Crypto Address Sanctions Checker

On-demand risk lookup for EVM wallet addresses. Returns flags for sanctioned, mixer, money laundering, cybercrime, phishing, darkweb, blacklist, fake KYC, stealing attack and 10+ other categories. Powered by GoPlus Security (aggregates SlowMist + BlockSec + OFAC sanctions data). $0.01 per address.

---

Why this exists

If you run an exchange, lending protocol, or any dApp where users connect wallets, you have compliance obligations. OFAC requires you to screen against the SDN list. Major chains like Ethereum + USDC freeze sanctioned addresses on-chain.

Commercial compliance APIs (Chainalysis KYT, TRM Labs, Elliptic) cost $10K-$100K/year minimum and gate basic risk checks. This actor uses GoPlus Security's free public API — which aggregates SlowMist, BlockSec, OFAC, and Chainabuse — to return the same yes/no risk signals for $0.01 per address.

It's not a replacement for full Chainalysis KYT in regulated environments, but for early-stage products / individual research / triage, this is the fastest free check available.

---

What you get per address

Field	Example	Notes
address	0x098B...2f96	input address
chain_id	1
risk_level	critical	clean / warn / high / critical / unknown
flagged_fields	["sanctioned", "money_laundering"]	list of flagged categories

Plus per-category boolean fields:

Field	Source flag
sanctioned	OFAC SDN list match
money_laundering	known ML wallet (SlowMist, BlockSec)
cybercrime	involved in cybercrime ops
financial_crime	broader financial crime category
darkweb_transactions	has interacted with darkweb mixers/markets
mixer	known Tornado Cash / similar
phishing_activities	phishing scam wallet
stealing_attack	known attack / drainer
blackmail_activities	ransomware / extortion
blacklist_doubt	not confirmed but suspicious
fake_kyc	used in KYC fraud
fake_standard_interface	malicious contract pretending to be ERC20
fake_token	rug-pull token deployer
honeypot_related_address	involved with honeypot tokens
malicious_mining_activities	mining-pool fraud
gas_abuse	gas-token abuse / spam
reinit	proxy reinit attack

"1" = flagged. "0" = clean.

---

Risk level decoded

Level	Trigger
✅ clean	No flags
🟡 warn	1–2 minor flags (e.g. blacklist_doubt only)
🔴 high	Multiple flags or any phishing/fake-KYC/honeypot
☠️ critical	Sanctioned, money laundering, cybercrime, mixer, stealing

---

Quick start

Check a single address (Ronin bridge hacker / Lazarus Group)

{
  "address": "0x098B716B8Aaf21512996dC57EB0615e2383E2f96",
  "chainId": 1
}

Batch check multiple addresses

{
  "addresses": [
    "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045",
    "0x098B716B8Aaf21512996dC57EB0615e2383E2f96",
    "0x910Cbd523D972eb0a6f4cAe4618aD62622b39DbF"
  ],
  "chainId": 1
}

With Telegram alert

{
  "address": "0x...",
  "telegramBotToken": "YOUR_BOT_TOKEN",
  "telegramChatId": "YOUR_CHAT_ID"
}

---

Supported chains

Chain	ID
Ethereum	1
BSC	56
Polygon	137
Arbitrum	42161
Optimism	10
Base	8453
Avalanche	43114
Fantom	250

---

Pricing

Pay-Per-Event: $0.01 per address checked.

Run	Addresses	Cost
Single address	1	$0.01
Batch of 100	100	$1.00
Daily KYT batch of 1000	1000	$10.00

vs Chainalysis KYT — minimum $10,000/year baseline. For triage / early product, this is 10-100x cheaper.

---

Use cases

1. Pre-onboarding screening — Reject addresses on OFAC SDN list at signup
2. Continuous monitoring — Re-screen connected wallets daily via Apify schedule
3. Inbound transaction filter — Check the sender before crediting deposit
4. Treasury triage — Check addresses interacting with your DAO multisig
5. Research — Investigate hack flows + sanctioned cluster activity
6. Personal safety — Verify counterparty wallets before P2P transactions

---

Disclaimer

This actor is a triage tool, not a final compliance system. GoPlus is one of multiple data sources. For regulated production use:

• Combine with at least one other provider (Chainalysis / TRM / Elliptic)
• Maintain your own internal blacklist
• Document your risk decision process

This actor returns data from GoPlus Security's public address_security endpoint. We are not affiliated with GoPlus.

---

Related actors (same author)

• Token Honeypot Detector — Pair with this when checking a token's creator wallet
• Wallet PnL Analyzer — Activity history of an address
• Smart Money Wallet Tracker
• DeFi Liquidation Risk Checker

---

Feedback

A short review helps compliance teams find it: Leave a review on Apify Store