Address AML check

Paste the recipient address. We'll show the risk and why.

Fraud signals in databasesLinked to Tornado.CashLinked to Frozen by Circle

Critical risk

The address is sanctioned or linked to a hack, theft or phishing.

0xF35F8853522ac21e6134c7691CC5f3C9ab6b6b62Ethereum

Do not send funds to this address.
If you already did, keep the transaction hash and contact your exchange or wallet support.

Download the detailed report

What the score is made of

The final score is the largest of the parts

Sanctions lists and risk databases5 signal(s) found100 points
Counterparties and links1 of 58 are in risk databases; 2 links with flagged addresses60 points

Serious signals

Confirmed by sources: sanctions, hacks, phishing. This is the main reason for the score.

Phishing

Stole money: fake site, one signature — wallet empty.

Phishing (SlowMist,ScamSniffer,BlockSec)source: GoPlus findings saved by SpiderAML
Wallet drainer / phishing (ScamSniffer)source: ScamSniffer blacklist

Hack or theft

Linked to a hack or theft.

Theft / exploit (SlowMist,ScamSniffer,BlockSec)source: GoPlus findings saved by SpiderAML

Suspicious activity

User complaints or a flag in open databases.

Suspected blacklist (SlowMist,ScamSniffer,BlockSec)source: GoPlus findings saved by SpiderAML

Weak signals

Labels from open research and lists, not confirmed. Not a reason to refuse by themselves, but be more careful.

Phishing

Stole money: fake site, one signature — wallet empty.

Public fraud dataset: phishing (snapshot July 2025)source: Ethereum Fraud Dataset (Ishmukhamedov, 2025)

Connections

Some counterparties are in risk databases. This counts in the score but does not by itself make the address risky.

On a stablecoin issuer's blacklist0xc345…9708
Frozen by Circle (USDC) on Ethereum, 2023-05-01

Linked addresses

Transfers between this address and addresses from our databases, from the Ethereum blockchain history. Updated monthly.

Arrow towards the centre: the address received from it. Arrow away from the centre: the address sent to it. A thicker line means more transfers.

Sanctions list0x12d6…b8fc
The checked address received from it: 0.5 ETH
5 transfers · Nov 4, 2022 — Feb 25, 2023
Tornado.Cash: 0.1 ETH (OFAC sanctions, Tornado Cash) · source: Etherscan address labels
On a stablecoin issuer's blacklist0xc345…9708
The checked address received from it: 0.1 ETH
1 transfer · Feb 20, 2024 — Feb 20, 2024
Frozen by Circle (USDC) on Ethereum, 2023-05-01 · source: Stablecoin issuer freezes (Tether, Circle)

Links count in the risk score: the weight depends on the kind of address the transfer was with (sanctions, hack, mixer, phishing), the amount and the direction. Transfers of victims and ordinary payments are shown neutrally and barely change the score.

At a glance

Risk signals: 6
Balance, all chains (Zerion, spam tokens excluded): $180past day -2.4%
Addresses screened: 58flagged: 1

Wallet

First transaction: Nov 4, 2022 · 4 y
First funding: Nov 4, 20220.087 ETH · mixerTornado.Cash: 0.1 ETH (OFAC sanctions, Tornado Cash)0x12d6…b8fc

Read from the first transactions on the network. The source of the first funding counts in the score when it is a mixer, a sanctioned or a flagged address (by amount); a bridge or a DEX adds only a few points.

Registry: Phishing, level 3/3. SpiderSend will block transfers here.

The score is produced automatically from public data. It is not legal advice and not an accusation: addresses can be listed by mistake. Checked Nov 11, 09:24 AM.

Wrong score? Tell us