RU

AML check on Internet Computer

An Internet Computer (ICP) address can be a dash-separated principal ID or a 64-character hex account ID, and both can belong to the same owner.

Address formatPrincipal ID: lowercase groups of 5 characters separated by dashes · ICP ledger account ID: 64 hexadecimal charactersda547b5182f8fcce9cb65ed04cbb8c873ebc2c1c99283f02587b327bab48ccc3Example for illustration, not a real address.
Note

ICP's own ledger displays 64-character hex account IDs, while ckBTC, ckETH, ckUSDC and other ICRC tokens use principal IDs. Each subaccount gives a principal a different account ID, so one owner can have many, which is worth keeping in mind when you check an address.

Services that check Internet Computer

01EllipticEnterprise platformPrice on requestSupportedNot scored
02TRM LabsEnterprise platformPrice on requestSupportedNot scored
03Merkle ScienceEnterprise platformPrice on requestSupportedNot scored

How to check an Internet Computer address

  1. Get the public addressAsk your counterparty for the address they will send from — or copy it from the incoming transaction.
  2. Pick a service that covers Internet ComputerChoose one marked “Supported” in the list above. Copy exactly the format the recipient asks for (64-character hex account ID or dash-separated principal ID), and consider sending a small test amount first.
  3. Run the check and read itckBTC, ckETH and ckUSDC live on ICP, not on Bitcoin or Ethereum, so make sure your AML checker covers the Internet Computer itself.
A real AML check needs only a public address. Never share a seed phrase or private key.

Internet Computer specifics

  • Smart contracts on the Internet Computer are called canisters: each one bundles WebAssembly code with its own stored data, gets a unique ID that is a principal (the same kind of identifier users have), and pays for its computation in 'cycles'.[1]
  • The Network Nervous System (NNS) is an on-chain governance system, run as canisters on a dedicated subnet, that controls protocol upgrades, subnets, economic parameters and node providers; proposals it adopts are executed automatically.[2]
  • Anyone can take part in NNS governance by locking at least 1 ICP in a 'neuron'; the locked ICP can only be withdrawn after a dissolve delay of up to 2 years, and voting requires at least 2 weeks of dissolve delay.[3]
  • Chain-key tokens such as ckBTC, ckETH and ckERC20 tokens (including ckUSDC and ckUSDT) are ICP-native versions of assets from other blockchains; DFINITY's docs say each is backed 1:1 by the original asset and controlled entirely by ICP canisters.[4]
  • ICP's official dashboard describes ckUSDC as a pair of canister smart contracts that keep the total value of ckUSDC fully backed 1:1 by USDC and let users move USDC value to and from Ethereum.[5]
  • In a post-mortem published on the official ICP developer forum on 2 August 2026, the Sonic DEX team reported that an exploit on 15 July 2026 drained about $276,000 from 26 liquidity pools by sending many precisely timed asynchronous requests that broke the atomicity of its swaps.[6]
  • According to the same report, the attacker moved about 96,780 ICP through a relay wallet, swapped it into ckBTC on ICPSwap, redeemed roughly 3.145 BTC on Bitcoin across 62 burn transactions and deposited it at a centralized exchange (named as HitBTC); the team said it contacted the exchanges involved and would cooperate with law enforcement.[7]

Common risks on Internet Computer

Stolen fundsHighCoins taken in hacks of exchanges, protocols or personal wallets.DeFi protocolLowEstablished on-chain lending, swaps and liquidity pools.ScamHighMoney taken through fake investments, phishing, impersonation and similar deception.

FAQ

Why does my ICP wallet show two different addresses?

ICP uses principal IDs (lowercase groups of 5 characters separated by dashes) and, on the ICP ledger, account IDs (64 hex characters) calculated from a principal plus an optional subaccount. Both can belong to the same owner, and one principal can have many account IDs.

Is ckUSDC the same as USDC?

No. ckUSDC is a chain-key token on ICP. ICP's official dashboard says it is fully backed 1:1 by USDC, and DFINITY's docs list it among chain-key versions of Ethereum ERC-20 tokens. Circle's list of chains with native USDC does not include ICP.

Have ICP apps been hacked?

Yes. The Sonic DEX team reported that an exploit on 15 July 2026 took about $276,000 from 26 liquidity pools, and that the stolen funds were moved out through ckBTC to Bitcoin.

How do I check a Internet Computer address for AML risk?

Copy the public address, open one of the services listed above that supports Internet Computer, and run the check. You never need a seed phrase or private key.

What does “Not verified” mean?

The service claims support somewhere — in marketing copy or a third-party page — but its own docs, pricing or FAQ do not list the network. Treat it as unknown.

Sources

  1. DFINITY (Internet Computer docs) — Canisters. Checked 4 Oct 2026.
  2. DFINITY (Internet Computer docs) — Governance. Checked 4 Oct 2026.
  3. DFINITY (Internet Computer docs) — Governance. Checked 4 Oct 2026.
  4. DFINITY (Internet Computer docs) — Chain-key tokens. Checked 4 Oct 2026.
  5. DFINITY (ICP Dashboard) — ckUSDC - ICP Dashboard. Checked 4 Oct 2026.
  6. Sonic DEX team (DFINITY Developer Forum) — Sonic DEX Hack: Technical Report, Asset Tracing, compensation plan and future plans (2 Aug 2026). Checked 4 Oct 2026.
  7. Sonic DEX team (DFINITY Developer Forum) — Sonic DEX Hack: Technical Report, Asset Tracing, compensation plan and future plans (2 Aug 2026). Checked 4 Oct 2026.