How to Do an AML Check on a Crypto Wallet (Step-by-Step)

01What you need to run an AML check on a wallet

A wallet AML check screens a public address against known risk intelligence — sanctions, scams, mixers, high-risk exchanges. If you'd like the theory first, start with the complete guide to wallet AML checks. This page is the practical side: how to actually do one.

A wallet address

The public address you were sent, or the one you're about to pay. You need all of it, copied exactly.

A checking service

A Telegram bot or website with access to blockchain intelligence. With AML Check Hub there's nothing to sign up for — you just open the bot.

About a minute

The check itself takes seconds; most of the time goes on reading the result.

What you don't need

A private key, a seed phrase, a wallet connection or a transaction signature. A service that asks for any of these "to check" an address isn't running an AML check — it's trying to reach your funds.

02How to conduct an AML check on a wallet, step by step

The steps below use the AML Check Hub Telegram bot, but the same order works for any service that checks a public address.

1. 01Copy the address in full. Don't retype it or read it off a screenshot: one wrong character is a different address, and the check would show someone else's history.
2. 02Open the AML Check Hub bot in Telegram and tap "Check Wallet".
3. 03Paste the address and send it. The network is detected from the address format; if the format fits several networks, the bot asks you to pick one.
4. 04Wait for the result — usually a few seconds. You get a score from 0 to 100 and a risk level.
5. 05Read the result: not just the number but the risk categories where they're included in your result (more on that below).
6. 06Decide: send, ask for a different address, or ask the counterparty about the source of funds.

03How to check an address on different networks

The address format tells you the network, and the network decides what you're actually checking. The same 0x address exists on several networks at once, so it matters to pick the right one.

TRON (USDT TRC-20)

The address starts with "T" and is 34 characters long. This is where most P2P and OTC USDT volume moves — see how to check a TRON address before sending.

Ethereum and BNB Chain

The address starts with "0x" and is 42 characters long. The format is identical on both, so the bot asks which network to check — and the choice matters, because an address has a separate history on each.

Bitcoin

The address starts with "1", "3" or "bc1".

Solana

A 32–44 character base58 string with no prefix.

The full list of supported networks is on the What we check page.

04How to read the result of an AML check

A check returns a score from 0 to 100 and a risk level: low (0–30), medium (31–70), high (71–90) or critical (91–100). The free first check shows the score and level; the category breakdown, transaction paths and a PDF report open with a paid check.

Score and level

The overall risk rating. Low means you can carry on; medium means look at the detail; high and critical mean stop.

Categories

They show where the risk comes from: sanctions, illicit activity, mixers, gambling, high-risk exchanges, cross-chain bridges. Two checks with the same score can mean different things.

Direct vs indirect

Direct means the address dealt with the risky entity itself. Indirect means there are intermediate addresses in between; as a rule, the more hops, the weaker the signal.

Share of volume

A small percentage isn't a verdict — it's a reason to look closer, especially when the amount you're about to send is large.

How the scale and categories work in detail is in the complete guide to wallet AML checks. Your own transaction paths and breakdown are in the bot's report.

05What to do with the result

Low risk

You can send. The check is a snapshot at the time of the request, so for large amounts or regular counterparties repeat it before the next deal.

Medium risk

Look at the categories and the path. For a large amount, ask the counterparty about the source of funds or choose a different address.

High or critical risk

Don't send. Ask for a different address, ideally one tied to a licensed exchange, and keep the report as a record that you checked.

What happens when the check is skipped — frozen funds, a restricted exchange account, a dispute with nothing to show — is covered in what an AML check costs, in the section on the real cost of skipping one.

06How to run AML checks regularly

If you check addresses often — in P2P, OTC settlement or when accepting payments — a bulk pack is cheaper: the price per check falls as the pack grows. Platforms with high volumes can get custom terms.

Current rates are on the Pricing page, and a pack can be bought right in the bot.

07Common mistakes when checking a wallet

The wrong network

A 0x address exists on several networks. Checking it on Ethereum says nothing about its history on BNB Chain — pick the network you'll actually send on.

A mistyped address

Copy the address in full and compare the first and last characters with what your counterparty sent.

Reading only the number

The score is the total, not the explanation. Categories and the transaction path show where the risk comes from and how significant it is.

Checking once and forgetting

A result reflects the data at the time of the check. For an address you deal with regularly, repeat the check.

Trusting a service that asks for a key

An AML check works from the public address. Any request for a private key or seed phrase is a sign of fraud.

AML Check Hub screens against available third-party blockchain intelligence and reports the result as-is. It's informational, not legal or compliance advice — a high-risk result is a strong warning sign, not a final legal determination, and a clean one is informative, not a lifetime guarantee.