Paste an address or a transaction hash. CyberX's intelligence engine runs AML (anti-money laundering) screening on public data and sends a preliminary report to your email.
Tether freezes on the USDT contract, presence on the OFAC sanctions list, public labels of exchanges and services, and the wallet's behavior: age, pace, aggregation of sources, fast pass-through, test transfers and who paid the fees.
Bitcoin, Ethereum and other EVM networks, and TRON, where most of the USDT used in investment schemes moves. Accepts an address or a transaction hash (txid).
Signal level with the factors behind it, each linked to the transaction in a block explorer; wallet profile and flow; the ten largest counterparties; and fund tracing up to three hops, until a service with KYT (know your transaction) is reached.
Identifying the account at the exit service and preparing the formal request, tracing beyond the third hop, cross-checking against CyberX's case base and preserving evidence with chain of custody. That is investigation work, opened through the request form.
open a request →Anyone. It was built for people who fell for a crypto scam and want to know where the money went; for judicial police, prosecutors and courts that need a quick read of an address before issuing a request; for criminal defense lawyers building the narrative of a case; for compliance teams at exchanges, OTC desks, P2P platforms and fintechs that need to check a wallet before trading; and for anyone who just wants to see their own on-chain exposure. No sign-up: the email is only used to deliver the report.
No public check decides that. On-chain data shows signals: a wallet created and emptied the same day, dozens of sources into one destination, a counterparty frozen by Tether. The report lists the signals with evidence; the conclusion belongs to an investigation.
Yes. Every USDT-TRC20 transfer is public. The check follows the funds up to three hops and flags when they reach a high-volume wallet, usually an exchange.
Checking an address against the lists and patterns used in anti-money laundering: sanctions, freezes, service labels and flow behavior. CyberX returns a signal, not a decision.
OFAC's SDN list publishes crypto addresses. The check compares the address and its direct counterparties against the list, refreshed daily.
Yes. Tether adds addresses to the USDT contract's blacklist, after which they cannot move USDT. It is recorded on-chain with the date, and the check reads it straight from the contract.
Keep the transaction hash, check it here to see where the funds went, file a police report and seek guidance. CyberX does not recover funds; the dossier documents the path and prepares the request to the exit service.
The preview appears on screen in seconds. The full preliminary report, with score, signals, counterparties and tracing, arrives by email within a few minutes, at no cost: it is the free version of the check. When the case needs more, such as identifying the account at the exit service, following beyond the third hop or preparing a formal request, that is an investigation, and every case is different. Submit a request through the form and CyberX replies with scope and a proposal.
It is a verifiable technical document: every issued PDF carries a SHA-256 hash and an issuance record anyone can check at cyberx.to/verify, so whoever receives it knows it is the original. No factor, alone or combined, proves conduct or identifies a person. The report is neither an expert opinion nor a legal opinion, must not be used as evidence without review by an analyst, and CyberX is not liable for decisions made on the basis of it. When the purpose is an investigation, a defense or court proceedings, formally request an investigation (INV) from CyberX: that is where the data is reviewed, put in context and issued as a technical note.
This report is produced by a CyberX rules engine: each signal is a verifiable condition on public data as of the check date, and the score is the sum of fixed weights of those signals. There is no subjective assessment in its generation. Reading the result is up to whoever receives it: the same facts accommodate different risk appetites, and each requester decides what to do with them.
No factor, alone or combined, proves conduct or identifies a person. The report is neither an expert opinion nor a legal opinion, must not be used as evidence without review by an analyst, and CyberX is not liable for decisions made on the basis of it. When the purpose is an investigation, a defense or court proceedings, formally request an investigation (INV) from CyberX: that is where the data is reviewed, put in context and issued as a technical note.
CyberX does not recover funds and is not an authority. In case of crime, file a police report.