Before sending or accepting Gram, formerly known as Toncoin, USDT, or another asset on The Open Network, it is important to understand whether the wallet may be connected to sanctions, scams, stolen funds, mixers, high-risk exchanges, fraudulent services, or other suspicious activity.
A TON wallet can appear normal while still having direct or indirect exposure to risky transaction flows.
AML Verifier helps users check a TON wallet and review its blockchain risk exposure before completing a transaction.
A TON wallet is a blockchain account used to manage assets and interact with applications on The Open Network.
In everyday language, the term “TON wallet” is often used to describe the public address associated with that account.
A TON wallet may be used to:
A public TON address can be shared and analyzed using blockchain data.
It is not the same as:
Private credentials must never be shared with an AML screening service or counterparty.
Gram is the current official name of the native cryptocurrency of The Open Network.
It was previously known as Toncoin.
Following a community vote in 2026, Toncoin was renamed to Gram. The blockchain itself continues to be called The Open Network, or TON.
Gram may be used for:
Some wallets, exchanges, applications, and older materials may continue to display the former Toncoin name or the TON ticker during the transition.
For this reason, users should confirm both the network and the asset before completing a transfer.
TON transactions are publicly recorded, but the risk associated with a wallet cannot be determined simply by looking at its address.
A TON wallet may have direct or indirect exposure to:
Checking a TON wallet before sending or receiving assets can help identify warning signs and provide additional context for the transaction.
A TON AML check may be useful before:
A check may also be useful after receiving assets if an exchange, payment provider, auditor, bank, or compliance team asks for information about their origin.
The process is straightforward:
Make sure that you enter a wallet address rather than a transaction hash.
A wallet check and a transaction check answer different questions.
A TON address identifies an account on The Open Network.
A wallet check helps analyze the broader blockchain activity and risk exposure associated with that account.
A transaction hash identifies a particular on-chain transaction.
A transaction check may focus on:
Because TON uses message-based interactions, one user action may produce multiple related messages and transactions.
For additional context, it may therefore be useful to review both the wallet and the relevant transaction chain.
The available results may include:
The report helps transform raw TON blockchain data into risk information that can be reviewed by individuals, businesses, and compliance teams.
TON addresses can be represented in different formats.
A user-friendly Mainnet address may commonly begin with:
EQ for a bounceable address;UQ for a non-bounceable address.TON addresses may also be represented in a raw format containing the workchain and account identifier.
Different representations can refer to the same underlying account.
When performing an AML check, use a valid address format supported by the service and confirm that the TON Mainnet network is selected.
TON user-friendly addresses contain metadata indicating whether a message should be bounceable or non-bounceable.
A bounceable address is generally used when the receiving account is active and capable of processing the incoming message.
If message processing fails, the remaining value may be returned according to the message rules.
A non-bounceable address may be used when sending the first funds to an account that has not yet been initialized or when the receiving service specifically requests that format.
The bounceable and non-bounceable versions can represent the same underlying TON account.
This distinction is related to message delivery and does not create two separate wallet owners.
Always use the address format provided by the recipient, wallet, exchange, or payment service.
A standard TON wallet is implemented as a smart contract.
The wallet contract can:
A TON account may exist before its wallet contract has been deployed.
After funding and deployment, the account can become an active wallet contract.
Different wallet contract versions may provide different capabilities, but the public account address remains the key identifier used for blockchain analysis.
TON has a message-oriented architecture.
Accounts and smart contracts communicate by sending and processing messages.
A user action may therefore produce:
This is especially important when reviewing:
The first visible transaction may not always represent the entire economic path of the assets.
For a complete analysis, the related messages, contracts, and destination accounts may also need to be considered.
Jettons are fungible tokens issued on The Open Network.
They serve a role similar to ERC-20 tokens on Ethereum.
Jettons may include:
USDT on TON is implemented as a jetton.
A jetton normally uses:
The jetton wallet contract is associated with the owner’s main TON address but is a separate on-chain contract.
For this reason, a jetton transfer may involve more contracts and messages than a simple transfer of Gram.
A general TON wallet check reviews the broader activity associated with the owner’s address.
This may include:
A particular jetton transfer may also involve:
The correct analysis should therefore consider both the main TON wallet and the relevant token-transfer path.
USDT is available on The Open Network as a jetton.
