How to avoid getting scammed by fake "Clawdbot ($CLAWD)" websites
Phishing/ScamAlso Known As: "Clawdbot ($CLAWD) Scam" crypto scam websites
Get free scan and check if your device is infected.
Remove it nowTo use full-featured product, you have to purchase a license for Combo Cleaner. Seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
What are fake "Clawdbot ($CLAWD)" website?
"Clawdbot ($CLAWD) scam" refers to fraudulent and deceptive content that uses the "Clawdbot" name/branding as a disguise. Clawdbot was the original name of an AI (Artificial Intelligence) software project that was later renamed "Moltbot" and then rebranded as "OpenClaw". These scams have no affiliation with OpenClaw. While different in appearance and operation, "Clawdbot ($CLAWD)" scams target cryptocurrency.

IMPORTANT NOTE: We do not review crypto projects, please do your own research when investing money.
Federal Trade Commission (FTC) states that since the start of 2021, more than 46,000 people have reported losing over $1 billion in crypto to scams – that's about one out of every four dollars reported lost, more than any other payment method.
"Clawdbot ($CLAWD)" scam overview
"Clawdbot ($CLAWD)" scams are disguised as official OpenClaw websites or pages otherwise affiliated with the open-source AI project. Clawdbot is the release name of an autonomous personal AI assistant software designed for complex task automation on apps, online services, and messaging platforms. Its features include multi-platform integration, full system access (e.g., files, shell, browser, etc.), and memory that perseveres throughout conversations.
Clawdbot was released in November 2025, and on January 27, 2026, the project was forced to rebrand due to trademark issues. The new name was Moltbot, and this rebrand was disastrous. The official GitHub name and X (formerly Twitter) handle were changed simultaneously without securing the original branding/names, which were claimed by scammers within seconds.
The immediate emergence of hundreds of scams was not the only issue plaguing Moltbot. Cybersecurity researchers had discovered vulnerabilities within the software itself. The control servers of numerous Clawdbot/Moltbot users were found to be publicly accessible, leaving them vulnerable to remote access as well as API key, OAuth credential, and other sensitive data exposure. On January 30, 2026, the project was rebranded to OpenClaw.
The scope of "Clawdbot ($CLAWD)" scams is grand. The scammer-owned accounts appeared legitimate and promoted a high volume of crypto scams disguised as investment opportunities, dedicated token launches, and airdrops.
Mere hours after the Moltbot rebrand snafu, cyber criminals began promoting a supposed Solana-based CLAWD token. This fake token managed to reach a 16 million market cap. When news of its illegitimacy came to light, it plummeted almost to zero, and users who purchased "CLAWD" late experienced a rug pull.
Various crypto scam types were observed, including wallet credential phishing and drainers. Phishing sites operate by recording entered information and sending it to scammers. These fraudulent webpages required victims to manually connect their digital wallets by providing their wallet log-in credentials (such as passphrases), thereby enabling cyber criminals to access the cryptowallets and the assets kept therein.
When users "connect" their wallets to drainer websites, they unintentionally sign a malicious contract. It facilitates a mechanism (drainer) that siphons funds from exposed cryptowallets. The outgoing transactions are automated and may appear innocuous; thus, they can avoid raising suspicion for a long time. Some drainers can approximate the value of digital assets and determine which to prioritize stealing.
It must be mentioned that cryptocurrency transactions cannot be reversed because they are practically impossible to trace. Therefore, victims of scams like these fake "Clawdbot ($CLAWD)" sites are unable to retrieve their funds.
| Name | "Clawdbot ($CLAWD) Scam" crypto scam websites |
| Threat Type | Phishing, Scam, Social Engineering, Fraud, Cryptocurrency Drainer |
| Disguise | Clawdbot (Moltbot/OpenClaw) |
| Related Domains | clawdbotatg[.]fun; clawdbotatg[.]com; vesting.clawdbotatg.eth[.]limo; clawd-pfp-market.vercel[.]app; and many others. |
| Distribution methods | Compromised websites, social media spam, rogue online pop-up ads, potentially unwanted applications. |
| Damage | Monetary loss |
| Malware Removal (Windows) |
To eliminate possible malware infections, scan your computer with legitimate antivirus software. Our security researchers recommend using Combo Cleaner. Download Combo CleanerTo use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com. |
Crypto scams in general
We have investigated countless crypto scams. There are three prevalent types of these scams: phishing that targets wallet log-in credentials, drainers that use draining mechanisms to steal assets from exposed wallets, and social engineering that tricks users into manually transferring funds to scammer-owned wallets.
