Can an AML bot steal your money? Here's why it can't

2026-07-24 · AMLConsensus Blog

"You won't steal my coins, will you?" — the most common question a newcomer asks before their first AML check. It's a fair question: crypto is full of phishing and drainers. The good news — you can tell a safe service from a dangerous one in 5 seconds if you understand one thing.

A public address ≠ access to money

Every crypto wallet has two parts:

A public address (those 0x… or T… strings) — like your card number or account number. You can freely give it to anyone: it's used to receive transfers and view history, but you cannot spend from it.
A private key / seed phrase — like your PIN and CVV combined. That's the real access to the money, and it must never be shown to anyone, ever.

An AML check works with the public address only. It's like viewing account history by account number — stealing from it is physically impossible, because a transfer requires the private key, which the service doesn't have and doesn't ask for.

Three signs of a dangerous service

A real threat looks different. Beware if a "check" asks you to:

Connect a wallet (Connect Wallet / WalletConnect) — under the guise of a check they lead you to a signature that grants access to funds.
Enter a seed phrase or private key — no legitimate service ever asks for this. It's 100% theft.
Sign a transaction "for verification" — that signature can be an approval to drain the wallet.

If a service demands any of this — close it without hesitation. That's exactly how drainers disguised as "AML bots" and "Safeguard verification" operate.

✓ How to check a service is safe

It asks only for the address — and nothing else. Paste 40 characters, get a result.
No signature prompts. A check triggers no wallet popup. Security extensions (Scam Sniffer, Pocket Universe, Rabby) stay silent — there are no hidden contract calls to flag.
Open methodology and verifiable reports. A service with nothing to hide has no reason to hide how it scores or where its data comes from.

How AMLConsensus works

We ask for the public address only. No seed phrases, private keys, wallet connections or transaction signatures — neither in the bot nor on the site. Technically we do not and cannot have access to your funds: all we do is send the address to AML sources and show the answer.

Methodology — published in full.
✓ Any report — verifiable by QR code.
♻ No data — no charge for the check.
1 free check a month, so you can see for yourself.

Try it on your own wallet: paste the address and watch the bot return a result without a single signature request. That's proof stronger than any words.

Check your counterparty right now

Consensus of 4 sources · verdict across 17 chains · connection graph & full audit across 35+ networks · PDF with QR verification

Open @amlconsensus_bot — 1 free check