People do need to be more knowledgeable before they start accusing ETH wallet addresses of scamming. Please take note that scammers will almost always (99% of the time) want to sell the stolen funds. They’re not exactly interested in holding crypto – it just happens that the properties of cryptocurrency makes it easier for them to get away with it. Therefore, your stolen currencies will almost always (like I said, 99%) end up in an exchange’s hot or cold wallet.
How can you tell the difference between an exchange’s wallet and a scammer’s? There are several key points. First of all, the balance of the wallet. As I have mentioned previously, scammers would typically want to cash out. Of course, some scammers might be slow to do so, so let’s move on the second point.
Secondly, their number and frequency of transactions. If the wallet has thousands of transactions made, it would be less likely to be a scammer’s. Lkewise, if they’re constantly making transactions every few minutes or hours (big exchanges like Binance and HitBTC would lean towards the former, while small and relatively unknown exchanges would lean towards the latter). The number of transactions alone may not be satisfactory as scammers could simply split their stolen funds and send them to another wallet repeatedly. (e.g. instead of sending one transaction of 18 ETH from wallet A to B, they can send 180 transactions of 0.1 ETH from wallet A to B).
TL:DR – If a wallet has close to zero or a low ETH balance, low number of transactions (most of them are <200, I’ve seen some with close to 500) and the transactions are made infrequently, there is a high chance of it being a scammer’s wallet.
If a wallet has a high ETH balance, high number of transactions which are made frequently (every few minutes or hours), it might be an exchange’s wallet instead.
I hope this information has been useful to some of you.