What is wallet screening?
Wallet screening is the process of checking a blockchain wallet address against risk data to assess its exposure to illicit activity. It produces a risk score for that address, based on its connections to sanctioned entities, darknet markets, mixers, scams, and stolen funds. It answers one specific question: how risky is this address?
Screening happens before or during a transaction. A customer submits a deposit or requests a withdrawal to a new address, and the wallet is checked against risk databases before the platform decides whether to proceed.
How does wallet screening differ from KYT?
These two checks are complementary, not interchangeable. Chainalysis frames the distinction cleanly: screening answers "how risky is this address?" and KYT answers "what is this money doing over time?"
Most compliance programs run both. Screening catches known bad actors at the point they touch the platform. KYT catches suspicious behavior that only becomes visible by watching patterns over time, such as structuring or layering across many transactions.
What does wallet screening actually check for?
A screening check looks at both direct and indirect exposure. Direct exposure means the address itself appears on a sanctions or risk list. Indirect exposure means the address has received or sent funds through several intermediary hops that eventually connect to a risky source.
Specific risk categories typically checked include:
- Sanctions exposure, screened against OFAC, EU, UN, and other national lists
- Darknet market activity
- Ransomware wallets and known scam addresses
- Mixing and tumbling services
- Stolen funds linked to hacks and exploits
- Terrorism financing indicators
Providers like Chainalysis, Elliptic, and TRM Labs maintain and continuously update these risk databases across multiple blockchains.
Does wallet screening satisfy Travel Rule wallet ownership requirements?
No. This is a common point of confusion. Screening tells you whether an address carries risk exposure. It does not establish whether your customer actually owns or controls that address.
The EU's Transfer of Funds Regulation, Regulation (EU) 2023/1113, requires CASPs to confirm wallet ownership for self-hosted wallet transfers above EUR 1,000. That is a separate question from risk exposure. Screening alone does not answer it. Accepted verification methods are set out in the EBA's Travel Rule Guidelines (EBA/GL/2024/11). These name cryptographic message signing and predefined micro-deposits as suitable technical means. A self-disclosure from the customer does not qualify on its own. A complete compliance stack needs both: screening for risk, and a separate ownership verification step where Travel Rule obligations require it.
Why does wallet screening matter for stablecoin payment platforms?
OFAC enforces sanctions on a strict liability basis. Liability can attach whether or not a platform knew, or had any reason to know, that a transaction involved blocked property. That standard makes proactive wallet screening a practical necessity for any platform accepting deposits or sending payouts on-chain, not just a best practice.
For platforms routing stablecoins across cross-chain bridges or multiple networks, screening every new address before funds move is what prevents a clean-looking transaction from connecting to a sanctioned source a few hops away. This sits alongside KYT as a core control inside a complete compliance risk management program for any money transmitter or VASP handling on-chain transfers.
