Answer

Crypto address screening checks a wallet against sanctions lists and risk databases the way exchange compliance systems do; Plastron screens any address free on 10 chains, returning a verdict in seconds.

Screen a Crypto Address Before Money Moves

Crypto address screening checks a wallet against sanctions databases, mixer contracts, exploit addresses, and fraud registries to assess its compliance risk before you transact.

Have an address in front of you? Paste it into the Plastron wallet check for an instant answer, or run the USDT and USDC freeze check to see whether a stablecoin issuer has blocked it.

Crypto address screening is the most foundational step in any blockchain AML programme. Before accepting funds from or sending funds to any wallet, knowing whether that address carries compliance risk is essential — both for regulated entities with AML obligations and for individual users who want to avoid depositing flagged funds to an exchange. The mechanics of address screening are straightforward: compare the target address against known-bad lists, trace its counterparty relationships to identify indirect exposure, assess its transaction behaviour for AML-relevant patterns, and assign a risk score. The challenge is building and maintaining the lists, the entity attribution, and the analytical infrastructure that makes this possible at scale. Plastron performs address screening against the OFAC SDN list, ethereum-lists community darklist, Forta labelled-datasets covering exploit and hack contracts, and CryptoScamDB's phishing address database. These four sources cover the most important categories of flagged addresses on Ethereum: state-sponsored sanctions targets, community-identified scams, DeFi exploit contracts, and phishing wallets. Beyond the lists, Plastron traces each major counterparty in the screened wallet's transaction history and classifies it by entity type — identifying whether the wallet has interacted with exchanges, DeFi protocols, mixers, sanctioned entities, darknet markets, or unclassified addresses. This counterparty context is what distinguishes address screening from a simple blacklist lookup and is what exchange compliance systems use to make decisions about incoming deposits.

or check your own wallet →

How Plastron handles crypto address screening

Multi-Source Flagged Address Matching

Plastron screens the target address and its counterparties against four threat intelligence sources: the OFAC SDN list for sanctions-designated addresses, ethereum-lists community darklist for scam and phishing addresses, Forta labelled-datasets for exploit and hack contracts, and CryptoScamDB for phishing wallets. Each source covers a different category of risk, and matching against all four provides comprehensive first-line address screening.

Counterparty Entity Classification

For every major counterparty in the screened address's transaction history, Plastron identifies the entity type — exchange, DeFi protocol, mixer, sanctioned entity, darknet market, bridge, scam address, fraud address, or unknown. This classification converts anonymous wallet addresses into a readable risk map, showing what types of entities your address has interacted with and whether any of them represent compliance risk.

Instant Screening — Any Ethereum Address

You can screen any Ethereum wallet address — not just your own — by entering it on Plastron. This makes the tool useful for evaluating a new trading counterparty, checking a wallet before making a payment, reviewing a potential business partner's crypto address, or screening customer wallets for onboarding. Results are generated in under 30 seconds from live blockchain data.

Risk categories behind crypto address screening

Sanctions
OFAC SDN-listed addresses. Direct or indirect exposure flags your wallet instantly.
Mixer
Tornado Cash, Railgun and other labelled mixing protocols. Interaction with these services is a major red flag.
Stolen Funds
Wallets linked to hacks, exploits, and bridge attacks. Even receiving a fraction taints your address.
Darknet
Addresses associated with darknet marketplaces. Any connection triggers heightened scrutiny at exchanges.
Phishing
Known phishing wallets and address poisoning campaigns. These drain victims through deception.
4
Threat intelligence sources used in Plastron address screening
Source: Plastron
<30 sec
Time to screen any Ethereum address with Plastron
Source: Plastron

Inside the screening corpus

Measured from Plastron’s own screening corpus, rebuilt on every deploy.

1,047
OFAC SDN crypto addresses
the full published set, refreshed daily
527
on bitcoin
the largest share of any chain
8,571
labelled addresses screened
matched on every scan, refreshed at each deploy

Page last updated

The detail behind the check

What address screening does that a block explorer does not

A block explorer shows you data. Address screening evaluates it. On an explorer you can read every counterparty a wallet ever had, and you will still miss a sanctions hit two transactions deep, because nothing on that page is checking anything against a list for you. Screening resolves the address and its counterparties against sanctions designations, attributed hack clusters and threat feeds, then applies distance and value logic to turn matches into a verdict. The difference is not convenience, it is capability: a human reading an explorer cannot hold ten thousand flagged addresses in their head, and the flagged set changes daily. Explorers answer what happened. Screening answers whether what happened is going to cost you a deposit, which is a different question with a different answer.

What automated screening actually automates

Three things, and it is worth being precise because the word covers a lot of marketing. First, list refresh: designations land on no schedule, so a tool that screens against a cached copy is one batch behind, and automation means the list is current at query time rather than at integration time. Second, graph traversal: walking a wallet's counterparties, then their counterparties, applying a decay at each hop so distant contact counts for less. Doing that by hand is not slow, it is infeasible past the first hop. Third, consistency: the same wallet returns the same verdict for the same reasons, which matters enormously when a decision has to be explained to a regulator later. What automation does not do is judge context, which is why a result should surface its evidence rather than only its score.

Reading a screening result properly

A number and a colour are the least useful part of the output. Three things determine whether a result is actionable. Which category fired: high because of a mixer withdrawal, high because of stolen-funds proximity, and high because of one scam report are three different conversations, and only one is easy to explain away. How direct the exposure is: direct contact is a fact, indirect exposure is an inference whose strength falls off with every hop, and a result that does not separate them hides the most important variable. And what the evidence is: the specific address, the specific transaction, the source that made the claim. That last one is what turns a screen from an opinion into something you can dispute, because a score you cannot audit is a score you cannot argue with.

Where screening produces false positives

Most cluster around heavily-used infrastructure. A router contract, a popular marketplace, a bridge — anything thousands of ordinary wallets touch — is a tempting target for a bad label, and a single mistaken entry propagates to everyone who interacted with it. We hit exactly this: a community report once tagged a canonical exchange contract as a scam deployer, which flagged anyone who had ever bought an NFT through it. The defences that matter are source provenance, so you can see which feed made a claim and weigh it, and an allowlist for verified infrastructure so no single source can stick a scam label on canonical contracts. A tool that shows one undifferentiated risk number cannot tell you whether your flag came from a government designation or one anonymous report.

Crypto address screening: common questions

Keep checking

Free AML Screening for Crypto WalletsPre-Deposit Crypto Check — Screen Before SendingWallet KYC Due Diligence — AML Screening ToolWallet Risk Assessment — Free Screening ToolCrypto Compliance Tools — Free Wallet Screening

Check your wallet before someone else does

Paste any address for a free instant check. Nothing to connect · Never a transaction · No history kept. Sign in for the full report: your own wallet is always free.

Explore More

Free AML Screening for Crypto WalletsWallet Risk Check — Before You Send or DepositCrypto Compliance Check — Free Wallet ScanKYC Wallet Check — Screen Your Address FreeWallet Address Checker — Free, Instant, 10 Chains