TL;DR — How a sentence hidden in a token, a webpage or an MCP tool makes your AI agent sign a transfer. Documented attacks and the defences that actually work. This investigation walks through how the ai scam works in practice, the red flags victims missed, the wallets and transactions involved, and the verification steps that would have stopped it.
This is a full investigative report from CryptoStrapon's Dark Bits desk. We document how the ai scam works, who runs it, the exact messages victims receive, the wallets involved, and the verification steps that would have stopped it in seconds.
What you will learn
- What this scam looks like in the wild
- Step-by-step breakdown of the playbook
- Red flags and warning signs to watch for
- On-chain evidence, wallets and transactions
- How to protect yourself and recover funds
- Frequently asked questions
Frequently asked questions
- What is the "Prompt Injection: The Wallet Drain Your AI Agent Signs For You" investigation about?
- How a sentence hidden in a token, a webpage or an MCP tool makes your AI agent sign a transfer. Documented attacks and the defences that actually work. CryptoStrapon documents the full playbook, on-chain evidence and verification steps that stop this fraud class in seconds.
- How can I spot this scam before losing money?
- Verify the official domain, cross-check contract addresses on Etherscan or the relevant explorer, distrust urgency or "limited windows", and run the suspicious message through our free Scam Detector before signing anything.
- Can victims recover funds lost to "Prompt Injection: The Wallet Drain Your AI Agent Signs For You"?
- On-chain recovery is effectively impossible once a transaction is signed. The useful steps are: report to the exchange if the attacker tries to cash out, file a police report with the transaction hash, and publish the attacker address so others flag it.
- Is this scam pattern real or an isolated case?
- It is a documented pattern in the "AI Scam" category with verifiable on-chain evidence. It is part of wider trends covered across all of our published investigations.
- Where can I learn more about this fraud class?
- Read the full investigation at https://cryptostrapon.com/stories/ai-agent-prompt-injection-wallet-drain, browse related cases at https://cryptostrapon.com/#stories, or consult our 251+ term crypto scam glossary.
Continue to the full investigation, browse more scam investigations, or run a suspicious offer through our free Scam Detector.
Enable JavaScript for the interactive version with timeline, on-chain evidence, screenshots and recommendations.