Address Screening

Overview

Address Screening is the risk-based review of a blockchain address and its transaction exposure against sanctions, illicit-finance, fraud, and internal policy indicators. Its operational purpose is to identify whether a proposed or completed crypto transaction requires approval, rejection, escalation, monitoring, or reporting. It should be considered alongside Address Reputation. The relevant distinction is address validation, which checks whether an address is structurally usable on a network but does not assess ownership, sanctions status, or transaction history.

A typical workflow is as follows: The system receives an address, asset, network, transaction role, customer context, and screening timestamp. It evaluates direct and indirect exposure, list matches, attribution confidence, typologies, thresholds, and policy rules before producing a reasoned disposition.

Core controls include current data sources, documented risk thresholds, chain-specific logic, false-positive review, rescreening, analyst escalation, vendor testing, and evidence retention.

In payment and crypto operations, Screening may occur during onboarding, deposit monitoring, invoice payment, withdrawal, refund, payout, and periodic customer review. A risk score should not automatically replace legal analysis or customer due diligence.

Evidence should include the exact address and chain, data provider, dataset version, risk indicators, exposure path, confidence level, rule fired, analyst notes, decision, and any downstream restriction or report. Poorly tuned screening can miss meaningful exposure or block legitimate activity, so accuracy, explainability, and timely review matter as much as coverage.

It is used to identify whether a proposed or completed crypto transaction requires approval, rejection, escalation, monitoring, or reporting. It differs from address validation, which checks whether an address is structurally usable on a network but does not assess ownership, sanctions status, or transaction history.