Why a Decade-Old Ethereum Wallet Gets Flagged the Moment It Wakes Up

By Alexandr Kerya · · 5 min read

TL;DR - A decade-old Ethereum wallet that suddenly moves gets extra exchange scrutiny because dormancy plus size matches the exact pattern AML programs are built to catch, regardless of how the coins were acquired.

On May 13, 2026, at 21:47 UTC, a wallet that received 790 ETH at Ethereum's genesis block in July 2015 sent that balance out for the first time in nearly eleven years, worth about $1.78 million the moment it moved. Whale Alert flagged the transfer within minutes. By August, a handful of similar genesis-era addresses had moved a combined 8,680 ETH between them. None of that activity is illegal. All of it now travels straight into an exchange compliance queue the moment it lands.

Ethereum's Genesis Wallets Are Waking Up

2026 is turning into the year Ethereum's earliest holders finally move. A pre-mine address that sat untouched for 10.8 years sent out roughly 2,000 ETH on July 21, 2026, worth about $4.2 million at the time. It had cost the original holder around $620. Coinbase and Coinjar both received deposits from this wave of reactivated wallets, and on-chain trackers expect more genesis addresses to wake up before the year is out.

Dormant Ethereum wallets that moved in 2026.Bar chart: a 790 ETH genesis wallet worth 1.78 million dollars, a 2,000 ETH pre-mine wallet worth 4.2 million dollars, and a combined 8,680 ETH across several genesis wallets.790 ETH / $1.78MGenesis wallet, May 20262,000 ETH$4.2MPre-mine wallet, July 20268,680 ETHcombinedGenesis wallets, Jul-Aug 2026
Several Ethereum wallets dormant since the 2015 genesis block moved for the first time in 2026, each landing straight in an exchange's compliance queue.

Why Does Moving an Old Wallet Trigger a Review?

Exchanges run standard KYC and AML programs, and one of the oldest red flags in that playbook is an account that goes quiet for years, then moves a large sum without warning. It doesn't matter that the coins are ten years old. A sudden, high-value transfer out of a previously dormant address is exactly the signature that structuring and layering typologies are trained to catch, so it gets a second look almost by default.

That second look usually means a source-of-funds request: proof of when and how you acquired the ETH, plus an explanation for why it never moved. Old exchange receipts, a mining record, or an ICO contribution transaction all help. Waiting until the exchange asks is the slow way to answer it.

Age Doesn't Mean Clean

A wallet that has never sent a transaction looks pristine on paper. But the coins inside it still came from somewhere, and the counterparties that funded it back in 2015 or 2016 get re-evaluated against today's rules, not yesterday's. A dormant balance can sit years past the point where one of its early senders later turned up on a sanctions list or ran a service that got shut down for laundering.

Security fear moves old coins too. One Bitcoin wallet dormant since 2013 emptied out shortly after the Coldcard hardware wallet breach made headlines, as holders rushed to migrate funds off suspect setups. The reason for a transfer rarely shows up on-chain. The exchange only sees the pattern: nothing, then everything, at once.

How Do You Screen a Dormant Wallet Before You Move It?

The free option is Etherscan: pull up the address, check its full transaction history, and look for any label on a counterparty that funded it years ago. That works for direct, single-hop links, and it stops there. It won't catch a mixer three hops back, a sanctioned service on Arbitrum instead of mainnet, or a stolen-funds cluster that only got attributed last month.

Screen your wallet with Plastron instead, and you get the full picture in one pass: OFAC sanctions exposure, mixer contact, and stolen-funds exposure across Ethereum and six other chains, checked against roughly 3,900 labeled addresses plus the full OFAC SDN list. Run the check before you move a single satoshi, not after an exchange holds the deposit and asks you to explain it.

What Should You Do Before Cashing Out a Decade-Old Wallet?

Treat a large, old balance like a compliance project, not a normal withdrawal.

  • Screen the address first, so you know what an exchange's own review will surface before it does.
  • Gather proof of origin: old purchase receipts, an ICO contribution transaction, a mining pool payout, or a wallet-creation timestamp that matches your story.
  • Move a small test amount before the full balance, so a hold catches you early rather than on the transfer that matters.
  • Expect a source-of-funds request by default and have the paperwork ready instead of scrambling once support asks.

A little preparation turns a multi-week freeze into a same-day deposit.

FAQ

Does a dormant Ethereum wallet get flagged just for being old?

Age alone doesn't flag a wallet. The trigger is a large transfer out of an address with years of zero activity, which most exchange AML systems treat as a red flag worth a manual review.

How long does a source-of-funds review take for a large old-wallet deposit?

It varies by exchange and the size of the deposit, but a few days to several weeks is typical. Having proof of origin ready before you deposit shortens it considerably.

Can a wallet be sanctioned for holding coins from before OFAC listed anything crypto-related?

The wallet itself isn't sanctioned retroactively, but if any counterparty in its transaction history is on the SDN list today, a compliance screen will still surface that link regardless of when the transfer happened.

What proof do exchanges accept for coins bought or mined a decade ago?

Old exchange purchase receipts, mining pool payout records, ICO contribution transactions, and wallet-creation timestamps that line up with your story are the most commonly accepted forms of proof.

Disclaimer: This article is for educational and informational purposes only and is not legal, financial, tax, or compliance advice. Crypto carries risk; you act on this information at your own risk. Always do your own research and consult a qualified professional before making decisions. Views are the author's own and do not constitute financial, legal, or investment advice.

About Plastron

Plastron is a free, non-custodial wallet screening tool. It checks Ethereum and six EVM chains for AML and KYT risk — sanctions exposure, mixer contact, and stolen-funds proximity — and returns a risk report in seconds. It reads public on-chain data only: it never takes custody of funds and never asks for private keys.

How Plastron works and who runs it →

Keep reading

The Coldcard Hack Drained $116M. Here's Where It's Hiding.How to Write a Source of Funds Letter for a Crypto ExchangeHow Far Back Do Crypto Exchanges Check Your Transaction History?Can Wallet Screening See Restaked ETH After the Kelp DAO Hack?