Address AML check

Paste the recipient address. We'll show the risk and why.

On a sanctions listOn a stablecoin issuer's blacklist

Critical risk

The address is sanctioned or linked to a hack, theft or phishing.

0xFb3eFf152ea55D1BfA04Dbdd509A80fD7b72cdEBEthereum

Do not send funds to this address.
If you already did, keep the transaction hash and contact your exchange or wallet support.

Transfer history unavailable.

What the score is made of

The final score is the largest of the parts

Sanctions lists and risk databases4 signal(s) found100 points
Counterpartiesnot checked0 points

Serious signals

Confirmed by sources: sanctions, hacks, phishing. This is the main reason for the score.

Hack or theft

Linked to a hack or theft.

Theft / exploit (SlowMist)source: GoPlus findings saved by SpiderAMLFlagged on Arbitrum. The address is the same on every network, so it matters here too.

Issuer freeze

Tether or Circle blacklisted this address. USDT or USDC cannot move to or from it, even if it is empty now.

On a stablecoin issuer's blacklist

Tether or Circle put this address on their blacklist: its USDT or USDC is blocked. The block applies even to an empty address. It is the issuer's decision, not proof of a crime.

Blacklisted by Circle (USDC) on 6 networks, Mar 12, 2026source: Stablecoin issuer freezes (Tether, Circle)Networks and transactions: Arbitrum · Avalanche · Base · Ethereum · Optimism · Polygon
Blacklisted by Tether (USDT) on Ethereum, Mar 12, 2026source: Stablecoin issuer freezes (Tether, Circle)

Official sanctions lists

Hyon Sop SIM
OFAC SDN, NPWMD, ETH
In our database since Oct 27, 2026, verified Nov 7, 2026source record

Linked addresses

Transfers between this address and addresses from our databases, from the Ethereum blockchain history. Updated monthly.

Arrow towards the centre: the address received from it. Arrow away from the centre: the address sent to it. A thicker line means more transfers.

Hack or theft0xd04e…da7f
The checked address received from it: 21,090.05 USDT
1 transfer · Jun 23, 2025 — Jun 23, 2025
Theft / exploit (SlowMist) · source: GoPlus findings saved by SpiderAML

Links are shown for information and are not part of the risk score.

At a glance

Risk signals: 4

Registry: Sanctions list, level 3/3. SpiderSend will block transfers here.

The score is produced automatically from public data. It is not legal advice and not an accusation: addresses can be listed by mistake. Checked Nov 7, 05:06 PM.

Wrong score? Tell us