Check if an address is flagged or associated with fraud, who it belongs to, and whether it received funds traceable to flagged addresses (sanctioned entities, exploiters), directly or through intermediate addresses. Exposure raises the risk score and band, never lowers them; isKnown tells whether Crypto APIs holds any record of the address.
The credit cost of this endpoint is significantly higher than the Throughput Soft Limit of the preset subscription plans, so on preset plans every request is billed above the base rate (see Data Flow Limiting). The preset plans are intended for testing and evaluation. For production volumes we offer custom plans with a significantly lower price per check. Email us at [email protected] with the number of addresses you plan to verify per day or month, and we will prepare the best offer for you.
The blockchain address to verify against AML databases
In batch situations the user can use the context to correlate responses with requests. This property is present regardless of whether the response was successful or returned as an error. context is specified by the user.
Specifies the version of the API that incorporates this endpoint.
Defines the ID of the request. The requestId is generated by Crypto APIs and it's unique for every request.
In batch situations the user can use the context to correlate responses with requests. This property is present regardless of whether the response was successful or returned as an error. context is specified by the user.
The blockchain of the address
When Crypto APIs first recorded the address on any source.
Whether the address has AML flags
Earliest official listing date across the sources. Omitted when no source has an official date.
Risk band: low, medium, high, or severe. From flags it follows the severity; from exposure alone the score sets it: high from 55, medium from 35, otherwise low.
Numeric AML risk score from 0 (no risk) to 100 (severe risk). Flags on the address set it, and funds received from flagged addresses (see exposure) can raise it, never lower it: up to 70 for funds received directly from a sanctioned address and 55 from an exploiter, less with each further hop and in proportion to the tainted share. For a service wallet the exposure part is capped: 30 for a named exchange, bridge or mining pool, 50 for other services.
The highest severity across all sources: critical, high, medium, low, or info.
List of AML sources that flagged this address
When Crypto APIs first recorded this source's entry for the address.
Date of the documented incident behind this entry (e.g. the date of a hack per an official notice). Omitted unless an incident record exists.
Label related to the address sanctions from this source
Official date the source listed the address (e.g. the OFAC designation date, or the time of the issuer's freeze transaction). Omitted when the source publishes no official date.
The AML data provider (e.g. ofac_sdn, ransomwhere, scamsniffer).
Entity attribution for the address (who owns or controls it). Present when a labeled match exists, including for addresses that are not flagged; omitted otherwise.
Normalized entity key the address belongs to (e.g. binance, tornado_cash, f2pool)
Entity type (e.g. exchange, mixer, bridge, gambling, mining_pool). unidentified_service: a high-volume service whose operator is not identified (no entity)
Human-readable label for the entity
Whether Crypto APIs holds any information about the address: it is flagged, attributed to an entity, or part of a traced exposure graph. false means we have no information about the address, so a riskScore of 0 reflects missing information, not a verified clean address. Omitted when the lookup fails.
Indirect exposure: the blockchains where the address received funds that can be traced to flagged addresses, directly or through intermediate addresses. Use Get Address Exposure for the breakdown per flagged address and List Address Exposure Paths for the transaction trails. Omitted when the lookup fails.
Highest share (0 to 1) of tainted funds the address received from any flagged address; 0 when none.
API Key
{
"apiVersion": "2024-12-12",
"requestId": "601c1710034ed6d407996b30",
"context": "yourExampleString",
"data": {
"item": {
"blockchain": "tron",
"categories": [
"sanctions"
],
"firstSeenTimestamp": 1775594269,
"isFlagged": true,
"listingTimestamp": 1600214400,
"riskBand": "low",
"riskScore": 85,
"severity": "critical",
"sources": [
{
"categories": [
"sanctions"
],
"firstSeenTimestamp": 1775594269,
"incidentTimestamp": 1740096000,
"label": "United Fraud Nation LTD",
"listingTimestamp": 1600214400,
"provider": "ofac_sdn",
"sanctionPrograms": [
"CYBER2"
]
}
],
"attribution": {
"entity": "binance",
"type": "exchange",
"label": "Binance"
},
"isKnown": true,
"exposure": {
"blockchains": [
"tron"
],
"maxExposureShare": "1"
}
}
}
}