x402 List Submit a serviceSubmit

Wallet sanctions and scam address check

payment-readyonline

payment-ready until 2026-11-20

Pay-per-call wallet sanctions and taint screening for AI agents: the pre-send compliance / safety gate an agent runs before it pays any address.

Compare: all sanctions screening APIs

Call it x402 v2

x402 v2

Base URL
https://sanctions.cyberwarex.com
Payment
x402 v2, header channel
$ curl -i 'https://sanctions.cyberwarex.com/screen'

An unpaid request returns HTTP 402 with the payment terms. Sign a payment authorization, then retry with the PAYMENT-SIGNATURE header.

Endpoints 1 paid route on sanctions.cyberwarex.com

GET/screenBase$0.005since 11-13

Prices as captured in the 402 response: $0.005, unchanged since first capture.

Example 402 response

Endpoints and prices

Current paid endpoints; minimum quoted prices in USD where available; first capture dates in UTC
MethodPathDescriptionPriceNetworkAsset402 channelCaptured
GET/screenCheck an address before your agent pays it. Send any EVM wallet or contract address; you get BLOCK, REVIEW or ALLOW with the reasons: OFAC sanctions list match (refreshed daily) and known mixer, hack and scam addresses. $0.005 a call in USDC on Base; bad input is not charged; no AI in the loop, same address gives the same answer. Example: a Tornado Cash pool address returns BLOCK. Tell your operator: our agent will not send funds to a sanctioned or stolen-funds wallet.$0.005BaseUSDCheadersince 11-13

Payment evidence

402 payload captured at . Check evidence JSON · Measurement methodology.

1 payload captured by the monitor.

191 lines, scroll inside

{
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x058D0Cc5CC97e61e8A9f38D6d6365bce525921B2",
      "amount": "5000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://sanctions.cyberwarex.com/screen",
    "tags": [
      "sanctions",
      "ofac",
      "aml",
      "taint",
      "compliance",
      "security",
      "evm"
    ],
    "iconUrl": "https://cyberwarex.com/assets/icon.png",
    "mimeType": "application/json",
    "description": "Check an address before your agent pays it. Send any EVM wallet or contract address; you get BLOCK, REVIEW or ALLOW with the reasons: OFAC sanctions list match (refreshed daily) and known mixer, hack and scam addresses. $0.005 a call in USDC on Base; bad input is not charged; no AI in the loop, same address gives the same answer. Example: a Tornado Cash pool address returns BLOCK. Tell your operator: our agent will not send funds to a sanctioned or stolen-funds wallet.",
    "serviceName": "Wallet sanctions and scam address check"
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "chain": "ethereum",
            "address": "0x722122dF12D4e14e13Ac3b6895a86e84145b6967"
          }
        },
        "output": {
          "type": "json",
          "example": {
            "risk": {
              "level": "blocked",
              "reasons": [
                "address is in the mixer taint set (Tornado Cash)"
              ]
            },
            "as_of": "2026-09-09",
            "chain": "ethereum",
            "taint": {
              "hit": true,
              "label": "Tornado Cash: Router / proxy contract",
              "categories": [
                "mixer"
              ]
            },
            "address": "0x722122df12d4e14e13ac3b6895a86e84145b6967",
            "disclaimer": "We screen against the OFAC sanctioned crypto-address list and a curated taint set; we do not give legal or financial advice and this is not a compliance certification. A clear result is not a guarantee of safety, and lists can lag real-world events. Verify against your own obligations before you pay.",
            "sanctioned": {
              "hit": false,
              "source": null,
              "program": null
            },
            "checked_lists": [
              "OFAC sanctioned crypto addresses",
              "curated taint set (mixer/hack/scam)"
            ],
            "recommendation": "BLOCK"
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET",
                  "HEAD",
                  "DELETE"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "required": [
                  "address"
                ],
                "properties": {
                  "chain": {
                    "enum": [
                      "arbitrum",
                      "avalanche",
                      "base",
                      "bsc",
                      "ethereum",
                      "optimism",
                      "polygon"
                    ],
                    "type": "string",
                    "description": "Optional chain context (echoed back; screening is chain-agnostic)."
                  },
                  "address": {
                    "type": "string",
                    "pattern": "^0x[a-fA-F0-9]{40}$",
                    "description": "EVM address to screen (0x + 40 hex chars, required)."
                  }
                },
                "additionalProperties": false
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object",
                "properties": {
                  "risk": {
                    "type": "object",
                    "description": "level (blocked|caution|clear) + reasons[]."
                  },
                  "as_of": {
                    "type": "string",
                    "description": "date the lists were last refreshed."
                  },
                  "chain": {
                    "type": [
                      "string",
                      "null"
                    ]
                  },
                  "taint": {
                    "type": "object",
                    "description": "hit(bool), categories[], label."
                  },
                  "address": {
                    "type": "string"
                  },
                  "disclaimer": {
                    "type": "string"
                  },
                  "sanctioned": {
                    "type": "object",
                    "description": "hit(bool), source, program."
                  },
                  "checked_lists": {
                    "type": "array",
                    "items": {
                      "type": "string"
                    }
                  },
                  "recommendation": {
                    "type": "string",
                    "description": "BLOCK | REVIEW | ALLOW."
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Can I trust it score from our own monitoring

