TRM LABS

# TRM Labs Engineering Challenge: Crypto Scam Detection Agent

## Background

Scams and fraud cost Americans over $10 billion each year ([learn more](https://www.trmlabs.com/resources/blog/how-does-blockchain-intelligence-help-prevent-scams-and-fraud)).

At TRM Labs, we build AI agents to fight crime and give defenders an unfair advantage. A critical part of this work involves identifying scam websites and extracting cryptocurrency addresses that can be used to trace illicit funds.

## Challenge Overview

**Time Limit:** 48 hours from receipt of this challenge

**Objective:** Build an agentic system that can autonomously analyze a list of websites to:
1. **Classify** each site as either a **scam** or **not a scam**
2. **Extract** any cryptocurrency addresses found on scam sites, including those that may only be revealed after navigating the site or completing login flows

## Requirements

### Core Functionality
- Process a provided list of 160 URLs
- Output a classification (scam / not scam) for each URL
- For identified scams, extract any cryptocurrency addresses discovered on the site
- Handle edge cases gracefully (inactive sites, sites without addresses, etc.)


View URL List (160 URLs)

https://22betcanada.com
https://8w.bqpxaf.xyz
https://addmklwhisky.com
https://adnins.cloud
https://alayasbeauty.com
https://astarwap.com
https://aurionthexxa.com
https://bahrainiptv.com
https://bian-gold.globalonline.workers.dev
https://bitocitex.com
https://bozei.xyz
https://bradfordtradeins.com
https://braiinscryptminning.com
https://busigirh.xyz
https://byexdd.cc
https://ca7ggs-xj.myshopify.com
https://choxorainvestment.cc
https://claudetf.fun
https://cofuturexs.com
https://consultingfootpain.gr.com
https://copykoieliteglobal.org
https://cryptotrackerapp.net
https://datahydru602.com
https://datahydruva.com
https://daxonbrite.info
https://dbd414c671913cba9408de35257a7286.small1006.shop
https://dexapp.uk
https://dreammallshopggroup.com
https://dreamshopgroup.com
https://dropclutchsociety.com
https://drops-marketplace.netlify.app
https://elite-crown.com
https://feed.gaiaaex.com
https://fortivexgroup.org
https://fxo2o.me
https://gete84.com
https://goldmachine.international
https://gxecgcx.com
https://h5.bit-main.cc
https://h5.bitmain-ex.co
https://h5.bitxex.quest
https://h5.mitrade-store.com
https://heysylas.top
https://ifcrepe.top
https://iffepi.com
https://infinitecloudmarket.org
https://infinitifutures.ae
https://interactivemining-brokers.com
https://internationalbronzetrading.com
https://kadven.io
https://keystonevaults.com
https://koserwry.xyz
https://learingcenter.fun
https://luminex3.net
https://m.bit-ligne.sbs
https://m.coinshouseltd.com
https://m.kisngaf.shop
https://m.lon28.click
https://market3.bfxtrade.top
https://maxnero-experts.org
https://metacapitalinvestment.pro
https://minegridtech.com
https://mofasbit.net
https://moneyproo.com
https://nexcofxs.org
https://niaexchangegroup.com
https://niupi.3455n.top
https://novaex.io
https://novarenthionex.com
https://onestopchoices.com
https://openai9315.com
https://optiontradingsignalsfx.live
https://orotoken.io
https://pinshici.cc
https://primesuccessfinance.com
https://prohavensequity.com
https://proymsi.xyz
https://pugmeme.io
https://quantaraxxx.org
https://r7t2mj.xyz
https://renega.nl
https://rugroyale.xyz
https://samarpanbusiness.com
https://sesiocreditunion.com
https://shopelio.nl
https://smartgrowsavings.com
https://teslaprimeholding.com
https://test.fxtrading.lol
https://tiktoksig-f4dbexefdvh4faev.a01.azurefd.net
https://timeecoin.com/wap
https://tomandjerrytoken.xyz
https://trino.gold
https://twatfx.online
https://twfxcc.store
https://ultimatepips.net
https://ulvexionarith.com
https://uptimisttrust.com
https://uranustds.click
https://usdc022.com
https://usdc661.com
https://vanishsafeguard.com
https://varumi.nl
https://velantrix-aion.com
https://vendixa.top
https://vnexchange.me
https://vnexchange.top
https://web.rocupbitoffice.com
https://web3.bitgettwallet.shop/h5
https://windrushs.co
https://wp.rolaxetf.store
https://www.azevedioclub.com
https://www.baceenergyassetman.com
https://www.bifinancegdb.vip
https://www.bigonelfj.com
https://www.bitkanusca.com/wap
https://www.blsyqsz.com
https://www.btcctw.help
https://www.ceffknks.vip
https://www.chc-tradingx.xin
https://www.coinbitj.cfd
https://www.coinexvto.com
https://www.coinhako01.com
https://www.coinmarkcapzwh.com
https://www.coinruq.com
https://www.dealloop-vault.store
https://www.exo-somedx.com
https://www.feyru.work
https://www.fsartrixmart-world.store
https://www.fsartrixmart-zone.store
https://www.fsocietymart-arena.store
https://www.gmoomg.com
https://www.goodcmvip.com
https://www.indogezje.com
https://www.jisfound.org
https://www.lcin.top
https://www.lcon.click
https://www.marlindefif.com
https://www.megabitrrt.com
https://www.poizvip-online.cc
https://www.rexiqok.com
https://www.savashop-choice.store
https://www.savashop-zonehub.store
https://www.sebca.art
https://www.sebca.sbs
https://www.tatung-world.com
https://www.twshop-sale.store
https://www.twxauxjpfivt.com
https://www.usdcsyh.com
https://www.wallateakiq.com
https://www.wandiesshop-discount.store
https://www.wandivashop-outlet.store
https://www.warelyshop-rack.store
https://www.yqeydfhr.cc
https://www.zfxfa.vip
https://xelate.store
https://xtbcopy.com
https://xtokentradct.com
https://yippeea.com/veiynl
https://zanqbanc.com
https://zentromarket.live



