RU

AML check on TON

How to check a TON address (including USDT on TON) for AML risk, and why the same wallet can appear in several forms.

Address formatStarts with EQ or UQ · 48 charactersUQD4f7Kp2xVb9Rm3Tq8Wn5Lc1Hs6Yg0Ja2Ze7Ku4Xo9Pb3MqExample for illustration, not a real address.
Note

Few services cover TON yet. Treat “Not verified” as unknown, not as safe.

Services that check TON

01ChainalysisEnterprise platformPrice on requestSupportedNot scored
02EllipticEnterprise platformPrice on requestSupportedNot scored
03TRM LabsEnterprise platformPrice on requestSupportedNot scored
04ShardUse with careWeb app290 ₽ for 10 checks, down to 15 ₽ a check in a 1,000-check packSupported8.1
05MistTrackWeb appAPI from $0.20 per checkSupported7.9
06BestChange AML checkAggregator$0.50–$2.00 per checkSupportedNot scored
07Scorechain BotTelegram botPay per use, prices not publishedSupportedNot scored
08WebacyUse with careAPI for businessPrices shown after sign-inSupportedNot scored
09Crystal IntelligenceEnterprise platformPrice on requestNot verifiedNot scored
10BitOKTelegram botfrom $0.35 per checkNot verified8.5
11BitraceAPI for businessPrice on requestNot verifiedNot scored
12Scorechain AIWeb app€75 for 35 credits, down to €1.00 a checkNot verifiedNot scored
13Sumsub Crypto MonitoringEnterprise platformPrice on requestNot verifiedNot scored
14Match SystemsUse with careAPI for businessAPI from $0.08 per check (volume)Not verifiedNot scored

For companies: screening tools that list TON

Enterprise KYT and wallet-screening platforms for exchanges, payment firms and other businesses. Prices are on request and they are not part of our score. “Screening” means the provider’s own page lists TON for screening or monitoring; “Not verified” means it is listed only for investigations or without detail. Compare business tools →

01Global Ledger[1]KYT (Know Your Transaction: transaction screening / real-time risk scoring); also KYB and Vision (investigations platform)Quote on requestScreening

How to check a TON address

  1. Get the public addressAsk your counterparty for the address they will send from — or copy it from the incoming transaction.
  2. Pick a service that covers TONChoose one marked “Supported” in the list above. EQ… and UQ… versions of the same wallet are one account. If a checker shows no data for one form, try the other.
  3. Run the check and read itLook at the score and at which categories make it up. One high-risk category matters more than many low ones.
A real AML check needs only a public address. Never share a seed phrase or private key.

TON specifics

  • User-friendly TON addresses are 48 characters. EQ… is the bounceable form and UQ… the non-bounceable form; TON docs recommend non-bounceable addresses for wallets.[2]
  • One account can be written in several valid forms (raw, bounceable, non-bounceable), so a checker should normalise them before matching.[2]

Who can freeze funds on TON

  • TON docs say an advanced version of the jetton contract was developed with the USDT release on TON, because USDT is a centralised asset with its own requirements and restrictions.[3]
  • The minter of this advanced jetton contract includes a governance mechanism that can act on other holders' jetton wallets.[3]
  • In the section on the contract developed with the USDT release, TON docs link the stablecoin-contract code. Its README says the jetton admin can lock or unlock a holder's jetton wallet, and can transfer or burn tokens from it. The docs do not say this repository is the deployed USDT contract.[4]
  • Tether's terms of service say Tether may freeze Tether tokens held by a user and may blacklist addresses that hold them. These powers are not limited to one network in the terms.[5]

Scams seen on TON

  • On TON, several jettons can share the same name. A counterfeit jetton may look identical to the real USDT but have no value.[3]
  • TON docs tell services never to trust a jetton's name, symbol or image. The only reliable check is the jetton master address.[6]
  • Kaspersky reports that Toncoin was used as bait in scams. In one Ponzi-like scheme, victims had to buy Toncoin, register through a referral link and recruit at least five new participants.[7]
  • In that scheme, Kaspersky reports, victims were told to install Telegram and use an unofficial bot to activate a crypto wallet.[7]
  • Kaspersky also reports that victims of the fake cloud-mining service could watch 'earnings' grow but had to pay a crypto fee to withdraw them. A fee to unlock a withdrawal is a common warning sign.[7]

Check the history yourself

  • TON explorers show an address's balances and tokens, its transactions and messages, and contract code and state. TON docs list the TON explorer as a low-level tool for developers.[8]
  • One action on TON, such as a token transfer, can involve several messages and transactions. Explorers draw them together as a graph called a trace.[9]
  • Tokens such as USDT are held in a separate jetton wallet contract for each owner. TON docs say each jetton wallet stores one owner's balance and the address of the jetton master.[10]

Common risks on TON

ScamHighMoney taken through fake investments, phishing, impersonation and similar deception.Stolen fundsHighCoins taken in hacks of exchanges, protocols or personal wallets.P2P without KYCMediumPeer-to-peer trades where neither side’s identity is checked.Gambling (unlicensed)HighOnline casinos and betting sites operating without a licence.

FAQ

Why does my TON address start with UQ in one app and EQ in another?

They are two encodings of the same account (non-bounceable and bounceable). Either can be checked.

Do I need a comment (memo) when I deposit to an exchange on TON?

Sometimes. Some services use one shared address and match deposits by a comment. TON docs warn that a deposit without the correct identifier may be lost. Copy the comment exactly if the exchange asks for one.

Can USDT on TON be frozen?

Tether's terms say it may freeze Tether tokens and blacklist addresses that hold them. TON docs also say the jetton contract developed with the USDT release has a governance mechanism that can act on holders' jetton wallets.

What are TON addresses that start with kQ or 0Q?

They are testnet addresses. TON docs say such addresses should not be accepted by mainnet software, and that sending real funds to a testnet address results in their loss.

How do I check a TON address for AML risk?

Copy the public address, open one of the services listed above that supports TON, and run the check. You never need a seed phrase or private key.

What does “Not verified” mean?

The service claims support somewhere — in marketing copy or a third-party page — but its own docs, pricing or FAQ do not list the network. Treat it as unknown.

Sources

  1. Global Ledger — Global Ledger — TON coverage. Checked 4 Oct 2026.
  2. TON docs — Address formats. Checked 4 Nov 2026.
  3. TON Foundation (TON docs) — Jetton implementations comparison. Checked 4 Nov 2026.
  4. TON Blockchain (GitHub) — stablecoin-contract (README). Checked 4 Nov 2026.
  5. Tether — Terms of Service (26 Feb 2026). Checked 4 Nov 2026.
  6. TON Foundation (TON docs) — Jettons payments processing. Checked 4 Nov 2026.
  7. Kaspersky (Securelist) — Spam and phishing in 2024 (19 Feb 2025). Checked 4 Nov 2026.
  8. TON Foundation (TON docs) — Explorers overview. Checked 4 Nov 2026.
  9. TON Foundation (TON docs) — Traces. Checked 4 Nov 2026.
  10. TON Foundation (TON docs) — Jetton: How it works. Checked 4 Nov 2026.