Sanctions screening
Every deposit and every withdrawal is screened against the US Treasury's OFAC sanctions list. A listed address is never credited or paid.
What is screened
MLX checks addresses against the Specially Designated Nationals (SDN) list of the US Office of Foreign Assets Control (OFAC), using the list's "Digital Currency Address" entries for every asset it names. An EVM address listed for one chain is screened on every EVM chain we use (Ethereum, BNB Chain, Arbitrum, Base).
| When | Address screened |
|---|---|
| A deposit through the MLX Wallet checkout (Solana, Ethereum, BNB Chain, Tron, Bitcoin) | Every sender of the transfer: the token's owner, the signer, and for Bitcoin every input |
| A withdrawal to Solana | The destination, when you ask and again before it is paid |
The list is the one OFAC publishes, as kept in machine-readable form by the open-source project 0xB10C/ofac-sanctioned-digital-currency-addresses. We refresh it every day and also ship a copy with the site, so screening never runs without a list. A refresh that shrinks the list a lot, or adds more than 50 addresses or 5% of the list at once (whichever is more), isn't taken automatically: the last good list stays until someone has checked the change. We may also ask a commercial screening service (Chainalysis) for a second opinion; when we do, the address is sent to it, and its answer is kept for a day (not listed) or a week (listed).
What happens on a hit
- Deposits are not credited. The checkout or transfer is held for review; nothing reaches the wallet.
- Withdrawals are not paid. The request is refused, or a waiting payout is held for review.
Holds are reviewed by hand; nothing held is sent anywhere automatically. A checkout held by mistake (the address isn't the listed party) is released after the review and then credited as usual.
Think it's a mistake?
Write to support@mlx.app with the transaction hash or checkout id and the address involved. See also Support.