All patterns
Layering
Typical severity: MEDIUM

Fan-In / Fan-Out

The wallet aggregates meaningful value from many distinct counterparties, distributes it to many distinct counterparties, or both, within the tracked window.

Why it matters

Broad aggregation or distribution is characteristic of collection points, payout infrastructure, or deliberate layering meant to fragment a trail.

How we detect it

Count distinct counterparties on each side of the transfer graph above a materiality floor and flag wallets with unusually broad fan-in or fan-out.

Example evidence

A wallet with many distinct meaningful inbound and/or outbound counterparties in the analyzed window.

See all crime patternsRun a wallet scan