fraud victim — a third party, not your actual counterparty. The crypto went to the scammer, but the victim’s complaint and the resulting criminal investigation land at your door. The risk here isn’t just losing funds — it’s becoming a party to a criminal case. According to the FBI, crypto fraud victims in the US lost more than $5.6 billion in 2024.

How to reduce risk:

• Only sell crypto through large, reputable platforms.
• Ask the counterparty to verify their physical card.
• Never rush. Cross-check all payment details carefully.
• Where possible, minimize the use of personal bank cards in exchange activity.

Exchange and Platform Hacks

Major crypto exchanges and platforms are frequently targeted through social engineering — manipulative conversations and phone calls from fake identities. Exchange employees are often the primary targets.

In a successful breach, attackers can obtain:

• Security environment data — information related to data transmission security and transaction integrity.
• Confidential user data — names, email addresses, phone numbers, and banking details.
• Credentials and keys — access to internal accounts, admin panels, and private keys.
• Internal process details — transaction processing workflows, security mechanisms, and backup systems.

In July 2024, India’s largest crypto exchange, WazirX, was hacked — attackers withdrew more than $235 million in various cryptocurrencies.

OTC Traps

An acquaintance reaches out asking you to help their “contact” exchange a large sum of crypto. You’re sent “proof”: wallet balance screenshots, screen recordings, sometimes notarized documents. The screenshots typically show older wallet versions (like Electrum or Mycelium) that allow any public address to be imported in watch-only mode — the balance displays, but no private keys exist. You’re being shown a display, not proof of control.

If you take the bait, phase two begins: pressure to connect your wallet to a phishing site or sign a transaction “for verification.”

The key rule: don’t get involved in “large sum via acquaintance” schemes. Always require a test transaction from the address where the funds are supposedly held — that’s the only way to verify actual control over the assets.

Fake Investment Platforms

The mechanics of fake investment platforms are straightforward. Through aggressive spam, they promise high returns and lure in trusting “investors” — then vanish with the deposited funds.

Match Systems: how to tell a real investment platform from a fake one:

• Verify licenses and regulatory certifications. Legitimate platforms operate under licenses issued by regulatory bodies across jurisdictions.
• Scrutinize the offers and guarantees. Promises of unrealistically high returns with 100% capital guarantees are a red flag.
• Check reputation and reviews. Before investing, research everything you can about the project from independent sources.
• Look at the contact information. Real platforms publicly list their legal addresses, phone numbers, and email contacts. Tracking down a fake platform’s contact details is nearly impossible.

In 2024, Indian police shut down the fraudulent platform GBE Crypto Trading Company — funds were being siphoned through a fake app promoted via Telegram and WhatsApp.

Pig Butchering

This is a long-con scam built entirely on trust: romantic connections, friendships, professional relationships, “investment clubs” in messaging apps. The scammer carefully cultivates a personal relationship — a process that can take weeks or months — before convincing the victim to invest a significant sum on a fictitious platform.