Short answer: XMRList's AML check is a free tool that screens a crypto address or transaction before you accept it, send it on or deposit it to an exchange. Paste a Bitcoin, Ethereum, USDT-TRC20, BNB Chain, Base, Arbitrum, Polygon, Optimism or Litecoin address or transaction ID and it tells you three things: whether anything involved is on the US Treasury OFAC sanctions list, whether Tether or Circle has frozen it, and whether the wallets one step away are flagged. You get a 0 to 100 risk score and a plain recommendation. There is no sign-up, no fee and nothing is stored.
Why screen crypto before you accept it
Crypto is easy to receive and hard to give back. If someone pays you with coins that came from a sanctioned wallet, a hack or a frozen stablecoin address, the problem becomes yours the moment they land. Regulated exchanges screen every deposit, and funds linked to flagged addresses can be frozen while the exchange asks you to explain where they came from. In the worst case, holding or moving funds tied to a sanctioned address can expose you to legal risk.
The people this hits most are not criminals. They are P2P traders, freelancers paid in USDT, small shops that accept crypto, and anyone buying from a stranger on a forum. Paid AML services exist, but most charge per check and ask you to make an account first. A quick free screen catches the most serious problems before they reach you.
What the free AML check looks at
Every check runs the same three tests. The tool lists exactly which of them applied to your result, so you always know what was and wasn't covered.
1. OFAC sanctions list
The Office of Foreign Assets Control, part of the US Treasury, publishes crypto addresses belonging to sanctioned people and groups on its SDN list. The tool matches every address in your check against that list, refreshed daily. As of 4 November 2026 the list holds 1,068 addresses across 18 currencies, including 532 Bitcoin, 266 TRON, 123 Ethereum and 94 USDT addresses. A match is the strongest flag there is, and it scores 100 out of 100.
2. Stablecoin freezes
Tether and Circle can freeze USDT and USDC at any address, and frozen tokens cannot be moved. The tool asks the token contracts directly, live, whether the issuer has blacklisted the address: USDT on Ethereum and TRON, and USDC on Ethereum, Base, Arbitrum, Polygon and Optimism. An address frozen by an issuer scores 85, because exchanges will refuse anything coming from it.
3. Direct (one-hop) exposure
Clean-looking wallets can still receive dirty money. For an address, the tool reads its recent incoming transfers and screens every sender. For a transaction it goes further: it finds the wallets that funded the exact coins being spent and screens those. The result shows how many counterparties are flagged and what share of the value they account for. Exposure to sanctioned or frozen wallets scores between 55 and 95, depending on that share. Exposure to addresses publicly labelled as scams, where the explorer provides such labels (on Ethereum), scores between 30 and 60.
How to run a check, step by step
- Open the AML check.
- Paste an address or a transaction ID (TXID, also called the hash). You don't need to say which network it is: the tool recognises
0x…Ethereum-style addresses,T…TRON addresses,bc1…,1…and3…Bitcoin addresses, Litecoin addresses and transaction hashes. If a hash could belong to several networks, pick the network from the list. - Press Run AML check. Most checks finish in under five seconds. A large Ethereum transaction with many token transfers can take longer.
- Read the score and the recommendation at the top, then the details: every party with its flags, the exposure table, and the list of checks that ran.
- Optional: press Create share link to save the report for 30 days and send it to a counterparty or an exchange's support team, or Print / save PDF to keep a copy.
How to read the risk score
| Score | Level | What it means | What to do |
|---|---|---|---|
| 0–20 | Low | No sanctions, freeze or scam flags in the sources checked | Proceed normally, keep your usual records |
| 21–50 | Medium | Some exposure to scam-labelled wallets | Keep proof of where the funds came from before depositing to an exchange |
| 51–80 | High | Meaningful exposure to flagged wallets | Treat with caution; an exchange may freeze or question the deposit |
| 81–100 | Critical | A sanctioned or frozen address is directly involved | Do not accept or move the funds through a regulated service; consider legal advice |
The score follows published rules, not a black box. The highest-weighted flag wins: a sanctioned address in the check means 100, whatever else is found.
