Settings · Rules

Rules turn a score and an exposure profile into an action. Risk tolerance (1–5) lives on the adjacent tab.

Rule set

The strongest action among the rules that match becomes the recommendation: flag < review < block. Rules are stored as data, so edits here apply to the next screen with no restart.

Rule	Match	Category	Layer	Min share %	Min score
Any sanctions exposure sanctions-any Sanctions liability does not scale with the amount.	category				—
Any terrorism financing exposure terrorism-any	category				—
Any CSAM exposure csam-any	category				—
Direct sanctions list match sanctions-direct-match A direct match is a prohibited dealing, not a risk rating.	sanctions	—	—	—	—
Direct ransomware exposure ransomware-direct	category				—
Direct darknet market exposure darknet-direct	category				—
Mixer exposure above 1% mixer-1pct	category				—
Any mixer exposure mixer-any	category				—
Stolen funds exposure above 0.5% stolen-funds	category				—
Scam exposure above 2% scam-2pct	category				—
High-risk exchange exposure above 10% high-risk-vasp	category				—
Gambling exposure above 25% gambling-25pct	category				—
Score of 8.0 or above score-8	score	—	—	—
Score of 6.0 or above score-6	score	—	—	—
Score of 4.0 or above score-4	score	—	—	—
More than 30% of value bridged cross-chain bridge-30pct Risk may continue on a chain outside this screen's scope.	bridge	—	—		—
Deposit above $10,000 with indirect darknet exposure above 2% large-deposit-darknet Neither fact alone justifies holding a payment; together they do.	compound	—	—	—	—
Deposit splitting alongside majority unhosted counterparties structuring-with-unhosted Amounts kept under a threshold and no counterparty holding identity records is the classic structuring shape.	compound	—	—	—	—
Mixer exposure above $25,000 and above 0.5% of traced value material-mixer-value Requiring both an amount and a share stops a tiny wallet and a huge one being judged by the same number.	compound	—	—	—	—

Why a rule set as well as a score

The score answers "how risky is this wallet"; rules answer "what should we do about it". They are separate because the answer to the second question is a policy choice, not a measurement. A zero-threshold sanctions rule blocks on any exposure at all, however small, because sanctions liability does not scale with the amount — while a gambling rule only flags above a quarter of flow, because gambling at the margin is normal.