Answer

Blockchain analytics traces transactions, clusters addresses and labels entities to determine which wallets are connected and what risk they carry; Plastron applies these techniques to your wallet free across seven EVM chains.

Blockchain Analytics Explained

Blockchain analytics traces cryptocurrency transactions across the entire public ledger to identify which addresses are connected, what entities control them, and what risk they represent.

Blockchain analytics is the discipline of analyzing public blockchain data to extract intelligence about transaction patterns, address ownership, and fund flows. Unlike traditional financial analytics, which relies on private bank records, blockchain analytics works entirely from publicly accessible data: every transaction on Ethereum and Bitcoin is permanently recorded and readable by anyone. The challenge is not accessing the data — it is making sense of it at scale. The core techniques in blockchain analytics are transaction tracing, address clustering, and entity labelling. Transaction tracing follows the flow of funds through a chain of transactions: given an address of interest, trace which addresses sent it funds, which addresses those received from, and how far back the chain extends. This allows analysts to identify whether funds in a wallet ultimately originated from a known bad actor, even if they passed through multiple intermediate addresses. Address clustering groups multiple wallet addresses that are likely controlled by the same entity, based on behavioral patterns in their transactions — common input ownership in Bitcoin, or consistent gas payment patterns in Ethereum. Entity labelling maps specific wallet addresses or clusters to known organizations: exchanges, DeFi protocols, bridges, mixers, and flagged entities. These labels come from a combination of public information (exchange deposit addresses are published in blockchain explorers), voluntary disclosure (companies sharing their addresses for compliance purposes), and intelligence gathering (addresses identified from darknet monitoring, law enforcement data sharing, and user reports). The output of blockchain analytics — a risk score, a list of flagged counterparties, a fund flow diagram — is what exchange compliance systems use to decide whether to accept or investigate a deposit. Understanding how this works helps you understand why your wallet might be flagged even if you believe your activity is entirely legitimate.

or check your own wallet →

Blockchain Analytics Explained: what the scan shows

Counterparty Graph Visualization

Plastron's Sankey diagram shows the top sources and destinations of funds in your wallet, classified by entity type. This fund flow visualization is the most accessible form of blockchain analytics output — it shows you where your money came from and where it went, in the same format that exchange compliance systems use internally to review incoming deposits.

Entity Classification and Risk Attribution

The analytical value of blockchain analytics comes from entity classification — knowing that a given address belongs to Binance, or Tornado Cash, or Lazarus Group. Plastron classifies counterparties across fourteen entity types and flags those that carry AML risk. This entity context is what converts a list of anonymous addresses into a readable compliance report.

Activity Pattern Detection

Beyond counterparty analysis, Plastron's activity heatmap applies statistical analysis to your transaction timing and frequency. Anomalies — clusters of transactions that deviate significantly from your baseline pattern — are flagged and visualized. This behavioral analytics layer is what compliance systems use to identify structuring, rapid-cycling, and other transactional patterns that may indicate money laundering independent of the counterparties involved.

The risk categories involved

Sanctions
OFAC SDN-listed addresses. Direct or indirect exposure flags your wallet instantly.
Mixer
Tornado Cash, Railgun and other labelled mixing protocols. Interaction with these services is a major red flag.
Stolen Funds
Wallets linked to hacks, exploits, and bridge attacks. Even receiving a fraction taints your address.
Darknet
Addresses associated with darknet marketplaces. Any connection triggers heightened scrutiny at exchanges.
$1.4B
Annual revenue of the blockchain analytics industry (Chainalysis, Elliptic, TRM)
Source: Industry estimates 2023
1B+
Ethereum transactions indexed in major blockchain analytics databases
Source: Industry estimates

What we actually screen against

Measured from Plastron’s own screening corpus, rebuilt on every deploy.

1,047
sanctioned addresses in the corpus
one of the risk categories this page covers
34
mixer contracts and routers in the corpus
one of the risk categories this page covers
250
hack and exploit addresses in the corpus
one of the risk categories this page covers

Page last updated

What this looks like up close

What blockchain analytics actually does

At its core, analytics turns a list of transactions into a map of entities. A public ledger records addresses moving value, but addresses are not people and not organisations, so the first job is clustering: grouping addresses that behave as if one party controls them, using heuristics like common spending and change patterns. The second job is attribution: attaching a name to a cluster, whether from the party publishing it, from leaked data, from law enforcement, or from an analyst's investigation. Everything else, including every risk score you have ever seen, is built on those two layers. Which is why the quality of analytics is really the quality of its attribution, and why two vendors can disagree about the same wallet without either being careless.

Where the analysis stops

Analytics stops at services, and this is a deliberate modelling decision rather than a limitation people usually notice. When value enters a large centralised exchange it joins a commingled pool, and what comes out the other side carries no meaningful link to what went in. Tracing through would produce noise, so screeners stop at known services and say so. The effect is that exposure through an exchange usually reads as clean, and a laundering path whose last step is a big exchange is genuinely hard to follow without that exchange's own records. Two other stopping points matter: privacy coins like Monero, where the ledger does not expose the required data at all, and cross-chain bridges, where following value means correlating events on two different ledgers rather than reading one.

How probabilistic findings become confident-looking scores

Most attribution is statistical rather than certain. A cluster is probably one entity. A mixer withdrawal probably corresponds to a particular deposit, inferred from timing and amounts. Those probabilities are good enough for a risk decision and often not good enough for a courtroom, which is exactly the gap that produces frustrating outcomes: a wallet can be flagged with high confidence by a system that could not prove the underlying link to a judge. Understanding this changes how you should read a result. The right question is not whether the tool is certain, but what evidence the finding rests on and how far away it sits — which is why a serious tool surfaces the driving category, the hop distance and the source, rather than a single number.

Who uses it, and why that shapes what you experience

The paying customers are exchanges, banks, regulators and law enforcement, not individuals. That shapes everything downstream. Products are built for compliance workflows, priced per seat or per query at institutional rates, and tuned to be conservative, because the cost of a missed sanctions hit is a licence and the cost of a false positive is one annoyed customer. When your deposit gets held over a distant indirect signal, that asymmetry is the reason. It also explains why individual-facing screening barely existed until recently: the people most exposed to these decisions had no access to the data being used to make them, and the first thing they usually learn about blockchain analytics is that it has already been applied to them.

What readers ask next

Related checks

Blockchain Forensics Alternative — Free ToolWhat Is AML in Crypto? — Plain-Language GuideHow Exchanges Screen Wallet Deposits — ExplainedChainalysis Alternative — Free Wallet AML ScreeningCrypto Wallet Risk Score — What It Means

Scan your wallet free

Paste any address for a free instant check. Nothing to connect · Never a transaction · No history kept. Sign in for the full report: your own wallet is always free.

Explore More

Free AML Screening for Crypto WalletsWallet Risk Check — Before You Send or DepositCrypto Compliance Check — Free Wallet ScanKYC Wallet Check — Screen Your Address FreeWallet Address Checker — Free, Instant, 10 Chains