"Barking Puppy ($BP) Airdrop", Fake Crypto Gambling Platforms, "p0 Systems ($P0) Airdrop", "ZREAL SUPER COIN Airdrop", "Trust Wallet - Blue Moon Crypto Giveaway", fake "Raydium Staking" website, "moltbot ($MOLTY) Airdrop", and "Moonbirds ($BIRB) Airdrop" are merely some of our latest articles.
Due to how widespread scams are on the Web and how well-made they can be – we highly recommend exercising caution when browsing and investing online.
How did I open a scam website?
As mentioned above, "Clawdbot ($CLAWD)" scams were promoted by X (Twitter) accounts leveraging the unsecured "Clawdbot" name during the project's rebrand to "Moltbot". These accounts were created by scammers, and not hacked originals, as is common in crypto scam promotion.
It is likely for "Clawdbot ($CLAWD)" scams to be endorsed using other techniques. Intrusive pop-up advertisements (a type of malvertising) are often used in cryptocurrency drainer endorsement. Some of the ads are fully functional drainers, i.e., capable of executing draining scripts. These pop-ups may be encountered on legitimate sites that have been compromised.
In general, online scams are endorsed via malvertising, spam (e.g., social media posts, PMs/DMs, emails, browser notifications, SMSes, robocalls, cold calls, etc.), websites using rogue advertising networks (redirects), typosquatting (misspelled URLs), and adware (adverts/redirects).
How to avoid visiting scam websites?
Caution is key to online safety. Therefore, pay attention to URLs and enter them carefully. Be wary of websites, ads, and communications that make unbelievable promises or warn against severe threats.
Do not use sites offering pirated content or other dubious services (e.g., illegal streaming, downloading, torrenting, etc.), as these webpages typically employ rogue advertising networks. Ignore or block browser notification delivery requests from questionable websites.
Do not open attachments or links found in suspicious/irrelevant emails and other messages. Download only from official/verified sources and be attentive when installing (e.g., study terms and options, use "Custom/Advanced" settings, and opt out of additional apps, extensions, etc.) – to prevent bundled/hazardous software (such as adware) from infiltrating the system.
If your computer is already infected, we recommend running a scan with Combo Cleaner Antivirus for Windows to automatically eliminate all threats.
Appearance of a fake "Clawdbot ($CLAWD)" website (GIF):

Screenshots of fake "Clawdbot ($CLAWD)" sites:
Screenshots of X (Twitter) accounts used to promote "Clawdbot ($CLAWD)" sites:
Instant automatic malware removal:
Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
DOWNLOAD Combo CleanerBy downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quick menu:
- What is "Clawdbot ($CLAWD) Scam" crypto scam websites?
- How to identify a pop-up scam?
- How do pop-up scams work?
- How to remove fake pop-ups?
- How to prevent fake pop-ups?
- What to do if you fell for a pop-up scam?
How to identify a pop-up scam?
Pop-up windows with various fake messages are a common type of lures cybercriminals use. They collect sensitive personal data, trick Internet users into calling fake tech support numbers, subscribe to useless online services, invest in shady cryptocurrency schemes, etc.
While in the majority of cases these pop-ups don't infect users' devices with malware, they can cause direct monetary loss or could result in identity theft.
Cybercriminals strive to create their rogue pop-up windows to look trustworthy, however, scams typically have the following characteristics:
- Spelling mistakes and non-professional images - Closely inspect the information displayed in a pop-up. Spelling mistakes and unprofessional images could be a sign of a scam.
- Sense of urgency - Countdown timer with a couple of minutes on it, asking you to enter your personal information or subscribe to some online service.
- Statements that you won something - If you haven't participated in a lottery, online competition, etc., and you see a pop-up window stating that you won.
- Computer or mobile device scan - A pop-up window that scans your device and informs of detected issues - is undoubtedly a scam; webpages cannot perform such actions.
- Exclusivity - Pop-up windows stating that only you are given secret access to a financial scheme that can quickly make you rich.
Example of a pop-up scam:

How do pop-up scams work?
