How to check Ethereum (ETH, ERC-20) for AML and sanctions
Updated: 25 August 2026 · sources: OFAC, Chainalysis, TRM, Tether/Circle blacklists
Before you accept ETH in a P2P or OTC deal, screen the sender's wallet. On Ethereum the risk is concentrated: most stolen crypto is laundered here, and one tainted transfer can get your exchange deposit frozen — not the sender's.
Ethereum is where DeFi hacks, approval-phishing drainers and mixer flows converge. Funds from bridge exploits and protocol hacks are almost always swapped to ETH and pushed through Tornado Cash (OFAC-sanctioned since 2022) before cash-out. If the ETH you receive is even a few hops from a sanctioned mixer, a known theft address or a wallet-drainer, a compliant exchange can flag the deposit — often retroactively.
How to check ETH in seconds
- Copy the sender’s address or a transaction hash.
- Paste it into the form below or send it to our Telegram bot.
- Get a verdict — ● low / ● medium / ● high risk — with the reasons, in seconds.
What we check for ETH
OFAC sanctions lists, the on-chain Chainalysis sanctions oracle, the TRM risk score, drainer / hack / mixer labels, and the multi-network connection graph — a consensus of independent sources, not one database. High risk means a direct or close link to sanctions, a mixer such as Tornado Cash, a known theft address or a wallet-drainer.
Why it matters for P2P and OTC
Exchanges trace the origin of incoming ETH and block funds with a sanctions, mixer or theft trail. Approval-phishing is a common trap: the sender may have signed a malicious approve / permit and their wallet is already flagged. A check takes seconds; appealing a frozen deposit takes weeks.
FAQ
Do I need to connect a wallet?
No. A public address or a transaction hash is enough — never a seed phrase or a wallet connection. We never touch your funds.
Is ETH from Tornado Cash always high-risk?
Tornado Cash is OFAC-sanctioned, so direct exposure is treated as high risk. We also show indirect exposure — how many hops away it is and what share of the flow it represents.
Can I check by transaction hash?
Yes. We resolve the sender from the hash (EVM / TRON / BTC) and screen that address.