A TON wallet may be used to receive both Gram and USDT, but they are different assets.
Gram is the native cryptocurrency used for network fees, transfers, and smart-contract execution.
USDT is a stablecoin issued as a jetton on TON.
A wallet receiving USDT still needs a sufficient amount of Gram when network fees or further token transfers must be paid.
Before accepting USDT on TON, confirm:
USDT exists on several blockchains, so selecting the wrong network can result in loss of access to the assets.
USDT is available on both TON and TRON, but these are separate blockchain networks.
USDT on TON is implemented as a TON jetton and uses TON addresses and TON transaction architecture.
USDT TRC20 is issued on the TRON network and uses TRON addresses and TRC-20 smart contracts.
An address from one network should not be treated as an address from the other.
For users handling USDT on TRON, use the dedicated guide:
Check a USDT TRC20 wallet for AML risk
TON transfers can include a text comment or another payload.
Some exchanges, payment processors, custodial services, or merchants may require a specific comment, memo, invoice identifier, or payment reference.
Sending assets without a required identifier may make it difficult for the receiving service to credit the correct account.
Before sending funds:
An AML check evaluates blockchain risk but does not replace correct payment instructions.
TON AML analysis should consider both direct and indirect exposure.
Direct exposure exists when the checked wallet sends assets directly to or receives assets directly from an identified address, entity, or service.
For example:
TON wallet A → Identified high-risk service
There is no intermediary wallet or service between the checked account and the identified entity.
Direct exposure is generally easier to interpret because the relationship is immediate.
Indirect exposure exists when assets pass through one or more intermediary wallets, smart contracts, or services.
For example:
TON wallet A → Intermediary contract → High-risk service
Indirect exposure does not automatically prove that the wallet owner knowingly interacted with the final high-risk entity.
Its significance may depend on:
A small historical connection several hops away may require a different response from a recent and repeated flow involving substantial value.
A risk score summarizes multiple blockchain risk signals into one result.
In general:
The score should not be interpreted in isolation.
You should also review:
Learn how to understand a crypto wallet risk score
The overall risk score provides a summary.
The detected categories explain why the score was assigned.
Two TON wallets may have the same risk level but very different underlying exposure.
For example:
The same score should not always lead to the same decision.
The detected categories, messages, contracts, and transaction paths often provide more useful context than the headline score alone.
A TON wallet may be associated with a person, organization, service, or cluster included in a sanctions list.
Sanctions-related exposure may be:
A sanctions connection does not always have the same meaning in every jurisdiction.
Businesses should consider:
A sanctions-related match may require escalation or enhanced review.
A TON wallet may receive assets associated with:
A wallet may receive stolen assets directly or indirectly through several wallets or smart contracts.
Direct receipt of recently stolen assets may require greater scrutiny than a distant historical connection.
However, exposure alone does not automatically prove who committed the original theft or fraud.
Review:
Some users may interact with services or transaction patterns intended to make tracing more difficult.
Obfuscation exposure can increase analytical uncertainty.
However, this exposure alone does not automatically prove criminal activity.
Its significance depends on:
A single distant indirect connection may require a different response from repeated direct interaction.
A TON wallet may interact with:
Some services may be classified as high risk because of:
Interaction with a high-risk service is an important indicator, but it should still be interpreted in context.
TON is closely connected with the Telegram ecosystem.
Users may encounter TON-based activity through:
Convenient access does not eliminate counterparty or blockchain risk.
A Telegram username, bot interface, or Mini App does not by itself prove that the operator is trustworthy.
Before sending assets, confirm:
P2P transactions may involve counterparties whose identity and source of funds are not fully known.
Before accepting Gram, USDT, or another jetton through a P2P transaction, it may be useful to check the sender’s wallet for exposure to:
A wallet check does not replace:
It adds blockchain context to support a more informed decision.
No.
A low-risk result means that no significant high-risk exposure was identified based on the data available at the time of the check.
It does not guarantee that:
Blockchain intelligence may change when:
For important transactions, it may be useful to save the report and repeat the check later.
Confirmed TON transfers generally cannot be reversed through the blockchain protocol.
If assets are sent to:
there may be no simple way to recover or credit them.
That is why checking the wallet and payment instructions before sending assets is usually more useful than investigating only after a problem occurs.
