Address intelligence
See who sent what to whom.
Paste any Bitcoin or EVM address, transaction or ENS name. Get its counterparties, a flow-of-funds graph, entity labels, sanctions screening and a risk score in seconds.
5 free reports a day · no account needed · read-only, never custodial
Everything a report shows
One page per address, built from the chain itself and checked against sanctions and label data every time you open it.
Follow the money
An interactive flow graph puts the address in the middle: where funds came from on the left, where they went on the right, sized by value and coloured by who the counterparty is. Click any node to pivot. Paid plans expand to two or three hops.
Every counterparty, ranked
Who sent to and received from the address, how much in each direction, how often and when, with exchange, bridge, DeFi, mixer and scam labels where they are known.
Sanctions and a risk score
Direct and indirect exposure to OFAC-sanctioned addresses, hacks, scams, mixers and gambling, rolled into a 0–100 score with the evidence behind every point.
Bitcoin fingerprints
CoinJoin detection, common-input clustering (addresses that are likely the same wallet), address reuse, dust attacks and peel-chain patterns.
Address poisoning alerts
Lookalike addresses planted in the history with zero-value or dust transfers, flagged before anyone copies the wrong one.
Balances across chains
Native coins and major tokens on Ethereum, Base, Arbitrum, Optimism, Polygon and BNB Chain at live prices, with balance history and an activity heatmap.
Built for anyone who sends or receives crypto
Businesses taking crypto
Check a customer’s wallet before you accept a large payment or release goods, and keep the report on file.
Traders and OTC desks
Vet a counterparty’s history before a trade settles and spot funds that came through mixers or hacks.
Personal buyers and sellers
Paying someone new? See whether their address is brand new, busy, labelled or linked to scams, in seconds, free.
Compliance and investigators
Case files, bulk screening of thousands of addresses, CSV export and a REST API for your own systems.
How to read a report
The flow graph
The address you looked up sits in the middle. Money arrives from the left and leaves to the right; the bigger the circle and the thicker the line, the more value moved. Colour says what the counterparty is, where it is known. Hover to trace a path, click to open that address’s own report, and switch to two or three hops to see where funds went next.
- Exchange
- DeFi
- Bridge
- Service
- Mixer
- Gambling
- Scam / phishing
- Hack / exploit
- Sanctioned
- Unlabelled
The risk score
Points add up from what the address has touched, capped at 100. Under 30 is low, 30–59 medium, 60–89 high and 90 or more severe. Every point links to the transaction or counterparty behind it.
| The address itself is on the OFAC sanctions list | Score 100, severe |
| Sent to or received from a sanctioned address | +70 direct · +35 two hops away |
| Funds from a hack or exploit | +45 direct · +20 two hops away |
| Scam or phishing addresses | +40 direct · +15 two hops away |
| Mixers | +35 direct · +12 two hops away |
| CoinJoin transactions (Bitcoin) | +15 to +30, by share of activity |
| Gambling services | +8 |
| Poisoning, dust and peel-chain patterns | +3 to +8 each |
Scores are heuristics, not legal determinations. A clean score does not prove funds are clean; a high one does not prove wrongdoing.
Start free. Go deeper when you need to.
Every plan includes sanctions screening, labels and the risk score. Paid plans follow more history, more hops and more addresses.
| Feature | No account | Free | Plus | Pro | Team | Business |
|---|---|---|---|---|---|---|
| Address reports a day | 5 | 10 | 100 | 1,000 | 5,000 | 25,000 |
| Transactions analysed per address | 50 | 50 | 500 | 2,500 | 5,000 | 10,000 |
| Flow graph depth | 1 hop | 1 hop | 2 hops | 3 hops | 3 hops | 3 hops |
| Open case files | — | 1 | 10 | 250 | 2,000 | 20,000 |
| Bulk screenings a month | — | — | 250 | 5,000 | 50,000 | 500,000 |
| CSV export | — | — | Yes | Yes | Yes | Yes |
Questions
Is the address checker free?
Yes. Anyone can run a few reports a day without an account, and a free account raises that to 10 with private tags and a case file. Paid plans add deeper history, multi-hop graphs, CSV export, bulk screening and the API.
Where does the data come from?
Straight from public blockchains through block explorers (mempool.space and Blockstream for Bitcoin, Blockscout and Etherscan for EVM chains), prices from CoinGecko, and sanctioned addresses from the US Treasury OFAC SDN list, refreshed twice a day.
Is a high risk score proof that someone is a criminal?
No. Labels, clusters and scores are heuristics built from public data: useful signals for deciding what to look at more closely, never legal determinations. Confirm any sanctions match against the official OFAC list and take professional advice before acting.
Can Wardcrest see or move my funds?
No. Reports only read public blockchain data. Wardcrest never asks for a seed phrase or private key and cannot move anything.
Which chains are covered?
Bitcoin, Ethereum, Base, Arbitrum, Optimism, Polygon and BNB Smart Chain for full reports. Sanctions screening also recognises Tron, Litecoin, Bitcoin Cash, XRP, Solana, Monero, Dash and Zcash addresses.
Who can see the addresses I look up?
Nobody else. Lookups are not published, reports are kept out of search engines, and private tags and case files stay inside your workspace unless you choose to share a read-only link.