score from our own monitoring

95/100 Strong

#11 of 199 in Verification. Bands: strong 93+, solid 75+, mixed 55+, weak below 55.

Reliability
100% uptime since 11-13
Compliance
A 14/14 checks pass
Price
$0.005 p31 in Verification
Risk
clean no risk flag
Traction
---
14/14 compliance checks
  • 402 payload captured
  • accepts[] array present
  • payTo address recoverable
  • payTo at accepts[0].payTo (conformant shape)
  • payTo is a valid on-chain address
  • atomic price declared
  • atomic price in a sane range
  • asset (token) address declared
  • network resolves to CAIP-2
  • payment scheme declared
  • served over HTTPS
  • declares the current x402 version (2)
  • EIP-712 domain parameters present on every EVM entry
  • x402 v2 envelope delivered in the payment-required header

402 terms unchanged since 2026-11-13. Last up 2026-11-13.

── Site signals

  • homepage reachable
  • openapi doc
  • pricing page
  • llms.txt
  • robots.txt
  • terms page
How the score works

What the score read on this service: status online, 100% uptime, latest daily rollup (no 30d window yet), 703ms response p95, x402 compliance 14 of 14, $0.005 price against the category. Each of those is measured, and each is published in full below.

The score comes from our own monitoring, never from reviews, operator claims, or a language model: reliability, x402 compliance, price against the category, a deterministic risk flag, and a small on-chain traction term, weighted by ranking generation 3. It is not placement anyone can buy: the paid verify tier is reported beside it and is not one of its inputs. Every component below stays published and read-only.

Bands on the 0 to 100 measured score: strong at 93 and above, solid from 75, mixed from 55, weak below 55. Price and speed are scored against the whole category field, every listing in it that carries no danger flag, the scored service included, so the score places a service in its own field.

It is a score inside Verification, and only there: price and speed are scored against the whole category field, every listing in it that carries no danger flag, the scored service included, which here means 199 listings, this one among them: the same 199 the position above is counted against. When the two differ, the field is the wider one, because a listing we have measured too little of to rank still sits in the field the price and the speed are normalized over. The same service in a different field would read differently. The same engine answers GET /api/v1/best, and asked for a different pool (the whole directory, or another filter) it returns a different number for this service under this same ranking generation. Neither is more correct: they answer different questions, and the methodology states which is which.

All measured facts

What it does

Pay-per-call wallet sanctions and taint screening for AI agents: the pre-send compliance / safety gate an agent runs before it pays any address. Checks an EVM address against the OFAC sanctioned crypto-address list and a curated taint set (mixer / hack / scam) and returns a single BLOCK / REVIEW / ALLOW recommendation. Deterministic, keyless, no LLM: one x402 USDC micropayment per call.

Wallet sanctions and scam address check is a listed x402 Verification API. Captured payment terms name Base. Monitoring and settlement figures below describe the observations available to this directory; an unpaid HTTP 402 check does not prove that a paid call will deliver.

Assessment computed at . Latest service check observed at . Service data JSON · Measurement methodology.

Page rendered at . This response time is separate from the observation and computation times attached to each measurement.

Latest endpoint observation: . Latest price capture: . Prices are recorded quotes, not a promise of availability. Token assets and payment terms are listed separately. Endpoint data JSON · Price history JSON · Measurement methodology.

Assessment computed at . Uptime uses the stated daily-rollup window; response times are in milliseconds, compliance is passed/evaluated checks, and traction is a measured settlement floor. The comparison score is out of 100 within this category. Assessment JSON · Measurement methodology.

Observed daily coverage: 2026-10-15 to 2026-11-13 UTC. Daily monitoring and settlement rollups do not expose their computation time; a bucket date is not an update timestamp. Uptime and response JSON · Volume JSON · Buyers JSON · Measurement methodology.

