Screen Wallet
Run on-demand AML screening for a single crypto wallet/address without creating a transaction. Resolves your application’s configured blockchain analytics provider (Merkle Science or Crystal), screens the address synchronously, and returns the normalised risk result. Nothing is written to the transactions table. One AML monitoring usage is billed per successful screening (sandbox applications are not billed).
Authorizations
Body
The crypto address to screen. Must match the format of the selected blockchain (e.g. a 0x-prefixed 40-hex-char address for EVM chains). Alias: address.
"0x28c6c06298d514db089934071355e5743bf21d60"
Asset / chain identifier. One of: BTC, ETH, LTC, XRP, BCH, DOGE, TRX, SOL, MATIC, BNB, USDT, USDC. Alias: currency.
BTC, ETH, LTC, XRP, BCH, DOGE, TRX, SOL, MATIC, BNB, USDT, USDC "ETH"
Optional. Whether the address is being screened as an inbound (deposit) or outbound (withdrawal) counterparty. Accepts inbound, outbound, deposit, or withdrawal. Defaults to a neutral pre-transfer screen when omitted. This is passed to the provider as context only; it does not change the returned risk_score, severity, or the source_of_funds/destination_of_funds breakdowns, which are always both returned regardless of direction. Changing or omitting direction therefore does not require re-screening an address.
inbound, outbound, deposit, withdrawal Response
The normalised wallet screening result.
Provider that performed the screening (e.g. merklescience, crystal).
Always WALLET_SCREENING for this endpoint.
WALLET_SCREENING Normalised 0-100 risk score. Higher means greater exposure to risky entities.
Risk bucket derived from risk_score: 0-9 UNKNOWN, 10-39 LOW, 40-69 MEDIUM, 70-89 HIGH, 90-100 CRITICAL. UNKNOWN is the lowest band, not a separate no-data state: risk_score 0 (the common clean-address case) means no adverse assessment, while a non-zero score in the 1-9 range is a real but sub-LOW signal - read the risk_score, not just the band. Never treat UNKNOWN as an affirmative low-risk or clear rating; do not display it as a pass.
UNKNOWN, LOW, MEDIUM, HIGH, CRITICAL Screening outcome status.
SCREENED, PENDING, ERROR Human-readable summary of the screening result.
The screened address, echoed back.
The blockchain that was screened.
True if the address has direct or indirect sanctions exposure.
Highest-weighted high-risk category, or null when none is dominant (e.g. sanctioned, mixer, stolen_funds).
Where the address received funds from, attributed by entity. Each entry is an exposure breakdown.
Where the address sent funds to, attributed by entity. Same item shape as source_of_funds with exposure_direction = outgoing.
Direct and indirect counterparty entities with received/sent amounts and risk levels.