If your form of payment is running malware, don't be surprised that security software (recommended by the FBI mind you[0]) blocks it. Same as if your form of payment were running a crypto miner or exploiting local IoT devices to set up a botnet.

Don't be surprised also that if your business is distributing malware that people won't be very sympathetic toward you when they take the bait you offer without running the payload.

[0] https://www.ic3.gov/Media/Y2022/PSA221221