Skip to main content
CompliAPI screens entities against multiple sanctions and financial-crime lists:
  • Onchain addresses — crypto wallet addresses across ETH, BTC, XMR, USDT, and more (ENS names supported)
  • Email addresses associated with sanctioned entities
  • Websites and domains operated by sanctioned entities
  • Government-issued IDs — passports, tax IDs, registration numbers (fuzzy matching)
  • Countries and regions subject to comprehensive, targeted, or military sanctions
  • VPN detection and IP geolocation with sanctioned-country flagging

​
Source lists

The screening endpoints (/api/v1/screen/*) check every enabled list in one call and name the list behind each match; GET /api/v1/screen/lists reports what’s live. A match on a sanctions list sets sanctioned: true. A match on a crime list (ransomwhe.re) or a risk list (Tornado Cash association) sets only flagged: true — it signals risk, not a government designation. Ransomware payment data comes from Ransomwhere by Jack Cable (Cable, Jack. Ransomwhere: A Crowdsourced Ransomware Payment Dataset, Zenodo, doi:10.5281/zenodo.13999026), used under CC BY 4.0; addresses appear 90 days after submission. Tornado Cash itself was removed from the OFAC SDN list in March 2025, so its association lists are exposure intelligence, never sanctions hits.
tornado_cash_recipients is a deliberately weak signal and ships disabled: since 2022, “dusting” attacks have sprayed small Tornado Cash withdrawals at prominent addresses that never opted in, so receiving a withdrawal is not evidence of intent. Depositor and relayer hits (tornado_cash) reflect active use of the mixer — though a depositor recorded via a smart-contract wallet or bundler identifies the contract, not necessarily the person behind it.
The API is served at https://api.compliapi.com/api/v1 and is also available as an MCP server for AI agents.