Check crypto addresses before the transaction.
Aegis combines sanctions, hacks, exchange and DeFi data from many sources into one verdict, so you never send funds to a sanctioned, hacked or mixer-tainted address.
- Plug in the API, or use the app and the site
- No match in OFAC, EU, UK or UN sanctions lists on the check date
- No exposure to mixer, hack or scam-tagged addresses within 2 hops in our data
- Sources, hops and dates listed in the report
- sources
- 120+
- networks
- 13
- labels
- 39M+
Address checks inside a wallet, and a map of fund flows.
The wallet calls the Aegis API before sending and warns when the address is risky.
One sanctioned hot wallet and its counterparties, coloured by risk level.
Three tools in one product.
For VASPs, OTC desks, custodians and compliance teams who need to act on labels, not just see them.
Fast Check
Paste an address — get verdict, sanctions match, risk categories, source-by-source breakdown in under 3 seconds. Pay per check in credits, from $0.10.
Try Fast Check
Graph Lab
Explore the graph of connections: drag addresses, follow incoming and outgoing transfers, group clusters and save the canvas as an experiment you can share.
Explore the graph
Experiments
Save clusters, add labels and your own risk overrides, run pattern detectors (smurfing, peeling chain, layering) and export the full evidence chain.
Build an experimentWhere the money came from and where it went
Trace funds up to four hops in both directions. Exchanges, services, tagged counterparties and the rest of the addresses sit on one interactive map.
Demo on made-up data. In a real analysis, first-hop amounts are exact and farther hops are estimated proportionally; this is not coin tracing.
Analyse an addressOne bad address can freeze your business.
One transfer from a sanctioned, stolen-funds or mixer address, and an exchange freezes the deposit or a bank closes the account. OFAC, EU, UK and UN lists only partly overlap, so a single source is not enough.
Aegis checks an address against all sources at once and shows who sent money to it and from where. It is used by exchanges and VASPs, OTC desks and payment providers, treasuries and funds, compliance teams and auditors.
Verdict in three steps.
Paste an address on any supported chain or upload a CSV of wallets. Aegis queries all sources in parallel: sanctions lists, exchange clusters, DeFi protocols, public hack and incident reports.
You get a risk level with the evidence: which sources matched, how many hops away, and when. Then apply your own policy.
Cross-chain hops, unpacked
A bridge is not a dead end: we follow a deposit on one chain to its recipient on the other, so the trail keeps going.
Stargate (LayerZero)
Wormhole
Across
deBridge DLN
Celer cBridge
Relay
NEAR Intents
Rubic
THORChain
Allbridge Core
Bridgers
CoW Protocol
We read each protocol's public API or on-chain events. Synapse and Railgun are recognised, but their transfers are not unwrapped yet.
How we unpack mixer pools
In fixed-denomination mixer pools every deposit and withdrawal looks the same. Four facts stay observable: who deposited, who received, how much and when. We index them ourselves and match them up.
Covered: ETH pools of 0.1 / 1 / 10 / 100 ETH; DAI, cDAI, USDC, USDT and WBTC pools; and the Polygon, Optimism, BSC, Avalanche, Arbitrum and Gnosis deployments.
The result is a lead for an analyst, never a verdict: overlapping windows produce false matches, and deposits made through a router hide the depositor.
What we see, across 13 networks
Updated once a day; numbers are rounded.
Aegis and alternatives
Published by Aegis. Data checked against public sources on 22 October 2026.
| Self-serve + API | Enterprisecontract; prices not published on the site | Self-servepublic price per check or request | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Aegis | Chainalysis | TRM Labs | Elliptic | Crystal | MistTrack | BlockSec | AMLBot | BitOK | SHARD | CoinKYT | |
| Networks | 13 | 29 | 184+screening; 65+ tracing | 65+ | 330+ | 19 | 12MetaSleuth; Phalcon Explorer 19 | 35+Personal 9, Business 27; AI Tracer 14 | 5 | 7 | 3 |
| Price | from $0.10 | not published | not published | not published | not published | API $0.03–0.20 | not published | $0.10–1.00 per checkcredit bundles; Business on request | 18.9–34.9 RUB in the bot*website: $0.20–0.50 | 15–29 RUB≈ $0.18–0.35 | Lite + API 3.67–8 RUBLite (web) 20–30 RUB |
| Free start | 10 credits | not published | Status not confirmed | 14-day trial | Demo on request | Light freeBasic 7 days | Free trialPhalcon Compliance | 1 check | 5 checks | 3 checks | 3 checks |
| Graph | Graph Lab | Reactor | Graph Visualizer | Investigator | Graph | Graph | MetaSleuth | AI Tracer | GraphGraph from $500/mo | GraphPNG/CSV | PRO moduleSankey in Lite |
| AI | Synthesis + AI Track | BetaData Solutions clients | Co-Case Agent, Mar 2026Ardence, Oct 2026 | Copilot, Apr 2025 | Ask Crystal, Jul 2026 | Agent Skills | Trace AIAI investigation agent | AI Tracer | not published | not published | not published |
| x402 / MCP | x402 | not published | MCP, Jul 2026 | not published | not published | MCP + x402 | not published | not published | not published | not published | not published |
| Named entities | named-entity database | 134K+entities; 1B+ addresses | 3.1B+addresses | 1B+addresses | 118K+entities | 500M+addresses | 600M+addresses | Pro+count not published | 40K+entities | VASP catalog | 1B+addresses |
| RUB / RU / CIS | Russian-language interfacenot in the Russian software registry | not published | not published | not published | Russian-language interface | not published | not published | Russian-language materials | Russian-language interfaceRUB in the bot* | RUB pricingRussian software registry | RUB pricingRussian software registry |
Information collected from public sources and vendor websites as of 22 October 2026.
