Last updated: October 16, 2026
A crypto AML risk score is a rating, usually from 0 to 100, that blockchain analytics tools assign to an address or transaction based on how closely its funds are connected to things like sanctioned addresses, scams, hacks, darknet markets or mixers — and exchanges use it to decide whether to accept, hold or refund your deposit. A high score can come from coins you received innocently, which is why deposits sometimes get frozen. Here's how scores work, what to do if you're flagged, and how to choose exchanges with fair refund policies on the notkyc swap table.
- 0–100 typical risk scale
- Direct vs indirect exposure
- 91% of reports on notkyc: no KYC asked
- Refund policy is what matters most
How AML risk scores are calculated
Analytics firms label millions of addresses — exchanges, merchants, scams, hacks, sanctioned entities — and then follow the flow of funds between them. Your address gets a score based on:
- Direct exposure: funds received straight from a risky address. Weighs the most.
- Indirect exposure: funds that passed through one or more intermediate addresses ("hops"). The further away, the less it counts.
- Share of funds: 0.5% of a deposit from a risky source scores lower than 50%.
- Category: sanctions and stolen funds weigh far more than, say, gambling.
Risk categories at a glance
| Category | Typical risk | Common exchange reaction |
|---|---|---|
| Regulated exchanges, merchants | Low | Accepted |
| Gambling, P2P platforms | Medium | Usually accepted, sometimes reviewed |
| Mixers and coinjoin | High | Often held or refunded |
| Scams, hacks, darknet markets | High | Held; may request information |
| Sanctioned addresses | Severe | Frozen and reported |
Each analytics vendor uses its own labels and thresholds, so the same address can score differently in different tools. Read our AML glossary entry and what a crypto mixer is.
Why innocent users get flagged
- You received payment from someone with a risky history — you can't see their past before accepting it.
- Your coins passed through a large service that is itself labeled medium-risk.
- Dust or "poisoned" transfers from flagged addresses landed in your wallet — see address poisoning.
- Stablecoin freezes on related addresses raise scores — see can Tether freeze USDT.
What to do if your deposit is flagged (step by step)
- Don't panic or resend — a second deposit won't unlock the first.
- Contact support with your order ID and transaction hash.
- Ask for a refund to your refund address if you don't want to go through checks. Good no-KYC exchanges refund without asking for ID.
- Explain the origin truthfully if asked, with records — see exchange asking for source of funds.
- Escalate using our guides: KYC mid-swap and if an exchange freezes your funds.
How to choose an exchange with fair AML handling
Almost every exchange screens deposits; what differs is what happens next. On notkyc, every listing carries attributes such as "Refunds without KYC on AML flag" or "KYC required for AML refund" — compare them on the attributes page. Our no-KYC track record shows real user reports, only accepted after a real deposit: of 56 reports, 91% had no KYC requested. Also pick exchanges with a clean history for your pair, e.g. on USDT → BTC.
Frequently asked questions
What is an AML risk score in crypto?
A rating from blockchain analytics tools, often 0–100, that estimates how closely an address or transaction is connected to illicit or high-risk activity. Exchanges use it to screen deposits.
Can I check my wallet's AML score?
Several analytics services offer address checks, often with a free tier. Scores differ between vendors, so treat any single result as an estimate.
Will a high score get my funds frozen?
It can lead to a hold, a refund or a request for information, depending on the exchange and the category. Sanctions-related funds are usually frozen.
Do no-KYC exchanges run AML checks?
Many do. The difference is their policy afterwards: the best ones refund flagged deposits without demanding ID. Check the attributes before you swap.
Does Monero have AML scores?
Monero hides sender, receiver and amount, so analytics tools can't score Monero transaction histories the way they score Bitcoin or USDT. Exchanges still screen what you send them on transparent chains.
Swap with exchanges that publish their AML policy: USDT → BTC, USDT → XMR or the most trusted exchanges. No account, no ID, no logs.