An AML wallet check tells you where a crypto address got its money and how risky those sources are. If you are about to trade with someone you don’t know, it answers one practical question: will the USDT you receive bring someone else’s problems with it? This guide covers how the report works, how to read the risk score, and where the limits of any such check lie.
What is an AML wallet check?
It’s an analysis of an address’s history against a database of labeled sources: exchanges, mixers, scam projects, darknet markets and so on. The service traces which addresses the funds passed through before landing in the wallet you’re checking, then calculates an overall risk score.
AML stands for anti-money laundering. Banks have screened payments for decades. In crypto, exchanges and payment providers do it routinely, and more and more individual users do it too, especially those buying USDT on P2P platforms or accepting crypto from clients.
Because Bitcoin, Ethereum and Tron are public ledgers, anyone can trace an address’s history. The hard part is scale. Working through hundreds of incoming transfers by hand and figuring out who owns each sender is not realistic. An AML service does that for you.
Why check a counterparty’s wallet before the deal?
So you don’t end up holding coins that get blocked on your side. Major exchanges screen incoming deposits, and if a deposit is linked to fraud, stolen funds or sanctioned addresses, it can be held while they investigate. Tether can also freeze USDT on addresses it has blacklisted.
Common situations where a check makes sense:
- buying or selling USDT on P2P with a trader who has no track record;
- an OTC deal for a large amount, where the seller sends an address in a chat;
- a first payment from a new client;
- your own wallet, before you withdraw to an exchange.
People tend to skip that last one. Yet your address may have received a transfer from a risky sender at some point without you noticing. Better to see it in a report than in an email from exchange support.
If the transfer has already landed and you want to know whether that specific payment is clean, check the transaction instead. Our guide on checking a transaction by hash explains how.
How to run a crypto wallet AML check in @AMLmexmBot
It takes a couple of minutes, all inside Telegram. mexm AML is a Telegram bot, @AMLmexmBot, that checks wallet addresses and transaction hashes on Bitcoin, Ethereum and Tron; the first check is free.
- Open @AMLmexmBot in Telegram.
- Pick the network: Bitcoin, Ethereum (ERC-20) or Tron (TRC-20). For USDT on TRC-20, choose Tron.
- Send the wallet address. Copy it in full, with no spaces or extra characters.
- Get the report in the same chat.
Get the network right. Tron addresses start with T, Ethereum addresses with 0x, and Bitcoin has its own formats. If your counterparty sent an address without naming the network, ask before you run the check.
Further checks are sold in packages inside the bot. As of November 2026, prices start from $0.30 per check in a package, and a single check costs more. Plans and details are on the AML check service page.
How to read the wallet risk score
The headline number is the overall risk as a percentage. Below it you’ll see the source categories and what share of funds came from each.
The score reflects the combined weight of “clean” and “dirty” funds that moved through the address. It doesn’t say the owner is a criminal. It says how much of the money on that address is connected, directly or indirectly, to risky sources.
Risk levels and what to do
| Score | Level | What to do |
|---|---|---|
| Below 40% | Low | Usually fine to proceed |
| 40 to 50% | Medium | Look at which sources drive the risk and decide case by case |
| 50% and above | High | Better to decline the deal |
Three groups of sources
The report tracks more than 20 risk sources, sorted into three groups.
Dangerous sources mean high risk: darknet marketplaces and darknet services, illegal services, scams, fraudulent exchangers, illegal gambling, stolen funds, mixers, malware, sanctions, terrorist financing and ransomware.
Suspicious sources carry medium risk. These are low-KYC crypto ATMs, unlicensed exchangers, unlicensed P2P and decentralized exchanges (DEX). Money from them isn’t necessarily dirty, but its origin is harder to trace.
Trusted sources include miner rewards and fees, miners, online marketplaces, custodial online wallets, licensed exchanges (CEX), licensed P2P and payment systems.
A sample report
Take the address TQrY8tryqsYVCYS3MFbtffiPp2ccyn4STm. It’s an illustration, not a real client. The source breakdown looks like this:
- licensed exchange: 51%;
- unlicensed P2P: 31%;
- scam: 12%;
- mixer: 6%.
Half the funds came from a licensed exchange, which is good. A third came from unlicensed P2P, a gray area. The 18% from scams and mixers combined is the worrying part, since both sit in the dangerous group. Here you’d weigh the overall score against the size of the deal. On a large OTC trade, asking the seller a few questions costs nothing.
When should you walk away?
At a score of 50% or higher, don’t proceed. That’s what the scale recommends, and arguing with it for the sake of one trade rarely pays off.
Watch for subtler signals too. Even at medium risk, be careful if a noticeable share came from sanctioned addresses, ransomware or stolen funds. Exchanges watch those categories especially closely.
And if the counterparty won’t share the address in advance, or asks you to send to “another wallet” after you’ve checked the first one, check the new address from scratch. The old report says nothing about it.
Habits that help
- Check every new, unfamiliar wallet before the first interaction.
- Save your reports. If funds do get frozen, you can show the report to the exchange or wallet provider as proof that you checked where the money came from.
- Re-run checks on regular counterparties from time to time.
Limits of any AML check
An AML report is a probability estimate. No service knows the owner of every address on a blockchain, and labeled databases keep growing.
Two things follow from that. A low score sharply cuts the chance of receiving tainted coins, but it can’t promise an exchange will never ask questions, since every platform has its own compliance rules. Reports also go stale. An address that was clean yesterday may have received a transfer from a risky counterparty today, and its score will shift. A six-month-old check tells you little about the present.
One more thing. AML screening says nothing about whether the trade itself is honest. A seller with a clean address can still fail to deliver. Escrow on a P2P platform and common sense protect you there.
The short version
Screening an address before a deal takes a couple of minutes and costs well under a dollar in a package. A frozen deposit costs far more. Check new counterparties, look at the dangerous sources as well as the headline number, and walk away at 50% or above. Your first check with mexm AML is free, so try it on your own wallet and see what the report looks like.