Phishing address (Etherscan public label) — ETH address 0xC6e9b0…8e0F42

0xC6e9b072Af6B1222BE1b581C6f3E1a00a18e0F42

PublicAML knows this Ethereum address as Phishing address (Etherscan public label), a phishing. Our AML risk score for it is 100 of 100, which we read as critical risk. This address is itself listed by documented incident.

What we know about this address

ChainEthereum (ETH)
EntityPhishing address (Etherscan public label)
Categoryphishing
AML score100 / 100 (critical)

Risk findings

Each row carries the source that flagged it. A row at zero hops names this address directly; any other row is a path our propagation engine traced from a flagged address to this one. A finding is an observation about the flow of funds or about a published listing, not a statement about the owner of this address.

FindingSourceHopsDirection
This address is itself listed by documented incident.documented incident0direct
This address is itself listed by documented incident (0xc6e9b0…8e0f42).0xc6e9b072af6b1222be1b581c6f3e1a00a18e0f42documented incident0inbound
Funds reaching this address are 3 hops from documented incident (0x5c5b36…0aa9ce).0x5c5b3646368ff03f14f58b5e622b3f47f60aa9cedocumented incident3inbound
Funds reaching this address are 3 hops from documented incident (0x0bf4a1…870575).0x0bf4a182b52ef3ac75241377d12e11cd9e870575documented incident3inbound
Funds reaching this address are 3 hops from documented incident (0x0bb49c…cbcb5d).0x0bb49c33e8d118472176168475c0d44bcdcbcb5ddocumented incident3inbound
Funds reaching this address are 3 hops from documented incident (0x7635a2…a4307a).0x7635a2366acbe47ec8a8b7da515f8bdd2da4307adocumented incident3inbound
Funds reaching this address are 3 hops from documented incident (0xa27b7f…8a6e04).0xa27b7fdf0f8e9247222ef7609594b4faf38a6e04documented incident3inbound
Funds reaching this address are 4 hops from documented incident (0xfd6fce…c98bdb).0xfd6fce575e3a117a0d889d1b32b5e3d5e5c98bdbdocumented incident4inbound
Funds reaching this address are 4 hops from documented incident (0x903ac9…994678).0x903ac91a1a0da1c96830b4ea4ad60bbe42994678documented incident4inbound

2 further internal signals are held back from this page. They come from heuristics with known false positives, and we do not publish an accusation we would not defend. They are visible in the live check.

Incidents that name this address

Each line states the role this address plays in the incident as recorded. Being named as a victim, or as the recipient of funds, is not an accusation.

More addresses in this index

These are other addresses in the PublicAML directory, not counterparties of this one. Nothing here implies a connection between them.

If this page is wrong

Attribution and risk propagation both make mistakes, and a page like this one is visible for a long time. If you own this address or can show that a finding here is incorrect, tell us and we will re-check it. Corrections are applied to the underlying data, so they carry over to the API and to every other view of this address.

Contact us about this address

See something wrong on this page? Tell us and we will check it.

PublicAML reports what it can observe on-chain and what public and vendor sources say about an address. Nothing on this page is a legal finding, an allegation against a person, or advice. Risk scores describe exposure through transaction paths, and an address can carry exposure without its owner having done anything wrong.

Data is read live from the PublicAML API at the time this page was served.

Is this your address?

Leave your email and we will watch this address for you: you hear from us when money moves through it or when what we know about it changes. We cannot recover anyone’s money, and we will not pretend otherwise — but you will not have to keep checking.

We use the address only to reach you about this wallet. No password to choose: you sign in with a code we email you.

If you want to put the whole account on record — what happened, when, how much — file a report. We never publish who filed one.