OTC transactions may involve large values and complex settlement arrangements.
Before completing an OTC transaction, it may be useful to:
The exact procedure depends on the transaction value, jurisdiction, counterparty profile, and applicable compliance obligations.
Businesses that accept, send, or process TON-based assets may use wallet screening as part of a risk-based AML process.
A possible workflow includes:
The appropriate response depends on:
Wallet screening should be treated as one component of a broader compliance process.
A high-risk result should not be ignored.
Possible next steps include:
The appropriate response depends on the transaction context and applicable obligations.
The score alone should not be treated as automatic proof of illegal activity.
Imagine a TON wallet that mainly interacts with identified exchanges and ordinary services and has no significant exposure to high-risk categories.
The report may show:
This result may support proceeding with the transaction, but the address, asset, memo, and counterparty should still be confirmed.
Imagine a wallet with mostly ordinary activity but some indirect exposure to a high-risk service through several intermediary contracts or accounts.
The report may show:
This result may require additional review rather than automatic rejection.
The amount, timing, asset, transaction purpose, and explanation from the counterparty should be considered.
Imagine a wallet that recently received a substantial amount directly from an identified cluster associated with stolen assets or fraud.
The report may show:
This result may require escalation, additional documents, or a decision not to proceed, depending on the applicable compliance process.
No.
A public TON address can be analyzed without connecting the wallet.
You do not need to provide:
Never share private credentials with an AML screening service or counterparty.
The public address is sufficient for blockchain risk analysis.
A TON-specific guide focuses on the addresses, assets, jettons, smart contracts, messages, and transactions of The Open Network.
A general crypto wallet AML check explains broader principles that apply across multiple blockchains.
These include:
Learn how to perform a general AML check on a crypto wallet
Use the relevant guide for the wallet or network you want to analyze:
All planned network-specific AML wallet guides are now available.
TON wallet risk is not visible from the address alone.
An AML check can help identify exposure to sanctions, scams, stolen funds, mixers, high-risk services, suspicious P2P activity, and other risky connections.
Review the risk score together with the detected categories, message and transaction paths, assets, amounts, timing, entity information, and counterparty context.
Yes.
Gram is the current official name of the native cryptocurrency previously known as Toncoin.
The blockchain itself continues to be called The Open Network, or TON.
You can check a valid public TON address supported by the service.
You do not need the private key or seed phrase.
No.
EQ and UQ are common prefixes for user-friendly Mainnet address representations.
The same underlying account may also be represented in another valid format.
An EQ address is normally represented as bounceable, while a UQ address is represented as non-bounceable.
Both can refer to the same underlying account.
A TON owner address can hold Gram and control the jetton wallet contracts used for USDT and other jettons.
Gram and USDT remain separate assets.
No.
USDT on TON is implemented on The Open Network.
USDT TRC20 is issued on the TRON blockchain.
Always confirm the correct network before transferring assets.
A jetton is a fungible token on TON.
Jettons serve a role similar to ERC-20 tokens on Ethereum and can represent stablecoins, payment tokens, utility tokens, and other assets.
No.
Low risk only means that no significant high-risk exposure was detected in the available data at the time of the check.
No.
Indirect exposure is a risk indicator. It does not prove that the wallet owner knowingly interacted with the final high-risk entity or controls every account in the transaction path.
Yes.
The score may change because of new transactions, new entity attribution, sanctions updates, scam reports, law-enforcement information, or newly traced stolen assets.
No.
Each exchange, payment provider, and financial institution uses its own compliance policies, data sources, and risk thresholds.
They provide different information.
A wallet check reviews broader account history, while a transaction check focuses on a particular on-chain operation.
Because TON is message-based, related messages and transactions may also need to be reviewed.
It depends on the recipient.
Some exchanges, custodial services, merchants, or payment processors require a specific memo, comment, or payment identifier.
Always follow the destination service’s instructions exactly.
Whenever possible, check it before completing the transaction.
A post-transaction check may still help investigate the origin or destination of the assets and document a compliance decision.
AML Verifier provides blockchain risk information for screening, compliance, and research purposes. Results do not guarantee that a TON wallet is safe or unsafe and should not be treated as legal or financial advice. Decisions should consider the full transaction context and, where appropriate, be reviewed by a qualified compliance professional.