Data sources
A2 Route — Data sources
Effective: 29 September 2026.
Sources used by checks and reports
| Source | What it contributes | Updates |
|---|---|---|
| MistTrack (SlowMist) | Risk scores, risk labels (sanctions, stolen funds, mixer, scam, darknet, high-risk exchange), exposure shares to flagged sources | As provided by the source |
| GoPlus Security | Address security labels (phishing, malicious contracts, blacklists) | As provided by the source |
| OFAC SDN list (US Treasury) | Digital-currency addresses of sanctioned persons | Public list, refresh scheduled every 6 hours when enabled; actual last-success date shown as "sanctions lists as of" |
| EU consolidated sanctions list | Crypto addresses named in EU listings | Public list, as published by the source |
| UK sanctions list (FCDO) | Crypto addresses named in UK listings | Public list, as published by the source |
| TronGrid | Reads TRON: resolves a transaction's sender, checks recent address activity, and fetches the free sender profile on a fresh check or PDF issuance when not already captured | Live chain data |
| Alchemy | Reads Ethereum for sender resolution and address freshness where configured | Live chain data |
| Blockscout (Ethereum screening) | Looks up public sender-address transaction and token-transfer history for the free profile | Live chain data |
| publicnode public RPC (Ethereum screening) | Reads public sender balances and outgoing transaction nonce for the free profile | Live chain data |
On a fresh check, and at PDF issuance if no profile was captured at check time, the free profile sends the public sender address and network (and token contract where needed) to the chain providers above. No Telegram identity, e-mail or account data is sent. The profile and informational transit signals do not change the KYT score or verdict. Third-party data is used under each provider's terms; providers do not endorse our verdicts.
How a verdict is formed
- A sanctions-list match gives BLOCK on its own.
- Otherwise our rule set applies fixed thresholds to provider scores, labels and exposure shares to produce ALLOW, REVIEW or BLOCK, with the main reason shown.
- For a transaction we screen the sender of the money — the funds you would receive — not a wallet name. For an address you choose incoming (who pays you) or outgoing (whom you pay).
- If a provider was unavailable the check is partial: verdict not lower than REVIEW (BLOCK stays BLOCK), marked "partial check" in the response and PDF, one free re-check within 24 hours. If required sources fail, no verdict is issued and the credit is returned.
data_as_of and cache
Each result carries data_as_of (when the data was retrieved) and a cache flag.
- Free and beta accounts: an address result may be reused for up to 24 hours if the address shows no new on-chain activity. A fresh check can be forced for one credit.
- Paid accounts: address checks always query providers live.
- Transactions: a confirmed transaction does not change, so its result may be reused indefinitely; a fresh check can be forced.
- Cached results are re-validated against current sanctions lists.
Limitations
- Screening chains: TRON and Ethereum addresses. Transactions: supported USDT/USDC contracts on TRON and Ethereum; available combinations are shown at submission. Base is used for supported service payments, not screening. Other chains and tokens are not supported yet.
- Not every counterparty is labelled: no label is not proof of clean funds, a label is not proof of wrongdoing.
- Exposure figures reflect the provider's tracing depth, not the funds' full history.
- Lists change; a result is correct as of
data_as_of.
What /verify shows
For 24 months from issue, a2route.com/verify confirms whether a SHA-256 fingerprint or report id matches a report we issued and shows only the date, verdict, network and a truncated subject hint — never the full address, transaction id or requester.
Risk categories
These definitions are shared with issued A2 Route reports.
Red — sanctions and prohibited exposure
| Sanctions | A person, service, or wallet connected to an official sanctions designation. |
| Darknet | A service identified as operating on darknet markets or infrastructure. |
| Mixer / money laundering | A service associated with obfuscating transaction provenance or laundering flows. |
| Stolen funds | Funds linked to theft, a hack, or another reported asset compromise. |
| Cybercrime | A service or flow connected to scam, phishing, ransomware, or blackmail activity. |
| Terrorism financing | A label indicating a reported financing connection to violent extremist activity. |
Amber — elevated-risk services
| High-risk exchange | An exchange assessed as no-KYC, unlicensed, or operating from a weak-control jurisdiction. |
| High-risk P2P | A peer-to-peer venue with elevated counterparty or source-of-funds uncertainty. |
| Gambling | A betting or gaming service that can increase source-of-funds review needs. |
| Unknown service | A tagged service whose activity cannot be classified reliably from available evidence. |
Green — ordinary service categories
| Exchange | A conventional digital-asset exchange without a flagged exposure in this report. |
| Payment processor | A service that processes payments for users or merchants. |
| Merchant service | A business-facing service that accepts or settles customer payments. |
| Wallet | A wallet or custody service used to hold or transfer digital assets. |
| DeFi | A decentralised-finance protocol or application. |
| Other | A service category that is neither flagged nor more specifically classified above. |
How shares are computed
Shares are measured against the received amount in transaction mode and against the analysed balance or turnover in address mode. A trace reaches up to three hops. Labels come from MistTrack, GoPlus, and OFAC, EU, UK OFSI, and Tether lists. The report does not verify beneficial ownership, off-chain identity, or purpose of payment.
Report disclaimer
- This report is informational risk intelligence, not a legal opinion.
- It is valid only as of the issue date and the evidence available then.
- Provider labels, public-chain data, and list coverage can change after issuance.
- A category or score does not prove unlawful activity or guarantee acceptance.
- The receiving institution or counterparty makes its own compliance decision.