Binance publishes that its risk-control system monitors transfers in real time, intercepts transactions that match a suspicious-address watchlist and temporarily restricts withdrawals, and that a withdrawal can be placed under review while the account holder is asked for identity verification or a questionnaire. Screening the address that pays you, before the funds arrive, is what keeps that conversation from starting. Free in the Telegram bot, three checks a day, no signup.
Open @sanctuaryapp_bot, paste the address, get the verdict in seconds. Three checks a day, free, no signup.
Binance's help centre describes what a user sees when a transfer is stopped: "Your withdrawal is currently under review. Please wait patiently for any emails with regards to the latest status of your withdrawal." The same page says suspensions follow abnormal activity or a match against anti-scam patterns, that users may be asked to complete identity verification or a questionnaire, and that reactivation is typically 24-48 hours or handled through an appeal — Binance withdrawal suspension FAQ.
Its own risk-control post of 15 June 2023, "How Binance protects your funds with risk control measures" — listed in the sources for this page — describes the mechanism at a policy level: real-time monitoring and a watchlist of suspicious addresses, where "Our system will automatically intercept the transaction and temporarily restrict the user's withdrawals for a short period." Flagged users are given questionnaires and cool-down periods.
That published material is the whole of what we describe. Binance does not publish its thresholds, and guessing at them would not help you anyway. The part you can act on is the part on your side of the transfer: where the coins you accept came from.
A check on the address that is about to pay you names what that address has been doing — sanctions designations, darknet and scam clusters, ransomware, mixers, drainer proceeds, stolen funds, no-KYC venues and mule networks — and returns a verdict of CLEAN, LOW, MEDIUM, HIGH or CRITICAL with a recommendation: Proceed, Caution, Review or Reject.
That converts a blind acceptance into a decision you can defend. A P2P counterparty whose address comes back HIGH with scam-cluster exposure is a deal you decline at no cost. The same coins accepted, deposited and later moved are a restricted account, a questionnaire and a wait.
Screening is a read-only lookup. Nothing is broadcast, no fee is paid, and the address owner is never notified — so there is no reason not to check a counterparty before a trade. Screen on the network you are actually receiving on: TRON for TRC-20, Ethereum for ERC-20.
The honest sequence, in order:
If you have the screening result for the sending address, keep it with your file. It does not bind Binance's decision, but a documented, dated account of where the money came from is what any reviewer is asking you to produce.
| What you get | Free check in the Telegram bot | Workspace and API |
|---|---|---|
| Before a deposit | verdict on the sending address, reason named | every incoming address screened automatically |
| Speed | seconds, in chat | seconds, or one API call in your deposit flow |
| Volume | three checks a day | bulk lists, saved watchlists, continuous monitoring |
| Evidence | the result in the chat | a signed report you can forward with your own explanation |
| Fit | one trader, one deal | a desk or a business with a deposit book |
| Cost | free, no signup | from $199/mo — see pricing |
For a single P2P trade, the Telegram bot is the whole answer: three free checks a day, verdict in seconds. For a desk that takes deposits all day, put the same check in front of the deposit with the API and work the exceptions in the workspace.
Binance publishes that transfers can be placed under review after abnormal activity or a match against its anti-scam patterns, and that its risk-control system intercepts transactions and temporarily restricts withdrawals. It does not publish the specific triggers. What you can control is the origin of the funds you accept, which is what a check on the sending address tells you before the deposit.
Binance's help centre says reactivation typically takes 24-48 hours, or goes through an appeal, and that users may be asked for identity verification or a questionnaire first. Answering completely and quickly is the part you control.
Yes. Send it to the Telegram bot — three free checks a day, no signup — and the verdict comes back in seconds with the reason named. The lookup is read-only: no transaction, no fee, no notification to the address owner.
Also available in: · · ·
No. Moving funds while a review is open does not detach their history, is visible to everyone screening the chain, and makes the explanation harder. Answer the request for information, document where the funds came from, and let the review run.
No, and nobody can promise that — the decision is Binance's and it uses its own controls. What a check does is remove the avoidable cases: the counterparty whose address is tied to a scam, a darknet market or a sanctioned entity, which is the exposure you would otherwise accept without knowing.
Send any wallet to the Telegram bot and get a verdict in seconds. Three checks a day, free, no signup. Desks that screen every deposit run it on plans from $199/mo.