I’m not sure what that means really, but buying Tokens from either the AH in game or the shop is perfectly fine.
Now if you used a payment method that wasn’t yours or did a charge back later or something, then yes, buying a token from the shop would get you in trouble.
But there is no malware on a blizzard token.