Check a crypto address before you send money
Paste a wallet or token address. SpiderAML checks it against official sanctions lists and databases of hacks and phishing, and tells you in plain words how risky it is.
What SpiderAML does
Four tools, each answering its own question.
Address AML check
Is it safe to send money to this address?
- •Whether the address is on US, UK or EU sanctions lists
- •Whether it is linked to hacks, theft, phishing or mixers
- •Which risky addresses it has dealt with recently
Data: Official sanctions lists and public risk databases
Token analysis
Can this token be trusted?
- •Price, market cap, trading volume on exchanges and DEXes
- •How much money is in the pools and whether you can sell without losses
- •Who holds most of the supply and whether the owner can change the rules
Data: Blockchain (QuickNode), Zerion, CoinGecko
Whales
Who is buying or selling a token in size right now?
- •Every token transfer above a chosen amount
- •DEX buys and sells for each wallet
- •Labels: exchanges, funds, risky addresses
Data: On-chain transfers + our labels
Sanctioned addresses
Which crypto addresses are officially sanctioned?
- •Only what regulators have published
- •Who the address belongs to and under which programme
- •A link to the official record and the listing date
Data: OFAC SDN (US), UK Sanctions List, EU Consolidated List
How to read the score
The score runs from 0 to 100 and follows the most serious signal found. Below it you always see why, and from which source.
Not on sanctions lists or in risk databases.
Some risk signs, for example transfers with addresses from risk databases.
Serious flags in public databases. Sending funds is not recommended.
Sanctions list, hack, theft or phishing. Do not send funds.
Where the data comes from
Public and official sources only. Lists refresh automatically every 6 hours.
| Source | What it covers | Addresses | Updated |
|---|---|---|---|
| OFAC SDN List (US Treasury)official | US Treasury sanctions list | 1,066 | Oct 27, 04:15 PM |
| UK Sanctions List (FCDO)official | UK sanctions list | 59 | Oct 27, 04:15 PM |
| EU Consolidated Financial Sanctions Listofficial | EU consolidated sanctions list | 8 | Oct 27, 04:15 PM |
| Etherscan-family public labels | Explorer labels: exchanges, protocols, exploiters — 6 networks | 32,474 | Oct 27, 04:15 PM |
| Forta labelled datasets | Exploits, phishing and malicious contracts | 15,357 | Oct 27, 04:15 PM |
| ScamSniffer blacklist | Drainers and phishing addresses | 2,530 | Oct 27, 04:15 PM |
| MyEtherWallet darklist | Phishing and scam addresses | 715 | Oct 27, 04:15 PM |
| Manual incidents | Recent incidents, checked by hand | 17 | Oct 27, 04:15 PM |
| SpiderAML lists | SpiderAML team lists | 0 | Oct 27, 04:15 PM |
| GoPlus Security | Checked live on each request (SlowMist, BlockSec and others) | live | — |
One address can appear in several sources, so the rows add up to more than the unique count above. “Updated” is when we last downloaded the source. Source licences are listed in the terms of use.
Good to know
- — The score is automatic. It is not legal advice and not an accusation: addresses end up on lists by mistake too.
- — We only see public data. Exchanges' internal data and brand-new schemes not yet in any database are invisible to us.
- — “Low risk” does not guarantee safety. For a large amount, send a small test payment first.