ChainwatchCrypto—blockchain intelligence and investigative operationsAll systems operational
Risk Analysis

A score you can argue with.

Every risk score decomposes into the signals that produced it, with weights, evidence and a model version — because a number nobody can interrogate is not analysis, it is decoration.

Transparent weightingVersioned modelsEvidence-linked

How is a crypto address risk score calculated?

A crypto address risk score combines direct and indirect exposure to categorised counterparties, weighted by how many hops separate them and how much value moved. A score is an analytical indicator, not a determination of guilt, and it should prompt a review rather than substitute for one.

What a score is made ofpublished weightsMODEL
DirectIndirectContextual
Sample analysis

Six signals, one score.

Switch address to see the same model produce a very different picture.

Sample analysisFigures below illustrate the interface. They are not a live chain feed.
Sample analysis
Address
78
/ 100
Risk level
Why is this score what it is?
Interpretation limit

A risk score is an analytical indicator derived from observable on-chain activity. It does not independently establish unlawful conduct, and attribution is asserted only where a source, evidence trail and confidence level exist.

The model

What each signal measures.

SignalWeight rangeWhat it measures
Transaction exposure0–26Share of value with a path to a category flagged high risk, weighted by hop distance.
Known risk exposure0–22Direct interaction with addresses in a maintained risk set, with the set and version recorded.
Counterparty risk0–16Risk carried by the addresses this address transacts with most.
Behavioural signals0–12Patterns such as rapid fan-out, peel chains, round-value structuring or dormancy breaks.
Entity exposure0–10Exposure to attributed services whose category carries elevated risk.
Sanctions signal0–6A match against a published designation in the exposure path.
Weights are policy, not physics

The weights above are the platform default. An organisation with a different risk appetite can adjust them under a platform agreement — and every score records the model version used, so a change of policy never silently rewrites past findings.

Bands

Score to level, and what a level should mean to you.

LevelScoreSuggested handling
Low0–39Nothing observed that warrants special handling. Ordinary monitoring continues.
Elevated40–74Something warrants a look. Appropriate for review, not for automatic refusal.
High75–100Material exposure observed. Appropriate for escalation under your own policy.
These bands are a starting point

Your obligations are set by your regulator, your policy and your risk appetite — not by this table. The platform provides the measurement; the decision remains yours.

Limits

What a risk score is not.

It is not a finding of unlawful activity
It is not a statement about any identified person
It is not a legal conclusion or a regulatory determination
It is not a prediction of future behaviour
It is not comparable across different model versions without conversion
Interpretation limit

A risk score is an analytical indicator derived from observable on-chain activity. It does not independently establish unlawful conduct, and attribution is asserted only where a source, evidence trail and confidence level exist.

Why we publish the weights

A risk model that cannot be inspected cannot be challenged, and a model that cannot be challenged has no place in a decision that affects somebody's account or their case. Publishing the decomposition is the point.

Interrogate a score on your own data.

We will show you the decomposition, the model version and the evidence behind every signal that moved it.