Ichnos

Crypto AML & wallet screening

Screen the wallet. Keep the proof.

Ichnos screens crypto wallets and counterparties for sanctions exposure and illicit-cluster proximity, then hands you the audit-ready report your regulator expects. Combined entity + wallet screening, EU data residency, self-serve credits from €149/mo — compliance-grade screening priced for SME crypto businesses, not just exchanges.

  • No sales call
  • EU data residency
  • Entity + wallet in one check

Why now

MiCA and the Travel Rule made screening non-negotiable.

Every licensed EU crypto business now has to screen wallets and counterparties and keep the evidence. The tools that do it well are priced for exchanges — five- and six-figure contracts, sales-led onboarding. A 3–20-person CASP, an EMI with incidental crypto flows, or an audit firm running an engagement is left with manual OFAC checks in a spreadsheet: slow, error-prone and hard to defend.

MiCA

Every EU CASP is supervised

MiCA has been fully applicable since December 2024. A licensed CASP has to evidence its AML controls — screening included — to its regulator.

Travel Rule

Counterparty & wallet checks

The Transfer of Funds Regulation requires originator and beneficiary information on crypto transfers, with verification for unhosted-wallet counterparties above €1,000.

The audit

Records your auditor can read

Every check has to be kept as an auditable record for your annual AML audit and your supervisor — not a screenshot or a spreadsheet row.

What Ichnos does

Screen the wallet and the entity — evidence both.

Combined

Entity + wallet in one check

Screen the counterparty and the address together — one request, one risk picture, one report. The differentiator pure chain tools do not have.

Sanctions

Sanctions & exposure screening

Match wallets against the EU consolidated list and OFAC SDN crypto addresses, and flag proximity to sanctioned sources.

Clusters

Illicit-cluster proximity

See how many hops a wallet sits from a listed address, so exposure to high-risk sources is visible, not hidden.

Report

Audit-ready artifact

Every check yields a signed, timestamped PDF and CSV — the defensible evidence you hand your compliance file and your auditor.

Transparency

Match transparency

Each match carries a certainty tier and the reason it scored. No black-box number you cannot explain to a supervisor.

Self-serve

Credits, no sales call

Sign up, run your free trial checks, top up when you need more. Per-check credits, no seats, no minimums, no procurement cycle.

API

API & webhooks

Screen inline in your onboarding or transfer flow and get the result and report back programmatically. Available on Growth and Scale.

EU

EU data residency

Your data stays hosted in the EU, GDPR export and erasure automated by default — an EU tool for EU-supervised firms.

How it works

From an address to a filed report.

01

Sign up & top up

Create your account and run 100 checks free — no card. Hold a credit balance and spend one credit per check; top up any time.

02

Screen the wallet & the entity

Paste an address or a counterparty. Ichnos returns sanctions exposure, illicit-cluster proximity and PEP/sanctions matches — each with a certainty tier, in one result.

03

Hand over the proof

Download the signed, timestamped report with its data-source provenance and match detail. It goes straight into your compliance file and your auditor’s hands.

See it in action

Screen a wallet. Watch the verdict.

Pick an example wallet to see the kind of result Ichnos returns — a risk tier, the reason it scored, the data source it ran against, and the audit report you keep. Same shape as a real check; the numbers below are on example wallets.

0x098B·716B…E2f96 High risk
Direct

This is a real OFAC SDN-listed address — Lazarus Group (DPRK), designated over the Ronin Bridge exploit. An exact list match is the highest-certainty tier: a listing, not a proximity estimate. Escalate before any transfer.

Sanctions matchListed · OFAC SDN
Listed entityLazarus Group · DPRK
Certainty tierDirect · exact match
Data sourceEU consolidated · OFAC SDN
Signed · timestamped · provenance recorded PDF · CSV
0x3ad9·b207…f10a Elevated
Near

About one hop from a flagged address in the transaction graph — a proximity signal to investigate, not a finding of guilt. Exposure is a modelled estimate, not a measured trace.

Sanctions matchNone direct
Illicit-cluster proximity~1 hop · estimate
Certainty tierNear · proximity
Data sourceEU consolidated · OFAC SDN
Signed · timestamped · provenance recorded PDF · CSV
bc1q·6f0d…c3d8 Low risk
Clear

No known exposure to the flagged set within the analysed graph. That is the absence of a known link on the data screened — not a guarantee of innocence (see the methodology).

Sanctions matchNone
Illicit-cluster proximityNo known exposure
Certainty tierClear
Data sourceEU consolidated · OFAC SDN
Signed · timestamped · provenance recorded PDF · CSV

The sanctioned example is a real OFAC SDN-listed address (Lazarus Group, Ronin Bridge); the exposed and clean examples use illustrative addresses. Create a free account to screen any real address, with the first 100 checks free.

Trust & control

Built for the audit — and for your data.

Ichnos gives you defensible evidence and keeps your data in the EU. The screening is the input; the report you hand your auditor is the point.

EU data residency & GDPR

Your screening data stays hosted in the EU, with export and one-click erasure automated by default. Built by an EU company for EU-supervised firms.

