How is the risk score calculated?
The final score is made up of several signals: proximity to sanctioned clusters, routes through mixers and relays, interactions with darknet markets, CFT signs, address behavior (age/activity), share of incoming funds from suspicious sources, etc. Each factor has a weight; the total score is normalized on a 0-100 scale and classified as low/medium/high risk.
What is considered a "connection" to a sanctioned address?
A connection is defined as the address being part of the same cluster as a sanctioned entity, or having a transactional path to it within a specified depth (number of "hops"). Both direct transfers and indirect routes through known relays and liquidity pools are taken into account.
Why include mixers and relay addresses?
Mixers and relays are used to obscure the origin of funds. The presence of routes through such nodes increases uncertainty and risk. We highlight them as separate factors and track the share of funds that have passed through such services, as well as the time between hops and typical fragmentation schemes.
Which networks and assets are supported?
We support major public L1 networks and popular L2/sidechain solutions (e.g., BTC, Ethereum, Tron, BNB Chain, Polygon, etc.). The list can be expanded on request: additional networks, tokens, and stablecoins can be integrated under the business plan.
How often are sanction lists and tags updated?
Sanction lists and source tags come from official registers and industry databases. Updates are applied automatically once published, and blockchain data is indexed in the stream of new blocks. In case of critical changes, priority re-indexing is performed.
How to reduce the impact of false positives/false negatives?
Use the report: study the signal sources and path graph, adjust the analysis depth (hops), weights for mixers/relays, and add internal addresses to the trusted list. For disputed cases, we assist in validating findings and offer a monitoring policy with step-by-step thresholds.
Can the service be integrated via API and webhooks?
Yes. REST endpoints are available for address scoring and PDF report generation, as well as webhooks for deposit/withdrawal alerts. Token-based authentication, idempotency for retries, and flexible risk policy customization at the project level are supported.
Do banks, providers, and auditors accept our reports?
The reports contain factor markup, source/tag links, timestamps, and a summary of the fund routes. They are suitable for KYC/KYB/CFT procedures for payment providers, exchanges, and custodians. On request, an extended methodology section is added.
How are client data processed and protected?
We analyze public blockchain data and technical tags. Personal data is only collected when necessary for account and billing purposes. Transmission occurs over secure channels; there are mechanisms for data removal/export on request and access logs for auditing.
What is the cost, and what limits are there?
For one-time checks, the "Start" plan is available (payment per request), and for companies, the "Business" plan with packages, priority support, and volume discounts. Limits for RPS and concurrent requests are customizable; alerts and webhooks are included in the business packages.
