Address AML check

Paste the recipient address. We'll show the risk and why.

Fraud signals in databasesLinked to Tornado.CashLinked to Phishing

Critical risk

The address is sanctioned or linked to a hack, theft or phishing.

0x1D5071048370dF50839C8879cDF5144aCE4B3b3bEthereum

Do not send funds to this address.
If you already did, keep the transaction hash and contact your exchange or wallet support.

Download the detailed report

What the score is made of

The final score is the largest of the parts

Sanctions lists and risk databases5 signal(s) found100 points
Counterparties and links1 of 2 are in risk databases; 2 links with flagged addresses42 points

Serious signals

Confirmed by sources: sanctions, hacks, phishing. This is the main reason for the score.

Phishing

Stole money: fake site, one signature — wallet empty.

Wallet drainer / phishing (ScamSniffer)source: ScamSniffer blacklist
Phishing (SlowMist,ScamSniffer,BlockSec)source: GoPlus Security

Hack or theft

Linked to a hack or theft.

Theft / exploit (SlowMist,ScamSniffer,BlockSec)source: GoPlus Security

Suspicious activity

User complaints or a flag in open databases.

Suspected blacklist (SlowMist,ScamSniffer,BlockSec)source: GoPlus Security

Weak signals

Labels from open research and lists, not confirmed. Not a reason to refuse by themselves, but be more careful.

Phishing

Stole money: fake site, one signature — wallet empty.

Public fraud dataset: phishing (snapshot July 2025)source: Ethereum Fraud Dataset (Ishmukhamedov, 2025)

Connections

Some counterparties are in risk databases. This counts in the score but does not by itself make the address risky.

Phishing0x088a…cb61
Phishing (SlowMist,BlockSec)

Linked addresses

Transfers between this address and addresses from our databases, from the Ethereum blockchain history. Updated monthly.

Arrow towards the centre: the address received from it. Arrow away from the centre: the address sent to it. A thicker line means more transfers.

Sanctions list0x12d6…b8fc
The checked address received from it: 0.4 ETH
4 transfers · Oct 14, 2022 — Apr 26, 2023
Tornado.Cash: 0.1 ETH (OFAC sanctions, Tornado Cash) · source: Etherscan address labels
Phishing0x088a…cb61
The checked address received from it: 0.1 ETH
1 transfer · Dec 22, 2023 — Dec 22, 2023
Phishing (SlowMist,BlockSec) · source: GoPlus findings saved by SpiderAML

Links count in the risk score: the weight depends on the kind of address the transfer was with (sanctions, hack, mixer, phishing), the amount and the direction. Transfers of victims and ordinary payments are shown neutrally and barely change the score.

At a glance

Risk signals: 6
Balance, all chains (Zerion, spam tokens excluded): $122past day -2.4%
Addresses screened: 2flagged: 1

Wallet

First transaction: Oct 14, 2022 · 4 y
First funding: Oct 14, 20220.091 ETH · mixerTornado.Cash: 0.1 ETH (OFAC sanctions, Tornado Cash)0x12d6…b8fc

Read from the first transactions on the network. The source of the first funding counts in the score when it is a mixer, a sanctioned or a flagged address (by amount); a bridge or a DEX adds only a few points.

Registry: Phishing, level 3/3. SpiderSend will block transfers here.

The score is produced automatically from public data. It is not legal advice and not an accusation: addresses can be listed by mistake. Checked Nov 11, 09:24 AM.

Wrong score? Tell us