How to Check If a Crypto Address Is Blacklisted

Search traffic spikes around one anxious question: is my wallet blacklisted? Usually it follows a delayed exchange deposit, a rejected P2P trade, or a counterparty who asked for proof of funds origin. A crypto address blacklisted status is rarely a single public registry you can Google. Instead, compliance systems maintain overlapping risk databases — OFAC sanctions lists, exchange internal blacklists, hack and scam cluster labels, and mixer proximity scores. This guide explains what "blacklisted" actually means on-chain, how to run a proper sanctioned address check, and what to do when your wallet shows indirect exposure rather than a direct hit.

What "blacklisted" means in crypto AML

Unlike a credit bureau score, there is no universal "blacklist" file for cryptocurrency addresses. Different actors maintain different lists with different thresholds:

When someone says a crypto address is blacklisted, they usually mean one of two things: the address appears on a sanctions or law-enforcement-adjacent list, or it sits within a few transactional hops of high-risk activity that automated screening flags. Both can cause a CEX deposit freeze even if you personally did nothing wrong.

Signs your wallet may be flagged

You will not receive a notification when your address enters a risk database. Indirect signals include:

These symptoms are not proof of a blacklist hit — they can also reflect network congestion, wrong memo tags, or exchange maintenance. But they are strong enough reason to run a sanctioned address check before sending more funds anywhere.

How a sanctioned address check works

A credible check goes beyond typing an address into a random website. Effective screening combines list matching with graph analysis:

  1. Direct list match — Compare the address against OFAC SDN entries, publicly documented hack wallets, and known scam addresses.
  2. Hop analysis — Trace inbound and outbound transactions to measure distance from SDN-listed wallets, mixer pools, and theft clusters. One-hop exposure to a sanctioned entity is often treated as equivalent to a direct hit by exchanges.
  3. Mixer exposure scoring — Identify CoinJoin usage on Bitcoin, peel-chain patterns, and EVM interactions with designated mixer contracts. See our guide on mixer exposure and hop analysis for depth settings.
  4. Behavioral heuristics — Rapid consolidation, round-number peel chains, and jurisdiction-risk patterns that vendors weight differently.

A shallow label lookup that only checks whether the exact address string appears in a static database will miss the indirect exposure that causes most real-world freezes. That is why self-custody users increasingly run local desktop screening rather than one free browser scan.

Is my wallet blacklisted? Step-by-step

Whether you are checking your own wallet or a counterparty before a trade, follow this workflow:

  1. Identify the exact address and chain — Bitcoin, Ethereum, Tron USDT, and Solana each have separate risk graphs. Do not assume a clean BTC score implies a clean EVM address derived from the same seed.
  2. Run OFAC sanctions screening — Start with a direct SDN match test. Our OFAC crypto wallet sanctions guide explains list updates and Tornado Cash designations.
  3. Scan for mixer and hack proximity — Review hop distance to privacy tools and known theft clusters. Two-hop mixer exposure on Ethereum has blocked deposits at major CEXs.
  4. Check the sending path, not just the balance — An address can hold clean coins while its UTXO history or token transfer graph carries tainted inputs from months ago.
  5. Document results before moving funds — Export reports if you plan to appeal an exchange hold or prove due diligence in a P2P dispute.

For Bitcoin-specific methodology, pair this workflow with our bitcoin address AML check guide. For EVM chains, see the Ethereum address risk check walkthrough.

Direct hit vs indirect exposure

ScenarioTypical exchange responseYour action
Direct OFAC SDN matchFreeze, account review, possible offboardingStop transfers; seek legal counsel if U.S.-linked
1-hop SDN proximityDeposit hold, enhanced due diligenceScreen all related addresses; prepare source-of-funds docs
2–3 hop mixer exposureVariable by exchange policyPre-screen before CEX deposits; consider coin selection
Scam cluster label, no sanctionsCase-by-case reviewTrace inbound payment; dispute with evidence

Indirect exposure is the gap most holders underestimate. You may never have touched a sanctioned mixer yourself, but if a client paid you from a wallet that did, your address inherits graph risk. That is why is my wallet blacklisted is really two questions: is the address on a list, and does its transaction history connect to listed entities within the hop threshold your counterparty uses?

Free tools vs enterprise blacklist databases

Chainalysis, Elliptic, and TRM Labs maintain the deepest institutional blacklist graphs — but their API pricing targets VASPs, not individuals. Browser checkers offer quick answers with trade-offs: address privacy (your query is logged), shallow hop depth, and paywalls after the first scan.

Local Windows desktop tools like AegisAML bundle sanctions lists, mixer heuristics, and hop analysis without per-address API fees. That model fits freelancers, OTC traders, and self-custody holders who need repeatable sanctioned address checks before every inbound payment. Compare options in our Chainalysis alternative guide and free AML screening for Windows overview.

Before you deposit to an exchange

Exchanges screen the sending address and its history, not your account reputation. A years-old Binance account with perfect KYC will still freeze a deposit if the on-chain path triggers compliance rules. Run a blacklist and sanctions check on the exact address you will send from — including change addresses on Bitcoin — before initiating the withdrawal from your hardware wallet or desktop app.

If you are depositing to Binance specifically, read our Binance deposit AML screening guide for chain-specific thresholds and documentation tips. For general CEX prevention, see prevent CEX deposit freezes.

What blacklist screening cannot tell you

No consumer tool sees an exchange's private internal blacklist. You cannot know with certainty whether Kraken flagged your address last Tuesday if that label never appeared in a public sanctions publication. Screening gives you a best-effort risk picture aligned with what institutional KYT engines typically evaluate — which is exactly what you need for pre-transfer due diligence.

Screening also does not constitute legal advice. A clean scan does not guarantee deposit acceptance; exchange policies change, and false positives happen. A flagged scan does not automatically mean guilt — it means the graph warrants investigation before you move more value.

Check if your address is blacklisted — locally

AegisAML runs sanctioned address checks, OFAC matching, and hop analysis on your Windows PC. No account. No per-scan API fees. No seed phrase requests.

Download AegisAML for Windows