Frequently asked questions

TrustCheck is a risk screening service for crypto addresses. It helps peer to peer (P2P) and over the counter (OTC) traders look at a counterparty before they send or receive funds. You can use it in the Telegram bot @trustcheckcom_bot, on trustcheckbot.com and through our API.

TrustCheck is operated by a company incorporated in Canada. See Terms, section 1.

Send a wallet address to our Telegram bot @trustcheckcom_bot, or call the TrustCheck API with the address. We query public sanctions lists and blockchain data in real time. You get a risk level with a score from 0 to 100 and the evidence behind it, with the source of each finding.

If we do not have enough data to score an address, we say so clearly instead of guessing. A result is information only. See Is a result financial, legal or AML advice?

TRON and Ethereum addresses are checked against the US Treasury OFAC sanctions list, and against the official USDT and USDC freeze lists on TRON, Ethereum, Base, Arbitrum and Optimism. For TRON and Ethereum we also show on chain context, such as wallet age, activity and stablecoin flows.

Bitcoin addresses, IBAN checks and card BIN checks are not available yet and will be added later.

The official sources behind these checks:

• OFAC sanctions list. OFAC may add digital currency addresses to its Specially Designated Nationals (SDN) List, and says these listings are not likely to be exhaustive. See OFAC FAQs on digital currency (FAQ 562).
• USDT freeze list. Tether's terms allow it to blacklist addresses that hold its tokens (Tether legal terms). The USDT contract on Ethereum has a public isBlackListed function (USDT contract on Etherscan).
• USDC freeze list. Circle's USDC contracts have a public isBlacklisted function (Circle stablecoin contracts on GitHub). Official contract addresses per network are listed by Circle (USDC contract addresses).
• On chain data. TRON data comes from TronGrid (TronGrid documentation). Ethereum data comes from public explorers and RPC nodes, such as Blockscout (Blockscout documentation).

At the moment we check sanctions against the OFAC list only. We do not cover every blockchain or every sanctions list in the world. When nothing is found, the result says no risk signals found in our sources. That does not mean the address or its owner carries no risk.

Most checks return within a few seconds. If a data source is slow or unavailable, we return the result without it within about 10 seconds and mark that source as unavailable in the report.

Yes. New users get 3 free trial checks, after accepting the Terms and the Privacy Policy. Creating several accounts to get more free checks is not allowed. See Terms, section 8 and section 9.

Paid plans are not available yet. When they launch, prices and limits will be shown before you buy.

Email [email protected] or write to our Telegram support t.me/Aiana11a. For privacy requests, please put Privacy request in the subject line.

Never send private keys or seed phrases to anyone, including us. See Terms, section 25 and Privacy Policy, section 16.

Yes. Accepting our Terms of Service and Privacy Policy is a mandatory condition of registration and use, in the Telegram bot, on the website and in the API. Without acceptance there is no service.

The Privacy Policy forms part of the Terms. If we make a material change, we give notice in advance. See Terms, section 2, section 17 and Privacy Policy, section 1.

No. Results are information only. They are not financial, investment, legal, tax, compliance or anti money laundering (AML) advice, and they are not a recommendation to trade or not to trade.

A result is an automated estimate based on the data available at the time of the check. No risk signals found in our sources does not mean that a counterparty is lawful or free of risk. A high risk level does not mean that anyone has done something wrong. See Terms, section 5 and Privacy Policy, section 5.

To the extent the law allows, no. We are not liable for losses that come from your decision to trade or not to trade, or from what a counterparty, blockchain, issuer, bank or Telegram does. Our total liability is limited to the fees you paid us in the 12 months before the claim, or CAD 100 if you paid nothing.

Some mandatory consumer laws do not allow these limits. Where that is the case, they apply only as far as the law permits. See Terms, section 13, section 14 and section 20.

