A TON check screens the wallet address against sanctions designations, scam and phishing clusters, gambling and high-risk venues, mixer and bridge trails, and reports whether USDT held there sits on the issuer freeze list Tether maintains. Free in the Telegram bot, three checks a day, no signup. TON payments run inside Telegram, which is also where most TON scams start, so checking the counterparty is a one-message habit.
Open @sanctuaryapp_bot, paste the address, get the verdict in seconds. Three checks a day, free, no signup.
A TON check reads the wallet's transfers and the counterparties behind them: sanctions designations, scam and phishing clusters, drainer wallets, gambling and no-KYC venues, mixing services, bridges, stolen-funds trails and mule networks. Where the wallet holds USDT — the jetton that carries most stablecoin value on this network — the check also reports issuer freeze status.
The verdict is CLEAN, LOW, MEDIUM, HIGH or CRITICAL, with a recommendation and the decision drivers named in words. TON's payment flow lives inside chat, where a counterparty is a username and an address in a message, so the practical value of a check is that it turns an anonymous handle into a documented decision before the transfer, not after.
Sanctions are checked against the public record: OFAC's definitions are in FAQ 559 and the blocking obligation on its virtual currency FAQ topic page.
TON addresses come in two forms. The user-friendly form is base64url and 48 characters, starting UQ (non-bounceable, the normal shape for a personal wallet) or EQ (bounceable, used by contracts and by some services) — for example UQBawwHxs5B_T4W_2I2-VlDA2UkFysX--lluWslljTN_RLtF. The raw form looks like 0: followed by 64 hexadecimal characters and is the same account written differently.
The memo is the thing that costs people money on TON:
USDT on TON is issued by Tether, and the issuer's powers travel with the token. Tether's terms allow it to "freeze any Tether Tokens held by you" (Section 2) and, on suspected prohibited use, to freeze or confiscate tokens, "blacklist Digital Token Addresses" and report to the authorities (Section 8) — tether.to/en/legal. A blacklisted wallet keeps the balance on screen and cannot spend it.
Toncoin itself has no issuer and cannot be frozen on chain. The everyday obstacle is the exchange deposit review, which stops funds that arrive from an address the venue's controls flag — a different process with a different remedy, and the one that a check before the transfer avoids.
| What you get | Free check in the Telegram bot | Workspace and API |
|---|---|---|
| Verdict | CLEAN to CRITICAL with the reason named | the same verdict plus the counterparty breakdown |
| USDT freeze list | reported for the wallet you check | reported across every wallet you monitor |
| Where it runs | in the chat where the deal is happening | in your deposit flow and case queue |
| Volume | three checks a day | bulk lists, watchlists, continuous monitoring |
| Cost | free, no signup | from $199/mo — see pricing |
For a TON deal being negotiated in Telegram, the check belongs in the same app: the Telegram bot, three free a day. Venues crediting TON deposits automatically should call the API and review exceptions in the workspace.
Yes. USDT on TON is issued by Tether, whose terms reserve the right to freeze tokens and blacklist digital token addresses (Sections 2 and 8). A blacklisted wallet still shows its balance and cannot transfer it. Toncoin itself has no issuer and cannot be frozen.
Send the address to the Telegram bot — three free checks a day, no signup. The verdict returns in seconds with the reason named. Nothing is broadcast on chain and the wallet owner is not notified.
They are two encodings of the same account. UQ is the non-bounceable form used for ordinary personal wallets; EQ is the bounceable form used by contracts and by some services. For receiving funds either works — use the one the deposit screen shows.
Also available in: · · ·
Usually not, but you have to ask the venue to credit it manually with the transaction hash, and that takes time. The memo identifies which account a shared deposit address should credit, so without it the deposit sits unassigned.
MEDIUM means there is exposure worth understanding but no designation and no direct criminal trail — an indirect hop, an older link, a high-risk venue in the path. The recommendation is Caution: ask where the funds came from and keep the answer with your record of the deal.
Send any wallet to the Telegram bot and get a verdict in seconds. Three checks a day, free, no signup. Desks that screen every deposit run it on plans from $199/mo.