Address screening returns a risk level for a wallet before any funds move
Wallet screening analyzes a crypto address to estimate its risk level, such as links to sanctioned or illicit activity. SimpleSwap's Address Check, in the Customer Account, screens an address through third-party analytics services and returns a risk level with the connections it finds. ChangeNOW offers an AML address check in its app and ChangeNOW Pro.
An analysis of a crypto address that estimates its risk level, for example sanctions exposure or links to illicit activity (Elliptic). Each screened wallet gets a risk score based on its activity, its connections and any links to flagged entities (TRM Labs).
How does address screening work?
Blockchains record transactions between addresses, not named people or companies. Blockchain analytics tries to connect those pseudonymous addresses to real-world activity (TRM Labs).
- Clustering
Analytics platforms group addresses that are probably controlled by the same entity.
- Attribution
Providers link those clusters to known entities such as exchanges, services or sanctioned actors.
- Exposure
The screened address is traced to see how close it is to flagged clusters.
- Risk score
The result is a risk level, which a person then reviews alongside other information.
What does direct vs indirect exposure mean?
Direct exposure
- Zero hops.
- The wallet transacted directly with a risky entity.
Indirect exposure
- One or more hops.
- The link to a risky entity runs through intermediary addresses.
TRM Labs adds a caveat: hop count alone does not settle risk. A path with more hops is not automatically safer, and no single factor decides it.
Can a legitimate wallet be flagged as high-risk?
Yes. Screening is only as good as the attribution data behind it, and overly strict screening can produce false positives.
A high risk score means the funds are illegal.
An elevated score means the wallet needs a closer look. It does not mean the customer did anything wrong (Elliptic).
Screening gives a final verdict.
Analytics gives leads, not verdicts. Results must be combined with human judgment and other intelligence (Elliptic).
One clean check is enough forever.
Screening is usually done at onboarding and repeated as new intelligence comes in (Elliptic).
Screening replaces my own checks.
It doesn't cover the address format or the network. Those stay your job.
Where each tool lives
| Feature |  |  |
|---|---|---|
| Address screening tool | Address Check | AML Address Check |
| Where it lives | Customer Account | App and ChangeNOW Pro |
| Transaction screening | Yes; a swap can be paused for review | Yes; checks under its risk controls |
- What it adds: context about the counterparty before any funds move.
- Limits: it may not catch every issue and doesn't replace your own address and network checks.
Your own checks
A screening tool looks at an address's history. It does not tell you whether you copied the address correctly or picked the right network.
Paste an address below to see which format it matches; nothing leaves your browser.
- Receiving addressCheck it character by character before you confirm.
- NetworkSend and receive on the network the order shows.
- Seed phrase and keysKeep them private. Neither service will ever ask for them.
- FinalityNo swap service can reverse a confirmed blockchain transaction.
If a swap is paused for a closer look, read what "no KYC" means and keep your order ID ready.
Questions
What is crypto address screening and why do services check my wallet?
It is an analysis of a wallet address that estimates its risk level from its activity and connections.
Screening is usually done at onboarding and repeated as new intelligence comes in, as part of a service's AML controls.
What does direct vs indirect exposure mean?
Direct exposure means the wallet transacted with a risky entity itself, zero hops. Indirect exposure means the link runs through one or more intermediary addresses.
Can a legitimate wallet be flagged as high-risk?
Yes. Screening is only as good as its attribution data, and strict settings can produce false positives. Human review exists for that reason.
Does a high risk score mean my funds are illegal?
No. An elevated score means the wallet needs a closer look, not that the customer did anything wrong.
How do I check a wallet address on SimpleSwap?
Use Address Check in the SimpleSwap Customer Account. It screens the address through third-party analytics services and returns a risk level with the connections it finds.