Ethereum (ETH) AML Wallet Checker

Free, instant AML risk screening for Ethereum addresses. Screen against OFAC SDN list, darknet market databases, and mixer exposure records. Ethereum addresses are shared across all EVM-compatible chains (BNB Chain, Polygon, Arbitrum). An address flagged on Ethereum may also be screened on other EVM networks.

Ξ Ethereum · ETH · Free AML screening

Ethereum is the leading smart contract platform, also used for USDT (ERC-20), USDC, and thousands of DeFi tokens. Use our free tool to check any Ethereum (ETH) wallet address for AML compliance issues — including OFAC sanctions, darknet exposure, mixer usage, and ransomware links.

How to check an Ethereum wallet for AML

  1. Paste your ETH wallet address in the input above
  2. Click Check AML to start the screening
  3. For a full report with risk score and PDF — open in Telegram bot

What is AML screening for Ethereum?

AML (Anti-Money Laundering) screening for Ethereum wallets checks transaction history against databases of known bad actors: OFAC-sanctioned addresses, darknet markets, ransomware payment wallets, scam contracts, and mixing services. Exchanges and financial institutions are legally required to screen crypto wallets before processing transactions.

Ethereum addresses are shared across all EVM-compatible chains (BNB Chain, Polygon, Arbitrum). An address flagged on Ethereum may also be screened on other EVM networks.

Key risk signals for Ethereum wallets

Tornado Cash (sanctioned by OFAC in 2022) remains the primary mixer concern for ETH addresses. DeFi protocol hacks and scam token contracts are also tracked.

  • OFAC sanctions — direct listing or exposure to SDN-listed addresses
  • Darknet markets — funds received from or sent to illegal marketplace addresses
  • Mixer / tumbler exposure — use of privacy or obfuscation services
  • Ransomware — connections to known ransomware payment addresses
  • Exchange hacks — funds originating from stolen exchange wallets

Ethereum AML compliance — what you need to know

Ethereum carries the broadest AML surface area of any smart contract platform. In August 2022, OFAC sanctioned Tornado Cash, the privacy mixer that had processed over $7 billion in transactions, including approximately $455 million laundered by North Korea's Lazarus Group. The Ronin bridge hack in March 2022 saw Lazarus drain $625 million in ETH and USDC, the largest single crypto theft attributed to a state actor. Lazarus Group has stolen an estimated $3.5 billion from crypto protocols since 2016 according to Chainalysis, with Ethereum-based protocols representing the majority of targets. The EVM compatibility standard means risk flags from Ethereum propagate to compatible chains including BNB, Polygon, and Avalanche. Exchanges including Coinbase and Kraken maintain blocklists of Ethereum addresses associated with sanctioned Tornado Cash contracts. Any wallet that interacted with Tornado Cash after August 2022 faces deposit rejection at major exchanges, and those interactions are permanently visible on-chain.

Free Ethereum AML check via Telegram bot

The fastest way to check an ETH address is via @cryptoamlscan_bot. Send any Ethereum wallet address and receive an instant risk score with full breakdown. Basic check is free — no registration required.

Recently sanctioned Ethereum addresses (OFAC SDN)

The following addresses appear on the OFAC Specially Designated Nationals list. Transacting with these addresses may violate US sanctions law.

  • 0x098B716B8Aaf21512996dC57EB0615e2383E2f96
  • 0xa0e1c89Ef1a489c9C7dE96311eD5Ce5D32c20E4B
  • 0x3Cffd56B47B7b41c56258D9C7731ABaDc360E073
  • 0x53b6936513e738f44FB50d2b9476730C0Ab3Bfc1
  • 0x35fB6f6DB4fb05e6A4cE86f2C93691425626d4b1

+5 more in the full OFAC SDN list.

Ethereum AML risk types — quick reference

Risk typeWhat it meansWhat to do
Tornado Cash interactionAddress deposited to or withdrew from OFAC-sanctioned Tornado Cash contracts after Aug 2022Block. Any post-Aug-2022 Tornado Cash interaction is a direct OFAC violation.
Lazarus Group exposureFunds traceable to North Korean state hacking operationsBlock and file SAR if required by jurisdiction.
DeFi exploit proceedsAddress received funds from Ronin bridge, Wormhole, or other protocol hacksRequest source-of-funds documentation.
Scam token contractsAddress interacted with known phishing or rug-pull token contractsElevated KYC required before proceeding.
USDT/USDC freeze listAddress frozen by Tether or Circle under law enforcement requestDo not transact — funds non-transferable.

More Ethereum AML questions

Does the AML check cover NFT transactions on Ethereum?

Yes. Our tool screens the full Ethereum address history including NFT marketplace activity (OpenSea, Blur, LooksRare). NFT platforms have been used as a vector for money laundering.

Are EVM-compatible chains covered in an Ethereum check?

The Ethereum check covers the ETH mainnet address. For BNB, Polygon, or Arbitrum — those share the same address format but are separate blockchains. Run separate checks for each network.

What is the risk of receiving ETH from a Tornado Cash address?

Any ETH received from a Tornado Cash address post-August 2022 creates OFAC exposure. Exchanges including Coinbase and Kraken will flag or block the receiving address. Always screen before accepting large ETH transfers.

Last updated: 2026-06-17. Screened against OFAC SDN data that updates daily.

Frequently Asked Questions

Yes. An Ethereum address check covers all ERC-20 activity on that address, including USDT, USDC, DAI, and other tokens. Risk flags apply to the address itself, not individual tokens.
Yes. OFAC sanctioned Tornado Cash in August 2022. Any Ethereum address with direct deposits from or withdrawals to Tornado Cash smart contracts receives a high-risk flag in AML screening tools.
OFAC tracks Ethereum wallets linked to Lazarus Group (North Korea), Iranian entities, ransomware operators (REvil, Conti), and DeFi protocol exploiters. The list is updated regularly — always verify before transacting.
Get Full Ethereum AML Report via Telegram Bot Risk score · PDF report · OFAC + darknet + mixer check · Free basic check
@cryptoamlscan_bot →