{"uid":"cap_CzMLKh4eFC8Vbyy4GvAC6","slug":"2s-io-evm-address-malicious-wallet-screener-a9536dc1","name":"2s.io EVM Address Malicious Wallet Screener","description":"Malicious-wallet screen (via GoPlus, free/keyless). For any EVM address returns risk flags — cybercrime, money laundering, financial crime, darkweb, phishing, stealing/blackmail, fake KYC, mixer, sanctioned, honeypot-related, blacklist doubt and more — plus an overall malicious verdict and hit count. Counterparty risk check before interacting with an address.","url":"https://2s.io/api/crypto/address-safety","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","queryParams"],"properties":{"type":{"const":"http"},"method":{"const":"GET"},"queryParams":{"type":"object","required":["chainId","address"],"properties":{"address":{"type":"string"},"chainId":{"type":"string","maxLength":20,"minLength":1,"description":"EVM chain id, e.g. 1, 56, 137, 8453."}},"additionalProperties":false}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.004998","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.004998/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.004998","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.004998","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_9TP86GFydZATNw7G5aBM6","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.004998","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks any EVM wallet address for malicious activity risk flags (cybercrime, phishing, sanctions, mixers, honeypots, etc.) and returns an overall verdict via GoPlus data.","exampleAgentPrompt":"Before I send any ETH to 0x3f5CE5FBFe3E9af3971dD833D26bA9b5C936f0bE on Ethereum mainnet (chain ID 1), can you run a malicious wallet screen and tell me if it's flagged for phishing, sanctions, money laundering, or any other risk?","exampleUseCases":null,"resultDescription":"Returns a structured list of risk flags (cybercrime, money laundering, financial crime, darkweb activity, phishing, stealing/blackmail, fake KYC, mixer involvement, sanctions, honeypot-related, blacklist doubt) along with an overall malicious verdict (true/false) and a total hit count indicating how many risk categories were triggered.","failureModes":["Invalid or malformed EVM address returns an error or empty result","Unsupported chain ID may return no data or an error response","Address not yet indexed by GoPlus returns no flags (not necessarily clean)","Rate limits or payment failures return 402 or 429 status codes","Very new addresses may have insufficient data for reliable assessment"],"whenToPreferThis":"Use this endpoint when you need a fast, keyless, pay-per-call counterparty risk check on any EVM wallet address before interacting with it — especially for pre-transaction due diligence, AML screening, or fraud prevention in DeFi workflows. Prefer this over general blockchain explorers when you specifically need consolidated risk flags and a malicious verdict rather than raw transaction history.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T13:02:52.230Z","isFirstParty":false}