### Technical Expectations
- Your solution should run in a **sandboxed/secure environment** — you will be visiting potentially malicious sites
- The system should be able to navigate sites autonomously, including interacting with forms and login flows where applicable
- You may use **any AI agent framework or LLM API** of your choice (e.g., OpenAI, Anthropic, open-source models, etc.). If you need access to an API key, reach out to your recruiter
- Document any assumptions made about what constitutes a "scam" (examples: fake cryptocurrency exchanges, phishing login pages mimicking legitimate services, investment scams promising unrealistic returns, pig butchering solicitations)

### Deliverables
1. Working code with clear setup instructions
2. Output file (**JSON format**) containing:
   - URL
   - Classification (scam / not scam)
   - Extracted crypto addresses (if any) — we're primarily interested in **BTC, ETH, and USDT/USDC (TRC-20 and ERC-20)** addresses, though other chains are welcome
   - Confidence level or reasoning (optional but encouraged)
3. **README** that includes:
   - System design and architecture overview
   - Alternative approaches considered (and why you chose your approach)
   - Anything unique or creative you brought to the solution
   - What you would do with more time

### Bonus
- Capture a **screenshot** of each scam site showing the crypto address in context

## Evaluation Criteria

| Criteria | Weight |
|----------|--------|
| Classification accuracy | High |
| Crypto address extraction completeness | High |
| Code quality and architecture | Medium |
| Security considerations | Medium |
| Documentation and design rationale | Medium |
| Bonus features (screenshots, confidence scoring, etc.) | Low |

## Notes

- Some sites may no longer be active — handle these gracefully
- Some scam sites may not display a crypto address until certain actions are taken
- Use your judgment on ambiguous cases and document your reasoning
- We're interested in your thought process as much as the final output

## Submission

Please submit a link to a GitHub repository (or zip file) containing your solution within 48 hours to talent@trmlabs.com.

If sharing via GitHub, please keep the repository private and share access directly with `@rraina`.

## Questions?

If you have any questions or need clarification, please reach out to your recruiting contact.

Good luck — we're excited to see what you build!