Most crypto trouble doesn't come from sending coins to the wrong address. It comes from accepting them from one. A friend pays you in USDT for dinner. A buyer on Binance P2P releases BTC. Your client wires ETH for a freelance gig. Six weeks later, an email from your exchange says your account is restricted "for further compliance review."
This is preventable. It takes thirty seconds. Here is the exact routine.
The 30-second checklist
- Ask for the wallet address before money moves. Not after. Not during. Before.
- Paste it into the cryptoaml.cc checker. Auto-detects the chain. No registration.
- Look at the risk score. Under 25 — proceed. 26–50 — pause. 50+ — walk away.
- Screenshot the result. If you do proceed, you have evidence of due diligence.
- If anything looks wrong, use the Telegram bot for a deeper report.
That's it. The rest of this article unpacks what to actually look at, what each warning means, and what to do when something is off.
Why a "clean" wallet matters more than ever in 2026
Exchanges in 2026 are not the wild-west platforms of 2018. Binance, Coinbase, Kraken, OKX, Bitstamp and Bybit all run automated risk scoring on every incoming deposit. If your deposit comes from a wallet that touched a sanctioned mixer two hops back, your funds are held until you can document the source.
Documenting the source means producing invoices, contracts, identity verification for your counterparty, and screenshots of the original conversation. If you can't — or if your counterparty has gone quiet — the funds can stay frozen for months. In a few jurisdictions, including parts of the EU under MiCA, you can be required to return the funds to a regulated authority for forfeiture.
The asymmetry is brutal: it takes a scammer five minutes to wire you tainted funds. It can take you five months and a lawyer to get your exchange account unfrozen.
What the risk score actually represents
Behind the single number on cryptoaml.cc is a stack of dozens of signals. Roughly grouped:
- Direct sanctions matches. OFAC SDN, EU consolidated list, UN Security Council. If the wallet is on one of these, the score is 100.
- One-hop sanctions exposure. The wallet received from or sent to a sanctioned address. Treated as 80+.
- Ransomware association. Conti, LockBit, REvil, Royal, BlackCat — and 200+ active groups.
- Darknet market exposure. Direct deposit or withdrawal from a known market wallet.
- Mixer / privacy service exposure. Tornado Cash, ChipMixer, Sinbad, Wasabi, Samourai's flagged pools.
- Community scam reports. BitcoinAbuse, Chainabuse, ScamSniffer, our own crowdsourced data.
- Exchange freeze history. Addresses where Binance, Coinbase, Kraken, OKX have publicly announced freezes.
Each signal carries a weight. Recent signals weigh more than old ones. Direct signals weigh more than indirect. The aggregate becomes the 0–100 number you see.
Reading the result like a compliance officer
The score is the first thing to look at, but not the only thing. Below the score, you'll see four key categories:
- Sanctions: The single most expensive flag. Even a "1 match in 5 hops" can be disqualifying for some exchanges.
- Darknet exposure: Less actionable for regulators, more actionable for your exchange's automated systems.
- Mixer interaction: Tornado Cash is the big one. Note direction — receiving from a mixer is much worse than sending to one.
- Scam reports: Community-sourced. A wallet with 30 scam reports in the last week is almost certainly active right now.
If any one of those categories is in red, treat the wallet as too risky to engage with — regardless of the headline score.
What to do when a wallet is risky
You ran the check. The score is 67. The "scam reports" row shows 4 community reports. Now what?
If you're the buyer (sending fiat / receiving crypto)
Cancel the trade. Explain politely: "I ran a wallet check and the result was unfavourable. Could you provide a different address?" A legitimate counterparty will. A scammer will become hostile or disappear. Either way, you've avoided the trap.
If you're the seller (sending crypto / receiving fiat)
This is harder, because you may have already shipped goods or services. Ask for payment from a different wallet, citing the same reason. If the buyer refuses, escalate to whatever escrow service you used (Binance P2P, OKX P2P, etc.). The platform's dispute team can verify the counterparty has been flagged.
If the funds have already arrived
Do not deposit them to a centralised exchange. Options, in order of preference:
- Contact your exchange's compliance team before attempting the deposit. Provide the address, your transaction screenshots, and a clear explanation of the source. Surprising as it sounds, many cases get resolved at this step.
- If the amount is small and the source is recoverable, return the funds to the sender and ask for a different payment.
- If returning isn't possible, hold the funds in a self-custodial wallet, document everything in writing, and consult a crypto-friendly tax or compliance advisor before doing anything else.
Most exchange compliance teams react well to honesty. The fastest way to lose access to your account is to deposit tainted funds and hope nobody notices. The fastest way to keep it is to ask the question before depositing.
Build the habit
Pin the cryptoaml.cc checker. Bookmark the chain-specific pages for whatever you use most (BTC, ETH, TRON). When you trade often enough that browser checks feel slow, switch to the Telegram bot — it lives in the chat where you negotiate trades anyway, and a check takes one paste.
Thirty seconds per transaction. A frozen exchange account costs you weeks. The math always wins.
Use the Telegram bot for instant checks in chat
Same database, faster workflow when you're negotiating. Free for the first three deep reports.
Open @scorechain_amlbot