Wallet Screening API

The Wallet Screening API allows users to retrieve the compliance risk associated with an address. In case of a high compliance risk, we provide detailed insights into the contributing factors for that risk.

How is compliance risk assessed?

When conducting compliance assessments for an address, we consider various elements, including its type, attributes, associated entities, and on-chain interactions. The address type primarily distinguishes between an EOA (Externally Owned Account) and a CA (Contract Account). The concepts of attributes and entities are explored in detail in this document. On-chain interactions refer to the specific blockchain transactions in which this address has participated.

Among the information involved in the assessment, certain factors influence the assessment strategy, while others serve as critical risk indicators that significantly affect the assessment results. The following are the leading risk indicators used in our methodology, which can also be obtained through the Get Risk Indicators API requests to stay informed about any changes in risk indicators.

Risk Indicator	Code	Description
NO KYC	5020	The VASP (Virtual Asset Service Provider) associated with the address does not have a KYC (Know Your Customer) procedure in place.
BLOCKED	5018	The address has been blacklisted by critical contracts, primarily USDT and USDC.
SUSPICIOUS	5017	Address with suspicious activities.
COMPROMISED	5013	This address is deemed at risk, either due to being an externally owned account (EOA) with a weak key or a contract that is susceptible to exploitation.
GAMBLING	5016	The entity associated with this address is a gambling platform.
MIXING	5008	The address, primarily a contract, or associated service is believed to possess the capability to obfuscate fund flows.
LAUNDERING	5034	The addresses and entities associated with this label are believed to engage in money laundering activities.
CHILD ABUSE MATERIAL	5002	The entity associated with this address has been identified as forums and websites that facilitate the buying, selling, and distribution of child abuse material.
MIXER	5003	The entity associated with this address has been classified as a mixer.
DARKWEB BUSINESS	5001	This address has been involved in illicit businesses within the dark web.
DARK MARKET	5010	The entity associated with this address is a dark web marketplace.
ATTACKER	5012	This address is involved in a cyber attack.
RANSOMWARE	5009	The entity affiliated with this address is a ransomware group.
SCAM	5005	This address is engaged in fraudulent activities.
SANCTIONED	5006	The entity associated with this address has been sanctioned.
EXPLOIT	5040	The attacker or the attacker's contract or the attacker transfers funds and other addresses related to the attacker.

Interpreting the risk score

Based on the risk assessment algorithm mentioned earlier, we classify an address's compliance risk into five levels, represented by scores ranging from 1 to 5. A higher score indicates a higher compliance risk associated with that address.

For addresses with a score of 4 or higher, it is advisable to refrain from interacting with them. For addresses with a score of 3, it is recommended to carefully consider the accompanying indicators to determine whether it is appropriate to engage with them.

Individual risk vs. Interaction risk

Based on how we identify risks, we categorize them into Individual and interaction risks. Individual risk primarily stems from the attributes and behavior of the address itself, while interaction risk arises from the address's involvement in risky on-chain transactions.

By default, we consider Individual and interaction risks to provide the final result. However, due to the temporary lack of support for interaction risk in some networks (refer to the Supported Networks section) and the longer calculation time required for interaction risk, we offer the option to specify whether to include the calculation of interaction risk when requesting compliance risk for an address.

Supported networks

Network Name	Short Name	Chain ID	Support for interaction risk
Solana	SOLANA	-3	True
Tron	TRX	-2	True
Bitcoin Mainnet	BTC	-1	True
Ethereum Mainnet	ETH	1	True
Optimism Mainnet	OPTIMISM	10	True
Cronos Mainnet	CRONOS	25	True
BNB Smart Chain Mainnet	BSC	56	True
Gnosis	GNOSIS	100	False
Polygon Mainnet	POLYGON	137	True
BitTorrent Chain Mainnet	BITTORRENT	199	False
Fantom	FANTOM	250	True
Boba Network	BOBA	288	False
zkSync Era Mainnet	ZKSYNC ERA	324	False
CLV Parachain	CLV	1024	False
Polygon zkEvm	POLYGON ZKEVM	1101	False
WEMIX3.0 Mainnet	WEMIX	1111	False
Moonbeam	MOONBEAM	1284	True
Mantle	MANTLE	5000	True
Moonriver	MOONRIVER	1285	False
Base	BASE	8453	True
Arbitrum One	ARBITRUM	42161	True
Celo Mainnet	CELO	42220	False
Avalanche C-Chain	AVALANCHE	43114	True
Linea	LINEA	59144	True
Blast Mainnet	BLAST	81457	False
Aurora Mainnet	AURORA	1313161554	False

What does 'Support for interaction risk' mean?

When evaluating risks, we distinguish between Individual and Interaction risks based on their origins. It is worth noting that calculating interaction risk may require additional resources that may not be readily available in specific networks. If a network supports Interaction risk, querying an address on that blockchain will yield a more thorough evaluation result.

Subscription

Subscribe to our plan to use this API in your service to help meet the compliance requirements and secure users' assets.