All patterns
Direct screening
Typical severity: HIGH

Direct High-Risk Label Match

The wallet itself is directly labeled in curated risk data — mixer, darknet, scam, ransomware, or a similar high-risk category — without going through a sanctions list.

Why it matters

A direct label on the wallet under review, rather than a counterparty, carries most of the weight of a sanctions match even without official designation.

How we detect it

Match the scanned address against curated entity-label reference data by category.

Example evidence

Wallet address matches a curated label record with an associated risk category.

See all crime patternsRun a wallet scan