Skip to main content
GET
/
v2
/
risk
/
address
Get Address Risk Assessment
curl --request GET \
  --url https://api.range.org/v2/risk/address \
  --header 'Authorization: Bearer <token>'
{
  "screen_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
  "address": "0x742d35Cc6634C0532925a3b844Bc9e7595f2bD28",
  "address_active_on": [
    "ethereum",
    "polygon"
  ],
  "total_incoming_usd": 1842300.45,
  "total_outgoing_usd": 1798450.12,
  "malicious_incoming_usd": 184500,
  "malicious_outgoing_usd": 92300,
  "severity": "high",
  "attribution": {
    "triggered": [
      {
        "signal": "sanctions_ofac",
        "severity": "severe",
        "result": true
      }
    ]
  },
  "exposure": {
    "triggered": [
      {
        "signal": "compliance-risk",
        "mode": "absolute",
        "result": true,
        "summary": "42.30% of counterparty volume is compliance-risk, crossing the 5% (high) threshold.",
        "severity": "high",
        "total_usd": 184500,
        "percentage": "42.30%"
      }
    ]
  },
  "behaviour": {
    "detected": [
      {
        "behaviour": "smurfing",
        "severity": "high",
        "confidence": 0.78
      }
    ]
  },
  "timestamp": "2026-05-04T14:30:00Z",
  "meta": {
    "es_attribution_ms": 120,
    "config_ms": 5,
    "ch_counterparties_ms": 340,
    "ch_totals_ms": 80,
    "es_interchain_ms": 210,
    "helius_ms": 150,
    "features_redis_ms": 60,
    "counterparty_attribution_ms": 0,
    "parallel_ms": 350,
    "total_ms": 410
  },
  "evidence": {}
}

Authorizations

Authorization
string
header
required

Use Authorization: Bearer

Query Parameters

address
string
required
window
string

Time window for analysis: 30d, 90d, 180d, 365d, or all.

include_evidence
string

Response

200 - application/json
screen_id
string
required
Example:

"a1b2c3d4-e5f6-7890-abcd-ef1234567890"

address
string
required
Example:

"0x742d35Cc6634C0532925a3b844Bc9e7595f2bD28"

address_active_on
string[]
required

Networks this address has labelled activity on (from addresses.labels).

Example:
["ethereum", "polygon"]
total_incoming_usd
number
required

All-counterparty incoming USD volume (lifetime). 0 for unsupported networks.

Example:

1842300.45

total_outgoing_usd
number
required

All-counterparty outgoing USD volume (lifetime).

Example:

1798450.12

malicious_incoming_usd
number
required

USD volume from counterparties tagged as malicious.

Example:

184500

malicious_outgoing_usd
number
required

USD volume to counterparties tagged as malicious.

Example:

92300

severity
enum<string>
required

Worst individual signal severity across all three pillars.

Available options:
severe,
high,
medium,
low,
none
Example:

"high"

attribution
object
required
exposure
object
required
behaviour
object
required
timestamp
string
required
Example:

"2026-05-04T14:30:00Z"

meta
object
required

Per-upstream-call latency (ms) for this screen.

evidence
object

Present only when include_evidence=true. Same shape as GET /v2/risk/evidence/:screenId minus the wrapping screen_id.

Last modified on May 19, 2026