AMLConsensusHow to read a wallet's risk
The risk score rates a wallet from 0 to 100 on how clean it looks across blockchain data and AML sources. Below: what each level means, which addresses to stay away from, which are fine to deal with, and the signals worth watching.
Risk levels — a traffic light
● Low — "Clean"
No clear warning signs found. Usually safe to accept funds. This is not a 100% guarantee — but there are no red flags. You can go ahead.
● Medium — "Caution"
There are indirect signs of risk: the wallet may have interacted with risky venues or sanctioned exchanges, or received funds from opaque sources. This does not mean "dirty", but it does need a closer look. Before dealing, run the full report, establish the source of funds, and for a large amount ask for an explanation.
● High — "Dangerous"
A direct link to sanctions, mixers, theft, darknet markets or an issuer freeze. Accepting these funds is dangerous — they will almost certainly be frozen at an exchange, and you risk falling under suspicion yourself. We recommend walking away.
Wallets to stay away from
- OFAC / EU / UK sanctionsThe address is on a sanctions list. Accepting = a violation, and the funds get frozen.
- Frozen by the issuer (USDT/USDC)Tether or Circle has blocked the address — the tokens on it are already dead.
- Passed through a mixer (Tornado Cash and others)Deliberately hiding where the money came from — the classic laundering signal.
- Theft, hacks, drainersFunds from breaches and scam projects (Lazarus, for example).
- Darknet marketsA link to illegal trade.
- Scam / phishingAddresses belonging to fraud schemes and fake sites.
✓ Wallets you can work with (on a clean check)
- KYC exchanges (Binance, Bybit, Coinbase…)A transparent, verified source.
- Staking and DeFi yieldFunds earned through staking or protocols.
- Ordinary transfers and tradingStablecoin activity with no risky connections.
- ●Score 0–29 with no flagsA clean history — go ahead.
Worth understanding
- 1⃣"Medium" is not "dirty".A score of 30–69 is a reason to look closer, not an automatic refusal. Often the cause is a tiny brush with a sanctioned exchange — a fraction of a percent — which does not make the funds illegal.
- 2⃣The quick check and the full report look at different depths.The quick check on the home page looks only at sanctions and blacklists. The full report adds analysis across the entire history (MistTrack), which is why it is sometimes stricter. Go by the full report.
- 3⃣The bigger the amount, the more careful the check.For large transfers, run the full report and ask for the source of funds.
Reports and recommendations are informational, reflect publicly known data at the time of the check, and are not an accusation or legal or financial advice. The final decision is always yours.