Address AML check

Paste the recipient address. We'll show the risk and why.

Fraud signals in databases

Critical risk

The address is sanctioned or linked to a hack, theft or phishing.

0x181b89F4002d2CDE8AfF8D98aE7805EaDf690EA4Ethereum

Do not send funds to this address.
If you already did, keep the transaction hash and contact your exchange or wallet support.

Transfer history unavailable.

What the score is made of

The final score is the largest of the parts

Sanctions lists and risk databases6 signal(s) found100 points
Counterpartiesnot checked0 points

Serious signals

Confirmed by sources: sanctions, hacks, phishing. This is the main reason for the score.

Phishing

Stole money: fake site, one signature — wallet empty.

Phishing (Etherscan phish-hack list)source: Forta labelled datasets
Phishing (SlowMist,BlockSec)source: GoPlus findings saved by SpiderAMLFlagged on Polygon. The address is the same on every network, so it matters here too.

Hack or theft

Linked to a hack or theft.

Cybercrime (SlowMist,BlockSec)source: GoPlus findings saved by SpiderAMLFlagged on Polygon. The address is the same on every network, so it matters here too.
Theft / exploit (SlowMist,BlockSec)source: GoPlus findings saved by SpiderAMLFlagged on Polygon. The address is the same on every network, so it matters here too.

Suspicious activity

User complaints or a flag in open databases.

Suspected blacklist (SlowMist,BlockSec)source: GoPlus findings saved by SpiderAMLFlagged on Polygon. The address is the same on every network, so it matters here too.

Weak signals

Labels from open research and lists, not confirmed. Not a reason to refuse by themselves, but be more careful.

Phishing

Stole money: fake site, one signature — wallet empty.

Public fraud dataset: phishing (snapshot July 2025)source: Ethereum Fraud Dataset (Ishmukhamedov, 2025)

Linked addresses

Transfers between this address and addresses from our databases, from the Ethereum blockchain history. Updated monthly.

Arrow towards the centre: the address received from it. Arrow away from the centre: the address sent to it. A thicker line means more transfers.

Sanctions list0x2f38…6535
The checked address sent to it: 10.1 ETH
1 transfer · Aug 30, 2019 — Aug 30, 2019
OFAC SDN: 0x2f3...535 (OFAC sanctions) · source: Etherscan-family public labels

Links are shown for information and are not part of the risk score.

At a glance

Risk signals: 6

Registry: Phishing, level 3/3. SpiderSend will block transfers here.

The score is produced automatically from public data. It is not legal advice and not an accusation: addresses can be listed by mistake. Checked Nov 7, 08:06 PM.

Wrong score? Tell us