Check the wallet before you move the USDT.

CryptoAml Scanner is a TRON-only AML risk checker. You paste a TRC20 wallet, TRX address, USDT TRC20 address or transaction hash, and it returns a 0–100 risk score with sanctions, mixer, darknet and stolen-funds checks. The first scan is free and every scan after that is $1.

Paste a public TRON address or a 64-character transaction hash into the scanner at the top of the page and press Run AML Scan. The format is validated in your browser first, then the on-chain history is traced and you receive a score, a category breakdown and a downloadable report.

A TRC20 AML check reviews the transaction history of an address on the TRON network to see whether its funds are connected to sanctioned parties, mixers, darknet markets, theft or other high-risk sources. The result is usually summarized as a risk score so you can decide whether to accept or send funds.

Yes. Your first check returns the full report, with the score, sanctions result, mixer check and PDF, and no card is needed. Every check after that costs a flat $1.

Each additional check is $1, pay as you go, with no subscription. High-volume users can ask about API and bulk plans, which are priced separately.

No. CryptoAml Scanner works from public blockchain data, so there is no wallet connection, no pop-up and no signature request. You only paste an address or hash.

TRON addresses and transaction hashes are public, so pasting one exposes nothing that is not already on the blockchain. The scanner never needs a private key or seed phrase, and you should never enter either on any website.

The scanner traces funds in and out of the address across several hops, compares counterparties with sanctions, mixer, darknet and theft data, and combines what it finds into one 0–100 score. Lower is cleaner, and the report lists the factors that moved the number.

A high score means the address has meaningful exposure to one or more risk categories, for example a sanctioned counterparty or funds that passed through a mixer. It is a signal to investigate further, not a verdict on the owner's intent.

Yes. USDT on TRON is the most common use case. Paste the USDT TRC20 wallet or a transfer hash and the scan follows the USDT flows together with TRX and other TRC20 tokens held by the same address.

TRX, USDT TRC20 and other TRC20 tokens are analyzed together as part of one address's transaction graph, so the score reflects everything the wallet has moved rather than a single token.

Yes. Paste a 64-character TRON transaction hash and the scanner will assess the sender and recipient involved in that transfer.

Every scan compares the target address and the counterparties in its graph against sanctions and watchlist data. The report states whether a match was found and whether the link is direct or indirect.

Yes. Sanctions authorities, including OFAC, have listed digital currency addresses on TRON alongside addresses from other networks. Receiving funds linked to a listed address can create compliance problems for the recipient, which is why screening before you accept a transfer matters.

Direct exposure means the address you checked is itself listed. Indirect exposure means it has transacted with a listed party somewhere in the analyzed graph. Reports show which type was found and how many hops away it sits.

The scan looks for on-chain patterns and known service addresses associated with mixing and obfuscation, then follows the funds downstream to show whether the checked address received mixed coins even indirectly.

These flags appear when funds in the graph can be traced to addresses attributed to darknet marketplaces or to known thefts and exchange breaches. They carry heavy weight in the score because the funds may be subject to seizure or blocking.

Tainted USDT is USDT whose history includes a high-risk source. Moving it between wallets does not erase that history, because every hop stays visible on-chain, so the exposure will still appear in a scan of later holders.

The issuer of USDT has the technical ability to freeze addresses holding it. A scan cannot predict a freeze, but a high-risk result is a good reason to pause before accepting funds from that wallet.

The scanner follows funds across multiple hops in both directions, not only direct counterparties. Each report notes the depth that was analyzed so you know how far the exposure was traced.

Most wallets return a result within seconds. Very active or very old addresses with long histories can take longer to trace. Results are based on on-chain data up to the moment of the scan, and the report carries a timestamp.

The report contains the address and network, the 0–100 risk score, a breakdown by risk category, the sanctions result, the mixer result, a summary of the fund flow and the time the scan was run.

Yes. The same result can be returned as JSON, and a REST API is available for sending single addresses or batches from your own systems.

Yes. Bulk screening accepts a list of TRC20 addresses through the API or a CSV upload and returns a score for each one. Volume pricing applies, so contact us with your expected usage.

Monitoring puts a TRC20 address on watch. If it later sends to or receives from a sanctioned, mixer-linked or otherwise flagged source, you are alerted by email or webhook.

It suits anyone who handles USDT or TRX on TRON and wants to know a counterparty's risk: P2P traders, merchants accepting TRC20 payments, OTC desks, payment processors, exchanges and individuals about to make a large transfer.

It is a sensible precaution. Checking the sending wallet before you release goods or fiat shows whether the USDT you are about to receive carries sanctions, mixer or theft exposure that could later cause a blocked or reversed position.

You can scan externally owned wallets, including ones that use TRON DeFi protocols. For a contract address, the report focuses on the risk of the wallets that funded or interacted with it.

The core checks are the same: sanctions, mixers and counterparty risk. TRON adds its own patterns, including very high USDT TRC20 volume, a resource model of energy and bandwidth instead of gas, and low-cost transfers that make rapid layering cheap.

KYC verifies who a customer is. AML is the wider set of controls against money laundering. KYT, know your transaction, screens the transfers themselves. CryptoAml Scanner provides the on-chain screening side, which supports KYT and AML work.

The Travel Rule requires virtual asset service providers to exchange originator and beneficiary details for transfers above a threshold. Wallet risk screening is a separate step, but it supports the same workflow by showing the risk of the counterparty address before you send or release funds. Ask us about enterprise options for VASP use.

No. A low score means nothing risky was found in the transaction graph that was analyzed. It does not prove intent or rule out risk that has not yet been attributed, so treat it as one input to your own judgement.

Reports include the details commonly kept in due-diligence records: address, network, score, category breakdown, sanctions status and timestamp. Acceptance depends on your jurisdiction and counterparty, so confirm with your compliance adviser.

Pause the transfer, read the factors in the report and decide under your own policy. Common responses are asking the counterparty for an explanation, requesting more verification, escalating internally or declining the transaction.

Yes, attribution is probabilistic. A clean wallet can show indirect exposure after receiving funds from an address that later turned out to be risky. That is why the report lists the specific factors and hops, so you can judge how relevant the link is.