Risk report

An assessment, often exported as a report, assigning a risk profile or score to an address or cluster based on its direct and indirect exposure to categories such as sanctioned entities, darknet markets, scams, ransomware and mixers, as well as behavioural indicators (see Service exposure). Exposure describes transactional proximity to a category, not a relationship with it. Analytics providers, such as Chainalysis, Elliptic, TRM Labs and Global Ledger, use proprietary categories, attribution data and scoring methods that are not standardised, so results can differ between tools.

A risk score is an indicator for further review, not proof of wrongdoing. Because attribution data and risk assessments change over time, a report should identify the provider and the date it was generated. Where used to support investigative or legal decisions, the underlying transactions and attribution links should be documented so the assessment can be independently verified.