AML checks for crypto payments

Know where your crypto came from.

Received an unexpected or suspicious payment? Paste the sender's address or the transaction, and CleanWallet shows where the funds came from and how risky they are, before you move them anywhere.

Waiting for input
Try a sample:
✓Checks never need a wallet. Just paste an address.
cleanwallet — scan● READY
01 Detect
02 Trace
03 Match
04 Score
sample network detected · Tron · USDT
sample tracing inflows · 3 hops back
sample ! mixer exposure at hop 2
sample risk score 68 · High
ready paste an address to start
01. The report

One score.
Every reason behind it.

Each check gives a risk score, where the money came from, the warning signs found, and what to do next, in plain language.

02. How it works

We follow the money
back to its source.

Dirty money rarely arrives directly. It passes through a few wallets first. CleanWallet traces those hops backwards and checks every stop against known risk sources.

STEP 01

Connect

Connect your wallet. CleanWallet works out the network from its format.

STEP 02

Trace

We follow incoming funds back through intermediate wallets, several hops deep.

STEP 03

Match

Every wallet along the path is checked against labelled risk sources: sanctions, mixers, scams and more.

STEP 04

Report

You get a score, the breakdown behind it and clear next steps. Save it as a PDF for your records.

03. Risk types

What we look for,
and why it matters.

Not all exposure is equal. Money from an exchange is normal. Money from a sanctioned wallet can get your account frozen. Here's how each source counts.

04. Got a suspicious payment?

Don't move it.
Check it first.

If crypto you didn't expect lands in your wallet, or a buyer's payment feels off, these steps protect you and your exchange account.

✓Do

  1. Pause before you move itSending tainted funds on to an exchange can get your account frozen.
  2. Run a check and save the reportA dated report shows you did your due diligence.
  3. Contact your exchange's supportIf the risk is high, tell them before depositing. They'll say how they want it handled.
  4. Report fraud to the policeIf you were scammed, a police report helps exchanges and investigators act.

✕Don't

  • Don't send it back to a "refund" addressScammers send funds by "mistake" and then ask for a refund to a different wallet.
  • Don't split it or pass it through other walletsMoving tainted funds around to hide them can make you part of the problem.
  • Don't interact with unknown tokensAirdropped tokens you didn't ask for can link to draining sites. Leave them alone.
Address poisoning

A scammer sends a tiny amount from an address that looks like one you use, hoping you'll copy it from your history next time.

yours TQ4v…Bm8a 7kQ2fLx9…
fake TQ4v…Bm8a 2pZr8wNe…
Dusting

Tiny amounts sent to thousands of wallets, used to track owners or lure them to scam sites. Don't spend or touch the dust.

Overpayment "mistakes"

A buyer "accidentally" overpays with funds from a scam, then asks for the difference back in clean money or to another wallet.

Warning

Fake "AML checks" steal wallets.

  • Asks for a seed phrase or private key, ever
  • Threatens to freeze your funds unless you act quickly
  • Comes from a stranger in DMs, or a buyer who insists on a specific checker
05. For business

Screen payments
before you accept them.

For OTC desks, merchants, payment processors and anyone who accepts crypto regularly. Screen automatically and keep an audit trail.

API

One request per address or transaction. You get a score, a verdict and the exposure breakdown as JSON.

Batch checks

Upload a CSV of addresses and download a report for each, with a summary sheet.

Monitoring

SOON

Watch your deposit addresses and get an alert when risky funds arrive.

Audit trail

Every check is time-stamped and exportable, ready for compliance reviews.

Request
# Example request (illustrative)
curl -X POST https://api.cleanwallet.app/v1/check \
  -H "Authorization: Bearer $CLEANWALLET_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "query": "TQ4vW3xY8pZr2mNeKc5sHd7jLf9aBm8a",
    "network": "tron"
  }'
Response
// Example response (illustrative)
{
  "score": 68,
  "verdict": "high",
  "exposure": [
    { "category": "mixer",    "share": 0.34, "hops": 2 },
    { "category": "scam",     "share": 0.22, "hops": 3 },
    { "category": "exchange", "share": 0.20, "hops": 1 }
  ],
  "checked_at": "2026-09-22T10:14:03Z"
}
API access and pricing: [contact@cleanwallet.app]
FAQ

Frequently Asked Questions

Straight answers about checks, scores and your privacy.

What does the risk score mean?+
It's 0–100, based on how much of the funds can be traced to risky sources and how directly. 0–24 is low, 25–49 medium, 50–74 high, and 75+ severe. The report shows exactly what drove the score.
Is a low score a guarantee the money is clean?+
No. A score reflects what's known about the addresses involved at the time of the check. New scams aren't always labelled yet. Treat it as strong evidence, not a certificate.
The report says high risk. What now?+
Don't move the funds on. Save the report, contact your exchange's support before depositing anything, and if you think you've been scammed, report it to the police. See "Got a suspicious payment?" above.
Which networks are supported?+
Bitcoin, Ethereum, Tron, Solana, BNB Chain and Polygon, including stablecoins like USDT and USDC on those networks.
Do you store the addresses I check?+
Checks are logged so you can find your report again and so we can prevent abuse. We don't sell this data. See the Privacy Policy for details.
~/cleanwallet $

Check it before you move it.

What to do with suspicious funds