You are. TrustCheck does not replace your own screening program, and using it does not move any of your legal duties to us. You remain responsible for any know your customer (KYC), due diligence, AML, counter terrorist financing, sanctions screening, travel rule, reporting and record keeping duties that apply to you. Keep your own records of checks and decisions. See Terms, section 6.

OFAC expects businesses that deal in digital currency to run a risk based compliance program that generally includes sanctions list screening. See OFAC FAQ 560.

You must be at least 18 years old and able to enter into a binding contract.

You cannot use TrustCheck if you are located in, ordinarily resident in, or acting for a person in a country or region under comprehensive sanctions by the United States (OFAC), Canada, the United Nations, the European Union or the United Kingdom. At the date of our Terms this includes Cuba, Iran, North Korea, Syria and the Crimea, so called Donetsk People's Republic and so called Luhansk People's Republic regions of Ukraine. You also cannot use it if you are on a sanctions list, or owned, controlled by or acting for someone who is. We may verify these conditions and restrict access.

See Terms, section 3, Privacy Policy, section 12 and the OFAC list of sanctions programs.

The laws of the Province of Ontario and the federal laws of Canada apply. The courts in Ottawa, Ontario have exclusive jurisdiction over disputes that are not resolved by arbitration.

Please contact us first. The Terms ask both sides to try to resolve a dispute informally for at least 30 days. Where the law permits, a dispute then goes to arbitration in Ottawa under the rules of the ADR Institute of Canada, on an individual basis.

If you are a consumer, you keep the protection of the mandatory laws of the country where you live, and you may be able to bring proceedings there. The arbitration and class action waiver do not apply to consumers in the EU, the EEA, the UK, Switzerland, Quebec, Ontario or other places whose law does not allow them. See Terms, section 18 and section 19.

• Account identifiers: Telegram user ID and username, internal account ID, API key identifiers.
• Your email address, if you give it.
• What you check: wallet addresses, and IBANs once IBAN checks are available.
• Check results and history: risk scores, levels, evidence, sources, date and time.
• Usage and technical data: IP address, request logs, errors, trial and quota counters, including data processed by Cloudflare.
• Messages you send to support.
• Payment data once payments are live. Card or wallet details are handled by a payment provider, not stored by us.

We do not ask for identity documents or biometric data. We do not sell personal data. See Privacy Policy, section 3 and section 6.

We keep your check history, and IBANs in encrypted form, with no fixed time limit. We do this for fraud prevention, to handle disputes about past checks and to keep a reliable audit trail. IBAN checks are not available yet, so this applies to IBANs once they are. See Privacy Policy, section 7.

You can ask for deletion at any time. Email [email protected] with the subject Privacy request, or write to us in the bot or at t.me/Aiana11a. We may ask you to confirm that the data is yours, for example by writing from the linked Telegram account.

We then delete your check history, IBAN data and account data, unless the law requires us to keep some of it or we need it to establish, exercise or defend legal claims. In that case we keep only what is needed and restrict its use. Deleted data leaves our encrypted backups within 35 days. Requests are free unless they are manifestly unfounded or excessive. See Privacy Policy, section 9.

• EU and EEA (GDPR). Access, rectification, erasure, restriction, portability, objection, withdrawal of consent and rights about automated decisions, under Articles 15 to 22 of the GDPR (Regulation (EU) 2016/679) on EUR Lex. See Privacy Policy, EU section. The UK and Switzerland give similar rights (UK and Swiss section).
• California (CCPA, as amended by the CPRA). To know, access, delete and correct your personal information, to opt out of sale or sharing, to limit the use of sensitive personal information, and not to be discriminated against for using these rights. We do not sell or share personal information. See Privacy Policy, California section and the California Attorney General CCPA page.
• Canada (PIPEDA). Access, correction, withdrawal of consent and the right to challenge our compliance. See Privacy Policy, Canada section and the text of PIPEDA.
• Quebec (Law 25). In addition, the right to be informed about profiling technology, to data portability, to ask us to stop disseminating or to de index information where the law permits, and to be informed about decisions based only on automated processing. See Privacy Policy, Quebec section and the Commission d'accès à l'information du Québec.

