Upbit — ETH address 0x3f9a83…5699b8
0x3f9a8345729eA842708E080e238C92731e5699b8
PublicAML knows this Ethereum address as Upbit, a cex. Its AML score is 0 of 100 because we treat this address as infrastructure (known cex — infrastructure, indirect exposure floored). Exposure that reaches it is not scored against it, and the findings below describe what we traced rather than an accusation. Funds reaching this address are 4 hops from OFAC SDN list (0xdcbeff…643193).
What we know about this address
| Chain | Ethereum (ETH) |
| Entity | Upbit |
| Role | cold wallet (per entities-discoverer) |
| Category | cex |
| AML score | 0 / 100 (floored from 55, treated as infrastructure) |
| Cluster size | 2,016,397 addresses |
Risk findings
Each row carries the source that flagged it. A row at zero hops names this address directly; any other row is a path our propagation engine traced from a flagged address to this one. A finding is an observation about the flow of funds or about a published listing, not a statement about the owner of this address.
| Finding | Source | Hops | Direction |
|---|---|---|---|
| Funds reaching this address are 4 hops from OFAC SDN list (0xdcbeff…643193).0xdcbeffbecce100cce9e4b153c4e15cb885643193 | OFAC SDN list | 4 | inbound |
| Funds reaching this address are 4 hops from sanctioned entity (entity attribution) (0x6b7dc8…89716e).0x6b7dc81758483ecf91a14ba263831bfe6989716e | sanctioned entity (entity attribution) | 4 | inbound |
| Funds reaching this address are 4 hops from documented incident (0xef4326…ab80c6).0xef4326f42f2eb656c58fabf8b1d3298dc2ab80c6 | documented incident | 4 | inbound |
| Funds reaching this address are 5 hops from documented incident (0x0e9e14…22d1c7).0x0e9e147af2108e5354efb28740cade8e7422d1c7 | documented incident | 5 | inbound |
| Funds reaching this address are 5 hops from documented incident (0xfc3fac…abe92f).0xfc3facd67138966ab0c841e905b0c4bca1abe92f | documented incident | 5 | inbound |
| Funds reaching this address are 5 hops from documented incident (0xf6d072…1bc35e).0xf6d072254eb8a9b06e0ba21221b498332c1bc35e | documented incident | 5 | inbound |
4 further internal signals are held back from this page. They come from heuristics with known false positives, and we do not publish an accusation we would not defend. They are visible in the live check.
More addresses in this index
These are other addresses in the PublicAML directory, not counterparties of this one. Nothing here implies a connection between them.
If this page is wrong
Attribution and risk propagation both make mistakes, and a page like this one is visible for a long time. If you own this address or can show that a finding here is incorrect, tell us and we will re-check it. Corrections are applied to the underlying data, so they carry over to the API and to every other view of this address.
See something wrong on this page? Tell us and we will check it.
PublicAML reports what it can observe on-chain and what public and vendor sources say about an address. Nothing on this page is a legal finding, an allegation against a person, or advice. Risk scores describe exposure through transaction paths, and an address can carry exposure without its owner having done anything wrong.
Data is read live from the PublicAML API at the time this page was served.
Is this your address?
Leave your email and we will watch this address for you: you hear from us when money moves through it or when what we know about it changes. We cannot recover anyone’s money, and we will not pretend otherwise — but you will not have to keep checking.
We use the address only to reach you about this wallet. No password to choose: you sign in with a code we email you.
If you want to put the whole account on record — what happened, when, how much — file a report. We never publish who filed one.