Suspicious activity in crypto includes mixer use, sanctioned-address contact, structuring and links to stolen funds; Plastron flags these on-chain red flags free across seven EVM chains, returning a Low-to-Critical verdict.
Crypto Suspicious Activity and Wallet Red Flags
Exchanges file suspicious activity reports on wallets that show behavioral or counterparty red flags — many of which users are completely unaware of until the account freeze happens.
Suspicious activity in crypto is defined differently depending on whether you are a regulator, an exchange, or an individual user. For regulators, suspicious activity broadly covers transactions that are unusual, lack apparent economic purpose, or are inconsistent with a customer's stated profile. For exchanges, it encompasses any transaction pattern or counterparty relationship that triggers their automated AML system or analyst review. For individual users, suspicious activity in their own wallet typically means something they were not aware of — a counterparty that turned out to be flagged, a transaction pattern that resembles known laundering typologies, or indirect exposure from DeFi interactions. Common on-chain patterns that trigger SAR filings and exchange holds include: receiving and rapidly forwarding funds without apparent economic purpose, interacting with mixer contracts or privacy coin exchanges, receiving significant value from addresses linked to hacks or darknet markets, rapid-fire transactions around the same time of day that create statistical anomalies, and large inflows immediately followed by withdrawal to an exchange. Many of these patterns occur innocently — DeFi traders operate at high frequency, privacy-conscious users legitimately use mixers, and arbitrage bots create unusual transaction rhythms. But from a compliance system's perspective, pattern matters as much as intent. Plastron's activity heatmap and counterparty analysis surface these patterns so you can understand how your wallet appears to an automated compliance system before your deposit triggers a review.
How Plastron applies this
Activity Pattern Analysis
Plastron generates a 7-by-12 activity heatmap showing your transaction frequency across days of the week and two-hour UTC time slots. Statistical anomalies — clusters of transactions that deviate significantly from your baseline — are flagged and highlighted. This is the same type of behavioral analysis that exchange compliance systems use to identify unusual activity patterns that may warrant a closer look.
Counterparty Red Flag Screening
The most common SAR trigger is counterparty-related: your wallet interacted with a known risk address. Plastron screens all significant counterparties in your transaction history against OFAC, mixer contracts, exploit addresses, darknet markets, and fraud-linked wallets. Each flag is reported with the specific counterparty address, transaction volume, and risk category so you know exactly what the exchange system is seeing.
Pre-Submission Risk Assessment
If you are preparing a source-of-funds response to an exchange or writing a voluntary disclosure, understanding what the exchange flagged is essential. Plastron's risk report gives you the exchange's view of your wallet — the flags, the scores, and the specific counterparties — before you submit documentation. This lets you address the actual concerns rather than guessing at what triggered the review.
What counts as a red flag
Coverage, in numbers
Measured from Plastron’s own screening corpus, rebuilt on every deploy.
Page last updated
Common questions, answered
Where to look next
Screen your wallet now
Paste any address for a free instant check. Nothing to connect · Never a transaction · No history kept. Sign in for the full report: your own wallet is always free.