To use any right, email [email protected]. We answer within the time the law sets: normally one month under the GDPR, 30 days under PIPEDA and Law 25, and 45 days under US state laws.

• Singapore (PDPA 2012). Access, correction and withdrawal of consent. Authority: Personal Data Protection Commission. See Singapore section.
• Japan (APPI). Disclosure, correction, addition or deletion, and suspension of use. Authority: Personal Information Protection Commission. See Japan section.
• South Korea (PIPA). Access, correction, deletion, suspension of processing, withdrawal of consent, and an explanation of automated decisions. You may refuse the overseas transfer, but we then cannot provide the service, because it is hosted outside Korea. Authority: Personal Information Protection Commission. See South Korea section.
• Mainland China (PIPL). To know and decide, to access and copy, portability, correction, deletion, withdrawal of consent and an explanation of our rules. Using TrustCheck from mainland China involves a cross border transfer, to which you give separate consent. Authority: the Cyberspace Administration of China. See mainland China section.
• Hong Kong (PDPO). Access and correction. A fee that is not excessive may apply to access requests. Authority: Office of the Privacy Commissioner for Personal Data. See Hong Kong section.
• India (DPDP Act 2023). A summary of your data, correction, completion, updating and erasure, withdrawal of consent, grievance redressal and nomination. Authority: the Data Protection Board of India. See India section.
• Thailand (PDPA B.E. 2562). Access and copy, portability, objection, erasure or anonymisation, restriction, rectification and withdrawal of consent. Authority: the Personal Data Protection Committee. See Thailand section.

Email [email protected] to use any of these rights.

• United Arab Emirates. Under the federal Personal Data Protection Law, Federal Decree Law No. 45 of 2021: information and a copy of your data, portability, correction, erasure, restriction, stopping processing and objection to automated decisions. Similar rights apply under the DIFC Data Protection Law No. 5 of 2020 and the ADGM Data Protection Regulations 2021 where they apply (ADGM Office of Data Protection). See UAE section.
• Saudi Arabia (PDPL). To be informed, to access and get a copy, to correct, and to ask for destruction when the data is no longer needed. Authority: Saudi Data and Artificial Intelligence Authority (SDAIA). See Saudi Arabia section.
• Qatar (Law No. 13 of 2016). Withdrawal of consent, objection, deletion, correction and access. Authority: the National Data Privacy Office of the National Cyber Security Agency. See Qatar section.
• Bahrain (Law No. 30 of 2018). Information, access, objection, rectification, blocking and erasure. Authority: the Personal Data Protection Authority. See Bahrain section.
• Oman (Royal Decree No. 6 of 2022). Withdrawal of consent, modification, a copy of your data, deletion and complaint. Authority: the Ministry of Transport, Communications and Information Technology. See Oman section.
• Kuwait. Rights under the Data Privacy Protection Regulation of the Communication and Information Technology Regulatory Authority (CITRA): information, consent, access, correction and deletion. See Kuwait section.

Email [email protected] to use any of these rights.

Our servers, databases and encrypted backups are hosted by Hetzner Online GmbH in Germany (EU). Cloudflare provides content delivery, DNS, security and DDoS protection and hosts the website. Cloudflare processes IP addresses and request data in the United States and in its global network of data centres. If you use the bot, Telegram processes your messages under its own privacy policy.

We are based in Canada. For cross border transfers we use the safeguards the law requires, such as the EU adequacy decision for Canada, the EU US Data Privacy Framework or Standard Contractual Clauses. Data is encrypted in transit, and IBAN data is also encrypted at rest. See Privacy Policy, section 6, section 8 and section 10.

The website does not use advertising or analytics cookies and loads no third party trackers, fonts or scripts. It stores two small values in your browser to remember your choices: your theme (light or dark) and your language. Cloudflare may set strictly necessary security cookies. We treat a Global Privacy Control signal as a valid opt out where the law requires it. See Privacy Policy, section 11.

