How to Check if an Ethereum Address Is Sanctioned

By Alexandr Kerya · · 4 min read

TL;DR - Paste the wallet address into the OFAC Sanctions Search portal, verify on a blockchain explorer, or use a free automated screener that checks multiple blockchains at once.

What does it mean when an Ethereum address is sanctioned?

A sanctioned address appears on a government SDN (Specially Designated Nationals) list maintained by the US Treasury's OFAC. Mixing funds with these addresses is a federal offense in the United States and carries legal risk in most other jurisdictions. Sanctions apply to the entire chain of custody: if you receive coins that passed through a sanctioned wallet, downstream counterparties may flag your address too. You can screen your wallet with Plastron to see if it has ever interacted with a sanctioned address.

Each OFAC SDN crypto entry includes a full 42-character address with the 0x prefix, a program code (such as CYBER or SDGT) identifying the legal authority for the designation, and the date of listing. When compliance tools check an address they compare it against this structured list directly, so even a partial match or a checksum-case variation would be missed by a simple text search - always use a proper screener.

Risk tier ladder from clean to severe.CleanLowElevatedSevere
A sanctions hit pushes an address to the top risk tier - direct or by exposure.

Where do sanctioned Ethereum addresses come from?

OFAC began adding Ethereum addresses to the SDN list in August 2022 after the Tornado Cash sanctions. The list now includes wallets tied to ransomware groups, state-sponsored hackers, mixers, and sanctioned exchanges. The most common source is the US Treasury OFAC SDN list, but similar registries exist for the EU, UK OFSI, and UN. After confirming an address on the official OFAC site, check for multi-chain exposure as well - the same actor often controls addresses across Arbitrum, Base, and other EVM networks.

How do you check an address on the OFAC SDN list?

The safest first step is the official source:

  1. Visit the OFAC Sanctions Search portal.
  2. Paste the full Ethereum address into the search field.
  3. Review any matches and read the "Program" column to see why the address was listed.

The OFAC portal returns exact-string matches only, so you must enter the full 42-character address with the 0x prefix. Once you have checked the official registry, run a broader screening pass to see risk beyond the direct match - a multi-hop link to a sanctioned address can still trigger a compliance hold at an exchange even when your address itself does not appear on the SDN list.

Can you use a blockchain explorer to spot sanctioned addresses?

Some explorers label known OFAC addresses with a warning badge. On Etherscan, for example, sanctioned wallets often show an "OFAC SDN" tag near the balance section. This is faster than manual government-portal lookup, but the label may lag behind the official list by days or weeks, and it covers only direct matches on Ethereum mainnet - it will not catch exposure on other EVM chains or flag a multi-hop link.

What other tools screen for sanctions on crypto addresses?

Beyond manual OFAC searches, several tools automate sanctions screening:

  • Chainalysis and Elliptic offer enterprise-grade blacklists used by exchanges, but individual access is expensive.
  • TRM Labs provides risk-scoring APIs for institutional clients.
  • Free web screeners let individuals paste an address and get an instant OFAC + taint-risk summary across multiple chains.

Free blockchain explorers show single-chain labels only and do not model indirect exposure. A multi-hop link - where your wallet received funds from an address that itself interacted with a sanctioned wallet - can still result in a frozen deposit at an exchange, even though your address is clean on the SDN list.

Should you check addresses before every transaction?

Yes. Crypto transactions are irreversible. Even a single deposit from a sanctioned address can contaminate a hot wallet and trigger compliance reviews at the receiving exchange. When an exchange screens a deposit and finds a sanctioned or high-risk counterparty in the transaction graph, the standard response is to freeze the deposit, file a Suspicious Activity Report if required, and notify the account holder - a process that can take one to four weeks to resolve. The safest workflow is to screen addresses in advance and maintain a record of clean counterparties before any large transfer.

FAQ

Are sanctioned Ethereum addresses illegal to use?

Interacting with an OFAC-sanctioned address is illegal for US persons and can result in civil penalties or criminal charges under federal law.

Does a sanctions check cover all blockchains?

Most free tools only check Ethereum mainnet. A multichain screener covers the same wallet on Arbitrum, Base, Optimism, Polygon, BNB Chain, and Avalanche in one query.

How often is the OFAC crypto sanctions list updated?

OFAC publishes updates to the SDN list as needed. Key crypto-related additions have occurred several times per year since 2022, so any screening tool should pull fresh data daily for accuracy.

Disclaimer: This article is for educational and informational purposes only and is not legal, financial, tax, or compliance advice. Crypto carries risk; you act on this information at your own risk. Always do your own research and consult a qualified professional before making decisions. Views are the author's own and do not constitute financial, legal, or investment advice.

About Plastron

Plastron is a free, non-custodial wallet screening tool. It checks Ethereum and six EVM chains for AML and KYT risk — sanctions exposure, mixer contact, and stolen-funds proximity — and returns a risk report in seconds. It reads public on-chain data only: it never takes custody of funds and never asks for private keys.

How Plastron works and who runs it →

Keep reading

How to Safely Buy Crypto Peer-to-Peer: A Buyer's ChecklistWhat Are the Three Stages of Money Laundering in Crypto?KYC vs KYT: What's the Difference in Crypto Compliance?What Is a VASP (Virtual Asset Service Provider) and Why Does It Screen Your Wallet?