Risk Score Reference
Score ranges
| Score | Level | Description | Action |
|---|---|---|---|
| 0-10 | LOW | No known risk indicators | Proceed normally |
| 11-20 | LOW | Minor indirect exposure | Proceed, monitor |
| 21-40 | MEDIUM | Indirect connections to risky entities | Enhanced due diligence recommended |
| 41-60 | MEDIUM | Multiple risk factors detected | Manual review recommended |
| 61-80 | HIGH | Direct interaction with high-risk addresses | Block or escalate to compliance |
| 81-95 | CRITICAL | Strong risk indicators, possible sanctions adjacency | Block and report |
| 96-100 | CRITICAL | Direct sanctions list match | Block, report to authorities |
Flag types
| Flag | Severity | Description |
|---|---|---|
SANCTIONS_HIT | Critical | Direct match on OFAC/EU/UN/UK sanctions list |
SANCTIONS_ADJACENT | High | Within 1-2 hops of a sanctioned address |
MIXER_USAGE | High | Funds sent through mixing services |
DARKNET_MARKET | High | Associated with known darknet marketplace |
RANSOMWARE | Critical | Linked to ransomware payment address |
SCAM_REPORTED | Medium | Reported as scam by community databases |
EXCHANGE_DEPOSIT | Low | Identified exchange deposit address |
DEFI_PROTOCOL | Low | Known DeFi smart contract |
HIGH_VALUE_TRANSFER | Info | Unusually large transfer for address pattern |
Sanctions lists checked
- OFAC SDN — U.S. Office of Foreign Assets Control, Specially Designated Nationals
- EU Consolidated — European Union consolidated sanctions list
- UN Security Council — United Nations sanctions
- UK HMT — His Majesty's Treasury financial sanctions
- OpenSanctions — Open-source consolidated sanctions database
Lists are refreshed every 6 hours. Effective coverage includes additions published within the same business day.