How to Check Whether Incoming Crypto Is Clean Before You Accept It

An AML check on a crypto address is a screening that estimates how likely the funds are tied to sanctioned entities, scams, darknet markets, or stolen-asset flows before you accept a payment. It matters because blockchains are public and permanent: once tainted USDT lands in your wallet, the link is visible forever, and exchanges can freeze a deposit that traces back to a flagged source. Running a check first takes seconds and can prevent a frozen account weeks later.

At a glance: This article explains what a crypto AML check looks at, how risk scoring works on TRC-20 USDT and other assets, and a practical routine for screening an address before accepting funds. It is written for freelancers, merchants, and anyone receiving stablecoins from people they do not fully know.

What does a crypto AML check actually look at?

A crypto AML check traces the path funds took to reach an address and scores that path against known risk categories. The screening typically clusters an address with others controlled by the same entity, then checks whether any hop touched a sanctioned wallet, a known scam, a mixer, or a darknet market. The output is usually a risk percentage plus a breakdown of which categories contributed. A score under roughly 10% generally reflects ordinary exchange and personal activity, while exposure above 30% to high-risk sources is the threshold many compliance teams treat as a reason to reject or investigate.

The check works on the receiving address and the counterparty’s address alike. A tool such as crypto-office.com/crypto-aml-check screens a TRC-20 or other address and returns that category breakdown, which is the part that tells you why a score is high rather than just that it is. Reading the categories matters: a 25% score driven by exchange exposure is very different from a 25% score driven by darknet exposure.

Risk score	Typical meaning	Suggested action
Under 10%	Ordinary exchange and personal activity	Accept
10–30%	Some exposure worth understanding by category	Read the breakdown before deciding
Above 30% high-risk	Sanctions, scam, mixer, or darknet exposure	Stop and investigate

Why does tainted USDT create a problem later?

Tainted USDT creates a problem because the taint follows the coins, not the person who sent them. When you later deposit those funds to a regulated exchange, the exchange runs its own screening, and a deposit that traces to a sanctioned or stolen source can be frozen pending review. The permanence of the ledger is the core issue: there is no chargeback and no way to un-receive a transfer. Accepting screened-clean funds is therefore not bureaucratic caution; it is the only point in the flow where you still have a choice.

This is also why timing matters more than people expect. The cheap moment to act is before acceptance, when rejecting a suspicious payment costs you nothing but a delayed sale. After acceptance, the options narrow to explaining the source to a compliance desk, which can take weeks and sometimes ends in a permanent hold.

A practical routine for screening an address

Screening does not require a compliance background; it requires a consistent habit.

1. Get the counterparty’s sending address before the transfer, not after, so you can screen it cold.
2. Run the address through an AML check and read the risk percentage and the category breakdown together.
3. Treat anything above about 30% high-risk exposure as a stop-and-review signal rather than an automatic send.
4. For large or unfamiliar payments, screen your own receiving address periodically too, since exposure can accumulate from earlier transfers.
5. Keep a simple record of the check result and date, which is what a future exchange review will ask for.

Does the network or asset change how screening works?

The screening logic is the same across assets, but the practical exposure differs by how the asset moves. Stablecoins like USDT exist on several networks, and the same dollar value can travel as a TRC-20 transfer on TRON or as a token on another chain, each leaving its own trace. Choosing the network deliberately reduces friction on both sides; a short guide on how to send USDC across different networks shows why the route, not just the amount, shapes the on-chain footprint a screening tool will later read. The asset name is less important than the trail it leaves.

Where do self-custody wallets fit in?

Self-custody wallets fit in by putting the screening step next to the receive step, which is the only place a check changes the outcome. A non-custodial client holds your keys on your device rather than on a company’s server, so accepting or rejecting a payment is your decision alone, and a built-in check means you do not have to leave the app to a separate website. One example of this pattern is the Crypto Office app, a Telegram-based non-custodial crypto wallet, which pairs the receive screen with an address check so the screening happens before funds are accepted rather than after. The broader point holds regardless of which wallet you use: the closer the check sits to the moment of acceptance, the more useful it is.

Bottom line

A crypto AML check is a fast, public-ledger screening that tells you whether incoming funds carry sanctioned, scam, or stolen-asset exposure, and the only moment it can protect you is before you accept the payment. Read the category breakdown rather than the headline number, treat high-risk exposure above roughly 30% as a stop signal, and keep a record of what you checked. The concrete next step is to ask for a sender’s address up front on your next unfamiliar payment and screen it before you confirm.

FAQ

How long does an AML check on a crypto address take?

For a single address it is usually a matter of seconds, because the data is already on the public ledger and the tool only has to trace and score it. The slow part is human, not technical: deciding what to do when a score comes back high.

What risk score should make me reject a payment?

There is no universal cutoff, but exposure above roughly 30% to high-risk categories such as sanctions, scams, or darknet sources is where many compliance teams stop and investigate. A low single-digit score dominated by ordinary exchange activity is generally considered normal.

Can I be penalized for funds I received unknowingly?

You will not face a chargeback, but a regulated exchange can freeze a deposit that traces to a flagged source while it reviews the origin, regardless of your intent. That is why screening before acceptance, and keeping a record of the result, protects you more than any explanation given after the fact.