We aim to meet the Web Content Accessibility Guidelines (WCAG) 2.2, Level AA. We also follow the European Accessibility Act and use the Americans with Disabilities Act as guidance for the United States (ada.gov).

If something blocks you, write to [email protected] or t.me/Aiana11a. We can send information in an accessible format, for example plain text by email. We acknowledge messages within 5 business days and aim to respond within 30 days. See our Accessibility Statement, including known limitations and enforcement and complaints.

Please contact us first at [email protected]. We would like the chance to fix the problem. If you are not satisfied, you can contact the authority where you live:

• EU and EEA: the data protection authority of your country (list on the EDPB website).
• United Kingdom: the Information Commissioner's Office.
• Canada: the Office of the Privacy Commissioner of Canada. Quebec: the Commission d'accès à l'information.
• California: see the Attorney General CCPA page and the California Privacy Protection Agency.
• Asia and the GCC: the authorities listed in the regional sections of our Privacy Policy.
• Accessibility: the authorities listed in our Accessibility Statement. In the United States, the Department of Justice (ada.gov).

For other disputes, see Terms, section 19.

No. All sales are final. We do not refund fees, including for unused checks. We never refund money, whether in fiat currency or in crypto assets, except where mandatory law that cannot be excluded by contract requires it.

If a check fails because of a fault on our side, the remedy is a check credit of equal value. See What happens if a check fails? and Terms, section 8.

Paid plans are not available yet. The rules below apply once they launch.

The service starts immediately upon purchase. A check is performed and delivered the moment you run it: we query the sources in real time and show you the result. A result that has been delivered cannot be returned. Final pricing also prevents abuse, such as running checks and then asking for the money back.

When you buy, you expressly agree that the service starts immediately and, where the law allows, you waive your right of withdrawal. Rights that mandatory law gives you are not affected. See Terms, section 8 and section 20.

The EU Consumer Rights Directive (Directive 2011/83/EU) gives consumers 14 days to withdraw from many online contracts, with exceptions in Article 16. Under Article 16(m), the right does not apply to digital content not supplied on a tangible medium once performance has begun with your prior express consent and your acknowledgement that you lose the right. Under Article 16(a), the right ends for a service once it has been fully performed, where performance began with your prior express consent and acknowledgement.

When you buy checks, we ask you to expressly request that the service starts immediately and to confirm that you lose your right of withdrawal, where the law allows. Where mandatory law still gives you a right, we honour it as the law requires. See Terms, EU section.

If a check fails because of a fault on our side, you are not charged and the credit is returned to your balance automatically.

If a check was charged but its result was incomplete because of a fault on our side, you can ask support for a free re check within a reasonable time.

Remedies are provided only as check credits of equal value to the affected checks. We never refund money, whether in fiat currency or in crypto assets, except where mandatory law that cannot be excluded by contract requires it.

These are not a fault on our side:

• a result you disagree with;
• a result that correctly reflects the source. OFAC, Tether and Circle are the source of truth for their own lists;
• a not enough data result when all sources responded;
• invalid input or an unsupported chain. These are rejected before any charge.

To ask for a re check, write to [email protected] or t.me/Aiana11a with the date and the address you checked. See Terms, section 8.

Please contact support first. Faults on our side are fixed with a check credit, usually faster than a payment dispute.

A chargeback for checks that were delivered as described goes against the Terms you accepted. To respond to it, we may give the payment provider records of the checks you ran. We may also suspend the account while the dispute is open. See Terms, section 8, section 10 and Privacy Policy, section 6.

This does not limit any right you have under mandatory law.

You can stop using TrustCheck at any time and ask us to delete your data. See Terms, section 10 and Privacy Policy, section 9.

Paid plans are not available yet. When they launch, billing terms, including how to stop any renewal, will be shown before you buy. Cancelling stops future charges only. It does not lead to a money refund for the current period or for unused checks, except where mandatory law that cannot be excluded by contract requires it.