Address check or transaction check?
They answer different questions. Use an address check before you deal with someone: it tells you whether the wallet itself is sanctioned or frozen and who has been paying it lately. Use a transaction check after you receive a payment: it looks at that one transfer, every party in it, and the wallets that funded those specific coins. A busy P2P trader's wallet may have mixed history while the payment they just sent you came from a clean source, and the transaction check shows that difference.
Which networks are supported
| Network | Sanctions | Stablecoin freeze | One-hop exposure |
|---|---|---|---|
| Bitcoin | Yes | Not applicable | Yes |
| Litecoin | Yes | Not applicable | Yes |
| Ethereum | Yes | USDT, USDC | Yes, plus public scam labels |
| TRON (USDT-TRC20) | Yes | USDT | Yes (incoming USDT) |
| Base, Arbitrum, Polygon, Optimism | Yes | USDC | Parties of a transaction only |
| BNB Smart Chain | Yes | Not checked | Parties of a transaction only |
| Monero | Yes (address only) | Not applicable | Not possible |
Monero is the exception for a good reason. It hides senders, receivers and amounts by default, so nobody can trace where XMR came from, including us. You can still check whether a Monero address appears on the OFAC list, which currently names 11 XMR addresses. To confirm a Monero payment arrived, use the Monero transaction checker instead.
What it does not check (and why that matters)
Commercial AML firms sell large databases that label exchange wallets, mixers, darknet markets, scams and hacked funds, and they trace funds through many hops. This tool doesn't use paid data and looks only one hop back. That keeps it free and transparent, but it means a low result says "no flags in the public sources we check", not "these funds are clean". An exchange running a commercial tool may see something this check can't. The page says this on every result, and lists the checks that ran and the ones that didn't.
Privacy: what happens to what you paste
- Your address or hash is sent with a form, not in the page address, so it doesn't end up in links, browser history or server access logs.
- The lookups go from our server to public blockchain APIs; your browser never talks to them.
- Results are cached for 10 minutes so a repeat check is instant, then discarded.
- Nothing is saved unless you click Create share link. Shared reports expire after 30 days.
- No account, no email, no tracking scripts. The tool also works through our Tor mirror.
Who it helps
- P2P and OTC traders: screen a buyer's address before releasing coins, and screen the payment after it arrives.
- Merchants and freelancers paid in USDT: check that a customer's payment isn't frozen or tied to a sanctioned wallet before you rely on it.
- Anyone about to deposit to an exchange: see what the exchange's own screening is likely to find first.
- Researchers and journalists: check an address quoted in a news story against the sanctions list, or browse the full list of sanctioned crypto addresses by blockchain.
FAQ
Is the AML check really free?
Yes. There is no charge and no account or email required. The only limit is a fair-use cap of 12 checks a minute per visitor.
Can it check USDT-TRC20 transactions?
Yes. Paste a TRON transaction hash and the tool reads the USDT transfer inside it, screens the sender and receiver against the OFAC list and Tether's freeze list, and screens the wallets that recently sent USDT to the sender.
Does a low score mean my funds are safe to deposit?
No. It means no sanctions, freeze or scam flags were found in the public sources we check, one hop back. Exchanges may use commercial data that goes further, so keep records of where your funds came from.
How current is the sanctions list?
It is downloaded every day from an open-source extraction of the official OFAC SDN list. The tool shows when it was last updated next to the form.
Why can't it trace Monero?
Monero transactions don't reveal who paid whom or how much. That privacy is the point of Monero, so the tool can only check whether a Monero address itself is on the OFAC list.
Can I share the result with an exchange?
Yes. Click "Create share link" to get a read-only report page that anyone can open for 30 days, or print it to PDF.
Is this legal advice?
No. It is information from public sources to help you make your own decision. If a check involves a sanctioned address, talk to a lawyer before moving the funds.
Run your first check now: free AML check. More free tools for Monero users are on the tools page.