Deep scan after a blacklist hit
A list hit is one bit of information. Deep scan adds multi-hop exposure, entity labels and ranked risk paths — one wallet confirmation, network fee only.
What deep scan adds to a yes or no
The free lookup answers a membership question about one address. Deep scan answers a shape question about its surroundings: where value came from, where it goes, which clusters sit within a few hops, and which of those paths carry the most risk weight. That matters when the free screen returns something ambiguous — an address with no entry but odd behaviour, or an entry whose category does not obviously fit your situation. It is analysis, not enforcement. It cannot identify a person, cannot recover funds, and cannot certify anyone as safe. It gives you a better-informed decision about a transfer you have not made yet.
The limits of a single-address view
Looking at one address is like reading one line of a ledger. You see balance, age and direct counterparties, but not that two of those counterparties settle into the same consolidation wallet, or that a receiver two hops away has been reported repeatedly, or that the outbound pattern matches a peel chain splitting value into ever-smaller amounts. Those relationships only exist in the graph. They are also where the useful questions live, because operations reuse infrastructure even when they rotate the receiving wallet a stranger quotes to you. A fresh address is cheap; a clean neighbourhood two hops out is much harder to manufacture.
What the report contains
A deep scan walks outbound and inbound edges to a bounded depth, clusters addresses that behave as one entity, matches known labels such as exchange deposit corridors and mixer-adjacent infrastructure, and ranks the paths that contribute most to the exposure score. Findings arrive with a confidence value and the reasoning behind them, so you can weigh a weak signal differently from a strong one, and the pack is exportable when a report needs an attachment. Every number is a probabilistic estimate from public chain data. Reading them as ranked hypotheses to check, rather than as facts about people, is the difference between useful analysis and false confidence.
When it is worth running
Run it when the answer would change what you do: a large first transfer to a new counterparty, an OTC deal with an intermediary you cannot verify, a business payment where the instruction arrived unexpectedly, or a post-incident report that needs the money traced. Skip it when the decision is already made. If the address is listed as a drainer and someone is rushing you, no additional graph will improve that outcome — the correct action is to stop. Skip it too for small amounts among people you know, where the diligence costs more than the risk it removes. Escalation should be proportionate, not reflexive.
What is never asked for
The free screen requires only a public address. The optional deep scan requires one on-chain confirmation from your wallet, which costs the network fee and nothing more — no subscription, no stored payment details, no recurring charge. A seed phrase is never requested, funds are never held, and no token allowance or account permission is created for this desk. If any page claiming to be this tool asks for a recovery phrase or an unlimited approval, it is not this tool. That rule holds everywhere in crypto: reading public data has never required the keys to your wallet, and it never will.
FAQ
Does deep scan tell me who owns an address?
No. It labels infrastructure and behaviour — exchange corridors, clustered wallets, obfuscation adjacency — not identities. Attribution to a real person requires legal process and off-chain data that no public tool can provide.
Will a deep scan help me get my money back?
Not directly. It can strengthen a report by showing where funds moved and which service received them, which occasionally helps an exchange act. Nothing on-chain can reverse a confirmed transfer.