Latest incidents
Crypto exploits and scams, paired with the on-chain detail.
CCC Suffers $117,000 Loss Due to Swap Logic Flaw
CCC experienced a loss of $117,000 attributed to a swap logic flaw. The incident occurred on the Binance Smart Chain (BSC).
Moonwell DeFi Protocol Suffers $8.79 Million Attack
Moonwell, a DeFi lending protocol, was exploited resulting in a loss of $8.79 million. The attacker manipulated a low-liquidity token to borrow real assets from the platform.
FH Token Exploit on BSC Results in $20,000 Loss
FH Token was exploited on the BSC chain, leading to a significant loss. A flaw in the token's transfer function allowed the attacker to drain funds from the liquidity pool.
See it in 70 seconds
A sanctioned address, a clean one, the same answer from the API — no signup.
Why PublicAML?
By default—compliance for everyone. Free, fast, anonymous.
The Protection Gap
Traditional AML solutions are designed for banks and large centralized exchanges, leaving the decentralized crypto ecosystem vulnerable.
Wallets, OTC desks, and DeFi platforms remain blind to sanctioned addresses, scam operations, and high-risk transactions.
This creates a massive security gap that bad actors exploit daily, putting millions of users at risk.
Our Mission
PublicAML is the world's first free, real-time AML firewall that protects everyone in the crypto ecosystem.
Works in every wallet
Universal protection across all crypto wallets and platforms
Blocks scams before they happen
Real-time detection and prevention of malicious transactions
Protecting wallets, OTC desks & DeFi platforms across the ecosystem
Trusted by millions across the crypto ecosystem
Easy Integration Options
API
RESTful API for real-time address checking
SDK
Developer-friendly SDKs for multiple languages
Smart Contract
On-chain integration for DeFi protocols
Telegram Bot
Instant address checking via Telegram
Free Forever, Easy to Integrate
We believe AML protection should be accessible to everyone in crypto, not just large institutions. That's why PublicAML is completely free and designed for easy integration into any platform.
Who Uses PublicAML
From individual users to large platforms, everyone in crypto can benefit from AML protection
Wallets
MetaMask, Trust, LedgerProtect users from sending funds to malicious addresses
OTC Desks
Over-the-counter tradingCompliance and risk management for trading platforms
DeFi/NFT
DEXs, NFT marketplacesReal-time protection for decentralized applications
Individual Users
Crypto traders, investorsPersonal protection for individual crypto users
Comprehensive Ecosystem Coverage
Individual Users
- Wallet protection and transaction screening
- Real-time scam and hack prevention
- Free access to AML data
Institutions & Platforms
- Easy API integration and SDKs
- Compliance and regulatory reporting
- Custom risk management solutions
Free, non-profit, no licence fee.
Why Trust PublicAML?
Built on principles of transparency, accessibility, and public good
Built on global sanction & scam lists
Comprehensive database sourced from official government sanctions lists and verified scam databases
Firewall for good people
Public good initiative designed to protect honest users from bad actors in the crypto space
Open, transparent, and free forever
No hidden costs, no vendor lock-in, and complete transparency in our operations and data sources
Our Commitment to Trust
We believe that AML protection should be a public good, not a profit center. Our commitment to transparency and accessibility drives everything we do.
Data Sources
- OFAC sanctions lists
- EU sanctions database
- Verified scam databases
- Community-reported threats
Our Principles
- Free access for everyone
- Open source transparency
- No vendor lock-in
- Community-driven development
Join Our Growing Community
We're building the future of crypto security together. Testimonials and partner logos coming soon.
Journalists: see our press kit.
API & SDK Integration
Drop-in REST & JS SDK for pre-transaction screening. Quick to integrate, secure, and reliable.
REST API
Simple HTTP endpoints for real-time address checking and risk assessment.
// REST API Example — no API key required
const res = await fetch('https://intelapi.publicaml.org/v1/enrich', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({
addresses: [
{
wallet_address: '0x742d35Cc6634C0532925a3b844Bc454e4438f44e',
chain: 'ETH',
},
],
}),
});
const { entities } = await res.json();
console.log(entities[0].aml_score); // 0–100
Webhooks
Real-time notifications when addresses are flagged or risk scores change.
// Webhook Integration
app.post('/webhook/publicaml', (req, res) => {
const { address, risk_score, risk_flags } = req.body;
if (risk_score >= 70) {
// Block transaction or show warning
console.log('High risk detected:', address);
}
res.status(200).json({ received: true });
});
Telegram Bot
Instant address checking via Telegram with inline results and risk alerts.
// Telegram Bot Integration
@bot.message_handler(commands=['check'])
def check(msg):
address = msg.text.split(' ')[1]
// Call PublicAML API
risk = publicaml.check_address(address)
if risk['risk_score'] < 30:
bot.reply_to(msg, '✅ Address looks safe.')
else:
bot.reply_to(msg, '⚠️ Address is risky.')
API Features & Limits
AML screening inside your AI assistant
Our MCP server puts wallet screening, fund tracing and counterparty lookup directly into Claude, Cursor and any other MCP client. Ask about an address in plain language and the assistant checks it against PublicAML.
npx -y @publicaml/mcp-server{
"mcpServers": {
"publicaml": {
"command": "npx",
"args": ["-y", "@publicaml/mcp-server"]
}
}
}Bitcoin, Ethereum, BNB Chain and TRON. Works with no account; an optional API key only raises the rate limit. View on npm
No excuse not to check AML.
It's free, fast, and protects your users.