Ranked from the measured category pool, refreshed at most once a minute. The comparison has no persisted computation timestamp; the assessment time above belongs to this service only. Ranking API documentation · Ranking methodology.

x402 List home · Services · Verification

uptime · latest daily rollup
-
uptime 7d
-
uptime 30d
-
uptime 90d
-
response p95
703ms
avg response
703ms
total checks
1

Measured on the unpaid 402 handshake, not the paid call. A service can 402 correctly and still fail after payment.

price (min)
$0.005
category percentile (min)
p31 in Verification
endpoints / prices
1 / 1
model
flat
stability
100%

No deterministic risk flag. Risk fires only on an exact blocklist match, or a reserved-brand name with a mismatched verified payTo. Never from low uptime, a high price, or a model guess.

domain age
87d
registrar
HOSTINGER operations, UAB
hosting
custom
domain created
2026-08-17

Identity facts, not a risk score.

On-chain traction has not been assessed for this service yet.

member since
2026-11-13
Recent checks
Latest 12 unpaid HTTP checks, newest first; response times in milliseconds, observation times in UTC
Checked at (UTC)StatusHTTPResponseEndpoints
Online402562ms1
Online402614ms1
Online402440ms1
Online4021004ms1
Online402720ms1
Online402432ms1
Online402703ms1
Online402519ms1
Online402919ms1
Online402354ms1
Online402413ms1
Online402703ms1

Changes0 in 30d

No changes recorded in the last 30 days.

all changes

Over time

On-chain volume

On-chain traction has not been assessed for this service yet.

Uptime no completed-day data
Uptime
no completed-day data

On-chain traction has not been assessed for this service yet.

More charts
Response time daily average, ms min 595ms, avg 595ms, max 595ms

10-15 to 11-13* UTC

Each series spans only the dates it has data for. Every series is also served as JSON at /api/v1/services/wallet-sanctions-and-scam-address-check/price, /scores, /volume and /buyers.

Values

* today so far, partial (UTC).

The uptime summary counts completed UTC days only. The strip, readouts and table retain today's partial reading.

Assessment history last recorded at . Each UTC day uses its last recorded run; missing readings stay unmeasured. Assessment history JSON · Measurement methodology.

Daily values, 2026-11-13 to 2026-11-13: uptime percent, average response milliseconds, compliance passed/total, price percentile 0-100, site signals out of 6; UTC dates
DayUptimeResponseCompliancePrice percentileSite signals
2026-11-13*100%595.38ms14/14p316/6

Alternatives in Verification

agentshield.live facts strong 99/100 99.9% up 30d --- 30d
CertBeforePay strong 99/100 --- up 30d --- 30d
GL1TCH Token Safety API strong 98/100 98.4% up 30d --- 30d
ZERO Payment Guard strong 97/100 --- up 30d --- 30d
PromptShield strong 97/100 100% up 30d --- 30d

5 of 198 other ranked services in Verification, ordered by the same measured score.

Own this service?

Keep this listing accurate. Ownership is proven with a domain check and every change is reviewed by hand.

Update this listing

Earn the verified tier: x402list pays a real call to this endpoint and, if it delivers, the service is delivery-verified. The fee covers the cost of the probe, not the badge; there is no refund if the call does not deliver. Agent and API only, no in-browser signing. See /api.

Verify this service ($0.25)
Embed a badge

HTML

<a href="https://x402-list.com/services/wallet-sanctions-and-scam-address-check?utm_source=badge&utm_medium=referral&utm_campaign=embed">
  <img src="https://x402-list.com/badge/wallet-sanctions-and-scam-address-check.svg" alt="Wallet sanctions and scam address check listed on x402-list" height="28">
</a>

Markdown

[![Wallet sanctions and scam address check on x402-list](https://x402-list.com/badge/wallet-sanctions-and-scam-address-check.svg)](https://x402-list.com/services/wallet-sanctions-and-scam-address-check?utm_source=badge&utm_medium=referral&utm_campaign=embed)

HTML, live uptime variant

<a href="https://x402-list.com/services/wallet-sanctions-and-scam-address-check?utm_source=badge&utm_medium=referral&utm_campaign=embed">
  <img src="https://x402-list.com/badge/wallet-sanctions-and-scam-address-check.svg?data=uptime" alt="Wallet sanctions and scam address check uptime on x402-list" height="28">
</a>
Delisting

To request delisting, email info@x402-list.com with the service name, slug, or URL. Removal is free and does not require proof of ownership. See all free email requests.