Draft · not yet reviewed by a lawyer. Highlighted text is a placeholder.
Legal
Last updated: [date]
Company
| Operator | [Company legal name] |
|---|---|
| Registered address | [Street, city, postcode, country] |
| Registration no. | [Company registration number] |
| Tax ID | [Tax ID, if required] |
| Contact | hello@amlsafety.com |
Disclaimer
Results are a risk opinion based on the sources listed, not a guarantee. You remain responsible for your own AML duties. Nothing on this website is legal, financial or compliance advice. Full terms are in the Terms of Service.
Privacy
What we store and why:
| Data | Why | How long |
|---|---|---|
| Email or Telegram account | To log you in and contact you about your account | Until you close your account |
| Checks: the address, result, reasons and your optional reference | So you can look at a result again and see why it was given | [Retention period] |
| Audit log of checks and decisions | Compliance record; it cannot be edited or deleted | 10 years |
| API keys | To authenticate API calls. We store only a hash, never the key itself | Until the key is revoked |
| Payment details | Billing | [As required by tax law] |
We do not sell personal data. We do not use advertising trackers. [List any analytics, hosting and email providers here] To see, correct or delete your data, write to hello@amlsafety.com. Audit log entries are kept even after deletion, because the law or our customers’ compliance duties may require them.
Data sources
Every flag in a result names the source it came from. This is the full list. Official lists come first; attribution sources (explorer tags, on-chain evidence) carry a lower confidence and are marked as such.
| Source | Published by · how we read it | What it flags |
|---|---|---|
| Sanctions | ||
| OFAC sanctions (SDN list) | U.S. Department of the Treasury, OFAC. Official file, synced every 4 hours. Public domain. | Wallet addresses OFAC lists for sanctioned people and companies |
| Chainalysis sanctions oracle | Chainalysis’ public on-chain contract on Ethereum, asked on every Ethereum check. Free, no key. | A second opinion on OFAC-listed addresses |
| UK Sanctions List | UK Foreign, Commonwealth & Development Office. Official file, synced every 4 hours; addresses read from the entries’ text and checksum-verified. Open Government Licence v3.0. | Wallet addresses named in UK designations (Garantex, Grinex, EXMO, Rapira…) |
| EU consolidated sanctions list | European Commission. Official file, synced every 4 hours; addresses read from the entries’ remarks and checksum-verified. Reuse allowed (Decision 2011/833/EU). | Wallet addresses named in EU asset freezes (Garantex, Grinex) |
| Sanctioned platforms | Our list of 23 platforms under US, UK or EU sanctions as companies, with the date each measure applied, from the three lists above and the EU transaction ban (Regulation 833/2014, Annex XLV). | Wallets of HTX, Garantex, Grinex, Nobitex, Wallex, EXMO and others; money moved after the date only |
| Stablecoin freezes | ||
| USDT freezes on TRON | Tether. Read from the USDT contract’s own blacklist events. | Wallets Tether froze, and when a freeze was lifted |
| USDT and USDC freezes on Ethereum | Tether and Circle. Read from the token contracts’ own events. | Wallets the issuers froze on Ethereum |
| Tether freezes in progress | Tether’s owner multisig wallets on TRON and Ethereum, watched every 2 minutes. Public on-chain data. | Wallets Tether has proposed to freeze (STOP), and wallets that received USDT from them minutes before the freeze |
| Live freeze checks | The USDT, USDC, USDP and PYUSD contracts on 7 networks (TRON, Ethereum, Base, Arbitrum, Optimism, Polygon, Avalanche), asked at the moment of each check. | Freezes made since our last sync |
| Platform wallets | ||
| HTX proof-of-reserves wallets | HTX’s own published reserve wallets (github.com/huobiapi, MIT licence), every snapshot since 2023. | Wallets of HTX, a sanctioned platform |
| Nobitex hack evidence | Public blockchain data: the wallets drained into the attacker’s burn address in the June 2025 Nobitex hack (only Nobitex’s keys could move them). Attribution, confidence 90%. | Nobitex hot wallets and customer deposit addresses |
| Hacks, scams and other risks | ||
| Etherscan name tags | Etherscan and its sister explorers, via the open eth-labels dataset (MIT licence). Attribution, confidence 70–90%. | Hacker and exploiter wallets (Bybit, WazirX…), phishing, Tornado Cash pools, gambling, sanctioned platforms; exchanges shown for information |
| Tronscan name tags | Tronscan, looked up for the checked wallet and its biggest unknown counterparties, kept 30 days. Attribution, confidence 80%. | The same categories on TRON; exchanges shown for information |
| ScamSniffer blacklist | ScamSniffer’s open phishing list (GPL-3.0), refreshed daily, published with a 7-day delay. | Wallet-drainer and phishing addresses |
| Ransomwhere | The open ransomware payment tracker ransomwhe.re (MIT licence). | Bitcoin addresses that received ransomware payments, with the ransomware family |
| MyEtherWallet darklist | MyEtherWallet’s open list of phishing and fake-ICO addresses (MIT licence). No longer updated since 2020, so confidence 60%. | Old Ethereum phishing and scam addresses |
| A7A5 token use | The A7A5 token contracts on TRON and Ethereum, asked at the moment of each check. | Wallets that have used A7A5, the ruble stablecoin issued by sanctioned Old Vector / A7 |
| Ours | ||
| Our blocklist | AML Safety, from confirmed fraud cases, each with a written reason. | Addresses we confirmed in fraud cases |
| Checks we run on every wallet | ||
| Who paid this wallet | Our own tracing: the wallet’s latest USDT transfers on TRON, followed up to 3 steps back through unnamed wallets; USDT and USDC on Ethereum, BNB Chain, Polygon, Arbitrum, Base and Optimism; and the latest Bitcoin transactions (valued in US dollars at the day’s price). Every counterparty is checked against all the lists above. | Money received from, or paid to, flagged addresses, directly or a few steps back |
| Wallet types | Our own reading of how unnamed wallets behave (hub, collector, deposit address, transit), and which of them we have seen behind other checked wallets. | Exchange deposit addresses tied to their exchange; information on the rest |
| Address poisoning | Public blockchain data: dust and fake tokens sent to the wallet, and look-alike addresses. | Spam senders (scored as scam) and look-alikes that targeted the wallet |
| Wallet control changes | The TRON account’s own permission settings, read at the moment of each check. | Wallets whose own key can no longer send alone, as hijacked wallets look |
We read blockchain data through TronGrid, Tronscan, Etherscan, NodeReal, Alchemy, public Ethereum nodes and mempool.space. We are not affiliated with, or endorsed by, any of these publishers.
Wrongly flagged?
Write to hello@amlsafety.com with the address. Every result shows which source flagged it. We review entries on our own blocklist and remove them if they are wrong. For a third-party list, such as OFAC or Tether, the change has to come from that publisher; we update as soon as their list does.
Trademarks
Tether and USDT are trademarks of Tether. TRON, Ethereum and Bitcoin are named only to describe the networks we support. All trademarks belong to their owners.