Review public BTC / Ethereum incident evidence, source coverage and token blacklist signals without connecting a wallet.
Live mode downloads the full OFAC list without sending it the address being checked. The public address is shared with fixed GoPlus, Ethereum RPC and Blockscout providers, and Chainabuse only when configured. Provider operators may log requests and IP addresses. Do not enter keys, seed phrases or other secrets.
Demo mode is offline and entirely synthetic. Its labels, transactions and results are fictional examples, not allegations or current sanctions decisions.
Optional tracing reviews at most 20 recent native ETH transfers and 4 first-hop counterparties. It does not cover token transfers, multiple hops, bridge paths or exchange clusters. Bitcoin supports direct checks only; first-hop tracing is unsupported.
A USDC or USDT blacklist result applies only to that contract at the displayed block. It is not a wallet-wide freeze, asset balance check or guarantee that funds can be moved.
Official lists and public incident records are not exhaustive. Missing, delayed or unavailable sources remain visible. Victim roles are informational and must not be treated as attacker evidence. A no-hit result is not a safety certificate.
Curated historical incident coverage is limited to 51 Ethereum indicators from one FBI Bybit advisory dated 2025-02-26, verified 2026-10-31; not a live or comprehensive incident feed or current sanctions decision.
Heuristic attention priority, not a crime probability. No known match does not mean safe.
95 official current sanctions / verified attacker; 90 confirmed token blacklist; 75 malicious provider label or official historical incident indicator; 55 public abuse allegation; 35 service label / bounded first-hop association. Priority is the maximum signal, not a probability. Victim-only evidence is informational; no hit has no score.
Read-only rules and public evidence; no AI inference, wallet connection, signing, private keys, recovery service or legal certification.