On-Chain AML Address Screening

From address to cluster to exposure to a routed allow / block / review decision

On-Chain AML Address Screening From address to cluster to exposure to a routed allow / block / review decision 01 / Ingest 02 / Cluster 03 / Exposure 04 / Score 05 / Decision Address / Tx · deposit · 01 / Ingest · input Address / Tx deposit input Label Set · sanctions / mixers · 02 / Cluster · reference Label Set sanctions / mixers reference Clustering · wallet graph · 02 / Cluster · heuristic Clustering wallet graph heuristic Exposure · hop trace · 03 / Exposure · graph walk Exposure hop trace graph walk Risk Score · weighted · 04 / Score · policy Risk Score weighted policy Allow · credit · 05 / Decision · < 0.30 Allow credit < 0.30 Review · analyst queue · 05 / Decision · 0.30-0.75 Review analyst queue 0.30-0.75 Block · freeze · 05 / Decision · >= 0.75 Block freeze >= 0.75 resolve entity cluster entity labels traced hops low risk indirect direct hit Legend primary data policy / PII async batch data store

Main Path

  • • An address resolves to the wallet cluster behind it
  • • Exposure traces the cluster against a labeled entity set
  • • The score routes into one of three decisions

Risk Signals

  • • Direct one-hop sanctions inflow is a hard block
  • • Exposure decays with hop distance from a labeled entity
  • • Every decision keeps its triggered-reason provenance

Decision Routes

  • • Allow credits funds but still logs the outcome
  • • Review holds ambiguous cases for a human analyst
  • • Block freezes and records the exposure path

Data-flow diagram • Built with Archify • Create yours ↗ • Hover to trace • R route • Click to focus • +/− zoom • M radar • T theme • E export