A TON wallet check reviews a Toncoin address for exposure to Telegram's phishing bots and fake mini-apps; Plastron does not cover TON yet — the full scan runs on seven EVM chains, with Solana, Tron and Bitcoin screened directly.
TON Wallet Check
TON grew to 900 million users through Telegram. Mass adoption at that scale brings mass-scale phishing and social engineering threats.
The Open Network — deeply integrated with Telegram's 900 million user base — has exploded in adoption faster than almost any blockchain in history. That hypergrowth created a perfect storm for social engineering attacks. Telegram groups are the primary distribution channel for crypto scams globally, and TON puts a native wallet directly inside the app. Phishing bots, fake airdrop campaigns, and social engineering attacks through Telegram messages now have a direct path to your TON wallet. The Telegram mini-app ecosystem amplifies the risk. Tap-to-earn games, reward programs, and mini-app token launches attract millions of users — many of whom are new to crypto entirely. Fraudulent mini-apps that harvest wallet permissions, fake Notcoin clones, and reward scams have drained funds from hundreds of thousands of wallets. Because TON transactions are cheap and fast, scam operations can target massive numbers of users simultaneously. When TON users eventually want to move Toncoin or USDT to a centralized exchange, the compliance check examines their entire transaction history — including every interaction with scam bots, phishing contracts, and fraudulent mini-apps. The Telegram context makes TON wallets uniquely exposed to social engineering vectors that other chains simply do not face.
TON wallet check: how the scan works
One account, several addresses
A TON account has more than one correct way to be written down: a raw workchain-and-hash form, and user-friendly base64 forms that differ depending on whether the address is bounceable and which network it belongs to. The same wallet therefore appears under several strings, none of them wrong. A list-matching tool that has not normalised every form will miss a hit — and on a screening tool a miss reads exactly like a clean result.
Where the TON risk actually is
Almost none of it is sanctions. The OFAC crypto list barely touches TON. The damage is done by phishing bots, cloned mini-apps and fake airdrop channels that take a signature from inside the same app people use to message their family. That is an approval-hygiene problem rather than a list-lookup problem, and no address-level verdict, on any chain, would have stopped it.
What can be answered today
USDT is the asset most TON users care about, and Tether's blacklist is a contract-level block rather than a score: an address on it cannot move the token at all. The /freeze-check page reads that list live on Ethereum and Tron, free and account-free. If the coins reached TON through an exchange, a bridge or an EVM chain, the addresses on that side of the trip are screenable here in full — which is usually where the question a TON holder is really asking gets answered.
Which risks are checked
The numbers behind the check
Measured from Plastron’s own screening corpus, rebuilt on every deploy.
Page last updated
Questions people ask
Related checks
Run the check
Paste any address for a free instant check. Nothing to connect · Never a transaction · No history kept. Sign in for the full report: your own wallet is always free.