What the sanction and label feeds brought in over the last 24 hours, and what it turned into.
0 refreshed against the source lists
1,129 addresses blocked by the issuer
10,595 addresses blocked by the issuer
2 re-checked
across 4 feeds
Counts only. Entity names where we have them, never addresses. Updated .
All incidentsWhere stolen money went, traced on-chain, with every transaction linked.
AML.legal says “no wallet connect”, then asks for a USDT approval on hidden pages. 71 addresses approved its Tron contract; 10,069 USDT taken so far.
Addresses OFAC listed on 12 Mar 2026: six Tron wallets used in turn, one frozen three months before the listing, and 96 ETH still sitting on a sanctioned address.
Six addresses OFAC listed on 7 Aug 2026 behave as exchange deposit addresses: 431.0M forwarded to Binance, 51.7M to OKX, nothing left to freeze.
Seven wallets listed on 30 Sep 2026: money forwarded within minutes, a third of it from three unlisted wallets, and 20 USDT left to freeze.
131 ISIS-K wallets were frozen while still working; seven Hamas-linked wallets that moved 24.7M USDT were listed 16 months after they went quiet.
Six sanctioned wallets read in full: 85.5M USDT moved to a new wallet 8 days before the first freeze, 12.56M paid out between the two, and none of the recipients frozen.
A sanctioned address, a clean one, the same answer from the API — no signup.
By default—compliance for everyone. Free, fast, anonymous.
Traditional AML solutions are designed for banks and large centralized exchanges, leaving the decentralized crypto ecosystem vulnerable.
Wallets, OTC desks, and DeFi platforms remain blind to sanctioned addresses, scam operations, and high-risk transactions.
This creates a massive security gap that bad actors exploit daily, putting millions of users at risk.
PublicAML is the world's first free, real-time AML firewall that protects everyone in the crypto ecosystem.
Universal protection across all crypto wallets and platforms
Real-time detection and prevention of malicious transactions
Trusted by millions across the crypto ecosystem
RESTful API for real-time address checking
Developer-friendly SDKs for multiple languages
On-chain integration for DeFi protocols
Instant address checking via Telegram
We believe AML protection should be accessible to everyone in crypto, not just large institutions. That's why PublicAML is completely free and designed for easy integration into any platform.
From individual users to large platforms, everyone in crypto can benefit from AML protection
Protect users from sending funds to malicious addresses
Compliance and risk management for trading platforms
Real-time protection for decentralized applications
Personal protection for individual crypto users
Free, non-profit, no licence fee.
Built on principles of transparency, accessibility, and public good
Two axes set every number. What is alleged carries its own severity, who alleges it carries one trust rank from 0 to 100, and the score at the point of origin is the lower of the two. The whole derivation travels in the same response as the score, so you can check it instead of trusting it.
Read the methodologyseverity
source rank
A weak source cannot carry a heavy accusation, and a strong one cannot make a soft category heavy.
We believe that AML protection should be a public good, not a profit center. Our commitment to transparency and accessibility drives everything we do.
We're building the future of crypto security together. Testimonials and partner logos coming soon.
Journalists: see our press kit.
Drop-in REST & JS SDK for pre-transaction screening. Quick to integrate, secure, and reliable.
Simple HTTP endpoints for real-time address checking and risk assessment.
// REST API Example — no API key required
const res = await fetch('https://intelapi.publicaml.org/v1/enrich', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({
addresses: [
{
wallet_address: '0x742d35Cc6634C0532925a3b844Bc454e4438f44e',
chain: 'ETH',
},
],
}),
});
const { entities } = await res.json();
console.log(entities[0].aml_score); // 0–100
Real-time notifications when addresses are flagged or risk scores change.
// Webhook Integration
app.post('/webhook/publicaml', (req, res) => {
const { address, risk_score, risk_flags } = req.body;
if (risk_score >= 70) {
// Block transaction or show warning
console.log('High risk detected:', address);
}
res.status(200).json({ received: true });
});
Instant address checking via Telegram with inline results and risk alerts.
// Telegram Bot Integration
@bot.message_handler(commands=['check'])
def check(msg):
address = msg.text.split(' ')[1]
// Call PublicAML API
risk = publicaml.check_address(address)
if risk['risk_score'] < 30:
bot.reply_to(msg, '✅ Address looks safe.')
else:
bot.reply_to(msg, '⚠️ Address is risky.')
Our MCP server puts wallet screening, fund tracing and counterparty lookup directly into Claude, Cursor and any other MCP client. Ask about an address in plain language and the assistant checks it against PublicAML.
npx -y @publicaml/mcp-server{
"mcpServers": {
"publicaml": {
"command": "npx",
"args": ["-y", "@publicaml/mcp-server"]
}
}
}Bitcoin, Ethereum, BNB Chain and TRON. Works with no account; an optional API key only raises the rate limit. View on npm
It's free, fast, and protects your users.