Beacon
Allium Identity

Wallet risk & attribution

Illicit, high-risk and OFAC-sanctioned wallet activity across stablecoins and chains. Labels come from Allium's attribution of 490M+ on-chain addresses — from OFAC lists, registries and clustering heuristics — layered on top of raw data, never replacing it.

Methodology ↓
Labeled addresses
490.40M
Allium Identity graph
Illicit addresses
2.47M
High-risk addresses
16.65M
OFAC-sanctioned
71.5K
Flagged stablecoin flow (90d)
$16.27B
Tron + Ethereum

Illicit & high-risk exposure by stablecoini

flagged-wallet volume · 90d

By risk tier

Sanctioned (OFAC)$36.06M
Illicit$0
High-risk$16.23B

Stablecoin transfer volume touching an attributed illicit, high-risk or sanctioned wallet over the trailing 90 days on Tron and Ethereum.

Wallet geography & jurisdiction riski

inferred country · 20,410,466 attributable wallets
Loading globe…
Wallet population Flagged wallets Sanctioned jurisdiction
Stablecoin wallets by country
1United States3.80M104
2Turkey2.45M19
3Iran⚑2.28M2
4South Korea2.21M4
5India1.42M9
6Indonesia1.21M7
7Mexico1.03M15
8Taiwan995.8K13
9Australia965.1K70
10Ukraine703.4K11
11Austria678.4K10
12Canada512.3K10
13Netherlands501.4K5
14Japan477.3K4
15Thailand290.5K28
16Singapore267.6K15
17South Africa198.6K—
18China133.2K1
19Brazil115.8K1
20Hong Kong63.5K3
21Philippines49.2K—
22Poland36.8K—
23Norway9.1K—
24Israel7.1K—
25Argentina238—
26Romania132—
27Colombia68—
28Chile23—

Each point is a country's stablecoin-active wallet population, inferred by Allium's geo attribution (exchange deposit/withdrawal patterns + activity-timezone classification). Red marks OFAC comprehensively-sanctioned jurisdictions — e.g. Iran with 2.28M attributed wallets.

Sourceallium_identity.geo.addresses_geography

Flagged activity, groupedi

how flagged activity distributes
By token
flagged stablecoin wallets
USDT81%
USDC18%
DAI1%
By chain
flagged addresses
Bitcoin45%
Bsc24%
Ethereum16%
Polygon9%
Tron5%
By region
geo-attributed flagged wallets
APAC47%
AMERICAS39%
EMEA14%
By risk category
flagged addresses
Gambling82%
Scams Crime And Hacking14%
Mixer3%
Sanctions0%
Token Blacklist0%

Flagged addresses by chain — detail

ChainIllicitHigh-riskSanctionedLabeled
Bitcoin2.38M6.12M50344.24M
Bsc94.58M872.79M
Ethereum2.4K3.09M2.4K113.82M
Polygon81.70M719.08M
Tron68.5K942.2K68.5K95.53M
Solana0106.0K075.20M
Base855.5K733.64M
Stellar17.2K17.2K018.1K
Avalanche830.4K75.71M
Arbitrum96.7K814.24M
Optimism83.5K77.73M
Linea81.0K71.93M
Hyperevm81157122.0K
Plasma8577795.3K
Unichain8872.29M
Zora887629.0K
Scroll887424.5K
Monad887178.9K

Named high-risk & illicit entities by chain

darknet markets · mixers · sanctioned · gambling
#EntityCategoryChainRiskAddresses
1Stake.comGamblingBscHigh-risk4.02M
2Stake.comGamblingEthereumHigh-risk1.33M
3Stake.comGamblingPolygonHigh-risk1.13M
4Stake.comGamblingTronHigh-risk873.5K
5999 DiceGamblingBitcoinHigh-risk813.8K
6Coin GamingGamblingBitcoinHigh-risk659.8K
7TigergamingGamblingEthereumHigh-risk522.5K
8Agora MarketScams Crime And HackingBitcoinIllicit498.0K
9Ultimate ChampionsGamblingPolygonHigh-risk496.9K
10RoobetGamblingEthereumHigh-risk467.0K
11Evolution MarketScams Crime And HackingBitcoinIllicit420.6K
12Silk Road MarketplaceScams Crime And HackingBitcoinIllicit372.8K
13Silk Road2 MarketScams Crime And HackingBitcoinIllicit350.0K
14Satoshi MinesGamblingBitcoinHigh-risk269.4K
15BetmodeGamblingEthereumHigh-risk269.0K
16Helix MixerMixerBitcoinHigh-risk246.1K
17Bitcoin FogMixerBitcoinHigh-risk245.0K
18Alpha Bay MarketScams Crime And HackingBitcoinIllicit196.9K
19Nucleus MarketScams Crime And HackingBitcoinIllicit164.9K
20RainbetGamblingEthereumHigh-risk162.4K
21RollbitGamblingEthereumHigh-risk128.1K
22Fortune JackGamblingBitcoinHigh-risk120.6K
23Abraxas MarketScams Crime And HackingBitcoinIllicit119.1K
24BetfuryGamblingBscHigh-risk111.3K
25RollbitGamblingSolanaHigh-risk106.0K
261xbetGamblingBscHigh-risk92.8K
27HuionepaySanctionsTronIllicit61.3K
28Pandora Open MarketScams Crime And HackingBitcoinIllicit55.8K
29Sheep MarketplaceScams Crime And HackingBitcoinIllicit53.6K
30Black Bank MarketScams Crime And HackingBitcoinIllicit50.9K
31GamdomGamblingEthereumHigh-risk42.9K
32Middle Earth MarketplaceScams Crime And HackingBitcoinIllicit34.1K
33Seals With ClubsGamblingBitcoinHigh-risk31.0K
34Crime NetworkScams Crime And HackingBitcoinIllicit23.7K
35DuelbitsGamblingEthereumHigh-risk22.5K
36Blue Sky MarketplaceScams Crime And HackingBitcoinIllicit19.0K
37ScamScams Crime And HackingStellarIllicit17.2K
38BlacklistedToken BlacklistTronIllicit6.9K
39Doctor DmarketScams Crime And HackingBitcoinIllicit5.8K
40German Plaza MarketScams Crime And HackingBitcoinIllicit4.6K

Methodology

Labels — address_labels marks each address is_illicit (darknet, scams, ransomware, sanctioned) or is_high_risk (mixers, gambling, unregulated venues). 490M+ addresses across all chains.
Sanctions — sanctions.addresses lists OFAC and other regulator designations, joined by chain and address.
Exposure — per-chain stablecoins.transfers over 90 days, summed for transfers where either counterparty is a flagged wallet. Covers Tron and Ethereum, where nearly all illicit stablecoin flow sits.
Geography — addresses_geography infers a wallet's country from exchange deposit/withdrawal patterns and activity timezone. Excludes labeled entities, so it reflects individual wallets.
Provenance — labels are derived from authoritative sources (OFAC, registries), deterministic heuristics (wallet clustering) and statistical inference — each carries an evidence type, as-of date and confidence, and joins to immutable raw records rather than overwriting them.
Caveat — attribution is probabilistic — for compliance triage and research, not a definitive determination.