What the API detects

The BSBsec API is designed for companies to integrate into their security systems. Below are the detection categories we support.

Address poisoning

We detect possible address poisoning attacks. Attackers create addresses that look similar to ones the user has previously interacted with (same leading/trailing characters). When a user copies the wrong address, they send funds to the attacker. Our API flags destination addresses that match known poisoning patterns so you can warn or block the transaction.

Use case: Run the destination address through the API before executing withdrawals; show a clear warning if poisoning risk is detected.

---

Scam addresses (high-risk users)

We flag possible scam addresses when high-risk clients attempt a withdrawal. “High risk” here means users who are more vulnerable to social engineering—for example:

• Elderly users
• Users new to crypto

For these segments, we apply stricter checks on withdrawal destinations. If the destination matches known scam patterns or has been associated with fraud, we return a risk signal so you can add an extra confirmation step or block the withdrawal.

Use case: Tag users by risk segment in your system; when a high-risk user initiates a withdrawal, call the API and enforce additional friction or block if the address is flagged.

---

Money laundering

We help identify transactions that exhibit money laundering patterns. Our signals can support your compliance and monitoring workflows (e.g. suspicious activity reports, internal reviews). Integration is left to you so you can align with your jurisdiction and policies.

Use case: Run transactions through the API; use the response as an input to your AML/compliance pipeline and reporting.

---

Risky wallets and protocols

We identify transactions linked to wallets that have interacted with risky exchanges or money-laundering protocols (e.g. Tornado Cash and similar). This helps you understand counterparty risk and exposure to sanctioned or high-risk entities.

Use case: Before processing a withdrawal or displaying a counterparty, check the involved addresses; warn or restrict if they are linked to risky venues or protocols.

---

Rug pulls and pump-and-dumps

We surface tokens and projects that show rug-pull or pump-and-dump behaviour and help you warn users before they invest. Signals are designed to be consumed in your trading or discovery UI so you can display warnings or block trading when risk is elevated.

Use case: When a user is about to buy or invest in a token, call the API; show a clear warning or block the action if the token is flagged.

---

Next steps

• Getting started – Integrate the API
• Authentication – API keys and scopes
• Webhooks – Real-time alerts

For endpoint details, response shapes, and risk levels, contact us or check the API reference when available.