Evidence you can defend

Every check is signed, versioned and timestamped, and records the data source it was run against. When your regulator or auditor asks how you screened, the answer is in the file.

Official-source data, honest tiers

We screen against the EU consolidated list and OFAC SDN, which publish crypto addresses directly, and mark each result with a certainty tier — no black-box scores you cannot explain.

Entity + wallet in one check

Screen the counterparty and the wallet together — powered by our own PEP/sanctions entity engine (PROOViD). Pure chain-analytics vendors bolt this on badly, or not at all.

The deliverable

You get a report, not just a red flag.

Every check produces a signed, timestamped audit report — its data-source provenance, the wallet and entity findings, and a certainty tier on every match. That is the file that goes into your compliance record and in front of your auditor.

Built hands-on by an engineer who ships compliance and crypto software — the same person behind the PROOViD screening engine Ichnos runs on. You deal with the maker, not a sales layer.

Demetris Loizides Founder & engineer, Ichnos

Built by dloizides.com

Pricing

Compliance-grade screening, at SME prices.

Per-check credits, no seats and no minimums. Every plan starts with a free 100-check trial — no card. Pick a monthly bundle, top up when you need more.

Plan feature comparison
Feature Starter €149/ month For consultancies & occasional flows. Start free trial Most popular Growth €499/ month For a small, licensed CASP. Start free trial Scale €1,490/ month For a mid-size CASP with volume. Talk to us
Screening
Included checks / month One credit per wallet or counterparty check 300 6,000
Wallet sanctions & exposure screening EU consolidated list + OFAC SDN crypto addresses
Counterparty entity screening (PEP / sanctions) Powered by the PROOViD screening engine
Illicit-cluster proximity N-hop exposure from listed addresses
Reporting & audit
Audit-ready report (PDF + CSV) Signed, versioned, timestamped per check
Match transparency (certainty tiers) Why each match scored — reused from PROOViD why-tier
Data-source provenance on every check
Integration
REST API + webhooks Screen inline in your onboarding / transfer flow
Ongoing wallet monitoring Re-screen saved wallets as lists update — rolling out through 2026
Priority data-list refresh
Data & support
EU data residency Hosted in the EU
GDPR export & erasure
Credit top-up packs
Support Email Priority + SLA

Credits are consumed per check; top-up packs from €49. Prices in euros, monthly, cancel any time — no card needed for the trial. Ichnos is a screening tool: you remain the obliged entity for your own AML decisions.

FAQ

Questions, answered.

What does Ichnos screen?

Two things in one check: the crypto wallet — for sanctions exposure and proximity to illicit clusters — and the counterparty entity behind it, against PEP and sanctions lists. You get a single risk picture and a report you can file, instead of stitching together a chain tool and a separate name-screening tool.

Which lists and data sources do you screen against?

Official sources: the EU consolidated sanctions list and the OFAC SDN list, both of which publish crypto addresses directly, plus PEP/sanctions entity data from the PROOViD screening engine. Wallet exposure is assessed as N-hop proximity from listed addresses. Every result carries a certainty tier so you can see how strong a match is, not just a score.

Is this a Chainalysis / Elliptic alternative?

It targets the same job — screen wallets and counterparties, evidence it for your auditor — but for firms the enterprise tools price out: small and licence-seeking CASPs, EMIs with incidental crypto flows, and the consultancies that serve them. Self-serve, per-check credits, combined entity + wallet screening, and EU hosting, instead of five- or six-figure annual contracts and a sales cycle.

Does Ichnos make me MiCA / Travel Rule compliant?

Ichnos gives you the screening and the audit-ready evidence your supervisor and auditor expect to see — but you remain the obliged entity and own the compliance decision. Think of it as the tool that runs the check properly and keeps the defensible record, not a legal guarantee.

What is actually in the report?

A signed, timestamped, versioned artifact (PDF and CSV) for each check: the wallet and/or entity screened, the lists and data sources it was run against, every match with its certainty tier and the reason it scored, and the exposure findings. It is designed to be handed straight to a compliance file or an external auditor.

Where is my data hosted?

In the EU. Ichnos is built by an EU company for EU-supervised firms, with data residency in the EU and GDPR export and erasure automated by default.

How does pricing and the credits model work?

You hold a credit balance and spend one credit per check. Monthly plans include a bundle of credits (300 / 1,500 / 6,000) and you can top up with credit packs from €49 any time. Every plan starts with a free 100-check trial, and there are no seats or minimums.

Do you offer an API and webhooks?

Yes, on the Growth and Scale plans. Screen a wallet or counterparty inline in your onboarding or transfer flow and get the result and report back programmatically, so screening is a step in your process rather than a manual detour.

Can a consultancy or audit firm use Ichnos for its clients?

Yes — that is the partner tier. One login runs screening across every engagement, with per-engagement segregation and reporting and wholesale credit pricing. A single consultant can screen for every crypto client they serve and hand each one a co-branded audit artifact.

How fast can I start?

It is self-serve: sign up, run your free trial checks, and top up when you are ready — no sales call. Your first screening and report can be minutes away, not a procurement project.

Your next AML check, done properly.

Run your first 100 wallet and counterparty checks free, and hand your auditor a report you can stand behind.