Pay per check. No contract.
Start free in the web app, then call the same engine from your own code. The V2 API and x402 use the same prices.
Web app
Fast Check, Graph Lab and Experiments in the browser. Sign up and run your first checks at no cost.
Open the appx402 pay-per-call
$0.10 quick screen, $1.00 full address check or transaction check. Paid in USDC on Base per call, no account and no contract. Built for agents and scripts.
See x402V2 API
Same two prices over a standard REST API with a single decision field in the response. OpenAPI spec and docs are public.
API docsFrequently asked questions
Which sanctions lists does Aegis cover?
OFAC SDN (US), the EU consolidated list (CFSP) and the UK sanctions list (OFSI). Separately we record on-chain freeze events by Tether, Circle (USDC) and Paxos — those are issuer freezes, not sanctions-list entries.
How is Aegis different from a single-vendor KYT check?
A single-vendor KYT service only sees its own internal label graph. Aegis aggregates independent feeds — sanctions, exchange clusters, GraphSense, issuer on-chain freeze events, hack-attribution research — and produces a consensus verdict so you’re not blind to a list your vendor missed.
How fast is a check?
Paste an address and get a verdict in ~3 seconds — sanctions matches, risk categories, and a breakdown by source.
How much does a check cost?
The web app starts with 10 free credits. For API and agent use, a quick screen costs $0.10 and a full address or transaction check costs $1.00, paid per call in USDC on Base with no contract. The V2 API uses the same prices.
What do the risk levels mean?
Aegis shows six levels: unknown (no data), none/low (no significant risk found in our data), medium, high, critical, and sanctioned (a direct sanctions-list match). Each level maps to a color on the transaction graph, from gray (no data) to black (sanctioned).
Is my check data kept confidential?
Yes — see our Privacy Policy for details.
What is Aegis KYT?
Aegis KYT is a crypto wallet screening (KYT/AML) service. We check an address against dozens of independent sources — sanctions lists, hack attributions, exchange clusters, DeFi protocols — and return a single risk assessment to help you spot sanctioned, hacked, or mixer-tainted addresses before you transact.
Which blockchains does Aegis support?
13 networks today: Bitcoin, Litecoin, Ethereum, BNB Chain, Polygon, Avalanche, Arbitrum, Optimism, Base, Plasma, Tron, Solana, and TON. The list grows as the platform does.
How many data sources does Aegis use, and how do they become one verdict?
120+ sources today: sanctions lists, issuer on-chain freeze events, exchange clusters, DeFi protocols, hack attributions, and open research data. Every label carries a trust weight and a timestamp; we reconcile every match into one consensus verdict rather than trusting a single source.
Where does Aegis get its labels and data from?
From 100+ sources in total. Below, in the Sources section, we publish the sources with open licenses (MIT, public domain, CC-BY) — government sanctions lists, stablecoin-issuer on-chain freeze events, and independent open-source research datasets. Restricted-license commercial sources feed into risk scoring but aren’t published here.
Does Aegis help with Travel Rule compliance?
Aegis doesn’t transmit originator/beneficiary data itself — that’s handled by dedicated travel-rule messaging providers (Notabene, Sygna, and similar). We cover the other half: screening the counterparty address itself, which is the due diligence Travel Rule compliance relies on.
What SLA do you offer?
We don’t publish a formal uptime SLA yet — a check itself typically returns in about 3 seconds, which is the service’s actual speed, not a contractual promise. For partners, the support channel and response-time SLA are set in the contract; everyone else can reach us at hello@aegis-kyt.com.
How do I get help or report an issue?
Email us at hello@aegis-kyt.com or check the documentation — both are linked in Contacts below.
Check your first address in seconds.
Open the app with free credits, or leave an email and we will send access.