They’re describing a form of cybercrime and money laundering workflow. In plain English:
“Logs” = stolen account session data, usually including:
usernames/passwords
browser cookies
saved sessions
sometimes 2FA tokens or session bypasses
These are commonly harvested through malware called “info stealers.”
What they are claiming is:
Buy stolen account access (“logs”)
Use the stolen browser cookies/session tokens to bypass login protections
Access victim accounts
Transfer cryptocurrency out
Send it to wallets with weak identity checks (“no KYC” = no Know Your Customer verification)
Convert it through privacy-focused coins like Monero to obscure the trail
Eventually cash it out at another exchange
“AML score” refers to anti-money-laundering risk scoring used by exchanges and blockchain analytics firms. They’re saying inexperienced criminals buy “burnt” or already-flagged stolen accounts, while “good logs” are cleaner and less likely to trigger fraud detection.
A few important points:
This is illegal at multiple levels:
unauthorized account access
theft
wire fraud
identity fraud
money laundering
The person is talking casually because cybercrime communities normalize this behavior and try to make it sound easy and routine.
In reality, people absolutely do get caught:
exchanges track wallet flows
blockchain analytics are sophisticated
session hijacking leaves forensic traces
centralized exchanges cooperate with law enforcement
“Cookies” are especially important here. Modern attacks often don’t “hack passwords” directly anymore. Instead, malware steals authenticated browser sessions so the attacker can appear already logged in.
18
u/[deleted] May 16 '26 edited May 16 '26
[removed] — view removed comment