Wallet & Address Screening API

OnChainRisk provides a wallet and address screening API for assessing crypto address risk on supported networks. Send an address to receive a 0-100 risk score, risk level, confidence, pattern flags, and explainable risk reasons before deposits, payouts, OTC trades, or P2P settlement.

Crypto address screening

Crypto address screening means checking a wallet address for risk before you act on it — reading a 0-100 risk score, pattern flags, counterparties and labels where available, and sanctions signals where supported. It is the same workflow whether you call it wallet screening, address screening or blockchain address screening: one address in, a structured risk read out. The API makes it automated — screen addresses programmatically in your payout, deposit or settlement path instead of checking them by hand.

Screening runs on the networks POST /api/v1/check accepts, and the depth of available evidence varies by network — see the live coverage matrix for current per-network status. Common workflows (examples, not coverage-parity guarantees):

  • Ethereum address screening — score an Ethereum (or other EVM) address before releasing funds.
  • Bitcoin address screening — screen a BTC address in the same call.
  • TRON / USDT-TRC20 address screening — check a T-address and its USDT-TRC20 counterparties before a payout.

When teams call this an “AML check” on an address, OnChainRisk treats it as wallet/address risk and compliance screening that supports your own process — risk signals and OFAC screening where supported — not a legal AML determination.

Who It's For

Payment processors & gateways

Screen the destination wallet before releasing a merchant payout.

OTC desks

Check a counterparty wallet before settling a trade.

P2P platforms

Review a counterparty address before a trade clears, including USDT-TRC20 flows.

Exchanges

Add a wallet risk check to withdrawal or deposit review.

Compliance teams

Automate a first-pass wallet risk review and route elevated risk to a human.

The Screening Workflow

1

Payout or settlement request

A user requests a payout, or a counterparty is about to settle. You have the destination/counterparty address.

2

Wallet screening API call

Call the API with the address; the network is detected from the address format. EVM addresses default to Ethereum, so specify the network for other EVM chains (e.g. Polygon, BSC, Arbitrum). Sandbox-first: test the call with a sandbox key before production.

3

Review the risk score & signals

Read the 0-100 risk score, pattern flags, fund-flow exposure, counterparties/labels where available, and sanctions checks where supported.

4

Approve, review, or escalate

Auto-approve low-risk addresses, route elevated risk to manual review, and hold or escalate high-risk ones — before funds move.

Screening request & response

Send an address to POST /api/v1/check with your API key. The same call works with a sandbox key (ocr_test_) or a paid key. Only address is required; pass network to disambiguate non-Ethereum EVM chains.

Request
curl -X POST https://api.onchainrisk.io/api/v1/check \
  -H "Authorization: Bearer ocr_test_your_sandbox_key" \
  -H "Content-Type: application/json" \
  -d '{"address": "0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48"}'
Example response — low-risk address, from the API reference
{
  "address": "0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48",
  "network": "eth",
  "riskScore": 5,
  "riskLevel": "low",
  "patternFlags": []
}

A screening response can include riskScore (0-100) and riskLevel, riskConfidence, patternFlags (with index-aligned patternFlagDetails), ranked riskReasons, and topCounterparties. Sanctions-related signals may be included where supported; see the API reference for the current response fields. For the compliance-focused workflow, see crypto sanctions screening. These are risk signals to support your review — not a guarantee. See the full blockchain analytics API and API reference for every endpoint, field, and language example.

How is a wallet's risk score calculated?

The 0-100 score reflects on-chain analysis of the address, including its transaction activity, observed risk signals, labels, and exposure to higher-risk counterparties where supported. It is a risk signal to support your review, not a deterministic or exhaustive verdict, and the available evidence varies by network. See the API reference for the current fields returned with each score.

Network coverage

POST /api/v1/check accepts addresses on 23 networks. Coverage depth and historical completeness vary by network and by feature, so a result on one network is not a parity guarantee for another — see the live coverage matrix for current per-network status.

USDT-TRC20 / TRON payout flows

USDT-TRC20 is common in payout and counterparty flows, so screening T-addresses before a payout or settlement is a frequent need. The API scores Tron addresses and reviews USDT-TRC20 counterparties alongside other networks. See the Tron wallet checker for the TRON-specific view. Teams operating under UAE virtual-asset rules can see wallet screening for UAE virtual-asset teams.

Try It Before You Wire It In

Sandbox-first: create a free sandbox API key (prefixed ocr_test_), test your integration against real endpoints, then upgrade to a paid key for production. You can also try a check in the interactive sandbox. No sales call required.

Create a free sandbox key

Frequently Asked Questions

Can I screen a wallet before a payout via API?

Yes. Call the API with the destination or counterparty address and read the 0-100 risk score and signals before funds move, so you can approve, route to manual review, or escalate. Sandbox-first: test with a free sandbox key first.

Does it check sanctions?

Sanctions checks are applied where supported — coverage varies by network, and a clear result is not a guarantee. Matches surface as risk signals in the response.

Does it work for USDT-TRC20 / TRON?

Yes. Tron is supported, and USDT-TRC20 counterparties are reviewed alongside other networks — useful since USDT-TRC20 is common in payout and counterparty flows.

Does this replace my compliance or KYT program?

No. OnChainRisk surfaces risk signals to support your review. It is not a guarantee that a wallet is clean, not legal advice, and not a full compliance or KYT program replacement. Use it alongside your own process.

OnChainRisk surfaces risk signals to help you review wallets before funds move. It is not a guarantee that a wallet is clean, not legal advice, and not a full compliance or KYT program replacement. Sanctions checks apply where supported; coverage varies by network.