Fake 'USDT wallet checker' usdtscanner.xyz offers safety scans while linked to a crypto drainer
MalwareTips reports a USDT wallet checker scam in which a supposed wallet and transaction verification service at usdtscanner.xyz uses Tether's name for reassurance. MalwareTips says the site's wallet interaction is a…
- First reported
- Reports
- 1
Source: malwaretips.com · published
What happened
MalwareTips reports a USDT wallet checker scam in which a supposed wallet and transaction verification service at usdtscanner.xyz uses Tether's name for reassurance. MalwareTips says the site's wallet interaction is associated with a cryptocurrency drainer and that it is not a service authorized by Tether; Tether and genuine USDT are not accused. MalwareTips warns users not to sign unexplained requests to obtain a safety rating and to be wary if a trading counterparty insists on a particular checker. It notes the page could not be captured as working during its review and the exact payload was not reproduced.
How the scam works
MalwareTips describes the same sequence in these wallet-drainer scams. A link to a claim or checker page arrives through an advertisement, message, post or compromised account. The page asks you to connect a wallet before showing an allocation or a result, which seems routine. Connecting an address doesn't by itself move assets, but the page can then request a signature, token approval or transaction, and those requests can reach beyond the advertised reward. Some signatures carry consequences without looking like a normal payment, and the permission can remain active after you leave the page.
Here the bait is a verdict. A person who is worried about an unfamiliar payment, strange token or address someone sent them is offered a quick wallet and transaction safety check at usdtscanner.xyz, using Tether's name for reassurance. MalwareTips says the wallet interaction is associated with a crypto drainer and that Tether doesn't authorise the service; Tether and genuine USDT aren't accused. The page could not be captured as working during its review, so the payload wasn't reproduced.
MalwareTips adds a warning for trades: be cautious if a counterparty insists a payment can only go ahead after you use a particular checker. A reassuring balance isn't a promise that someone will pay you.
Source
MalwareTips, "USDT Wallet Checker Scam Exposed: A Fake Safety Scan Can Drain Your Crypto" (published 26 October 2026).
Red flags
- A 'wallet checker' or 'safety scan' asking you to connect your wallet.
- A site using Tether or USDT branding at usdtscanner.xyz.
- A trading partner who insists you use a specific checker.
- A request to sign something to obtain a safety rating.
- A display of balances or reassurance as proof that a payment is safe.
If you were targeted
- 1Don't connect your wallet, sign, or approve anything on the page.
- 2Never type a recovery (seed) phrase or private key into a website or give it to 'support'.
- 3Check announcements only through the project's official website or accounts that you open yourself.
- 4If you connected and approved something, revoke the token approval with your wallet's or the network's approval tool and move remaining assets to a new wallet if you're unsure what you signed.
- 5If you disclosed a recovery phrase, treat the wallet as compromised and move assets to a new wallet created with a new phrase.
- 6Report the site to your wallet provider and, in the U.S., to the FBI's IC3 at ic3.gov.