Cybercriminals and deceptive marketers usually use various advertising networks, search engine poisoning techniques, and shady websites to generate traffic to their pop-ups. Users land on their online lures after clicking on fake download buttons, using a torrent website, or simply clicking on an Internet search engine result.
Based on users' location and device information, they are presented with a scam pop-up. Lures presented in such pop-ups range from get-rich-quick schemes to fake virus scans.
How to remove fake pop-ups?
In most cases, pop-up scams do not infect users' devices with malware. If you encountered a scam pop-up, simply closing it should be enough. In some cases scam, pop-ups may be hard to close; in such cases - close your Internet browser and restart it.
In extremely rare cases, you might need to reset your Internet browser. For this, use our instructions explaining how to reset Internet browser settings.
How to prevent fake pop-ups?
To prevent seeing pop-up scams, you should visit only reputable websites. Torrent, Crack, free online movie streaming, YouTube video download, and other websites of similar reputation commonly redirect Internet users to pop-up scams.
To minimize the risk of encountering pop-up scams, you should keep your Internet browsers up-to-date and use reputable anti-malware application. For this purpose, we recommend Combo Cleaner Antivirus for Windows.
What to do if you fell for a pop-up scam?
This depends on the type of scam that you fell for. Most commonly, pop-up scams try to trick users into sending money, giving away personal information, or giving access to one's device.
- If you sent money to scammers: You should contact your financial institution and explain that you were scammed. If informed promptly, there's a chance to get your money back.
- If you gave away your personal information: You should change your passwords and enable two-factor authentication in all online services that you use. Visit Federal Trade Commission to report identity theft and get personalized recovery steps.
- If you let scammers connect to your device: You should scan your computer with reputable anti-malware (we recommend Combo Cleaner Antivirus for Windows) - cyber criminals could have planted trojans, keyloggers, and other malware, don't use your computer until removing possible threats.
- Help other Internet users: report Internet scams to Federal Trade Commission.
Frequently Asked Questions (FAQ)
What is an online scam?
Online scams are a type of deceptive content promoted on the Internet. These scams are intended to deceive users into performing specific actions, such as connecting cryptowallets to cryptocurrency drainers, disclosing sensitive data, making monetary transactions, purchasing products, subscribing to services, downloading/installing software, and so on.
What is the purpose of online scams?
The purpose of online scams is to generate revenue at the expense of their victims. Scammers primarily profit by obtaining funds through deception, selling/abusing private information, promoting content, and proliferating malware.
I have provided my personal information when tricked by a scam, what should I do?
If you have provided your log-in credentials – change the passwords/passphrases of all potentially compromised accounts and inform their official support without delay. However, if you have disclosed information of a different personal nature (e.g., ID card details, passport photos/scans, credit/debit card numbers, etc.).
I have lost digital assets to a fake "Clawdbot ($CLAWD)" website, can I get my money back?
Cryptocurrency transactions are irreversible due to their practically untraceable nature. Therefore, victims of scams like the fake "Clawdbot ($CLAWD)" webpages are unable to recover their digital assets.
Why do I encounter online scams?
Online scams are mainly encountered via spam (e.g., social media posts, DMs/PMs, emails, browser notifications, SMSes, calls, etc.), sites using rogue advertising networks, intrusive advertisements, mistyped URLs, and adware.
Will Combo Cleaner protect me from online scams?
Combo Cleaner can scan visited websites and detect rogue, deceptive/scam, and malicious pages. It can also block all further access to these sites.
Share:
Tomas Meskauskas
Expert security researcher, professional malware analyst
I am passionate about computer security and technology. I have an experience of over 10 years working in various companies related to computer technical issue solving and Internet security. I have been working as an author and editor for pcrisk.com since 2010. Follow me on Twitter and LinkedIn to stay informed about the latest online security threats.
PCrisk security portal is brought by a company RCS LT.
Joined forces of security researchers help educate computer users about the latest online security threats. More information about the company RCS LT.
Our malware removal guides are free. However, if you want to support us you can send us a donation.
DonatePCrisk security portal is brought by a company RCS LT.
Joined forces of security researchers help educate computer users about the latest online security threats. More information about the company RCS LT.
Our malware removal guides are free. However, if you want to support us you can send us a donation.
Donate





▼ Show Discussion