What is an AML check and why does it matter?
An AML (Anti-Money Laundering) check is a compliance scan that evaluates whether a crypto address has been involved in illicit activity or is connected to high-risk sources. The check compares transaction history against known darknet markets, mixing services, theft reports, and sanctions lists maintained by blockchain analytics firms. For individuals and businesses, an AML check prevents you from unknowingly receiving stolen USDT, frozen TRX, or coins linked to scams. Exchanges and custodians use AML checks to comply with regulations and avoid processing tainted funds. A single transaction from a compromised address can trigger account freezes or withdrawal blocks, making pre-screening essential before accepting deposits.
How do AML checks work on the blockchain?
AML checks work by analyzing the complete transaction history of a wallet address on the blockchain. When you submit an address, the screening service traces all incoming and outgoing transactions, identifies the source and destination wallets, and compares them against multiple data sources: sanctions lists (OFAC, EU), darknet market databases, known theft reports, mixer services, and gambling platforms. The system assigns a risk score based on the number and severity of flagged transactions. For example, if a USDT address received funds directly from a known mixer, it receives a higher risk flag. The check also notes transaction recency—recent exposure carries more weight than historical activity. Results typically include a risk score (low, medium, high), specific risk categories triggered, and transaction details that led to the flags.
Step-by-step: How to check a wallet address for AML risk
Follow these steps to perform an AML check on a crypto address:
1. Copy the wallet address you want to screen (TRX, USDT, BTC, ETH, or other blockchain address).
2. Visit a verified AML screening service—check the curated list of trusted services on this site's AML Services page for recommended options.
3. Paste the address into the search field and select the blockchain (Tron, Ethereum, Bitcoin, etc.).
4. Click 'Check' or 'Scan' and wait for the analysis to complete (typically seconds to minutes).
5. Review the risk score displayed (usually color-coded: green for low, yellow for medium, red for high).
6. Examine the detailed report: which risk categories were flagged, which transactions triggered them, and the severity.
7. Decide whether to accept the address based on your risk tolerance and use case.
If the address shows medium or high risk, request an alternative address from the sender or decline the transaction.
What do AML risk scores and flags mean?
Risk scores range from low (0–30%) to medium (30–70%) to high (70–100%), though exact thresholds vary by service. A low-risk score means the address has minimal or no connection to known illicit activity. A medium-risk score indicates some exposure—for example, the address received funds from a mixer or has minor transaction patterns worth noting. A high-risk score signals direct involvement with darknet markets, stolen funds, sanctions-listed entities, or active mixing services.
Common risk flags include:
- Mixer exposure: funds passed through privacy-mixing services
- Darknet connection: transaction history linked to known darknet markets
- Theft: coins reported as stolen in public databases
- Sanctions: address connected to sanctioned individuals or entities
- Scam: funds associated with known scam schemes
- Gambling: transaction history involving gambling platforms
- Frozen USDT: address previously flagged by stablecoin issuers
Acceptable thresholds depend on context: exchanges typically reject high-risk addresses, while low-risk is universally acceptable.
How much do AML checks cost and what are the fees?
AML check pricing varies widely. Many services offer free basic checks with limited detail—typically a risk score and top-level flags. Free AML checks usually cover one address per query and may have rate limits. Paid plans range from a few dollars per check to subscription models (monthly or annual) for businesses and exchanges. Some services charge per transaction monitored or per address screened; others bundle checks into compliance packages.
An AML fee structure typically includes:
- Single check: $1–$10 per address
- Batch checks: $0.50–$2 per address (volume discount)
- Monthly subscription: $50–$500+ depending on query volume and features
- Enterprise/API access: custom pricing
When evaluating AML check cost, consider what's included: depth of historical analysis, real-time monitoring, API access, and report detail. Free checks are useful for occasional screening; regular users benefit from paid plans. Visit the AML Services page on this site to compare verified providers and their pricing models.
What to do if a wallet address is flagged as dirty crypto
If an address you're about to receive funds from is flagged as dirty crypto or high-risk, take these steps:
1. Do not accept the transaction if possible. Request an alternative address from the sender.
2. If you've already received tainted coins, do not attempt to mix or launder them—this compounds legal risk.
3. Document the transaction: record the address, amount, timestamp, and AML report for your records.
4. Notify your exchange or custodian if you've deposited flagged funds; they may freeze the account pending investigation.
5. If the coins are stolen or linked to a crime, report the incident to the relevant blockchain analytics firm or law enforcement.
6. Segregate flagged funds in a separate wallet and do not move them until the issue is resolved.
Exchanges automatically detect dirty crypto during deposit and may freeze your account, require additional KYC documentation, or reject the deposit outright. Proactive AML checks prevent this scenario entirely.
How exchanges freeze USDT and block deposits from flagged addresses
Exchanges and stablecoin issuers (like Tether) monitor incoming deposits for AML risk. When a USDT or other stablecoin transfer originates from a flagged address, the exchange's compliance system triggers an automatic review. If the risk score exceeds the exchange's threshold, the deposit is held pending investigation or rejected entirely. Frozen USDT cannot be withdrawn or traded until the exchange completes its review, which can take days or weeks.
Common freeze scenarios:
- High-risk AML score on the source address
- Transaction history linked to sanctions lists
- Coins flagged as stolen or from a known scam
- Address previously associated with darknet activity
- Mixer exposure detected in recent transactions
Once frozen, the exchange may request additional KYC documentation, proof of funds origin, or a written explanation. If the address remains flagged, the deposit may be permanently rejected or returned. This is why screening addresses before sending or receiving is critical—it prevents account locks and compliance headaches.
Frequently asked questions
Can I do a free AML check on a crypto wallet?
Yes, many services offer free basic AML checks that return a risk score and top-level flags. Free checks are limited to one address per query and may have rate limits. For detailed reports, transaction history, and batch screening, paid plans are necessary. Check the AML Services page on this site for verified providers offering free options.
What happens if I receive USDT from a dirty wallet?
If you deposit USDT from a flagged address, the exchange's AML system may freeze your account pending investigation. The stablecoin issuer or exchange can reject the deposit, hold it indefinitely, or require additional KYC documentation. To avoid this, always screen the source address before accepting the transfer.
How long does an AML check take?
Most AML checks complete within seconds to a few minutes. The time depends on blockchain congestion and the depth of analysis. Real-time screening services return results instantly; detailed historical reports may take longer. Batch checks of multiple addresses typically process within minutes.
What's the difference between AML and KYC checks?
AML (Anti-Money Laundering) checks screen wallet addresses and transaction history for illicit activity. KYC (Know Your Customer) verifies the identity of the person or entity behind the wallet. AML checks are blockchain-focused; KYC is identity-focused. Both are used together in compliance workflows.
Can a low-risk AML score guarantee my coins are clean?
A low-risk score indicates minimal detected exposure to known illicit sources, but it does not guarantee absolute safety. AML checks rely on known databases and patterns; new scams or theft may not yet be flagged. Use AML checks as one layer of due diligence, not the sole verification method.
