Is the address itself flagged?
Check direct designations, issuer blacklists and threat attribution.
Check onchain transfers against policy before broadcast
Screen addresses and payments for sanctions, issuer blacklists, illicit exposure and suspicious behavior. Set the thresholds your firm requires and inspect the evidence behind each result.
Screening decisions
Each decision needs a policy basis and an explanation
A risk label alone does not tell a reviewer whether the address itself is flagged, its funds touched a risky counterparty or its activity looks suspicious. Range separates those findings, evaluates them under your workspace policy and preserves the supporting evidence.
How an address is assessed
Three questions behind the result
Each enabled signal carries a severity. The most severe triggered signal determines the overall address result.
Who has it transacted with?
Measure sent and received volume involving flagged counterparties.
Does its activity look suspicious?
Detect patterns such as structuring, chain peeling and rapid pass-through.
Address results use None, Low, Medium, High and Severe. Separate payment checks use their documented payment-risk categories.
Signals and sources
What Range screens for and where it comes from
Range combines official designations, onchain issuer events, curated threat intelligence and its own transaction indexing.
Government sanctions
OFAC, UK, EU, French Treasury and Japan Ministry of Finance designations.
Token issuer blacklists
Current blacklist status and events for tokens including USDC and USDT.
Exploits and stolen funds
Confirmed hacks, exploit-linked addresses and ransomware attribution.
Scams and manipulation
Phishing, address poisoning, Ponzi, rug-pull and manipulation signals.
Illicit financing and fraud advisories
Designations from Israel's National Bureau for Counter Terror Financing and FBI IC3 fraud intelligence.
Suspicious transaction patterns
Structuring, chain peeling, dusting, velocity and token activity.
Issuer blacklisting and government designation are separate findings. Verified exchanges, protocols and core programs provide known-good context to reduce false positives.
Your policy
Set your own signals and thresholds
Risk policy belongs to your workspace. Two firms can assess the same address differently because their enabled signals and thresholds differ.
Attribution severity
Enable or disable categories and set the severity of each.
Exposure thresholds
Set Low, Medium, High and Severe percentages plus a USD floor.
Behavior controls
Turn detection off, detect only or let it affect severity.
Range offers 30 attribution signals and seven behavior models. Exposure thresholds can keep immaterial amounts from triggering the same response as material flows.
Before approval
Check the recipient and the transaction being proposed
Address screening establishes counterparty risk. Payment and simulation checks add context about the proposed transfer.
Recipient risk
Check lookalike addresses, new wallets and prior sender interactions.
Unsigned Solana transaction scan
Simulate effects, screen affected counterparties and inspect authority changes.
A controlled decision
Use the result in your connected allow, block or review workflow.
The combined unsigned-transaction scan supports Solana. Screening coverage and simulation support vary by check and network.
Review evidence
Trace each result to its finding
Open the assessment's evidence to inspect flagged counterparties, designation details, transaction context and detected patterns. Each screened address keeps its own screen history.
The triggered signal
See the finding, its severity and the evidence behind it.
The exposed amount
Review flagged sent and received shares, dollar values and counterparties.
The observed behavior
Inspect detected patterns and their reported confidence.
Previous screens
Review earlier screening results for the same address.
Your screening stack
Keep your provider and add Range context
Bring your existing screening provider through your API key. Range adds transaction and counterparty context around the signals.
Onchain risk and screening
Bring your own API key.
Chainalysis
TRM Labs
Elliptic
Merkle Science
Crystal
Existing provider coverage
Use your contracted risk provider within the connected process.
Range's own intelligence
Add indexed flows, attribution and behavioral findings.
Evidence for the reviewer
Retrieve the justification behind an address assessment.
How it works
Screen an onchain transfer and record the decision
- 01
Connect the transaction path
Bring the sender, recipient and provider context into the check.
- 02
Configure your policy
Choose signals, severities, exposure thresholds and behavior modes.
- 03
Check before onchain broadcast
Evaluate onchain risk and apply your connected controls. Fiat activity raises alerts.
- 04
Review the evidence
Inspect triggered findings and retain the decision in your workflow.
Range products
Controls around the same transfer
Protect
Counterparty Risk & Travel Rule
One record per counterparty across wallets, exchanges and banks, with per-address exposure analysis and Travel Rule evidence.
Protect
Threat and Fraud Prevention
Detection for exploits, scams, address poisoning and protocol incidents.
Unify
Workflows
Risk, reconciliation and regulatory reporting workflows, reviewed on the same ledger.
Protect
Digital Assets Compliance Testing
Required controls tested against your real transactions, with an examiner-ready report in 1 to 4 weeks.
A dedicated Range environment for sensitive screening data
Isolate your workspace, control encryption keys and use private connections. Range engineers manage the environment with your team.
Talk to an expert- A separate cloud account, network and database
- Nothing shared with any other customer
- Pinned to the region you choose
- Encrypted with keys held in your own cloud account
- Revoke a key and the data is unreadable, to us too
- Staff access only with your approval, always logged
- Private links from your network, never the public internet
- Connected to banks and custodians over private links
- Logs streamed to your own security tools
- Forward-deployed engineers on your team
- We deploy, monitor and upgrade it
- The same platform as our shared cloud
- An audit trail for every decision
- Evidence ready for examiners
- Fits your existing security reviews
Screening questions
What compliance teams ask
Your team. Each attribution signal can be switched on or off with its own severity, and each exposure signal carries Low, Medium, High and Severe thresholds plus a minimum USD floor.
Range evaluates attribution, exposure and behavior under your workspace policy. The most severe enabled signal that fires determines the overall result.
Yes. Assessment evidence includes the relevant counterparties, designations, transactions and detected patterns. You can retrieve it with the assessment or open it for review afterward.
No. Address screening, payment checks and transaction simulation have different coverage. The combined unsigned-transaction scan supports Solana. Check that the required screening completed before treating a result as clear.
No. You can bring your existing provider through your API key. Range adds its own intelligence and the transaction, counterparty and treasury context around the provider's signals.
Range can block an onchain transfer before broadcast when a control fails. Fiat activity raises alerts.
More questions on transaction screening, see the full FAQ.
Customer proof
How Cloak screens transfers before its privacy layer applies
Cloak integrated Range's Risk API before its program went through audit, keeping the screening control inside the reviewed transaction path.
Read the case study
Keep screening data and policy isolated
Customer data is isolated and encrypted. Range does not hold your assets or private keys.
Workspace isolation
Screening activity, policies and sensitive workspace data are separated between customers.
Data protection
Range maintains GDPR-aligned processing, access, retention and privacy controls.
SOC 2 Type II audit
Range is undergoing an independent external SOC 2 Type II audit.
Layered security
Encryption, role-based access, least privilege and monitoring protect the platform.
Review a screening result against your own policy
Bring a transfer and your screening requirements. Inspect the findings, thresholds and evidence with our team.