Wallet Risk Score Guide · 2026
A crypto wallet AML risk score is a 0–100 number representing the probability that a wallet's funds have exposure to prohibited activity. It is not a binary clean/dirty label — it is a continuous score based on transaction graph analysis going back several hops.
| Score Range | Risk Level | Typical Cause | Recommended Action |
|---|---|---|---|
| 0–25 | Low | Exchange-sourced, no flagged contacts | Accept payment |
| 26–60 | Medium | Indirect contact with flagged address (>2 hops) | Ask sender for source explanation |
| 61–80 | High | Direct contact with mixer or sanctioned exchange | Request alternative wallet |
| 81–100 | Critical | OFAC-listed address or direct darknet contact | Refuse — legal risk |
AML risk scores diverge because tools use different data sets and different hop-depth analysis. Three main sources of variation:
Data coverage: Chainalysis and cryptoaml.ai update their databases daily. Some tools update weekly — a wallet flagged yesterday may score clean today in a stale database.
Hop depth: Most tools check 2–3 hops back in the transaction chain. Chainalysis goes to 5+ hops. A wallet that received funds from a mixer 4 hops away will score clean in a shallow tool but high-risk in a deep one.
Weighting rules: Some tools apply full penalty for any mixer contact. Others discount exposure if the mixer contact was under 1% of wallet volume.
TRON (TRC-20) USDT is the most common AML-check scenario because it is the most widely used stablecoin in P2P trading and OTC markets. When checking a TRC-20 address, the tool needs TRON-native graph data — not just Ethereum data. Tools with partial TRON coverage (like Elliptic Lite) will underreport risk on TRON addresses because they are analyzing a thinner data set. cryptoaml.ai and Scorechain have full TRON coverage from the TRC-20 graph.