Risk label provenance
The same address can appear in official sanctions, explorer tags, commercial intelligence, and community reports. FlowTrace preserves source, version, verification time, and evidence count before deciding whether to warn, review, or block.
Method version 2026-08. Prefer official downloads, APIs, and on-chain events over scraped search-result HTML. Full snapshots retain a version and SHA-256 and deactivate labels removed by the source; community reports always require review.
Official designations and sanctioned addresses
Access
Official data downloads; scheduled matching of digital-currency address fields
An exact hit can escalate to BLOCK while retaining the list version and designation basis.
Daily official snapshot connected
Official docsTRON official, public, risk, and behavior tags
Access
GET /api/account/tag; requires TRON-PRO-API-KEY
redTag is supporting risk evidence. Behavioral tags do not imply criminality.
Batch sync connected
Official docsEVM scammer labels and confidence scores
Access
GraphQL labels; query current state and process removals
Retain bot version, threat category, and confidence. Review low-confidence or single-source hits.
Next connector
Official docsSanctions and address transaction screening
Access
Commercial API, subject to plan and license terms
Useful for real-time screening without presenting a vendor conclusion as a FlowTrace fact.
Optional commercial source
Official docsVictim and investigator reports for malicious addresses, URLs, and scam categories
Access
Partner API subject to proprietary licensing and personal-data access restrictions
Report count and confidence are leads; require human review or independent corroboration.
Next connector
Official docsExact official hit, or agreement across multiple high-quality sources with complete evidence.
Explorer or commercial-intelligence hit that requires source and freshness review.
User or community report held for review; it does not affect others immediately.
