AML Risk Categories

Last Updated: June 08, 2026

1. How the Risk Scoring System Works

Our analytical system automatically checks cryptocurrency addresses for affiliation with dozens of different sources. This allows us to detect suspicious transactions and form an overall Risk Score for your incoming assets.

Below is a list of the main risk tags used by our system, categorized by the hazard level of the source.

2. 🟢 Low Risk

Safe and legal asset sources. Transactions from these categories are considered clean and are processed automatically without delays.

  • Bridge: Coins that legally moved between different blockchains via cross-chain bridges (e.g., renBTC, WBTC).

  • Trusted Exchange: Licensed platforms (Binance, Bybit, Kraken, etc.) that require mandatory KYC/AML verification. This is the most popular category in the crypto industry (about 90% of all legal transfers).

  • ICO (Initial Coin Offering): Funds from legal campaigns raising investments for new crypto projects.

  • Marketplace: Coins used to pay for goods and services on legal trading platforms.

  • Merchant Services: Services allowing legal businesses to accept crypto payments from clients (often with subsequent fiat conversion).

  • Miner: "Virgin" coins, freshly mined and not yet involved in third-party transactions.

  • NFT Platform: Assets from platforms dedicated to minting and trading NFT collections.

  • P2P Exchange (Low ML risk): P2P platforms that strictly require identity verification for all deposits and withdrawals.

  • Payment: Coins associated with legal corporate or private payment services.

  • Seized Assets: Cryptocurrency officially confiscated by government authorities and sold at legal auctions.

  • Wallet: Coins stored in personal, verified non-custodial wallets.

3. 🟡 Medium Risk

Sources that require attention. Assets from these categories may be processed with certain limits or subject to a refund without completing the exchange.

  • ATM: Coins purchased through street cryptocurrency terminals.

  • Decentralized Exchange (DEX): Coins that passed through decentralized exchanges (Uniswap, SushiSwap, PancakeSwap) where trading occurs directly between users without KYC.

  • Smart Contract / Liquidity Pools: Funds received directly from interacting with smart contracts or liquidity pools.

  • Exchange (High ML risk): Exchanges with weak AML measures, no-KYC platforms, or services allowing crypto withdrawals without identity verification.

  • P2P Exchange (High ML risk): Unlicensed P2P exchanges or platforms located in FATF "grey list" jurisdictions.

  • Gambling: Coins associated with online casinos, poker, or sports betting.

  • Adult Services: Platforms and services providing adult content.

  • OTC Brokers: Over-the-counter brokers conducting large private transactions.

  • Protocol Privacy: Networks that hide sender data by default (e.g., Monero, Secret). Note: This is a technical feature of the network, not intentional money laundering.

  • Infrastructure as a Service: Coins related to paying for cloud computing, server rentals, and hosting.

  • Lending Contract: Funds received through decentralized lending (DeFi loans).

  • Unnamed Service: Address clusters behaving like a specific service but not yet identified by analysts.

4. 🔴 High / Very High Risk

Illegal sources. Interaction with these categories leads to immediate transaction blocking, holding of funds, and a mandatory KYC verification request.

  • Dark Market / Dark Service: Assets linked to shadow markets on the darknet, selling drugs, weapons, or illicit services.

  • Mixer (Tumbler): Services where coins are intentionally passed through to break the transaction trail and hide their origin (Tornado Cash, ChipMixer, etc.). The primary tool for money laundering.

  • Stolen Coins / Hack / Drainer: Coins stolen from users via exchange hacks, cyberattacks, or phishing smart contracts (drainers).

  • Scam / Fraud / Ponzi: Funds obtained by deceiving users, creating financial pyramids (HYIPs), or scam projects.

  • Sanctions: Assets linked to individuals, companies, or countries under international sanctions (including OFAC lists).

  • Terrorism Financing: Coins associated with funding extremist and terrorist groups.

  • Child Exploitation: Individuals and platforms involved in the exploitation of minors and human trafficking.

  • Enforcement Action: Services currently under criminal investigation or whose funds have been seized by law enforcement.

  • Fraud Shop: Shadow stores selling stolen credit card data, leaked databases, and hacked accounts.

  • Malware / Ransom: Coins obtained by hackers through blackmail or spreading ransomware.

  • Online Pharmacy: Unlicensed online pharmacies selling banned or prescription drugs via delivery.