RU

AML check on Hedera

Hedera accounts usually look like 0.0.12345, but the same account can also appear as a 0x EVM address, so know which form you are checking.

Address formatAccount ID 0.0.<number>, optionally with a 5-letter checksum (0.0.123-vfmkw); the same account can also appear as a 0x EVM address0xc7821f9766b980f7518271aea07be5520d647b1fExample for illustration, not a real address.
Note

Token issuers on Hedera can choose to keep the power to freeze accounts, require KYC or wipe balances for their own token. Exchanges such as Kraken require a memo on HBAR deposits, and a missing or wrong memo can delay or even lose the deposit.

Services that check Hedera

01EllipticEnterprise platformPrice on requestSupportedNot scored
02TRM LabsEnterprise platformPrice on requestSupportedNot scored
03Merkle ScienceEnterprise platformPrice on requestSupportedNot scored
04WebacyUse with careAPI for businessPrices shown after sign-inSupportedNot scored

How to check a Hedera address

  1. Get the public addressAsk your counterparty for the address they will send from — or copy it from the incoming transaction.
  2. Pick a service that covers HederaChoose one marked “Supported” in the list above. Note which form of address you have, a 0.0.<number> account ID or a 0x EVM address, and confirm your AML checker supports that form before trusting a 'no results' answer.
  3. Run the check and read itIf the address ends in a 5-letter checksum such as -vfmkw and a tool says it does not match, copy the address again from the source instead of editing it by hand; the checksum is tied to one Hedera network.
A real AML check needs only a public address. Never share a seed phrase or private key.

Hedera specifics

  • A Hedera address can carry an optional 5-letter checksum after a hyphen (for example 0.0.123-vfmkw) that helps catch typos; the checksum differs between mainnet and testnet for the same account number.[1]
  • Sending HBAR or tokens to an EVM address that has no Hedera account yet automatically creates a 'hollow' account with its own 0.0.<number> ID but no key; the sender pays the account creation fee.[2]
  • Issuers of tokens on the Hedera Token Service can set optional keys: a freeze key can freeze or unfreeze an account for that token, a KYC key can grant or revoke an account's KYC status for that token, and a wipe key can wipe an account's balance of that token. If the issuer did not set a key, that action is not possible.[3]
  • Hedera is governed by the Hedera Council, a group of organisations with equal voting rights and term limits that validate transactions on the network and steer its strategic direction.[4]
  • Kraken creates a unique, mandatory 19-digit memo for HBAR deposits and warns that a missing or wrong memo can delay crediting and, in some cases, make the deposit irretrievable.[5]
  • On 9 March 2023 an attacker exploited code in Hedera's Smart Contract Service to move Hedera Token Service tokens out of accounts at DEXs including Pangolin, SaucerSwap and HeliSwap. Hedera put the value at just under US$600K at the time (including 287,998 USDC, 66,997 USDT and 3.63M WHBAR) and said no retail user accounts or wallets were at risk.[6]

Common risks on Hedera

Stolen fundsHighCoins taken in hacks of exchanges, protocols or personal wallets.DeFi protocolLowEstablished on-chain lending, swaps and liquidity pools.ScamHighMoney taken through fake investments, phishing, impersonation and similar deception.SanctionsHighAddresses on government sanctions lists or owned by listed entities.

FAQ

Why does my Hedera account seem to have two different addresses?

Hedera accounts have a native ID like 0.0.1234 and can also be reached through an EVM-style 0x address, either derived from the account's ECDSA public key or built from the account number. Both point to the same account.

What are the five letters after a Hedera account ID?

That is an optional checksum defined in HIP-15, for example 0.0.123-vfmkw. It helps catch typing mistakes such as a missing or swapped digit, and it differs between mainnet and testnet.

Can a token issuer on Hedera freeze or wipe my tokens?

Only if the issuer set the matching key for that token. Hedera's docs say a freeze key can freeze or unfreeze an account for the token and a wipe key can wipe an account's token balance; if those keys are not set, those actions are not possible. This applies to tokens, not to HBAR itself.

How do I check a Hedera address for AML risk?

Copy the public address, open one of the services listed above that supports Hedera, and run the check. You never need a seed phrase or private key.

What does “Not verified” mean?

The service claims support somewhere — in marketing copy or a third-party page — but its own docs, pricing or FAQ do not list the network. Treat it as unknown.

Sources

  1. Hedera Improvement Proposals (hashgraph, GitHub) — HIP-15: Address Checksum (11 Mar 2021). Checked 4 Oct 2026.
  2. Hedera (docs.hedera.com) — Auto Account Creation. Checked 4 Oct 2026.
  3. Hedera (docs.hedera.com) — Get token info. Checked 4 Oct 2026.
  4. Hedera Council — Hedera Council. Checked 4 Oct 2026.
  5. Kraken Support — Memo for Hedera (HBAR) deposits (1 Jul 2026). Checked 4 Oct 2026.
  6. Hedera — Analysis & Remediation of the Precompile Attack on the Hedera Network (11 Mar 2023). Checked 4 Oct 2026.