Trust & Methodology
How amlcoins screens crypto addresses
We aggregate sanctions data, threat intelligence, on-chain heuristics, and community-reported scam labels into a single composite risk score. This page documents exactly what goes into that score so you can audit the result yourself.
Risk categories & weights
| Category | Weight | What it captures |
|---|---|---|
| Sanctions | 30% | Direct or one-hop exposure to addresses on government sanctions lists. |
| Mixer / Privacy | 18% | Funds entering or leaving privacy pools (Tornado Cash, Sinbad, Wasabi, etc.). |
| Scam / Phishing | 12% | Counterparties flagged in community scam databases or drainer kits. |
| Darknet Market | 12% | Exposure to wallets associated with known darknet marketplaces. |
| Ransomware | 10% | Addresses tied to ransomware payment campaigns. |
| Theft / Exploit | 8% | Addresses linked to documented thefts, exploits, or rug-pulls. |
| Exchange Exposure | 5% | Volume of activity with regulated exchanges (informational; not penalised). |
| Smart Contract | 5% | Behavioural signals: brand-new wallets, abnormal velocity, drained burners. |
Composite score = weighted average of category scores, clamped 0–100. Direct sanctions hits override to ≥95 ("severe"). Full engine source is open to enterprise customers under NDA.
Data sources
Sanctions lists
- ›OFAC SDN (US Treasury)
- ›EU Consolidated Sanctions
- ›UK HM Treasury
- ›UN Security Council
- ›Canada SEMA
- ›Australia DFAT
Threat intelligence
- ›Chainabuse community reports
- ›Whale Alert tagging
- ›On-chain phishing & drainer trackers
- ›Ransomware payment trackers
- ›Darknet market clusters
Exchange & VASP labels
- ›Public hot/deposit wallet labels for 200+ exchanges
- ›Bridge & DEX contract identifiers
- ›Mixer & privacy tool addresses (Tornado, Sinbad, Wasabi, etc.)
On-chain heuristics
- ›Tx-velocity & burner-wallet patterns
- ›Counterparty risk propagation
- ›Cross-chain hop tracing
- ›Smart-contract interaction graphs
Sanctions lists refresh daily. Threat-intel feeds refresh every few hours. On-chain heuristics are computed at scan time.
Memberships & affiliations
International Association for Trusted Blockchain Applications — Brussels-based public-private partnership setting blockchain standards.
Industry coalition for sharing threat intelligence on crypto-enabled fraud, scams, and money laundering.
Anti-Human Trafficking Intelligence Initiative — combats trafficking financing through crypto analytics.
EU-wide blockchain policy and standards body advocating responsible adoption.
Hong Kong fintech community supporting regulatory dialogue across Asia-Pacific.
Affiliations reflect applied or active memberships maintained by amlcoins. This page is editorial content, not an independent certification.
Compliance posture
No custody. amlcoins never holds, transfers, or has signing authority over user funds. We read public on-chain data only.
No KYC of end users. You don't need to verify your identity to scan an address. Business and enterprise customers may opt into KYC for compliance integrations.
Data residency. Scan results are cached in our backend (EU region) for performance. Personal account data follows our privacy policy.
Disclosures. The risk score is a guidance signal, not a legal determination. Always perform your own diligence before refusing or blocking funds.
Security
Vulnerability reports go to security@amlcoins.com. We acknowledge in-scope reports within 48 hours. For the full security overview see our security page.