A wallet can be clean and still fail a screen. Screening does not read intent. It scores the addresses around yours, on a graph that includes counterparties you never chose, two and three hops back. Understanding that graph is the difference between a delay you can answer and a freeze you cannot.
Screening scores a neighbourhood
Analytics firms assign risk to addresses and to clusters. A cluster is a set of addresses believed to be controlled by one party, inferred from transaction patterns, deposit addresses and shared funding. The score is a property of the cluster and its exposure, not a verdict on one payment.
That is why two customers with identical behaviour can get different results. They banked at different places, and the graph around each one looks different.
Two hops is enough
What the cluster includes
The cluster typically includes addresses that funded yours, addresses your counterparties used, and services that touched the same flow. Shared deposit addresses at a venue can join unrelated customers into one graph node, which is one reason exchange withdrawals are scored as a group.
The inference is probabilistic. It can be wrong, and it can be stubborn.
Why inbound carries the risk
An outbound transfer to a screened address is a decision you made. An inbound transfer is a decision someone else made about you. Venues see both, and the inbound one is harder to explain, because the counterparty chose to send and you may not know them.
A deposit from a mixer, a sanctioned address, or a wallet flagged for fraud can move your cluster’s exposure even when the amount is small. Small amounts from bad places are a known pattern, which is why they are scored rather than ignored.
The freeze is a venue action
A public chain has no freeze function for an ordinary transfer. The block happens at the venue: custody of the balance, a hold on withdrawal, a request for documents. The venue acts because its banking and licensing relationships require it to, and because a supervisor can ask.
So the appeal goes to the venue. The chain will confirm that a transfer happened. It will not review your case, and it has no one to review it.
Token-level restrictions are the exception. Where an issuer can deny an address, the freeze can sit in the contract rather than at the venue, and the appeal runs to the issuer. That is a different process with a different timeline.
What an appeal needs
A dated record of the transaction, the counterparty if known, the source of the funds and the purpose. Venues vary in what they request, but the shape is consistent: they need to reconstruct a story from documents.
Address labels help here. A labelled withdrawal address, used repeatedly, gives the venue a history that reads as one customer. A fresh address for every withdrawal gives them a set of unrelated transfers that happen to point at you.
Consistency is also cheaper. A Solana SPL withdrawal runs about 0.5 to 1 USDT and an ERC-20 withdrawal $2 to $10 (FeeEdge, 17 August 2026), so batching to one known address is both a fee decision and a documentation one.
Building a trail you can produce
Keep the venue record of each transfer, not just the explorer link. Note the counterparty when it is a person. Keep the bank statement that funded the account. If a screen goes wrong, those three documents are the appeal.
For the custody side, how much a venue keeps in a hot wallet explains why a balance can be blocked at a venue while the chain shows it intact. For the venue’s own disclosure, the three numbers in a reserve report is the companion read.
| Signal | What it looks at | What you control |
|---|---|---|
| Direct counterparty | The address you transacted with | Who you accept funds from |
| One-hop cluster | Addresses funded from the same source | How and where you receive |
| Two-hop exposure | The graph behind your counterparty | Little, but you can document it |
| Deposit pattern | Size and timing of inflows | Consistency over time |
| Address reuse | The history attached to one address | Whether you label deliberately |
What to do next
Use one labelled address per purpose, and keep the receipt for every transfer. If a withdrawal is held, ask which list or score produced the hold and what document would clear it. That question is answerable, and it is the fastest route out.
Our board ranks 24 venues as of October 2026, and the exchange page is where the structural comparison sits. Neither the board nor the chain can clear a freeze. Only the holder of the balance can, which is why the paperwork matters more than the transaction.
A clean wallet is a starting condition, not a defence. The defence is a trail someone else can read.
0 comments
No comments yet — ask a question and we will answer it here.